@cassiomc1/forgeloop 1.6.2 → 1.6.4

package/docs/diagrams/README.md

@@ -1,23 +1,29 @@
 # Documentation diagrams
 
-The ForgeLoop architecture flow is authored as typed Archify workflow IR in
-[`forgeloop-engineering-flow.workflow.json`](./forgeloop-engineering-flow.workflow.json).
-The checked-in outputs are generated from that source with the pinned Archify
-v2.15.0 toolchain. The animated interactive explorer is the primary experience:
-
-- [animated HTML explorer](../assets/diagrams/forgeloop-engineering-flow.html)
-- [animated, self-contained SVG fallback](../assets/diagrams/forgeloop-engineering-flow.svg)
-- [deterministic generation receipt](../assets/diagrams/forgeloop-engineering-flow.receipt.json)
-
-The canonical source sets `meta.animation` to `trace`, so the explorer and SVG
-trace the workflow edges and nodes. Use the explorer's Present, playback, and
-focus controls for the full animated experience; the SVG remains available for
-repository previews and text-only fallbacks.
-
-[`manifest.json`](./manifest.json) is the governance source for diagram types,
-renderer support, canonical purposes, artifact ownership, and required
-references. The persistent human approval is kept separately in
-[`reviews/forgeloop-engineering-flow.review.json`](./reviews/forgeloop-engineering-flow.review.json).
+ForgeLoop maintains three canonical P0 visuals in typed Archify workflow IR.
+The manifest is the governance source for their identities, canonical
+purposes, renderer mapping, artifact ownership, references, and review files:
+
+| Visual | Canonical purpose | Source | Explorer | SVG fallback |
+| --- | --- | --- | --- | --- |
+| Engineering Flow | `high-level-engineering-flow` | [`forgeloop-engineering-flow.workflow.json`](./forgeloop-engineering-flow.workflow.json) | [HTML](../assets/diagrams/forgeloop-engineering-flow.html) | [SVG](../assets/diagrams/forgeloop-engineering-flow.svg) |
+| Verification Trust Flow | `differential-verification-trust-boundary` | [`forgeloop-verification-trust-flow.workflow.json`](./forgeloop-verification-trust-flow.workflow.json) | [HTML](../assets/diagrams/forgeloop-verification-trust-flow.html) | [SVG](../assets/diagrams/forgeloop-verification-trust-flow.svg) |
+| Code Attestation Chain | `code-attestation-chain` | [`forgeloop-code-attestation-flow.workflow.json`](./forgeloop-code-attestation-flow.workflow.json) | [HTML](../assets/diagrams/forgeloop-code-attestation-flow.html) | [SVG](../assets/diagrams/forgeloop-code-attestation-flow.svg) |
+
+Each visual also has a deterministic [receipt directory](../assets/diagrams/)
+entry and a source-bound [review directory](./reviews/). The Engineering Flow
+is the conceptual lifecycle; the Verification Trust Flow explains the
+fail-closed Differential Verification boundary; and the Code Attestation Chain
+explains exact-content provenance, optional signing, and revision-range
+coverage. Their text fallbacks remain in
+[`README.md`](../../README.md#architecture-flow),
+[`REVISION_PROVIDERS.md`](../REVISION_PROVIDERS.md#differential-verification-scope),
+and [`CODE_ATTESTATION.md`](../CODE_ATTESTATION.md#completion-flow).
+
+The canonical sources set `meta.animation` to `trace`, so the explorers and
+SVGs trace workflow edges and emphasize active nodes. Use each explorer's
+Present, playback, and focus controls for the full animated experience; every
+SVG remains available for repository previews and text-only fallbacks.
 
 The JSON IR is the source of truth. Do not edit the generated HTML or SVG by
 hand. Run `npm run docs:diagrams` to regenerate the outputs and
@@ -49,7 +55,9 @@ canonical inputs only from `docs/diagrams/` and permits deliver outputs only
 under `docs/assets/diagrams/`.
 
 ForgeLoop governs five documentation-diagram categories: workflow,
-architecture, sequence, dataflow, and lifecycle. The current repository has
-one canonical workflow diagram. Governance support does not imply renderer
-support: a type requires an explicit renderer mapping before it can be added as
-an active diagram.
+architecture, sequence, dataflow, and lifecycle. The current active set uses
+three workflow diagrams because the pinned wrapper currently maps only
+`workflow`. Governance support does not imply renderer support: a type requires
+an explicit renderer mapping before it can be added as an active diagram.
+Additional safety-boundary, resume, or provider visuals remain intentionally
+deferred until their mappings are proven.

