@avi770/testteam 3.0.0 → 3.2.0

package/dist/core/harness/audit-log.d.ts

@@ -0,0 +1,12 @@
+import type { AuditRecord } from './types.js';
+export declare class AuditLog {
+    private readonly records;
+    /** Append a record; seq + prevHash + hash are assigned here (callers cannot forge the chain). */
+    append(entry: Omit<AuditRecord, 'seq' | 'prevHash' | 'hash'>): AuditRecord;
+    /** A defensive snapshot of the chain. */
+    get entries(): readonly AuditRecord[];
+    get length(): number;
+    /** Recompute the chain end-to-end; false if any record's seq, link, or content was altered. */
+    verify(): boolean;
+}
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/core/harness/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../core/harness/audit-log.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAwB3C,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,iGAAiG;IACjG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC,GAAG,WAAW;IAS1E,yCAAyC;IACzC,IAAI,OAAO,IAAI,SAAS,WAAW,EAAE,CAEpC;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,+FAA+F;IAC/F,MAAM,IAAI,OAAO;CAYlB"}

package/dist/core/harness/audit-log.js

@@ -0,0 +1,62 @@
+/**
+ * Immutable, hash-chained audit log (Phase 1.2). Each record commits to the previous record's
+ * hash (sha256), so any tampering breaks the chain and {@link AuditLog.verify} returns false.
+ * This is the in-repo, zero-dependency tamper-evident ledger; production adopts immudb as the
+ * backing store. Spec: blueprint/rules/actuation-safety-harness.md.
+ */
+import { createHash } from 'node:crypto';
+const GENESIS = '0'.repeat(64);
+/**
+ * Deterministic hash over a record's content (everything except the hash). Uses a fixed-order
+ * tuple rather than object serialization so key-order/optional-field changes can never weaken the
+ * chain — canonical by construction.
+ */
+function hashRecord(record) {
+    const canonical = JSON.stringify([
+        record.seq,
+        record.at,
+        record.agentId,
+        record.capability,
+        record.environment,
+        record.decision,
+        record.reason,
+        record.outcome,
+        record.prevHash,
+    ]);
+    return createHash('sha256').update(canonical).digest('hex');
+}
+export class AuditLog {
+    records = [];
+    /** Append a record; seq + prevHash + hash are assigned here (callers cannot forge the chain). */
+    append(entry) {
+        const seq = this.records.length;
+        const prevHash = seq === 0 ? GENESIS : this.records[seq - 1].hash;
+        const unhashed = { ...entry, seq, prevHash };
+        const record = { ...unhashed, hash: hashRecord(unhashed) };
+        this.records.push(record);
+        return record;
+    }
+    /** A defensive snapshot of the chain. */
+    get entries() {
+        return this.records.slice();
+    }
+    get length() {
+        return this.records.length;
+    }
+    /** Recompute the chain end-to-end; false if any record's seq, link, or content was altered. */
+    verify() {
+        let prev = GENESIS;
+        let index = 0;
+        for (const record of this.records) {
+            if (record.seq !== index || record.prevHash !== prev)
+                return false;
+            const { hash, ...unhashed } = record;
+            if (hashRecord(unhashed) !== hash)
+                return false;
+            prev = hash;
+            index += 1;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/core/harness/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../../core/harness/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/B;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAiC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,MAAM,CAAC,GAAG;QACV,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,QAAQ;KAChB,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,OAAO,QAAQ;IACF,OAAO,GAAkB,EAAE,CAAC;IAE7C,iGAAiG;IACjG,MAAM,CAAC,KAAqD;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,MAAM,QAAQ,GAA8B,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QACxE,MAAM,MAAM,GAAgB,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yCAAyC;IACzC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,+FAA+F;IAC/F,MAAM;QACJ,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACnE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;YACrC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YAChD,IAAI,GAAG,IAAI,CAAC;YACZ,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/harness/authorization.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated authorization (Phase 1.2) — the per-agent action table is DERIVED from each Agent
+ * Contract (capabilities + autonomy tier), never hand-enumerated. The old hand-list drifted;
+ * generation + a conformance assertion make runtime drift structurally impossible.
+ * Spec: blueprint/rules/actuation-safety-harness.md ("Generated authorization").
+ */
+import type { AutonomyTier } from '../agent-contract.js';
+import type { AuthorizationTable } from './types.js';
+/** The minimal contract shape the harness needs (matches BaseAgent.describeContract()). */
+export interface ContractLike {
+    readonly agentId: number;
+    readonly capabilities: readonly string[];
+    readonly autonomyTier: AutonomyTier;
+}
+/** Build the authorization table FROM the contracts — the single source of truth. */
+export declare function generateAuthorization(contracts: readonly ContractLike[]): AuthorizationTable;
+/** Only `gated` and `autonomous` tiers may actuate; `read-only`/`recommend` never can. */
+export declare function tierCanActuate(tier: AutonomyTier): boolean;
+/**
+ * CI conformance gate: assert a table matches what the contracts would generate. A hand-edit
+ * (an authorization not backed by a contract) throws — the build fails rather than drift silently.
+ */
+export declare function assertAuthorizationMatchesContracts(table: AuthorizationTable, contracts: readonly ContractLike[]): void;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/core/harness/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../core/harness/authorization.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAsB,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAEtE,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,GAAG,kBAAkB,CAU5F;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAE1D;AAUD;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,SAAS,YAAY,EAAE,GACjC,IAAI,CAiBN"}

