@colophon-claims/verify 0.0.0 → 0.2.0

package/dist/profile/inspect-manifest.d.ts

@@ -0,0 +1,706 @@
+import { z } from "zod";
+import { type VerdictRule } from "@jinn-network/task-execution-profiles";
+export declare const INSPECT_ADAPTER_ID: "inspect";
+export declare const SUPPORTED_INSPECT_VERSION: "0.3.255";
+export declare const SUPPORTED_INSPECT_WHEEL_SHA256: "958e773a8d0cc8873314e3f96d1143cbb4e0b9e4bacc2cbec6b4d5576ceecf2c";
+export declare const SUPPORTED_INSPECT_EVALS_VERSION: "0.16.0";
+export declare const SUPPORTED_OPENAI_SDK_VERSION: "2.53.0";
+export declare const SUPPORTED_OCI_PYTHON_VERSION: "3.11.9";
+export declare const SUPPORTED_OCI_PLATFORM: "linux/amd64";
+export declare const INSPECT_SELECTION_SCHEMA: "jinn.network/benchmark-product/inspect-selection/1";
+export declare const INSPECT_SANDBOX_SELECTION_SCHEMA: "jinn.network/benchmark-product/inspect-selection/2";
+export declare const INSPECT_MULTI_SCORER_SELECTION_SCHEMA: "jinn.network/benchmark-product/inspect-selection/3";
+export declare const INSPECT_MULTI_SCORER_SANDBOX_SELECTION_SCHEMA: "jinn.network/benchmark-product/inspect-selection/4";
+export declare const INSPECT_SANDBOX_PROTOCOL: "jinn.network/inspect-sandbox-host/1";
+export declare const INSPECT_SANDBOX_PROVIDER: "jinn-oci";
+export declare const INSPECT_SANDBOX_PACKAGE_VERSION: "0.1.0";
+export declare const INSPECT_ARM_REQUIREMENT_KEY: "jinn.network/inspect-arm";
+export declare const InspectScoreProjectionSchema: z.ZodObject<{
+    measurementName: z.ZodString;
+    scorerName: z.ZodString;
+    subScoreKey: z.ZodOptional<z.ZodString>;
+    passValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+}, z.core.$strict>;
+export type InspectScoreProjection = z.infer<typeof InspectScoreProjectionSchema>;
+export declare const InspectScoringRequestSchema: z.ZodObject<{
+    projections: z.ZodArray<z.ZodObject<{
+        measurementName: z.ZodString;
+        scorerName: z.ZodString;
+        subScoreKey: z.ZodOptional<z.ZodString>;
+        passValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    }, z.core.$strict>>;
+    verdictRule: z.ZodType<VerdictRule, unknown, z.core.$ZodTypeInternals<VerdictRule, unknown>>;
+}, z.core.$strict>;
+export type InspectScoringRequest = z.infer<typeof InspectScoringRequestSchema>;
+export type InspectScoringSelectionRequest = {
+    readonly scorer: {
+        readonly name: string;
+        readonly passValue: string | number | boolean | null;
+    };
+    readonly scoring?: never;
+} | {
+    readonly scorer?: never;
+    readonly scoring: InspectScoringRequest;
+};
+export declare const InspectArmConfigurationSchema: z.ZodObject<{
+    armId: z.ZodString;
+    model: z.ZodString;
+    modelArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+    modelRoles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    provider: z.ZodOptional<z.ZodObject<{
+        surface: z.ZodLiteral<"openai-responses">;
+        upstreamModel: z.ZodLiteral<"gpt-5.6-luna">;
+        reasoningEffort: z.ZodEnum<{
+            low: "low";
+            none: "none";
+        }>;
+        maxOutputTokens: z.ZodLiteral<128>;
+        store: z.ZodLiteral<false>;
+        background: z.ZodLiteral<false>;
+        stream: z.ZodLiteral<false>;
+        serviceTier: z.ZodLiteral<"default">;
+        tools: z.ZodTuple<[], null>;
+        fallbackModels: z.ZodTuple<[], null>;
+        retries: z.ZodLiteral<0>;
+        persistedConversation: z.ZodLiteral<false>;
+        metadata: z.ZodNull;
+        promptCacheIdentifier: z.ZodNull;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const InspectRunOptionsSchema: z.ZodObject<{
+    sampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    maxSamples: z.ZodOptional<z.ZodNumber>;
+    maxSubprocesses: z.ZodOptional<z.ZodNumber>;
+    maxSandboxes: z.ZodOptional<z.ZodNumber>;
+    retryOnError: z.ZodOptional<z.ZodNumber>;
+    failOnError: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodNumber]>>;
+    messageLimit: z.ZodOptional<z.ZodNumber>;
