@citeark/agent 0.3.20

package/protocol/examples/arkgraph/training-evaluation.json

@@ -0,0 +1,443 @@
+{
+  "artifact": {
+    "id": "urn:example:arkgraph-test-lab:artifact-training-evaluation",
+    "createdAt": "2026-09-27T00:02:00Z",
+    "createdBy": "urn:example:arkgraph-test-lab:lab"
+  },
+  "profiles": [],
+  "roots": [
+    {
+      "role": "researchTarget",
+      "ref": "urn:example:arkgraph-test-lab:claim"
+    }
+  ],
+  "records": [
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/agent.schema.json",
+      "id": "urn:example:arkgraph-test-lab:lab",
+      "type": "https://citeark.com/cap/record-types/agent/2.0",
+      "role": "agent",
+      "fixture": true,
+      "name": "Synthetic example laboratory",
+      "kind": "organization"
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:data",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "dataset",
+      "fixture": true,
+      "title": "Fixed synthetic test split",
+      "identity": {
+        "uri": "https://example.invalid/dataset/test-v1",
+        "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      },
+      "basis": "declared"
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:method",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "procedure",
+      "fixture": true,
+      "title": "Evaluate fixed model on fixed test split",
+      "version": "2",
+      "instructions": "Compute accuracy. This fixture executes no commands."
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/assertion.schema.json",
+      "id": "urn:example:arkgraph-test-lab:claim",
+      "type": "https://citeark.com/cap/record-types/assertion/2.0",
+      "role": "claim",
+      "fixture": true,
+      "statement": {
+        "value": "Model accuracy exceeds 0.80 on this test split."
+      },
+      "scope": {
+        "dataset": "test-v1"
+      }
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/activity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:evaluation",
+      "type": "https://citeark.com/cap/record-types/activity/2.0",
+      "role": "evaluation",
+      "fixture": true,
+      "status": "succeeded",
+      "startedAt": "2026-09-27T00:00:00Z",
+      "endedAt": "2026-09-27T00:01:00Z",
+      "gaps": []
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:observation",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "observation",
+      "fixture": true,
+      "kind": "measurement",
+      "basis": "observed",
+      "measurement": {
+        "metric": "accuracy",
+        "value": {
+          "decimal": "0.82"
+        },
+        "unit": "1",
+        "scope": {
+          "split": "test-v1",
+          "samples": 100
+        },
+        "uncertainty": {
+          "status": "not-estimated"
+        },
+        "method": {
+          "description": "Correct predictions divided by observed samples"
+        }
+      },
+      "limitations": [
+        "Synthetic protocol fixture"
+      ]
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/assertion.schema.json",
+      "id": "urn:example:arkgraph-test-lab:assessment",
+      "type": "https://citeark.com/cap/record-types/assertion/2.0",
+      "role": "assessment",
+      "fixture": true,
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:claim"
+      },
+      "evidence": [
+        {
+          "ref": "urn:example:arkgraph-test-lab:observation"
+        }
+      ],
+      "conclusion": "supports",
+      "method": {
+        "type": "QualitativeReview",
+        "description": "Compare fixed threshold and actual scope."
+      },
+      "performedBy": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "scope": {
+        "split": "test-v1",
+        "coverage": "complete"
+      },
+      "limitations": [
+        "Synthetic result, not scientific evidence"
+      ]
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:uses-data",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "used",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:evaluation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:data"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:follows-method",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "follows",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:evaluation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:method"
+      },
+      "basis": "declared",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:produces-observation",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "generated",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:evaluation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:observation"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:method-target",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "plannedFor",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:method"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:claim"
+      },
+      "basis": "declared",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:evaluation-agent",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "associatedWith",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:evaluation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:paper",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "source-work",
+      "fixture": true,
+      "title": "Synthetic reference report",
+      "sources": [
+        {
+          "kind": "paper",
+          "uri": "https://example.invalid/synthetic-paper",
+          "integrity": "unverified",
+          "rights": {
+            "statement": "Test fixture"
+          }
+        }
+      ]
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:reported-claim",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "assertedIn",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:claim"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:paper"
+      },
+      "basis": "declared",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {
+        "selector": {
+          "type": "TextQuoteSelector",
+          "exact": "Accuracy exceeds 0.80."
+        }
+      }
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:training-data",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "dataset",
+      "fixture": true,
+      "title": "Fixed training split",
+      "basis": "declared"
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/activity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:training",
+      "type": "https://citeark.com/cap/record-types/activity/2.0",
+      "role": "training",
+      "fixture": true,
+      "status": "succeeded",
+      "startedAt": "2026-09-26T00:00:00Z",
+      "endedAt": "2026-09-26T01:00:00Z"
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/entity.schema.json",
+      "id": "urn:example:arkgraph-test-lab:checkpoint",
+      "type": "https://citeark.com/cap/record-types/entity/2.0",
+      "role": "checkpoint",
+      "fixture": true,
+      "title": "Checkpoint created in this route",
+      "basis": "observed"
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:train-data",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "used",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:training"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:training-data"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:train-model",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "generated",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:training"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:checkpoint"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/assertion.schema.json",
+      "id": "urn:example:arkgraph-test-lab:claim-calibration",
+      "type": "https://citeark.com/cap/record-types/assertion/2.0",
+      "role": "claim",
+      "fixture": true,
+      "statement": {
+        "value": "Calibration is adequate."
+      }
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/assertion.schema.json",
+      "id": "urn:example:arkgraph-test-lab:assessment-conflict",
+      "type": "https://citeark.com/cap/record-types/assertion/2.0",
+      "role": "assessment",
+      "fixture": true,
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:claim"
+      },
+      "evidence": [
+        {
+          "ref": "urn:example:arkgraph-test-lab:observation"
+        }
+      ],
+      "conclusion": "challenges",
+      "method": {
+        "type": "QualitativeReview",
+        "description": "Uncertainty is not estimated."
+      },
+      "performedBy": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "scope": {
+        "split": "test-v1"
+      },
+      "limitations": [
+        "Uncertainty missing"
+      ]
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:second-target",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "plannedFor",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:method"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:claim-calibration"
+      },
+      "basis": "declared",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:second-evidence",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "evidenceFor",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:observation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:claim-calibration"
+      },
+      "basis": "inferred",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    },
+    {
+      "$schema": "https://citeark.com/schemas/cap/v2/relation.schema.json",
+      "id": "urn:example:arkgraph-test-lab:uses-checkpoint",
+      "type": "https://citeark.com/cap/record-types/relation/2.0",
+      "role": "provenance",
+      "fixture": true,
+      "predicate": "used",
+      "subject": {
+        "ref": "urn:example:arkgraph-test-lab:evaluation"
+      },
+      "object": {
+        "ref": "urn:example:arkgraph-test-lab:checkpoint"
+      },
+      "basis": "observed",
+      "attributedTo": {
+        "ref": "urn:example:arkgraph-test-lab:lab"
+      },
+      "sources": [],
+      "qualifiers": {}
+    }
+  ],
+  "blobs": [],
+  "relations": []
+}