package/dist/core/harness/authorization.js

@@ -0,0 +1,48 @@
+/** Build the authorization table FROM the contracts — the single source of truth. */
+export function generateAuthorization(contracts) {
+    const table = new Map();
+    for (const contract of contracts) {
+        table.set(contract.agentId, {
+            agentId: contract.agentId,
+            capabilities: new Set(contract.capabilities),
+            autonomyTier: contract.autonomyTier,
+        });
+    }
+    return table;
+}
+/** Only `gated` and `autonomous` tiers may actuate; `read-only`/`recommend` never can. */
+export function tierCanActuate(tier) {
+    return tier === 'gated' || tier === 'autonomous';
+}
+function sameCapabilities(a, b) {
+    if (a.size !== b.size)
+        return false;
+    for (const cap of a) {
+        if (!b.has(cap))
+            return false;
+    }
+    return true;
+}
+/**
+ * CI conformance gate: assert a table matches what the contracts would generate. A hand-edit
+ * (an authorization not backed by a contract) throws — the build fails rather than drift silently.
+ */
+export function assertAuthorizationMatchesContracts(table, contracts) {
+    const expected = generateAuthorization(contracts);
+    if (table.size !== expected.size) {
+        throw new Error(`authorization drift: table has ${table.size} agents, contracts have ${expected.size}`);
+    }
+    for (const [agentId, exp] of expected) {
+        const got = table.get(agentId);
+        if (!got) {
+            throw new Error(`authorization drift: agent ${agentId} present in contracts but missing from table`);
+        }
+        if (got.autonomyTier !== exp.autonomyTier) {
+            throw new Error(`authorization drift: agent ${agentId} tier '${got.autonomyTier}' != contract '${exp.autonomyTier}'`);
+        }
+        if (!sameCapabilities(got.capabilities, exp.capabilities)) {
+            throw new Error(`authorization drift: agent ${agentId} capabilities do not match its contract`);
+        }
+    }
+}
+//# sourceMappingURL=authorization.js.map