+    tokenLimit: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    timeLimit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const InspectSandboxPolicySchema: z.ZodObject<{
+    provider: z.ZodLiteral<"jinn-oci">;
+    platform: z.ZodLiteral<"linux/amd64">;
+    user: z.ZodLiteral<"65532:65532">;
+    readOnlyRoot: z.ZodLiteral<true>;
+    network: z.ZodLiteral<"none">;
+    capabilities: z.ZodTuple<[], null>;
+    noNewPrivileges: z.ZodLiteral<true>;
+    cpuCount: z.ZodLiteral<1>;
+    memoryBytes: z.ZodLiteral<536870912>;
+    pidsLimit: z.ZodLiteral<32>;
+    scratchBytes: z.ZodLiteral<268435456>;
+    maxEnvironments: z.ZodLiteral<1>;
+    maxOperations: z.ZodLiteral<64>;
+    commandTimeoutSeconds: z.ZodLiteral<30>;
+    totalTimeoutSeconds: z.ZodLiteral<120>;
+    maxInputBytes: z.ZodLiteral<number>;
+    maxOutputBytes: z.ZodLiteral<number>;
+    maxReadFileBytes: z.ZodLiteral<number>;
+}, z.core.$strict>;
+export declare const InspectOciRuntimeIdentitySchema: z.ZodObject<{
+    kind: z.ZodLiteral<"oci">;
+    imageDigest: z.ZodString;
+    platform: z.ZodLiteral<"linux/amd64">;
+    inspectEvalsVersion: z.ZodLiteral<"0.16.0">;
+    openaiSdkVersion: z.ZodLiteral<"2.53.0">;
+    workerSourceSha256: z.ZodString;
+    runtimeHostSourceSha256: z.ZodString;
+    brokerSourceSha256: z.ZodString;
+    modelProviderSourceSha256: z.ZodString;
+    dockerExecutableSha256: z.ZodString;
+    dockerEngineVersion: z.ZodString;
+    dockerApiVersion: z.ZodString;
+    datasetCacheSha256: z.ZodString;
+    isolation: z.ZodObject<{
+        readOnlyRoot: z.ZodLiteral<true>;
+        network: z.ZodEnum<{
+            none: "none";
+            "broker-only": "broker-only";
+        }>;
+        capabilities: z.ZodTuple<[], null>;
+        noNewPrivileges: z.ZodLiteral<true>;
+        cpuCount: z.ZodNumber;
+        memoryBytes: z.ZodNumber;
+        pidsLimit: z.ZodNumber;
+        scratchBytes: z.ZodNumber;
+        user: z.ZodString;
+        mounts: z.ZodUnion<readonly [z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">], null>, z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">, z.ZodLiteral<"broker-capability:ro">], null>]>;
+    }, z.core.$strict>;
+    broker: z.ZodOptional<z.ZodObject<{
+        protocol: z.ZodLiteral<"jinn.network/model-broker/1">;
+        requestEndpoint: z.ZodLiteral<"https://api.openai.com/v1/responses">;
+        network: z.ZodLiteral<"bridge-plus-private-internal">;
+        secretMount: z.ZodLiteral<"credential-volume:/run/secrets:ro">;
+        capabilityMount: z.ZodLiteral<"capability-volume:/run/jinn:ro">;
+        readOnlyRoot: z.ZodLiteral<true>;
+        capabilities: z.ZodTuple<[], null>;
+        noNewPrivileges: z.ZodLiteral<true>;
+        cpuCount: z.ZodLiteral<1>;
+        memoryBytes: z.ZodLiteral<268435456>;
+        pidsLimit: z.ZodLiteral<32>;
+        scratchBytes: z.ZodLiteral<67108864>;
+    }, z.core.$strict>>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        protocol: z.ZodLiteral<"jinn.network/inspect-sandbox-host/1">;
+        provider: z.ZodLiteral<"jinn-oci">;
+        packageVersion: z.ZodLiteral<"0.1.0">;
+        providerSourceSha256: z.ZodString;
+        controllerSourceSha256: z.ZodString;
+        imageDigest: z.ZodString;
+        platform: z.ZodLiteral<"linux/amd64">;
+        policySha256: z.ZodString;
+        policy: z.ZodObject<{
+            provider: z.ZodLiteral<"jinn-oci">;
+            platform: z.ZodLiteral<"linux/amd64">;
+            user: z.ZodLiteral<"65532:65532">;
+            readOnlyRoot: z.ZodLiteral<true>;
+            network: z.ZodLiteral<"none">;
+            capabilities: z.ZodTuple<[], null>;
+            noNewPrivileges: z.ZodLiteral<true>;
+            cpuCount: z.ZodLiteral<1>;
+            memoryBytes: z.ZodLiteral<536870912>;
+            pidsLimit: z.ZodLiteral<32>;
+            scratchBytes: z.ZodLiteral<268435456>;
+            maxEnvironments: z.ZodLiteral<1>;
+            maxOperations: z.ZodLiteral<64>;
+            commandTimeoutSeconds: z.ZodLiteral<30>;
+            totalTimeoutSeconds: z.ZodLiteral<120>;
+            maxInputBytes: z.ZodLiteral<number>;
+            maxOutputBytes: z.ZodLiteral<number>;