package/protocol/profiles/agent-trace.md

@@ -0,0 +1,16 @@
+# CAP Agent Trace Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/agent-trace/2.0`
+
+This Profile requires an `execution-trace` Blob. The default representation is
+NDJSON with strictly increasing `sequence` and valid `eventType`, `occurredAt`
+and `observedAt` fields.
+
+Events record observable prompts approved for publication, Agent and model
+identity, tool calls, commands, file changes, errors, retries and explicit
+structured decisions. CAP never requires hidden chain-of-thought.
+
+Each event SHOULD identify its actor and Execution. Parent relationships, inputs,
+outputs, trace/span identifiers and attributes MAY follow OpenTelemetry
+conventions. The observation source distinguishes control-plane capture from an
+Agent or user declaration.

package/protocol/profiles/computational-run.md

@@ -0,0 +1,16 @@
+# CAP Computational Run Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/computational-run/2.0`
+
+This Profile requires an Agent, a procedure Entity (Experiment), an execution
+Activity (Execution), and observation Entities (Evidence). The
+Execution binds the prospective public contract to what actually ran, including
+actors, environment, code state, inputs, outputs, timestamps and exit state.
+
+The public contract MUST be the exact blinded input disclosed to the execution
+Agent and MUST NOT contain reported targets, tolerances, acceptance criteria or
+the private policy reveal. An Execution MUST NOT carry a scientific verdict.
+
+Evidence derived by a deterministic parser records its parser identity,
+version, configuration, implementation digest when available and digest-bound
+raw inputs. Runner-observed and actor-declared events remain distinguishable.

