@colophon-claims/verify 0.1.0 → 0.2.1

package/dist/verify.js

@@ -2,16 +2,17 @@ import { createHash, createPublicKey, verify as verifySignature } from "node:cry
 import { verifyReport } from "@jinn-network/benchmarking-aggregate";
 import { verifyEvidenceNativePortableBundle, } from "@jinn-network/benchmarking-evidence";
 import { exportStaticBundle } from "@jinn-network/benchmarking-interop";
-import { cellIdempotencyKey, expectedCellSet, parseBenchmark, parseMatrix, parseReport, parseRun, readRunAnchorIntentExtension, readRunPublicationExtension, } from "@jinn-network/benchmarking-records";
+import { DISCLOSURE_SPECIFICATION_EXTENSION, cellIdempotencyKey, expectedCellSet, parseBenchmark, parseMatrix, parseReport, parseRun, readReportDisclosureExtension, readRunAnchorIntentExtension, readRunPublicationExtension, } from "@jinn-network/benchmarking-records";
 import { verifyMatrix } from "@jinn-network/benchmarking-run";
 import { BINARY_JUDGMENT_INSTRUMENT_REQUIREMENT_KEY, BINARY_JUDGMENT_PROFILE_URI, BinaryJudgmentSnapshotProbeSchema, deriveEvaluationTask, parseBinaryJudgmentAnalysisContext, parseBinaryJudgmentInstrument, parseEvaluationSpec, } from "@jinn-network/task-execution-profiles";
 import { DeliveryRecordSchema, SubmissionRecordSchema, TaskSpecificationSchema } from "@jinn-network/task-execution-protocol";
 import { canonicalJsonBytes, dssePreAuthEncoding, parseExactDsseEnvelope } from "@jinn-network/trust-core";
 import { refuse } from "./profile/errors.js";
-import { ClaimPackageSchema } from "./profile/claim.js";
+import { BINARY_QUALIFICATION_CLAIM_PACKAGE_SCHEMA_ID, ClaimPackageSchema, DISCLOSED_CLAIM_PACKAGE_SCHEMA_ID, } from "./profile/claim.js";
 import { buildMethodPortsFromResolver } from "./profile/ports.js";
 import { didKeyFromEd25519PublicKey } from "./profile/signing.js";
 import { buildPublicReportTrustDeps } from "./profile/trust.js";
+import { evidenceNativeBundleSigners, legacyBundleSigners } from "./signers.js";
 import { buildAssemblyPortsFromFacts } from "./profile/assembly-ports.js";
 import { parseRunPinningEvidenceArtifact, pinningEvidenceFacts, } from "./profile/pinning-evidence.js";
 import { parsePredictionSnapshotAdmissionReceipt, } from "./profile/admission-receipts.js";
@@ -23,11 +24,13 @@ import { InspectSelectionManifestSchema, isInspectMultiScorerSelection, } from "
 import { describeInspectRuntimeMethod, } from "./profile/inspect-disclosure.js";
 import { deriveInspectEvaluationStrategy, INSPECT_SEPARATE_ASSURANCE_LIMITATIONS, inspectLogVerifierMethod, } from "./profile/inspect-assurance.js";
 import { assertClaimConsistency } from "./profile/claim-consistency.js";
+import { assertTaskSelectionConsistency } from "./profile/task-selection.js";
 import { buildPublicAssets } from "./assets.js";
 import { derivePublicComparison } from "./comparison.js";
 import { verifyBundleSnapshot, } from "./manifest.js";
 import { PUBLIC_BUNDLE_FILES, PUBLIC_BUNDLE_V4_FILES } from "./materialize.js";
-import { BUNDLE_V4_FORMAT, BUNDLE_V5_FORMAT, BUNDLE_V6_FORMAT } from "./manifest.js";
+import { BUNDLE_V4_FORMAT, BUNDLE_V5_FORMAT, BUNDLE_V6_FORMAT, BUNDLE_V7_FORMAT, BUNDLE_V8_FORMAT } from "./manifest.js";
+import { DISCLOSURE_SPECIFICATION_BUNDLE_ROLE, DisclosureProjectionError, assertDisclosureSpecification, deriveDisclosureSpecification, } from "./profile/disclosure.js";
 import { evaluateIntegrityAnchors, } from "./anchor/check.js";
 import { ClaimAnchorProjectionError, deriveClaimAnchors } from "./profile/anchor-claims.js";
 import { verifyBinaryJudgmentAdmissionClosure, } from "./admission/verification.js";
@@ -214,13 +217,54 @@ export function checkItemBankSourceClosure(itemRows, sourceRows) {