+            maxReadFileBytes: z.ZodLiteral<number>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+declare const MultiScorerInspectSelectionManifestSchema: z.ZodObject<{
+    scorers: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        definition: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    }, z.core.$strict>>;
+    scoring: z.ZodObject<{
+        projections: z.ZodArray<z.ZodObject<{
+            measurementName: z.ZodString;
+            scorerName: z.ZodString;
+            subScoreKey: z.ZodOptional<z.ZodString>;
+            passValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>>;
+        verdictRule: z.ZodType<VerdictRule, unknown, z.core.$ZodTypeInternals<VerdictRule, unknown>>;
+        inspectMetrics: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        inspectEpochReducers: z.ZodNullable<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    runtime: z.ZodObject<{
+        adapterVersion: z.ZodLiteral<"1">;
+        workerSha256: z.ZodString;
+        inspectVersion: z.ZodLiteral<"0.3.255">;
+        inspectWheelSha256: z.ZodLiteral<"958e773a8d0cc8873314e3f96d1143cbb4e0b9e4bacc2cbec6b4d5576ceecf2c">;
+        pythonVersion: z.ZodString;
+        pythonExecutableSha256: z.ZodString;
+        pythonEnvironmentSha256: z.ZodString;
+        inspectDistributionSha256: z.ZodString;
+        execution: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodLiteral<"oci">;
+            imageDigest: z.ZodString;
+            platform: z.ZodLiteral<"linux/amd64">;
+            inspectEvalsVersion: z.ZodLiteral<"0.16.0">;
+            openaiSdkVersion: z.ZodLiteral<"2.53.0">;
+            workerSourceSha256: z.ZodString;
+            runtimeHostSourceSha256: z.ZodString;
+            brokerSourceSha256: z.ZodString;
+            modelProviderSourceSha256: z.ZodString;
+            dockerExecutableSha256: z.ZodString;
+            dockerEngineVersion: z.ZodString;
+            dockerApiVersion: z.ZodString;
+            datasetCacheSha256: z.ZodString;
+            isolation: z.ZodObject<{
+                readOnlyRoot: z.ZodLiteral<true>;
+                network: z.ZodEnum<{
+                    none: "none";
+                    "broker-only": "broker-only";
+                }>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodNumber;
+                memoryBytes: z.ZodNumber;
+                pidsLimit: z.ZodNumber;
+                scratchBytes: z.ZodNumber;
+                user: z.ZodString;
+                mounts: z.ZodUnion<readonly [z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">], null>, z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">, z.ZodLiteral<"broker-capability:ro">], null>]>;
+            }, z.core.$strict>;
+            broker: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/model-broker/1">;
+                requestEndpoint: z.ZodLiteral<"https://api.openai.com/v1/responses">;
+                network: z.ZodLiteral<"bridge-plus-private-internal">;
+                secretMount: z.ZodLiteral<"credential-volume:/run/secrets:ro">;
+                capabilityMount: z.ZodLiteral<"capability-volume:/run/jinn:ro">;
+                readOnlyRoot: z.ZodLiteral<true>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodLiteral<1>;
+                memoryBytes: z.ZodLiteral<268435456>;
+                pidsLimit: z.ZodLiteral<32>;
+                scratchBytes: z.ZodLiteral<67108864>;
+            }, z.core.$strict>>;
+            sandbox: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/inspect-sandbox-host/1">;
+                provider: z.ZodLiteral<"jinn-oci">;
+                packageVersion: z.ZodLiteral<"0.1.0">;
+                providerSourceSha256: z.ZodString;
+                controllerSourceSha256: z.ZodString;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+                policy: z.ZodObject<{
+                    provider: z.ZodLiteral<"jinn-oci">;
+                    platform: z.ZodLiteral<"linux/amd64">;
+                    user: z.ZodLiteral<"65532:65532">;
+                    readOnlyRoot: z.ZodLiteral<true>;