package/docs/diagrams/forgeloop-code-attestation-flow.workflow.json

@@ -0,0 +1,125 @@
+{
+  "schema_version": 1,
+  "diagram_type": "workflow",
+  "meta": {
+    "title": "ForgeLoop Code Attestation Chain",
+    "subtitle": "Exact content binding from valid completion to read-only trust results",
+    "animation": "trace",
+    "visual_preset": "signal-flow",
+    "quality_profile": "showcase",
+    "views": [
+      {
+        "id": "completion-to-manifest",
+        "label": "Completion to manifest",
+        "focus": ["complete", "receipt", "manifest", "captured"],
+        "note": "Follow the transactional binding between valid completion evidence and exact source content."
+      },
+      {
+        "id": "manifest-to-statement",
+        "label": "Manifest to statement",
+        "focus": ["manifest", "captured", "statement", "signing", "bundle"],
+        "note": "See how the deterministic code manifest becomes an in-toto Statement v1 and optional signature bundle."
+      },
+      {
+        "id": "revision-range-coverage",
+        "label": "Revision-range coverage",
+        "focus": ["base", "provider", "changed", "attestations", "union", "range"],
+        "note": "Inspect the separate changed-path coverage question and its gap or conflict result."
+      }
+    ],
+    "legend": {
+      "mode": "auto",
+      "entries": {
+        "backend": { "label": "Protocol state" },
+        "database": { "label": "Content/evidence" },
+        "security": { "label": "Policy boundary" },
+        "cloud": { "label": "Signer" },
+        "messagebus": { "label": "Failure" },
+        "external": { "label": "Completion" }
+      }
+    }
+  },
+  "lanes": [
+    { "id": "completion", "label": "Completion Evidence" },
+    { "id": "integrity", "label": "Content Integrity" },
+    { "id": "providers", "label": "Provider Boundaries" },
+    { "id": "verification", "label": "Read-Only Verification" },
+    { "id": "results", "label": "Attestation Results" },
+    { "id": "coverage", "label": "Revision-Range Coverage" },
+    { "id": "exceptions", "label": "Gaps + Conflicts", "variant": "exception" }
+  ],
+  "phases": [
+    { "id": "capture", "label": "Capture content", "fromCol": 0, "toCol": 1 },
+    { "id": "statement", "label": "Bind and sign", "fromCol": 2, "toCol": 3, "variant": "emphasis" },
+    { "id": "range", "label": "Evaluate coverage", "fromCol": 4, "toCol": 5, "variant": "dashed" }
+  ],
+  "groups": [
+    { "id": "completion_binding", "label": "Completion transaction", "lane": "integrity", "fromCol": 0, "toCol": 3, "variant": "emphasis" },
+    { "id": "signer_boundary", "label": "Optional external signer", "lane": "providers", "fromCol": 4, "toCol": 5, "variant": "security" },
+    { "id": "coverage_boundary", "label": "Coverage is a separate question", "lane": "coverage", "fromCol": 0, "toCol": 5, "variant": "dashed" }
+  ],
+  "mainPath": ["complete", "receipt", "manifest", "captured", "statement", "signing", "bundle", "verify"],
+  "nodes": [
+    { "id": "complete", "lane": "completion", "col": 0, "type": "external", "label": "VALID", "sublabel": "completion", "width": 52 },
+    { "id": "receipt", "lane": "completion", "col": 1, "type": "database", "label": "Receipt", "sublabel": "ledger", "width": 54 },
+    { "id": "manifest", "lane": "integrity", "col": 2, "type": "database", "label": "Manifest", "sublabel": "SHA-256", "tag": "exact", "width": 60 },
+    { "id": "captured", "lane": "integrity", "col": 3, "type": "security", "label": "Captured", "sublabel": "transaction", "width": 68 },
+    { "id": "statement", "lane": "providers", "col": 4, "type": "backend", "label": "in-toto v1", "sublabel": "statement", "width": 72 },
+    { "id": "signing", "lane": "providers", "col": 5, "type": "cloud", "label": "Signer", "sublabel": "optional", "tag": "Cosign", "width": 58 },
+    { "id": "bundle", "lane": "verification", "col": 5, "type": "database", "label": "Bundle", "sublabel": "policy-bound", "width": 66 },