package/dist/core/harness/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../core/harness/authorization.ts"],"names":[],"mappings":"AAgBA,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,SAAkC;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE;YAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,YAAY,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC5C,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAsB,EAAE,CAAsB;IACtE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAyB,EACzB,SAAkC;IAElC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,CAAC,IAAI,2BAA2B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,8CAA8C,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,UAAU,GAAG,CAAC,YAAY,kBAAkB,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,yCAAyC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/harness/harness.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The Actuation Safety Harness ("The Governor", Phase 1.2) — the single control plane every
+ * production-affecting action routes through. Enforces, in ONE place: generated authorization
+ * (default-DENY), autonomy-tier gating, rollback-readiness, blast-radius caps, a global
+ * kill-switch / actuation-freeze, per-resource concurrency control, dry-run planning, and an
+ * immutable audit trail. Fail-safe: if the harness is unavailable, actions are BLOCKED.
+ * Spec: blueprint/rules/actuation-safety-harness.md.
+ */
+import type { ActionRequest, AuditRecord, AuthorizationTable, EthicalReviewer, ExecutionPlan, HarnessConfig, Verdict } from './types.js';
+/** Default-deny posture: prod is capped tighter than staging. */
+export declare const DEFAULT_HARNESS_CONFIG: HarnessConfig;
+/** Thrown when the harness is unavailable — actuation must fail closed, never open. */
+export declare class HarnessUnavailableError extends Error {
+    constructor(message?: string);
+}
+export declare class ActuationSafetyHarness {
+    private killSwitch;
+    private available;
+    private readonly inflight;
+    private readonly audit;
+    private readonly now;
+    private readonly authorization;
+    private readonly config;
+    /** Live blast-radius caps — tightened by the degradation lattice when #25 is down. */
+    private blastCaps;
+    private readonly ethicalGuard?;
+    constructor(authorization: AuthorizationTable, config?: HarnessConfig, options?: {
+        readonly clock?: () => number;
+        readonly ethicalGuard?: EthicalReviewer;
+    });
+    /**
+     * Tie the degradation lattice to live enforcement: when #25 (Knowledge) is down the posture is
+     * 'conservative' and the Harness tightens its blast-radius caps; 'normal' restores configured caps.
+     * Spec: blueprint/loops/00-LOOP-ENGINE.md ("#25 down -> conservative blast-radius caps").
+     */
+    applyDegradation(posture: {
+        readonly blastRadiusPosture: 'normal' | 'conservative';
+    }): void;
+    /** Engage the global actuation-freeze: all subsequent actions are denied. */
+    engageKillSwitch(): void;
+    releaseKillSwitch(): void;
+    get frozen(): boolean;
+    /** Simulate (un)availability for fail-safe testing/operations. */
+    setAvailable(value: boolean): void;
+    /** A defensive snapshot of the immutable audit trail. */
+    get auditTrail(): readonly AuditRecord[];
+    verifyAudit(): boolean;
+    /** Pure policy decision (no side effects) — a preview callers can check before acting. */
+    evaluate(request: ActionRequest): Verdict;
+    /** Dry-run: produce a plan and audit it, WITHOUT executing or locking a resource. */
+    plan(request: ActionRequest): ExecutionPlan;
+    /**
+     * The ONLY actuation path. Routes through policy -> concurrency control -> audit. The action
+     * callback runs only on an `allow` verdict with the resource lock held; everything else is
+     * denied and audited. There is no bypass.
+     */
+    execute<T>(request: ActionRequest, action: () => Promise<T>): Promise<{
+        readonly verdict: Verdict;
+        readonly result?: T;
+    }>;
+    private decide;
+    private record;
+}
+//# sourceMappingURL=harness.d.ts.map

package/dist/core/harness/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../core/harness/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EACV,aAAa,EAGb,WAAW,EACX,kBAAkB,EAElB,eAAe,EACf,aAAa,EACb,aAAa,EACb,OAAO,EACR,MAAM,SAAS,CAAC;AAIjB,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,EAAE,aAEpC,CAAC;AAEF,uFAAuF;AACvF,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,SAAgD;CAIpE;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,sFAAsF;IACtF,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAkB;gBAG9C,aAAa,EAAE,kBAAkB,EACjC,MAAM,GAAE,aAAsC,EAC9C,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe,CAAA;KAAE;IAmBtF;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,GAAG,cAAc,CAAA;KAAE,GAAG,IAAI;IAO3F,6EAA6E;IAC7E,gBAAgB,IAAI,IAAI;IAGxB,iBAAiB,IAAI,IAAI;IAGzB,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,kEAAkE;IAClE,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIlC,yDAAyD;IACzD,IAAI,UAAU,IAAI,SAAS,WAAW,EAAE,CAEvC;IAED,WAAW,IAAI,OAAO;IAItB,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO;IAIzC,qFAAqF;IACrF,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa;IAU3C;;;;OAIG;IACG,OAAO,CAAC,CAAC,EACb,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IAwC9D,OAAO,CAAC,MAAM;IA4Cd,OAAO,CAAC,MAAM;CAWf"}