+                    network: z.ZodLiteral<"none">;
+                    capabilities: z.ZodTuple<[], null>;
+                    noNewPrivileges: z.ZodLiteral<true>;
+                    cpuCount: z.ZodLiteral<1>;
+                    memoryBytes: z.ZodLiteral<536870912>;
+                    pidsLimit: z.ZodLiteral<32>;
+                    scratchBytes: z.ZodLiteral<268435456>;
+                    maxEnvironments: z.ZodLiteral<1>;
+                    maxOperations: z.ZodLiteral<64>;
+                    commandTimeoutSeconds: z.ZodLiteral<30>;
+                    totalTimeoutSeconds: z.ZodLiteral<120>;
+                    maxInputBytes: z.ZodLiteral<number>;
+                    maxOutputBytes: z.ZodLiteral<number>;
+                    maxReadFileBytes: z.ZodLiteral<number>;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>;
+    task: z.ZodObject<{
+        reference: z.ZodString;
+        args: z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        resolvedName: z.ZodString;
+        resolvedVersion: z.ZodNullable<z.ZodString>;
+        declaredSandbox: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"docker">;
+            config: z.ZodNull;
+        }, z.core.$strict>>;
+        resolvedSandbox: z.ZodUnion<readonly [z.ZodNull, z.ZodObject<{
+            type: z.ZodLiteral<"jinn-oci">;
+            config: z.ZodObject<{
+                schema: z.ZodLiteral<"jinn.network/benchmark-product/inspect-sandbox/1">;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>]>;
+        source: z.ZodObject<{
+            kind: z.ZodEnum<{
+                "project-file": "project-file";
+                "installed-package": "installed-package";
+            }>;
+            path: z.ZodString;
+            sha256: z.ZodString;
+            projectTreeSha256: z.ZodOptional<z.ZodString>;
+            distribution: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        dataset: z.ZodObject<{
+            name: z.ZodNullable<z.ZodString>;
+            location: z.ZodNullable<z.ZodString>;
+            samples: z.ZodNullable<z.ZodNumber>;
+            selectedSampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            orderedSampleSha256: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    arms: z.ZodArray<z.ZodObject<{
+        armId: z.ZodString;
+        model: z.ZodString;
+        modelArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        modelRoles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodLiteral<"openai-responses">;
+            upstreamModel: z.ZodLiteral<"gpt-5.6-luna">;
+            reasoningEffort: z.ZodEnum<{
+                low: "low";
+                none: "none";
+            }>;
+            maxOutputTokens: z.ZodLiteral<128>;
+            store: z.ZodLiteral<false>;
+            background: z.ZodLiteral<false>;
+            stream: z.ZodLiteral<false>;
+            serviceTier: z.ZodLiteral<"default">;
+            tools: z.ZodTuple<[], null>;
+            fallbackModels: z.ZodTuple<[], null>;
+            retries: z.ZodLiteral<0>;
+            persistedConversation: z.ZodLiteral<false>;
+            metadata: z.ZodNull;
+            promptCacheIdentifier: z.ZodNull;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    runOptions: z.ZodObject<{
+        sampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        maxSamples: z.ZodOptional<z.ZodNumber>;
+        maxSubprocesses: z.ZodOptional<z.ZodNumber>;
+        maxSandboxes: z.ZodOptional<z.ZodNumber>;
+        retryOnError: z.ZodOptional<z.ZodNumber>;
+        failOnError: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodNumber]>>;
+        messageLimit: z.ZodOptional<z.ZodNumber>;
+        tokenLimit: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        timeLimit: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    schema: z.ZodUnion<readonly [z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/3">, z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/4">]>;
+}, z.core.$strict>;
+export declare const InspectSelectionManifestSchema: z.ZodUnion<readonly [z.ZodObject<{
+    scorer: z.ZodObject<{
+        name: z.ZodString;