+    { "id": "verify", "lane": "results", "col": 5, "type": "security", "label": "Verify", "sublabel": "read-only", "tag": "no mutation", "width": 62 },
+    { "id": "base", "lane": "coverage", "col": 0, "type": "cloud", "label": "Base", "sublabel": "revision", "width": 52 },
+    { "id": "provider", "lane": "coverage", "col": 1, "type": "backend", "label": "Rev", "sublabel": "provider", "width": 52 },
+    { "id": "changed", "lane": "coverage", "col": 2, "type": "database", "label": "Paths", "sublabel": "changed", "width": 52 },
+    { "id": "attestations", "lane": "coverage", "col": 3, "type": "backend", "label": "Attest", "sublabel": "valid", "width": 42 },
+    { "id": "union", "lane": "coverage", "col": 4, "type": "database", "label": "Union", "sublabel": "digests", "width": 42 },
+    { "id": "range", "lane": "coverage", "col": 5, "type": "security", "label": "Range", "sublabel": "coverage", "tag": "no gaps", "width": 58 },
+    { "id": "boundary", "lane": "exceptions", "col": 3, "type": "security", "label": "Boundary", "sublabel": "scope/coverage", "tag": "important", "width": 74 },
+    { "id": "gap", "lane": "exceptions", "col": 5, "type": "messagebus", "label": "Gap", "sublabel": "fail closed", "width": 60 }
+  ],
+  "edges": [
+    { "id": "complete-receipt", "from": "complete", "to": "receipt", "variant": "emphasis" },
+    { "id": "receipt-manifest", "from": "receipt", "to": "manifest", "variant": "security", "route": "drop", "fromSide": "bottom", "toSide": "top" },
+    { "id": "manifest-captured", "from": "manifest", "to": "captured", "variant": "emphasis" },
+    { "id": "captured-statement", "from": "captured", "to": "statement", "variant": "security", "route": "drop", "fromSide": "bottom", "toSide": "top" },
+    { "id": "statement-signing", "from": "statement", "to": "signing", "variant": "dashed", "fromSide": "bottom", "toSide": "top", "route": "drop" },
+    { "id": "signing-bundle", "from": "signing", "to": "bundle", "variant": "security", "route": "drop", "fromSide": "bottom", "toSide": "top" },
+    { "id": "bundle-verify", "from": "bundle", "to": "verify", "variant": "emphasis" },
+    { "id": "base-provider", "from": "base", "to": "provider", "variant": "dashed" },
+    { "id": "provider-changed", "from": "provider", "to": "changed", "variant": "security" },
+    { "id": "changed-attestations", "from": "changed", "to": "attestations", "variant": "emphasis" },
+    { "id": "attestations-union", "from": "attestations", "to": "union", "variant": "dashed" },
+    { "id": "union-range", "from": "union", "to": "range", "variant": "security" },
+    { "id": "manifest-boundary", "from": "manifest", "to": "boundary", "variant": "dashed", "role": "branch", "fromSide": "left", "toSide": "left", "route": "return-left", "channelX": 44 },
+    { "id": "union-gap", "from": "union", "to": "gap", "variant": "security", "role": "error", "fromSide": "right", "toSide": "left", "route": "outside-right", "channelX": 550 }
+  ],
+  "cards": [
+    {
+      "dot": "rose",
+      "title": "Trust Levels",
+      "items": [
+        "PROCESSED means artifacts exist and parse",
+        "VERIFIED means completion, evidence, manifest, and content bindings validate",
+        "ATTESTED additionally requires a valid external signature policy"
+      ]
+    },
+    {
+      "dot": "cyan",
+      "title": "Exact Content",
+      "items": [
+        "The manifest records one SHA-256 digest per changed source entry",
+        "The in-toto statement binds the manifest to completion evidence",
+        "Read-only verification never rewrites task state or ledger events"
+      ]
+    },
+    {
+      "dot": "emerald",
+      "title": "Coverage Boundary",
+      "items": [
+        "Revision-range coverage asks whether changed paths have valid attestations",
+        "Gaps and conflicting task digests fail closed",
+        "Verification Scope ≠ Attestation Coverage"
+      ]
+    }
+  ]
+}