package/dist/core/harness/harness.js

@@ -0,0 +1,188 @@
+import { tierCanActuate } from './authorization.js';
+import { AuditLog } from './audit-log.js';
+/** Default-deny posture: prod is capped tighter than staging. */
+export const DEFAULT_HARNESS_CONFIG = {
+    maxBlastRadius: { staging: 1, prod: 0.25 },
+};
+/** Thrown when the harness is unavailable — actuation must fail closed, never open. */
+export class HarnessUnavailableError extends Error {
+    constructor(message = 'harness-unavailable: actuation fails closed') {
+        super(message);
+        this.name = 'HarnessUnavailableError';
+    }
+}
+export class ActuationSafetyHarness {
+    killSwitch = false;
+    available = true;
+    inflight = new Set();
+    audit = new AuditLog();
+    now;
+    authorization;
+    config;
+    /** Live blast-radius caps — tightened by the degradation lattice when #25 is down. */
+    blastCaps;
+    ethicalGuard;
+    constructor(authorization, config = DEFAULT_HARNESS_CONFIG, options) {
+        // Defensive copy: the harness owns its own capability sets so a caller holding the original
+        // table reference cannot mutate an agent's capabilities post-construction (default-deny integrity).
+        const owned = new Map();
+        for (const [agentId, auth] of authorization) {
+            owned.set(agentId, {
+                agentId: auth.agentId,
+                capabilities: new Set(auth.capabilities),
+                autonomyTier: auth.autonomyTier,
+            });
+        }
+        this.authorization = owned;
+        this.config = config;
+        this.blastCaps = { ...config.maxBlastRadius };
+        this.now = options?.clock ?? (() => Date.now());
+        if (options?.ethicalGuard)
+            this.ethicalGuard = options.ethicalGuard;
+    }
+    /**
+     * Tie the degradation lattice to live enforcement: when #25 (Knowledge) is down the posture is
+     * 'conservative' and the Harness tightens its blast-radius caps; 'normal' restores configured caps.
+     * Spec: blueprint/loops/00-LOOP-ENGINE.md ("#25 down -> conservative blast-radius caps").
+     */
+    applyDegradation(posture) {
+        this.blastCaps =
+            posture.blastRadiusPosture === 'conservative'
+                ? { staging: 0.25, prod: 0 }
+                : { ...this.config.maxBlastRadius };
+    }
+    /** Engage the global actuation-freeze: all subsequent actions are denied. */
+    engageKillSwitch() {
+        this.killSwitch = true;
+    }
+    releaseKillSwitch() {
+        this.killSwitch = false;
+    }
+    get frozen() {
+        return this.killSwitch;
+    }
+    /** Simulate (un)availability for fail-safe testing/operations. */
+    setAvailable(value) {
+        this.available = value;
+    }
+    /** A defensive snapshot of the immutable audit trail. */
+    get auditTrail() {
+        return this.audit.entries;
+    }
+    verifyAudit() {
+        return this.audit.verify();
+    }
+    /** Pure policy decision (no side effects) — a preview callers can check before acting. */
+    evaluate(request) {
+        return this.decide(request);
+    }
+    /** Dry-run: produce a plan and audit it, WITHOUT executing or locking a resource. */
+    plan(request) {
+        const verdict = this.decide(request);
+        const steps = verdict.decision === 'allow'
+            ? [`would ${request.capability} on ${request.resource ?? 'n/a'} in ${request.environment}`]
+            : [`blocked: ${verdict.reason}`];
+        this.record(verdict, 'dry-run');
+        return { verdict, steps };
+    }
+    /**
+     * The ONLY actuation path. Routes through policy -> concurrency control -> audit. The action
+     * callback runs only on an `allow` verdict with the resource lock held; everything else is
+     * denied and audited. There is no bypass.
+     */
+    async execute(request, action) {
+        if (!this.available) {
+            // Fail-closed AND audited — an unavailable attempt is still recorded for post-mortem.
+            this.record({ decision: 'deny', reason: 'harness-unavailable: fail-safe block', request }, 'aborted');
+            throw new HarnessUnavailableError();
+        }
+        if (request.dryRun) {
+            return { verdict: this.plan(request).verdict };
+        }
+        const verdict = this.decide(request);
+        if (verdict.decision !== 'allow') {
+            this.record(verdict, 'evaluated');
+            return { verdict };
+        }
+        const { resource } = request;
+        if (resource !== undefined && this.inflight.has(resource)) {
+            const busy = {
+                decision: 'deny',
+                reason: `concurrency: resource '${resource}' has an action in flight`,
+                request,
+            };
+            this.record(busy, 'aborted');
+            return { verdict: busy };
+        }
+        if (resource !== undefined)
+            this.inflight.add(resource);
+        try {
+            // Every NEW action is halted at decide() (freeze / unavailable / veto). The path from there to
+            // here is synchronous, so there is no window to re-check before action(); and an already-started
+            // opaque action cannot be force-aborted. So "halt in-flight" means: no NEW action starts.
+            const result = await action();
+            this.record(verdict, 'executed');
+            return { verdict, result };
+        }
+        finally {
+            if (resource !== undefined)
+                this.inflight.delete(resource);
+        }
+    }
+    decide(request) {
+        const deny = (reason) => ({ decision: 'deny', reason, request });
+        if (!this.available)
+            return deny('harness-unavailable: fail-safe block');
+        if (this.killSwitch)
+            return deny('actuation-freeze: kill-switch engaged');
+        // Ethical-Constraint veto (loop 13) — kernel-local, overrides everything (spec: 13-ethical-constraint).
+        if (this.ethicalGuard) {
+            const review = this.ethicalGuard.review({
+                agentId: request.agentId,
+                description: request.capability,
+                ...(request.labels ? { labels: request.labels } : {}),
+            });
+            if (review.vetoed)
+                return deny(`ethical-veto: ${review.reason}`);
+        }
+        const auth = this.authorization.get(request.agentId);
+        if (!auth)
+            return deny(`default-deny: agent ${request.agentId} has no contract`);
+        if (!auth.capabilities.has(request.capability)) {
+            return deny(`default-deny: capability '${request.capability}' not declared by agent ${request.agentId}`);
+        }
+        if (!tierCanActuate(auth.autonomyTier)) {
+            return deny(`autonomy: tier '${auth.autonomyTier}' may not actuate`);
+        }
+        if (request.environment === 'prod' && (!request.rollback || !request.rollback.verified)) {
+            return deny('rollback-readiness: prod action requires a verified rollback path');
+        }
+        if (request.blastRadius) {
+            const { fraction } = request.blastRadius;
+            // Reject NaN/Infinity/negative outright — an invalid fraction must never slip the cap.
+            if (!Number.isFinite(fraction) || fraction < 0) {
+                return deny(`blast-radius: invalid fraction '${fraction}'`);
+            }
+            const cap = this.blastCaps[request.environment];
+            if (fraction > cap) {
+                return deny(`blast-radius: ${fraction} exceeds ${request.environment} cap ${cap}`);
+            }
+        }
+        if (auth.autonomyTier === 'gated') {
+            return { decision: 'gate', reason: 'gated: requires human approval', request };
+        }
+        return { decision: 'allow', reason: 'authorized', request };
+    }
+    record(verdict, outcome) {
+        this.audit.append({
+            at: new Date(this.now()).toISOString(),
+            agentId: verdict.request.agentId,
+            capability: verdict.request.capability,
+            environment: verdict.request.environment,
+            decision: verdict.decision,
+            reason: verdict.reason,
+            outcome,
+        });
+    }
+}
+//# sourceMappingURL=harness.js.map