+        passValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        definition: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    }, z.core.$strict>;
+    runtime: z.ZodObject<{
+        adapterVersion: z.ZodLiteral<"1">;
+        workerSha256: z.ZodString;
+        inspectVersion: z.ZodLiteral<"0.3.255">;
+        inspectWheelSha256: z.ZodLiteral<"958e773a8d0cc8873314e3f96d1143cbb4e0b9e4bacc2cbec6b4d5576ceecf2c">;
+        pythonVersion: z.ZodString;
+        pythonExecutableSha256: z.ZodString;
+        pythonEnvironmentSha256: z.ZodString;
+        inspectDistributionSha256: z.ZodString;
+        execution: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodLiteral<"oci">;
+            imageDigest: z.ZodString;
+            platform: z.ZodLiteral<"linux/amd64">;
+            inspectEvalsVersion: z.ZodLiteral<"0.16.0">;
+            openaiSdkVersion: z.ZodLiteral<"2.53.0">;
+            workerSourceSha256: z.ZodString;
+            runtimeHostSourceSha256: z.ZodString;
+            brokerSourceSha256: z.ZodString;
+            modelProviderSourceSha256: z.ZodString;
+            dockerExecutableSha256: z.ZodString;
+            dockerEngineVersion: z.ZodString;
+            dockerApiVersion: z.ZodString;
+            datasetCacheSha256: z.ZodString;
+            isolation: z.ZodObject<{
+                readOnlyRoot: z.ZodLiteral<true>;
+                network: z.ZodEnum<{
+                    none: "none";
+                    "broker-only": "broker-only";
+                }>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodNumber;
+                memoryBytes: z.ZodNumber;
+                pidsLimit: z.ZodNumber;
+                scratchBytes: z.ZodNumber;
+                user: z.ZodString;
+                mounts: z.ZodUnion<readonly [z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">], null>, z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">, z.ZodLiteral<"broker-capability:ro">], null>]>;
+            }, z.core.$strict>;
+            broker: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/model-broker/1">;
+                requestEndpoint: z.ZodLiteral<"https://api.openai.com/v1/responses">;
+                network: z.ZodLiteral<"bridge-plus-private-internal">;
+                secretMount: z.ZodLiteral<"credential-volume:/run/secrets:ro">;
+                capabilityMount: z.ZodLiteral<"capability-volume:/run/jinn:ro">;
+                readOnlyRoot: z.ZodLiteral<true>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodLiteral<1>;
+                memoryBytes: z.ZodLiteral<268435456>;
+                pidsLimit: z.ZodLiteral<32>;
+                scratchBytes: z.ZodLiteral<67108864>;
+            }, z.core.$strict>>;
+            sandbox: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/inspect-sandbox-host/1">;
+                provider: z.ZodLiteral<"jinn-oci">;
+                packageVersion: z.ZodLiteral<"0.1.0">;
+                providerSourceSha256: z.ZodString;
+                controllerSourceSha256: z.ZodString;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+                policy: z.ZodObject<{
+                    provider: z.ZodLiteral<"jinn-oci">;
+                    platform: z.ZodLiteral<"linux/amd64">;
+                    user: z.ZodLiteral<"65532:65532">;
+                    readOnlyRoot: z.ZodLiteral<true>;
+                    network: z.ZodLiteral<"none">;
+                    capabilities: z.ZodTuple<[], null>;
+                    noNewPrivileges: z.ZodLiteral<true>;
+                    cpuCount: z.ZodLiteral<1>;
+                    memoryBytes: z.ZodLiteral<536870912>;
+                    pidsLimit: z.ZodLiteral<32>;
+                    scratchBytes: z.ZodLiteral<268435456>;
+                    maxEnvironments: z.ZodLiteral<1>;
+                    maxOperations: z.ZodLiteral<64>;
+                    commandTimeoutSeconds: z.ZodLiteral<30>;
+                    totalTimeoutSeconds: z.ZodLiteral<120>;
+                    maxInputBytes: z.ZodLiteral<number>;
+                    maxOutputBytes: z.ZodLiteral<number>;