package/docs/diagrams/forgeloop-engineering-flow.workflow.json

@@ -3,7 +3,7 @@
   "diagram_type": "workflow",
   "meta": {
     "title": "ForgeLoop Evidence-First Engineering Flow",
-    "subtitle": "Typed intent → gated work → validator-backed closure",
+    "subtitle": "Typed intent → scoped work → observed evidence → validator-backed closure",
     "animation": "trace",
     "visual_preset": "signal-flow",
     "quality_profile": "showcase",
@@ -62,15 +62,15 @@
   "mainPath": ["request", "profile", "contract", "route", "gates", "preflight", "work", "evidence", "review", "valid"],
   "nodes": [
     { "id": "request", "lane": "intent", "col": 0, "type": "external", "label": "Request", "sublabel": "intent", "width": 50 },
-    { "id": "profile", "lane": "intent", "col": 1, "type": "backend", "label": "Profile", "sublabel": "facts", "width": 50 },
+    { "id": "profile", "lane": "intent", "col": 1, "type": "backend", "label": "Profile", "sublabel": "discover", "width": 50 },
     { "id": "contract", "lane": "intent", "col": 2, "type": "security", "label": "Contract", "sublabel": "scope", "tag": "saved", "width": 50 },
     { "id": "route", "lane": "policy", "col": 2, "type": "security", "label": "Route", "sublabel": "guides", "tag": "fail closed", "width": 50 },
-    { "id": "gates", "lane": "policy", "col": 3, "type": "security", "label": "Gates", "sublabel": "policy", "width": 50 },
-    { "id": "preflight", "lane": "policy", "col": 4, "type": "security", "label": "READY", "sublabel": "unlock", "tag": "PREFLIGHT", "width": 50 },
-    { "id": "work", "lane": "execution", "col": 4, "type": "backend", "label": "Work", "sublabel": "checkpoint", "width": 50 },
-    { "id": "evidence", "lane": "evidence", "col": 4, "type": "database", "label": "Evidence", "sublabel": "checks", "tag": "freshness", "width": 50 },
+    { "id": "gates", "lane": "policy", "col": 3, "type": "security", "label": "Claims", "sublabel": "Task + gates", "width": 62 },
+    { "id": "preflight", "lane": "policy", "col": 4, "type": "security", "label": "READY", "sublabel": "binding", "tag": "Preflight", "width": 60 },
+    { "id": "work", "lane": "execution", "col": 4, "type": "backend", "label": "Execution", "sublabel": "checkpoint", "width": 62 },
+    { "id": "evidence", "lane": "evidence", "col": 4, "type": "database", "label": "Evidence", "sublabel": "scope + checks", "tag": "observed", "width": 70 },
     { "id": "review", "lane": "closure", "col": 5, "type": "backend", "label": "Review", "sublabel": "drift", "width": 50 },
-    { "id": "valid", "lane": "evidence", "col": 5, "type": "database", "label": "VALID", "sublabel": "validator", "tag": "claim", "width": 50 },
+    { "id": "valid", "lane": "evidence", "col": 5, "type": "database", "label": "VALID", "sublabel": "completion", "tag": "claim", "width": 50 },
     { "id": "diagnose", "lane": "recovery", "col": 2, "type": "messagebus", "label": "Diagnose", "sublabel": "failure", "width": 50 },
     { "id": "correct", "lane": "recovery", "col": 1, "type": "backend", "label": "Correct", "sublabel": "repair", "width": 50 },
     { "id": "blocked", "lane": "recovery", "col": 0, "type": "security", "label": "Blocked", "sublabel": "stop", "width": 50 }
@@ -96,6 +96,7 @@
       "title": "Safety boundary",
       "items": [
         "Execution starts only after PREFLIGHT_READY",
+        "Workspace binding is optional but blocks mismatched execution",
         "Failures return to diagnosis before another claim",
         "Completion is validator-backed, not inferred from a screenshot"
       ]
@@ -104,7 +105,8 @@
       "dot": "cyan",
       "title": "Evidence contract",
       "items": [
-        "run-check binds commands to an execution reference",
+        "Verification scope narrows only through a fresh canonical boundary",
+        "run-check binds exact commands to an execution reference",
         "record-check covers manual observations",
         "Drift reopens verification instead of being hidden"
       ]
@@ -115,6 +117,7 @@
       "items": [
         "JSON IR is the source of truth",
         "HTML stays explorable and SVG stays GitHub-safe",
+        "Attestation remains optional and separate from verification scope",
         "The text fallback carries the same lifecycle semantics"
       ]
     }