package/protocol/profiles/core.md

@@ -0,0 +1,15 @@
+# CAP Core Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/core/2.0`
+
+Every CAP 2.0 Artifact declares this Profile. It requires a canonical
+`cap-manifest.json`, at least one typed Record, one root, content digests, safe
+paths, resolvable same-Artifact references and immutable cross-Artifact
+references.
+
+Core establishes structural and content integrity only. It does not require an
+execution, Assessment, signature, public identity, online Registry or fully
+materialized external Blob.
+
+Conformance reports structural validity, Record and embedded Blob integrity,
+external/withheld Blob counts and understood/unknown Profiles separately.

package/protocol/profiles/public-bundle.md

@@ -0,0 +1,18 @@
+# CAP Public Bundle Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/public-bundle/2.0`
+
+This Profile requires:
+
+- at least one cryptographically valid root Artifact Attestation;
+- public metadata and resource-specific rights information;
+- `ro-crate-metadata.json` as a RO-Crate 1.3 projection;
+- a portable attached `.cap` export.
+
+RO-Crate metadata, previews, locations and detached Attestations are Bundle
+attachments. They can change without changing the CAP Artifact digest. The
+archive SHA-256 detects changes to one exact public transport.
+
+Signature validity does not establish signer trust. Public deployments MAY use
+Sigstore Bundles and transparency logs; private or institutional deployments MAY
+use other DSSE verification material and external trust policies.

package/protocol/profiles/reproduction.md

@@ -0,0 +1,29 @@
+# CAP Reproduction Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/reproduction/2.0`
+
+This Profile requires source-work, procedure and observation Entities; claim and
+assessment Assertions; execution Activities; and participating Agents. The domain
+names SourceWork, Experiment, Evidence, Claim, Assessment and Execution below refer
+to these role projections, not additional primitive types. The profile evaluates
+one or more bounded Claims without asserting paper-wide truth.
+
+When the execution was scheduled from a Research Plan Artifact, the Manifest
+MUST contain exactly one `reproduces` relation to that plan's Artifact digest.
+A registry MUST reject the Reproduction Artifact when the relation does not
+match the Research Plan already admitted for the campaign.
+
+Before execution, the producer commits to the private verification policy with
+`citeark-policy-commitment-v1`, a high-entropy nonce and RFC 8785 canonical JSON.
+The later Assessment reveals the policy and nonce. A verifier rejects any
+mismatch with both `method.policyCommitment` and the referenced Experiment's
+public commitment when that Experiment is locally available.
+
+Assessment conclusions are `supports`, `challenges`, `contradicts` or
+`inconclusive`. Missing trustworthy Evidence or failed integrity produces an
+inconclusive assessment. `notAssessed` belongs to a Registry coverage view and
+is not an Assessment conclusion.
+
+Operator, implementation, environment, hardware and data independence are
+recorded separately. A valid Reproduction Artifact does not imply independent
+repetition unless those dimensions and their provenance support that statement.