+                    maxReadFileBytes: z.ZodLiteral<number>;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>;
+    task: z.ZodObject<{
+        reference: z.ZodString;
+        args: z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        resolvedName: z.ZodString;
+        resolvedVersion: z.ZodNullable<z.ZodString>;
+        declaredSandbox: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"docker">;
+            config: z.ZodNull;
+        }, z.core.$strict>>;
+        resolvedSandbox: z.ZodUnion<readonly [z.ZodNull, z.ZodObject<{
+            type: z.ZodLiteral<"jinn-oci">;
+            config: z.ZodObject<{
+                schema: z.ZodLiteral<"jinn.network/benchmark-product/inspect-sandbox/1">;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>]>;
+        source: z.ZodObject<{
+            kind: z.ZodEnum<{
+                "project-file": "project-file";
+                "installed-package": "installed-package";
+            }>;
+            path: z.ZodString;
+            sha256: z.ZodString;
+            projectTreeSha256: z.ZodOptional<z.ZodString>;
+            distribution: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        dataset: z.ZodObject<{
+            name: z.ZodNullable<z.ZodString>;
+            location: z.ZodNullable<z.ZodString>;
+            samples: z.ZodNullable<z.ZodNumber>;
+            selectedSampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            orderedSampleSha256: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    arms: z.ZodArray<z.ZodObject<{
+        armId: z.ZodString;
+        model: z.ZodString;
+        modelArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        modelRoles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodLiteral<"openai-responses">;
+            upstreamModel: z.ZodLiteral<"gpt-5.6-luna">;
+            reasoningEffort: z.ZodEnum<{
+                low: "low";
+                none: "none";
+            }>;
+            maxOutputTokens: z.ZodLiteral<128>;
+            store: z.ZodLiteral<false>;
+            background: z.ZodLiteral<false>;
+            stream: z.ZodLiteral<false>;
+            serviceTier: z.ZodLiteral<"default">;
+            tools: z.ZodTuple<[], null>;
+            fallbackModels: z.ZodTuple<[], null>;
+            retries: z.ZodLiteral<0>;
+            persistedConversation: z.ZodLiteral<false>;
+            metadata: z.ZodNull;
+            promptCacheIdentifier: z.ZodNull;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    runOptions: z.ZodObject<{
+        sampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        maxSamples: z.ZodOptional<z.ZodNumber>;
+        maxSubprocesses: z.ZodOptional<z.ZodNumber>;
+        maxSandboxes: z.ZodOptional<z.ZodNumber>;
+        retryOnError: z.ZodOptional<z.ZodNumber>;
+        failOnError: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodNumber]>>;
+        messageLimit: z.ZodOptional<z.ZodNumber>;
+        tokenLimit: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        timeLimit: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    schema: z.ZodUnion<readonly [z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/1">, z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/2">]>;
+}, z.core.$strict>, z.ZodObject<{
+    scorers: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        definition: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    }, z.core.$strict>>;
+    scoring: z.ZodObject<{
+        projections: z.ZodArray<z.ZodObject<{
+            measurementName: z.ZodString;
+            scorerName: z.ZodString;
+            subScoreKey: z.ZodOptional<z.ZodString>;
+            passValue: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>>;
+        verdictRule: z.ZodType<VerdictRule, unknown, z.core.$ZodTypeInternals<VerdictRule, unknown>>;
+        inspectMetrics: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        inspectEpochReducers: z.ZodNullable<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    runtime: z.ZodObject<{
+        adapterVersion: z.ZodLiteral<"1">;
+        workerSha256: z.ZodString;