package/docs/diagrams/forgeloop-verification-trust-flow.workflow.json

@@ -0,0 +1,116 @@
+{
+  "schema_version": 1,
+  "diagram_type": "workflow",
+  "meta": {
+    "title": "ForgeLoop Verification Trust Flow",
+    "subtitle": "Canonical scope planning before exact command execution",
+    "animation": "trace",
+    "visual_preset": "signal-flow",
+    "quality_profile": "showcase",
+    "views": [
+      {
+        "id": "scope-resolution",
+        "label": "Resolve verification scope",
+        "focus": ["claims", "changes", "checker", "cycle", "fingerprints", "scope"],
+        "note": "Follow the trusted inputs that determine whether a checker may narrow its execution."
+      },
+      {
+        "id": "exact-execution",
+        "label": "Bind exact execution",
+        "focus": ["scope", "argv", "observed"],
+        "note": "See how the resolved scope binds the exact argv and observed execution evidence."
+      },
+      {
+        "id": "fail-closed",
+        "label": "Fail closed when trust is missing",
+        "focus": ["checker", "full", "unresolved", "reject"],
+        "note": "No trusted checker means AUTO uses FULL; explicit narrowing without one is unresolved."
+      }
+    ],
+    "legend": {
+      "mode": "auto",
+      "entries": {
+        "backend": { "label": "Task/provider state" },
+        "database": { "label": "Bound evidence" },
+        "security": { "label": "Trust boundary" },
+        "messagebus": { "label": "Fail-closed result" },
+        "external": { "label": "Task input" }
+      }
+    },
+    "viewBox": [720, 900]
+  },
+  "lanes": [
+    { "id": "inputs", "label": "Task + Revision Inputs" },
+    { "id": "policy", "label": "Trust and Scope Policy" },
+    { "id": "execution", "label": "Exact Execution" },
+    { "id": "evidence", "label": "Observed Evidence" },
+    { "id": "exceptions", "label": "Fail-Closed Outcomes", "variant": "exception" },
+    { "id": "closure", "label": "Verification Boundary" }
+  ],
+  "phases": [
+    { "id": "inputs", "label": "Collect bound inputs", "fromCol": 0, "toCol": 1 },
+    { "id": "resolve", "label": "Resolve safe scope", "fromCol": 2, "toCol": 3, "variant": "emphasis" },
+    { "id": "execute", "label": "Execute and observe", "fromCol": 4, "toCol": 5, "variant": "dashed" }
+  ],
+  "groups": [
+    { "id": "scope_boundary", "label": "Verification scope boundary", "lane": "policy", "fromCol": 2, "toCol": 5, "variant": "emphasis" },
+    { "id": "fail_closed_boundary", "label": "No guessed narrowing", "lane": "exceptions", "fromCol": 2, "toCol": 5, "variant": "security" }
+  ],
+  "mainPath": ["claims", "changes", "checker", "cycle", "fingerprints", "scope", "argv", "observed"],
+  "nodes": [
+    { "id": "claims", "lane": "inputs", "col": 0, "type": "external", "label": "Claims", "sublabel": "write scope", "width": 64 },
+    { "id": "changes", "lane": "inputs", "col": 1, "type": "backend", "label": "Changes", "sublabel": "provider", "width": 70 },
+    { "id": "checker", "lane": "policy", "col": 2, "type": "security", "label": "Checker", "sublabel": "trusted scope", "tag": "capability", "width": 64 },
+    { "id": "cycle", "lane": "policy", "col": 3, "type": "backend", "label": "Cycle", "sublabel": "fresh", "width": 50 },
+    { "id": "fingerprints", "lane": "policy", "col": 4, "type": "security", "label": "Bind", "sublabel": "contract/repo", "width": 58 },
+    { "id": "scope", "lane": "evidence", "col": 4, "type": "database", "label": "verify-scope", "sublabel": "AUTO / explicit", "tag": "scope", "width": 82 },
+    { "id": "argv", "lane": "execution", "col": 5, "type": "security", "label": "argv", "sublabel": "paths", "tag": "exact", "width": 50 },
+    { "id": "observed", "lane": "evidence", "col": 5, "type": "database", "label": "Evidence", "sublabel": "executionRef", "tag": "observed", "width": 70 },
+    { "id": "full", "lane": "exceptions", "col": 2, "type": "messagebus", "label": "AUTO → FULL", "sublabel": "no checker", "tag": "safe", "width": 76 },
+    { "id": "unresolved", "lane": "exceptions", "col": 3, "type": "security", "label": "Open", "sublabel": "narrow", "tag": "unresolved", "width": 50 },
+    { "id": "reject", "lane": "exceptions", "col": 4, "type": "security", "label": "Reject", "sublabel": "pre-launch", "tag": "argv drift", "width": 50 },
+    { "id": "boundary", "lane": "closure", "col": 5, "type": "security", "label": "Boundary", "sublabel": "scope/coverage", "width": 64 }
+  ],
+  "edges": [
+    { "id": "claims-changes", "from": "claims", "to": "changes", "variant": "emphasis" },
+    { "id": "changes-checker", "from": "changes", "to": "checker", "variant": "default", "route": "drop", "fromSide": "bottom", "toSide": "top" },
+    { "id": "checker-cycle", "from": "checker", "to": "cycle", "variant": "emphasis" },
+    { "id": "cycle-fingerprints", "from": "cycle", "to": "fingerprints", "variant": "security", "fromSide": "bottom", "toSide": "bottom", "route": "bottom-channel", "channelY": 312 },
+    { "id": "fingerprints-scope", "from": "fingerprints", "to": "scope", "variant": "emphasis", "fromSide": "bottom", "toSide": "top", "route": "drop" },
+    { "id": "scope-argv", "from": "scope", "to": "argv", "variant": "security", "fromSide": "right", "toSide": "left", "route": "bottom-channel", "channelY": 408 },
+    { "id": "argv-observed", "from": "argv", "to": "observed", "variant": "dashed", "fromSide": "bottom", "toSide": "top", "route": "drop" },
+    { "id": "checker-full", "from": "checker", "to": "full", "variant": "dashed", "role": "branch", "fromSide": "left", "toSide": "right", "route": "return-left" },
+    { "id": "checker-unresolved", "from": "checker", "to": "unresolved", "variant": "security", "role": "error", "fromSide": "bottom", "toSide": "top", "route": "drop" },
+    { "id": "scope-reject", "from": "scope", "to": "reject", "variant": "security", "role": "error", "fromSide": "bottom", "toSide": "top", "route": "drop" },
+    { "id": "observed-boundary", "from": "observed", "to": "boundary", "variant": "dashed", "role": "branch", "fromSide": "left", "toSide": "right", "route": "return-left" }
+  ],
+  "cards": [
+    {
+      "dot": "rose",
+      "title": "Fail-Closed Narrowing",
+      "items": [
+        "AUTO uses CHANGED or CLAIMED only with a trusted scoped checker",
+        "Without that capability, AUTO resolves safely to FULL",
+        "Explicit CHANGED or CLAIMED without a checker returns unresolved"
+      ]
+    },
+    {
+      "dot": "cyan",
+      "title": "Exact Process Binding",
+      "items": [
+        "RevisionProvider changes and task claims are canonical inputs",
+        "Contract, repository, and cycle fingerprints bind the scope",
+        "argv prefix and selected paths are checked before launch"
+      ]
+    },
+    {
+      "dot": "emerald",
+      "title": "Evidence Boundary",
+      "items": [
+        "run-check records exact process provenance as observed evidence",
+        "Stale scope or argv drift cannot become verification evidence",
+        "Verification scope is not attestation coverage"
+      ]
+    }
+  ]
+}