package/dist/core/harness/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../../core/harness/harness.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;CAC3C,CAAC;AAEF,uFAAuF;AACvF,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,GAAG,6CAA6C;QACjE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IACzB,UAAU,GAAG,KAAK,CAAC;IACnB,SAAS,GAAG,IAAI,CAAC;IACR,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;IACvB,GAAG,CAAe;IAClB,aAAa,CAAqB;IAClC,MAAM,CAAgB;IACvC,sFAAsF;IAC9E,SAAS,CAA8B;IAC9B,YAAY,CAAmB;IAEhD,YACE,aAAiC,EACjC,SAAwB,sBAAsB,EAC9C,OAAoF;QAEpF,4FAA4F;QAC5F,oGAAoG;QACpG,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;QACpD,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5C,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,YAAY,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;gBACxC,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,OAAmE;QAClF,IAAI,CAAC,SAAS;YACZ,OAAO,CAAC,kBAAkB,KAAK,cAAc;gBAC3C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE;gBAC5B,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,gBAAgB;QACd,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,iBAAiB;QACf,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,kEAAkE;IAClE,YAAY,CAAC,KAAc;QACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,yDAAyD;IACzD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,0FAA0F;IAC1F,QAAQ,CAAC,OAAsB;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,qFAAqF;IACrF,IAAI,CAAC,OAAsB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GACT,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,UAAU,OAAO,OAAO,CAAC,QAAQ,IAAI,KAAK,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3F,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,OAAsB,EACtB,MAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,sFAAsF;YACtF,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;YACtG,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAY;gBACpB,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,0BAA0B,QAAQ,2BAA2B;gBACrE,OAAO;aACR,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,+FAA+F;YAC/F,iGAAiG;YACjG,0FAA0F;YAC1F,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,OAAsB;QACnC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAElF,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAE1E,wGAAwG;QACxG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBACtC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,uBAAuB,OAAO,CAAC,OAAO,kBAAkB,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,6BAA6B,OAAO,CAAC,UAAU,2BAA2B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY,mBAAmB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;YACzC,uFAAuF;YACvF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,iBAAiB,QAAQ,YAAY,OAAO,CAAC,WAAW,QAAQ,GAAG,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,OAAO,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IAEO,MAAM,CAAC,OAAgB,EAAE,OAAqB;QACpD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACtC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;YAChC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;YACtC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAA0B;YACvD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/harness/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Actuation Safety Harness — public surface (Phase 1.2).
+ * The single control plane every production-affecting action routes through.
+ * Spec: blueprint/rules/actuation-safety-harness.md.
+ */
+export type { Environment, RiskTier, VerdictDecision, AuditOutcome, RollbackPlan, BlastRadius, ActionRequest, Verdict, ExecutionPlan, AuditRecord, AgentAuthorization, AuthorizationTable, HarnessConfig, EthicalReview, EthicalReviewer, } from './types.js';
+export { generateAuthorization, assertAuthorizationMatchesContracts, tierCanActuate, type ContractLike, } from './authorization.js';
+export { AuditLog } from './audit-log.js';
+export { ActuationSafetyHarness, DEFAULT_HARNESS_CONFIG, HarnessUnavailableError } from './harness.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/harness/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../core/harness/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,YAAY,EACV,WAAW,EACX,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,mCAAmC,EACnC,cAAc,EACd,KAAK,YAAY,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC"}