+        inspectVersion: z.ZodLiteral<"0.3.255">;
+        inspectWheelSha256: z.ZodLiteral<"958e773a8d0cc8873314e3f96d1143cbb4e0b9e4bacc2cbec6b4d5576ceecf2c">;
+        pythonVersion: z.ZodString;
+        pythonExecutableSha256: z.ZodString;
+        pythonEnvironmentSha256: z.ZodString;
+        inspectDistributionSha256: z.ZodString;
+        execution: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodLiteral<"oci">;
+            imageDigest: z.ZodString;
+            platform: z.ZodLiteral<"linux/amd64">;
+            inspectEvalsVersion: z.ZodLiteral<"0.16.0">;
+            openaiSdkVersion: z.ZodLiteral<"2.53.0">;
+            workerSourceSha256: z.ZodString;
+            runtimeHostSourceSha256: z.ZodString;
+            brokerSourceSha256: z.ZodString;
+            modelProviderSourceSha256: z.ZodString;
+            dockerExecutableSha256: z.ZodString;
+            dockerEngineVersion: z.ZodString;
+            dockerApiVersion: z.ZodString;
+            datasetCacheSha256: z.ZodString;
+            isolation: z.ZodObject<{
+                readOnlyRoot: z.ZodLiteral<true>;
+                network: z.ZodEnum<{
+                    none: "none";
+                    "broker-only": "broker-only";
+                }>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodNumber;
+                memoryBytes: z.ZodNumber;
+                pidsLimit: z.ZodNumber;
+                scratchBytes: z.ZodNumber;
+                user: z.ZodString;
+                mounts: z.ZodUnion<readonly [z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">], null>, z.ZodTuple<[z.ZodLiteral<"project:ro">, z.ZodLiteral<"dataset-cache:ro">, z.ZodLiteral<"attempt-input:ro">, z.ZodLiteral<"attempt-output:rw">, z.ZodLiteral<"broker-capability:ro">], null>]>;
+            }, z.core.$strict>;
+            broker: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/model-broker/1">;
+                requestEndpoint: z.ZodLiteral<"https://api.openai.com/v1/responses">;
+                network: z.ZodLiteral<"bridge-plus-private-internal">;
+                secretMount: z.ZodLiteral<"credential-volume:/run/secrets:ro">;
+                capabilityMount: z.ZodLiteral<"capability-volume:/run/jinn:ro">;
+                readOnlyRoot: z.ZodLiteral<true>;
+                capabilities: z.ZodTuple<[], null>;
+                noNewPrivileges: z.ZodLiteral<true>;
+                cpuCount: z.ZodLiteral<1>;
+                memoryBytes: z.ZodLiteral<268435456>;
+                pidsLimit: z.ZodLiteral<32>;
+                scratchBytes: z.ZodLiteral<67108864>;
+            }, z.core.$strict>>;
+            sandbox: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodLiteral<"jinn.network/inspect-sandbox-host/1">;
+                provider: z.ZodLiteral<"jinn-oci">;
+                packageVersion: z.ZodLiteral<"0.1.0">;
+                providerSourceSha256: z.ZodString;
+                controllerSourceSha256: z.ZodString;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+                policy: z.ZodObject<{
+                    provider: z.ZodLiteral<"jinn-oci">;
+                    platform: z.ZodLiteral<"linux/amd64">;
+                    user: z.ZodLiteral<"65532:65532">;
+                    readOnlyRoot: z.ZodLiteral<true>;
+                    network: z.ZodLiteral<"none">;
+                    capabilities: z.ZodTuple<[], null>;
+                    noNewPrivileges: z.ZodLiteral<true>;
+                    cpuCount: z.ZodLiteral<1>;
+                    memoryBytes: z.ZodLiteral<536870912>;
+                    pidsLimit: z.ZodLiteral<32>;
+                    scratchBytes: z.ZodLiteral<268435456>;
+                    maxEnvironments: z.ZodLiteral<1>;
+                    maxOperations: z.ZodLiteral<64>;
+                    commandTimeoutSeconds: z.ZodLiteral<30>;
+                    totalTimeoutSeconds: z.ZodLiteral<120>;
+                    maxInputBytes: z.ZodLiteral<number>;
+                    maxOutputBytes: z.ZodLiteral<number>;
+                    maxReadFileBytes: z.ZodLiteral<number>;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strip>;