package/docs/diagrams/manifest.json

@@ -37,6 +37,48 @@
         "docs/DOCUMENTATION_GUIDE.md",
         "docs/diagrams/README.md"
       ]
+    },
+    {
+      "id": "forgeloop-verification-trust-flow",
+      "type": "workflow",
+      "defaultTheme": "dark",
+      "canonicalFor": [
+        "differential-verification-trust-boundary"
+      ],
+      "source": "docs/diagrams/forgeloop-verification-trust-flow.workflow.json",
+      "html": "docs/assets/diagrams/forgeloop-verification-trust-flow.html",
+      "svg": "docs/assets/diagrams/forgeloop-verification-trust-flow.svg",
+      "receipt": "docs/assets/diagrams/forgeloop-verification-trust-flow.receipt.json",
+      "review": "docs/diagrams/reviews/forgeloop-verification-trust-flow.review.json",
+      "fallback": "docs/REVISION_PROVIDERS.md#differential-verification-scope",
+      "referencedBy": [
+        "README.md",
+        "DOCS_INDEX.md",
+        "LOOP_SYSTEM_DESIGN.md",
+        "docs/REVISION_PROVIDERS.md",
+        "docs/diagrams/README.md"
+      ]
+    },
+    {
+      "id": "forgeloop-code-attestation-flow",
+      "type": "workflow",
+      "defaultTheme": "dark",
+      "canonicalFor": [
+        "code-attestation-chain"
+      ],
+      "source": "docs/diagrams/forgeloop-code-attestation-flow.workflow.json",
+      "html": "docs/assets/diagrams/forgeloop-code-attestation-flow.html",
+      "svg": "docs/assets/diagrams/forgeloop-code-attestation-flow.svg",
+      "receipt": "docs/assets/diagrams/forgeloop-code-attestation-flow.receipt.json",
+      "review": "docs/diagrams/reviews/forgeloop-code-attestation-flow.review.json",
+      "fallback": "docs/CODE_ATTESTATION.md#completion-flow",
+      "referencedBy": [
+        "README.md",
+        "DOCS_INDEX.md",
+        "QUALITY_SCORECARD.md",
+        "docs/CODE_ATTESTATION.md",
+        "docs/diagrams/README.md"
+      ]
     }
   ]
 }