package/dist/core/harness/index.js

@@ -0,0 +1,4 @@
+export { generateAuthorization, assertAuthorizationMatchesContracts, tierCanActuate, } from './authorization.js';
+export { AuditLog } from './audit-log.js';
+export { ActuationSafetyHarness, DEFAULT_HARNESS_CONFIG, HarnessUnavailableError } from './harness.js';
+//# sourceMappingURL=index.js.map

package/dist/core/harness/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../core/harness/index.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,qBAAqB,EACrB,mCAAmC,EACnC,cAAc,GAEf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC"}

package/dist/core/harness/types.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Actuation Safety Harness — shared types (Phase 1.2).
+ * The single control plane every production-affecting action routes through.
+ * Spec: blueprint/rules/actuation-safety-harness.md.
+ */
+import type { AutonomyTier } from '../agent-contract.js';
+export type Environment = 'staging' | 'prod';
+export type RiskTier = 'low' | 'medium' | 'high' | 'critical';
+export type VerdictDecision = 'allow' | 'gate' | 'deny';
+export type AuditOutcome = 'evaluated' | 'executed' | 'dry-run' | 'aborted';
+/** A verified undo path — prod actuation is denied without one. */
+export interface RollbackPlan {
+    readonly description: string;
+    readonly verified: boolean;
+}
+/** Fraction of the resource population an action would affect (0..1). */
+export interface BlastRadius {
+    readonly fraction: number;
+}
+/** A request to perform one production-affecting action. */
+export interface ActionRequest {
+    readonly agentId: number;
+    /** The capability being exercised — must be declared in the agent's contract. */
+    readonly capability: string;
+    readonly environment: Environment;
+    readonly riskTier: RiskTier;
+    /** Resource key for concurrency control (no two conflicting actions on the same resource). */
+    readonly resource?: string;
+    /** Required for prod actuation. */
+    readonly rollback?: RollbackPlan;
+    readonly blastRadius?: BlastRadius;
+    /** Produce a plan without executing. */
+    readonly dryRun?: boolean;
+    /** Classification labels (e.g. 'destructive') the Ethical-Constraint veto inspects. */
+    readonly labels?: readonly string[];
+    readonly reason?: string;
+}
+/** Minimal verdict shape the Ethical-Constraint loop returns to the Harness. */
+export interface EthicalReview {
+    readonly vetoed: boolean;
+    readonly reason: string;
+}
+/**
+ * Kernel-local Ethical-Constraint reviewer (loop 13). The Harness consults it FIRST among policy
+ * checks; a veto overrides everything. Structurally satisfied by governance's EthicalGuard — kept
+ * as a minimal interface here so the Harness has no dependency on the governance module.
+ */
+export interface EthicalReviewer {
+    review(action: {
+        readonly agentId: number;
+        readonly description: string;
+        readonly labels?: readonly string[];
+    }): EthicalReview;
+}
+export interface Verdict {
+    readonly decision: VerdictDecision;
+    readonly reason: string;
+    readonly request: ActionRequest;
+}
+export interface ExecutionPlan {
+    readonly verdict: Verdict;
+    readonly steps: readonly string[];
+}
+/** One hash-chained, tamper-evident audit entry. */
+export interface AuditRecord {
+    readonly seq: number;
+    readonly at: string;
+    readonly agentId: number;
+    readonly capability: string;
+    readonly environment: Environment;
+    readonly decision: VerdictDecision;
+    readonly reason: string;
+    readonly outcome: AuditOutcome;
+    readonly prevHash: string;
+    readonly hash: string;
+}
+/** Per-agent authorization, GENERATED from the agent's contract (never hand-maintained). */
+export interface AgentAuthorization {
+    readonly agentId: number;
+    readonly capabilities: ReadonlySet<string>;
+    readonly autonomyTier: AutonomyTier;
+}
+export type AuthorizationTable = ReadonlyMap<number, AgentAuthorization>;
+export interface HarnessConfig {
+    /** Max blast-radius fraction allowed per environment. */
+    readonly maxBlastRadius: Readonly<Record<Environment, number>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/harness/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../core/harness/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAC7C,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE5E,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,aAAa,CAAC;CAChI;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,4FAA4F;AAC5F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AACD,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAEzE,MAAM,WAAW,aAAa;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;CAChE"}