package/protocol/profiles/research-compilation.md

@@ -0,0 +1,44 @@
+# Research Compilation Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/research-compilation/2.0`
+
+This Profile represents one compiler's source-grounded interpretation before a
+planner chooses experiments or an executor runs them. The compiler MAY be a
+CiteArk component, another project such as Paper2Agent, a laboratory pipeline,
+or a human-operated tool.
+
+SourceWork, Experiment and Evidence denote Entities with roles `source-work`,
+`procedure` and `observation`; Claim and Assessment denote Assertions with roles
+`claim` and `assessment`; Execution denotes an Activity with role `execution`.
+These are domain projections over the five CAP primitives.
+
+An Artifact declaring this Profile:
+
+- MUST contain the compiler as an Agent and exactly one SourceWork;
+- MUST root the SourceWork as `primarySourceWork` and every normalized Claim it
+  contains as `compiledClaim`;
+- MUST contain a Blob with the role `compiler-output`, preserving the
+  producer-native output; this Blob MAY be JSON, an archive or another declared
+  media type;
+- MUST contain an embedded JSON Blob with the role `research-inventory` for the
+  normalized Planner handoff; it MAY be the same Blob as `compiler-output`;
+- MAY contain scientific material Entities and source-declared observation Entities, including each reported measurement;
+- MAY contain source-reported `research-activity` Activities with `basis: declared`, a declared compiler origin, `status: unknown`, and nonempty fixed-source context. They describe what a paper says happened, never an execution captured by this compiler;
+- MAY retain source-reported evaluation text as `source-assessment` Assertions, without a reproduction verdict;
+- MUST NOT contain executable experiment procedures, current-run Activities, newly generated observations or reproduction Assessments;
+- MUST present its Claims as the compiler's interpretation of fixed sources,
+  not as accepted scientific truth.
+
+Different compilers MAY publish conflicting Artifacts for the same SourceWork.
+A Registry MUST preserve their producer identities and Artifact digests rather
+than silently merging them into one canonical scientific record.
+
+A later Research Plan MAY use one or more `derivedFrom` relations to identify
+the exact Research Compilation Artifacts used by its planner. A valid
+Compilation Artifact does not by itself authorize execution or establish that
+its compiler is trusted by a particular Registry.
+
+The Profile standardizes SourceWork, Claim, explicitly identified research objects and source-declared observations.
+Compiler-specific tools, workflows and diagnostics remain in the
+`compiler-output` Blob until interoperability needs justify additional Record
+types.

package/protocol/profiles/research-plan.md

@@ -0,0 +1,39 @@
+# Research Plan Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/research-plan/2.0`
+
+This Profile represents an immutable plan produced after source compilation and
+before any reproduction execution begins. A planner MAY consume one or more
+Research Compilation Artifacts from different producers.
+
+SourceWork, Experiment and Evidence denote Entities with roles `source-work`,
+`procedure` and `observation`; Claim and Assessment denote Assertions with roles
+`claim` and `assessment`; Execution denotes an Activity with role `execution`.
+These are domain projections over the five CAP primitives.
+
+An Artifact declaring this Profile:
+
+- MUST contain an Agent, exactly one SourceWork and at least one Claim;
+- MUST root the SourceWork as `primarySourceWork` and every Claim as
+  `plannedClaim`;
+- MUST root every included Experiment as `plannedExperiment`;
+- MAY contain declared Evidence for values reported by the SourceWork;
+- MUST mark such Evidence with `basis: declared` and MUST NOT present it as an
+  independently observed result;
+- MUST NOT contain Execution or Assessments;
+- SHOULD use `derivedFrom` relations to bind every Research Compilation
+  Artifact used to make the plan;
+- MAY omit `Experiment.publicContract.verificationPolicyCommitment`, because
+  the private verification policy is created only when that Experiment is
+  scheduled for execution.
+
+A public Research Plan Bundle MUST also satisfy the Public Bundle Profile and
+carry a detached Attestation from its planner. A Registry applies its own trust
+and execution-admission policy after protocol verification. An internal
+compiler or planner checkpoint is not a Research Plan Artifact and cannot be
+imported as scientific content.
+
+A later Reproduction Artifact MUST use a `reproduces` Manifest relation to bind
+the Research Plan Artifact digest. Its execution-specific Experiment MUST bind
+the pre-execution verification policy commitment required by the Reproduction
+Profile.

package/protocol/profiles/restricted-evidence.md

@@ -0,0 +1,15 @@
+# CAP Restricted Evidence Profile 2.0
+
+Profile URI: `https://citeark.com/cap/profiles/restricted-evidence/2.0`
+
+This Profile allows sensitive, licensed or very large evidence to remain
+external or withheld while preserving an immutable digest commitment.
+
+Every restricted Blob declares digest, byte size, media type, availability,
+resource-specific rights and an `accessPolicy`. Mutable retrieval endpoints are
+stored in `cap-locations.json` and are not Artifact identity.
+
+A verifier reports structural conformance separately from materialization. It
+MUST NOT claim to have verified the unavailable Blob bytes. A controlled runner
+MAY later materialize and verify the bytes or publish a new Attestation without
+changing the original Artifact.