package/docs/diagrams/reviews/forgeloop-code-attestation-flow.review.json

@@ -0,0 +1,20 @@
+{
+  "version": 1,
+  "diagramId": "forgeloop-code-attestation-flow",
+  "status": "approved",
+  "binding": {
+    "sourceSha256": "669966fba9e69df0525a3581baa4e90075923dbe3069f81f706761a40abf9073",
+    "svgSha256": "0af63dd51683d07981fc681042c437377a78ae8a7e6a7175c18a1def02e6280a"
+  },
+  "checks": {
+    "darkThemeLegible": true,
+    "noOverlap": true,
+    "labelsReadable": true,
+    "trustBoundariesClear": true,
+    "mobilePreviewAcceptable": true,
+    "textFallbackEquivalent": true,
+    "accessibleMetadataPresent": true
+  },
+  "reviewedBy": "repository-maintainer",
+  "reviewedAt": "2026-08-29"
+}

package/docs/diagrams/reviews/forgeloop-engineering-flow.review.json

@@ -3,8 +3,8 @@
   "diagramId": "forgeloop-engineering-flow",
   "status": "approved",
   "binding": {
-    "sourceSha256": "e4778296d1b9b2129b1ff6c956acaa1e7faba3dbfe68e0e5a6fb47dae3499308",
-    "svgSha256": "f549d1f998c2c84793783b9b6ce7aabe05d9a91edebecb764403c67dfbb4cc52"
+    "sourceSha256": "a83128a8639db5db497ac552cfdbc318839e6451c718581fbfcd064e3e869981",
+    "svgSha256": "37244a07cc862e3fe4a7188f5236a509a4adf565d5b785ba3c0932057ac6f3a8"
   },
   "checks": {
     "darkThemeLegible": true,
@@ -16,5 +16,5 @@
     "accessibleMetadataPresent": true
   },
   "reviewedBy": "repository-maintainer",
-  "reviewedAt": "2026-08-26"
+  "reviewedAt": "2026-08-29"
 }

package/docs/diagrams/reviews/forgeloop-verification-trust-flow.review.json

@@ -0,0 +1,20 @@
+{
+  "version": 1,
+  "diagramId": "forgeloop-verification-trust-flow",
+  "status": "approved",
+  "binding": {
+    "sourceSha256": "6fe11b0530cc6640f7b0f07d0f2d7e5a1f961745491f39016b340bc354af0e79",
+    "svgSha256": "e225c69f2ec90f403c394d88b5d41af75363c7fa336181ee85664f5d495f4555"
+  },
+  "checks": {
+    "darkThemeLegible": true,
+    "noOverlap": true,
+    "labelsReadable": true,
+    "trustBoundariesClear": true,
+    "mobilePreviewAcceptable": true,
+    "textFallbackEquivalent": true,
+    "accessibleMetadataPresent": true
+  },
+  "reviewedBy": "repository-maintainer",
+  "reviewedAt": "2026-08-29"
+}

package/integrations/generic-ci/verify.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env sh
+set -eu
+
+: "${FORGELOOP_REVISION_PROVIDER:=git}"
+: "${FORGELOOP_BASE_REVISION:?FORGELOOP_BASE_REVISION is required}"
+: "${FORGELOOP_HEAD_REVISION:?FORGELOOP_HEAD_REVISION is required}"
+
+exec forgeloop attestation-verify-range \
+  --revision-provider "$FORGELOOP_REVISION_PROVIDER" \
+  --base "$FORGELOOP_BASE_REVISION" \
+  --head "$FORGELOOP_HEAD_REVISION" \
+  --require-complete-coverage \
+  --json \
+  "$@"