package/dist/core/harness/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/harness/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../core/harness/types.ts"],"names":[],"mappings":""}

package/dist/core/health-check.d.ts

@@ -2,6 +2,12 @@ export interface HealthCheck {
     name: string;
     check: () => Promise<boolean>;
     required: boolean;
+    /**
+     * Per-check timeout in ms (default 30 000). A hung probe — e.g. a TCP
+     * connect to a black-holed host — must fail the check, not stall the whole
+     * pipeline indefinitely (P1-6).
+     */
+    timeoutMs?: number;
 }
 export interface HealthCheckResult {
     name: string;

package/dist/core/health-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health-check.d.ts","sourceRoot":"","sources":["../../core/health-check.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,eAAe,CAAC,EACpC,MAAM,GACP,EAAE;IACD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6B9B"}
+{"version":3,"file":"health-check.d.ts","sourceRoot":"","sources":["../../core/health-check.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,eAAe,CAAC,EACpC,MAAM,GACP,EAAE;IACD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyC9B"}

package/dist/core/health-check.js

@@ -1,17 +1,29 @@
+/** Default per-check timeout. */
+const DEFAULT_CHECK_TIMEOUT_MS = 30_000;
 export async function runHealthChecks({ checks, }) {
     const results = [];
     const warnings = [];
-    for (const { name, check, required } of checks) {
+    for (const { name, check, required, timeoutMs } of checks) {
         const start = Date.now();
         let passed = false;
         let error;
+        const limit = timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS;
+        let timer;
         try {
-            passed = await check();
+            passed = await Promise.race([
+                check(),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error(`health check '${name}' timed out after ${limit} ms`)), limit);
+                }),
+            ]);
         }
         catch (err) {
             passed = false;
             error = err instanceof Error ? err.message : String(err);
         }
+        finally {
+            clearTimeout(timer);
+        }
         const durationMs = Date.now() - start;
         results.push({ name, passed, required, error, durationMs });
         if (!passed && !required) {

package/dist/core/health-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"health-check.js","sourceRoot":"","sources":["../../core/health-check.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,GAGP;IACC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,MAAM,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,KAAyB,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,KAAK,CAAC;YACf,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,IAAI,UAAU,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"health-check.js","sourceRoot":"","sources":["../../core/health-check.ts"],"names":[],"mappings":"AAYA,iCAAiC;AACjC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAgBxC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,MAAM,GAGP;IACC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,MAAM,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,KAAyB,CAAC;QAE9B,MAAM,KAAK,GAAG,SAAS,IAAI,wBAAwB,CAAC;QACpD,IAAI,KAAiC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE;gBACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,KAAK,KAAK,CAAC,CAAC,EAC7E,KAAK,CACN,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,KAAK,CAAC;YACf,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,IAAI,UAAU,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}

package/dist/core/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../core/init.ts"],"names":[],"mappings":"AA4VA,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAwKrD"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../core/init.ts"],"names":[],"mappings":"AAoXA,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CA+KrD"}