+    task: z.ZodObject<{
+        reference: z.ZodString;
+        args: z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+        resolvedName: z.ZodString;
+        resolvedVersion: z.ZodNullable<z.ZodString>;
+        declaredSandbox: z.ZodOptional<z.ZodObject<{
+            type: z.ZodLiteral<"docker">;
+            config: z.ZodNull;
+        }, z.core.$strict>>;
+        resolvedSandbox: z.ZodUnion<readonly [z.ZodNull, z.ZodObject<{
+            type: z.ZodLiteral<"jinn-oci">;
+            config: z.ZodObject<{
+                schema: z.ZodLiteral<"jinn.network/benchmark-product/inspect-sandbox/1">;
+                imageDigest: z.ZodString;
+                platform: z.ZodLiteral<"linux/amd64">;
+                policySha256: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>]>;
+        source: z.ZodObject<{
+            kind: z.ZodEnum<{
+                "project-file": "project-file";
+                "installed-package": "installed-package";
+            }>;
+            path: z.ZodString;
+            sha256: z.ZodString;
+            projectTreeSha256: z.ZodOptional<z.ZodString>;
+            distribution: z.ZodOptional<z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        dataset: z.ZodObject<{
+            name: z.ZodNullable<z.ZodString>;
+            location: z.ZodNullable<z.ZodString>;
+            samples: z.ZodNullable<z.ZodNumber>;
+            selectedSampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            orderedSampleSha256: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    arms: z.ZodArray<z.ZodObject<{
+        armId: z.ZodString;
+        model: z.ZodString;
+        modelArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>>;
+        modelRoles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            surface: z.ZodLiteral<"openai-responses">;
+            upstreamModel: z.ZodLiteral<"gpt-5.6-luna">;
+            reasoningEffort: z.ZodEnum<{
+                low: "low";
+                none: "none";
+            }>;
+            maxOutputTokens: z.ZodLiteral<128>;
+            store: z.ZodLiteral<false>;
+            background: z.ZodLiteral<false>;
+            stream: z.ZodLiteral<false>;
+            serviceTier: z.ZodLiteral<"default">;
+            tools: z.ZodTuple<[], null>;
+            fallbackModels: z.ZodTuple<[], null>;
+            retries: z.ZodLiteral<0>;
+            persistedConversation: z.ZodLiteral<false>;
+            metadata: z.ZodNull;
+            promptCacheIdentifier: z.ZodNull;
+        }, z.core.$strict>>;
+    }, z.core.$strip>>;
+    runOptions: z.ZodObject<{
+        sampleId: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        maxSamples: z.ZodOptional<z.ZodNumber>;
+        maxSubprocesses: z.ZodOptional<z.ZodNumber>;
+        maxSandboxes: z.ZodOptional<z.ZodNumber>;
+        retryOnError: z.ZodOptional<z.ZodNumber>;
+        failOnError: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodNumber]>>;
+        messageLimit: z.ZodOptional<z.ZodNumber>;
+        tokenLimit: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        timeLimit: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    schema: z.ZodUnion<readonly [z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/3">, z.ZodLiteral<"jinn.network/benchmark-product/inspect-selection/4">]>;
+}, z.core.$strict>]>;
+export type InspectArmConfiguration = z.infer<typeof InspectArmConfigurationSchema>;
+export type InspectRunOptions = z.infer<typeof InspectRunOptionsSchema>;
+export type InspectSelectionManifest = z.infer<typeof InspectSelectionManifestSchema>;
+export type InspectMultiScorerSelectionManifest = z.infer<typeof MultiScorerInspectSelectionManifestSchema>;
+export type InspectSandboxPolicy = z.infer<typeof InspectSandboxPolicySchema>;
+export declare function isInspectMultiScorerSelection(manifest: InspectSelectionManifest): manifest is InspectMultiScorerSelectionManifest;
+/** Sealed runtime configuration is public-safe metadata, never a credential carrier. */
+export declare function assertNoSecretLikeConfiguration(value: unknown, path?: string): void;
+export {};