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@cassiomc1/forgeloop",
-  "version": "1.6.2",
+  "version": "1.6.4",
   "description": "Portable, verifiable engineering protocol for AI coding environments and developer workflows",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cassiomc1/forgeloop.git"
   },
   "homepage": "https://github.com/cassiomc1/forgeloop#readme",
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
@@ -36,7 +36,6 @@
     "ORCHESTRATOR_INTEGRATION.md",
     "THREAT_MODEL.md",
     "CONTRACT_COVERAGE.md",
-    "AGENT_COMPATIBILITY.md",
     "PROJECT_PROFILE.md",
     "THIRD_PARTY_NOTICES.md",
     "LICENSE",
@@ -54,14 +53,25 @@
     "docs/TROUBLESHOOTING.md",
     "docs/RECIPES.md",
     "docs/DOCUMENTATION_GUIDE.md",
-    "docs/RELEASE_CHECKLIST_1_4.md",
+    "docs/RELEASE_CHECKLIST.md",
     "scripts/CI_VALIDATORS.md",
     "docs/MCP.md",
     "docs/UNIVERSAL_INTEGRATION.md",
     "docs/DIAGNOSTIC_MODEL.md",
     "docs/EXECUTION_TRACE.md",
-    "docs/RELEASE_CHECKLIST_1_5_MCP.md",
-    "docs/RELEASE_CHECKLIST_1_6_1.md"
+    "docs/CODE_ATTESTATION.md",
+    "docs/REVISION_PROVIDERS.md",
+    "docs/SIGNING_PROVIDERS.md",
+    "docs/PLATFORM_ADAPTERS.md",
+    "docs/AGENT_PROTOCOL_SUMMARY.md",
+    "scripts/generate-shell-completions.mjs",
+    "scripts/generate-agent-protocol-summary.mjs",
+    "scripts/benchmark-cli-startup.mjs",
+    "scripts/check-critical-coverage.mjs",
+    "scripts/check-changelog-freshness.mjs",
+    "scripts/write-forgeloop-attestation-summary.mjs",
+    "completions",
+    "integrations/generic-ci"
   ],
   "scripts": {
     "test": "node scripts/run-tests.js",
@@ -78,9 +88,18 @@
     "docs:report": "node scripts/report_documentation_health.mjs",
     "docs:check": "node scripts/run-docs-check.js",
     "lint": "eslint .",
-    "coverage": "c8 --all --include=src/**/*.js --reporter=text --reporter=lcov --check-coverage --lines=80 --functions=75 --branches=70 --statements=80 node scripts/run-tests.js",
+    "coverage": "c8 --all --include=src/**/*.js --reporter=text --reporter=lcov --reporter=json-summary --check-coverage --lines=80 --functions=75 --branches=70 --statements=80 node scripts/run-tests.js",
     "dependency:policy": "node scripts/check-dependency-policy.mjs",
-    "mcp:test": "node --test integrations/mcp/tests/*.test.js",
+    "mcp:test": "node scripts/run-mcp-tests.mjs",
+    "completions:generate": "node scripts/generate-shell-completions.mjs --write",
+    "completions:check": "node scripts/generate-shell-completions.mjs --check",
+    "test:quick": "node --test tests/cli.test.js tests/schema-health.test.js tests/schema-golden.test.js tests/protocol-info.test.js tests/integration-capabilities.test.js",
+    "performance:check": "node scripts/benchmark-cli-startup.mjs",
+    "critical-coverage:check": "node scripts/check-critical-coverage.mjs",
+    "changelog:check": "node scripts/check-changelog-freshness.mjs",
+    "attestation:summary": "node scripts/write-forgeloop-attestation-summary.mjs",
+    "summary:generate": "node scripts/generate-agent-protocol-summary.mjs --write",
+    "summary:check": "node scripts/generate-agent-protocol-summary.mjs --check",
     "mcp:setup": "node scripts/mcp-setup.mjs",
     "mcp:pack:check": "node scripts/mcp-package-smoke.mjs",
     "poc:evidence:verify": "node scripts/verify_poc_evidence.mjs",
@@ -92,6 +111,9 @@
   },
   "exports": {
     ".": "./src/cli.js",
-    "./integration": "./src/integration.js"
+    "./integration": {
+      "types": "./src/integration.d.ts",
+      "default": "./src/integration.js"
+    }
   }
 }

package/schemas/attestation-verification-result.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "forgeloop://schemas/attestation-verification-result.schema.json",
+  "title": "ForgeLoop attestation verification result",
+  "type": "object",
+  "required": ["schemaVersion", "status", "level", "revisionProvider", "baseRevision", "headRevision", "changedPaths", "coveredPaths", "uncoveredPaths", "tasks", "signature"],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "status": { "enum": ["VALID", "INVALID"] },
+    "level": { "enum": ["PROCESSED", "VERIFIED", "ATTESTED"] },
+    "revisionProvider": { "type": "string", "minLength": 1 },
+    "baseRevision": { "type": "string", "minLength": 1 },
+    "headRevision": { "type": "string", "minLength": 1 },
+    "changedPaths": { "type": "integer", "minimum": 0 },
+    "coveredPaths": { "type": "integer", "minimum": 0 },
+    "uncoveredPaths": { "type": "array", "items": { "type": "string" } },
+    "tasks": { "type": "integer", "minimum": 0 },
+    "overlaps": { "type": "array", "items": { "type": "object" } },
+    "errors": { "type": "array", "items": { "type": "object" } },
+    "signature": {
+      "type": "object",
+      "required": ["required", "status"],
+      "additionalProperties": false,
+      "properties": {
+        "required": { "type": "boolean" },
+        "status": { "enum": ["UNSIGNED", "VALID", "INVALID", "UNAVAILABLE", "UNTRUSTED", "NOT_CHECKED"] },
+        "provider": { "type": "string" },
+        "identity": { "type": "string" },
+        "issuer": { "type": "string" }
+      }
+    }
+  }
+}