  * public keys. No pathname is reopened after manifest authentication. */
 export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
     const checked = verifyBundleSnapshot(bundleDir, deps);
+    // ── G0, the closure-INDEPENDENT extension guard (disclosure design §7 preamble, issue #2839) ──
+    //
+    // A Report carrying `DISCLOSURE_SPECIFICATION_EXTENSION` on any format other than `/8` refuses,
+    // here, before the format branch — so this holds for `/2`, `/4`, `/5`, `/6`, and `/7` alike, the
+    // evidence-native path included.
+    //
+    // Without it there is a real hole: a `/7` bundle could carry both the extension and the record,
+    // have the record's role derived by the extension edge, satisfy the evidence-closure reachability
+    // guard, and never be looked at by any check — because the named check runs only on `/8`. G0
+    // closes that direction; the evidence closure's own size and per-digest guards close the
+    // complementary one (role present, extension absent). The two together are what make the
+    // extension and the closure inseparable.
+    //
+    // Read deliberately at the JSON level rather than through `parseReport`: this must fire on a
+    // format whose `report.json` this function never otherwise parses, and it must fire on the
+    // extension's PRESENCE, not on its well-formedness.
+    if (checked.manifest.format !== BUNDLE_V8_FORMAT) {
+        const carriedReport = checked.fileBytes.get("report.json");
+        if (carriedReport !== undefined) {
+            let parsedReportJson;
+            try {
+                parsedReportJson = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(carriedReport));
+            }
+            catch {
+                parsedReportJson = undefined;
+            }
+            if (typeof parsedReportJson === "object" && parsedReportJson !== null && !Array.isArray(parsedReportJson)
+                && parsedReportJson[DISCLOSURE_SPECIFICATION_EXTENSION] !== undefined) {
+                refuse("record-integrity", "report.json", `a Report carrying ${DISCLOSURE_SPECIFICATION_EXTENSION} is publishable only on`
+                    + ` ${BUNDLE_V8_FORMAT}, whose disclosure-specification check reads it; this bundle`
+                    + ` declares ${checked.manifest.format}`);
+            }
+        }
+    }
     if (checked.manifest.format === BUNDLE_V5_FORMAT) {
         try {
+            const claimPackageBytes = checked.fileBytes.get("claim-package.json");
+            if (claimPackageBytes === undefined)
+                throw new TypeError("portable bundle is missing claim-package.json");
+            const verification = await verifyEvidenceNativePortableBundle({
+                files: checked.fileBytes,
+                verifySignature: verifyEvidenceNativeSignature,
+            });
             return {
-                verification: await verifyEvidenceNativePortableBundle({
-                    files: checked.fileBytes,
-                    verifySignature: verifyEvidenceNativeSignature,
-                }),
+                verification: {
+                    ...verification,
+                    signers: evidenceNativeBundleSigners(claimPackageBytes, verification.verifiedSignerKeyIds),
+                },
                 snapshot: checked,
             };
         }
@@ -236,17 +280,25 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
     };
     const checks = ["manifest"];
     const manifestPaths = new Set(checked.manifest.files.map((file) => file.path));
-    const isV4 = checked.manifest.format === BUNDLE_V4_FORMAT;
-    // The anchored closure is v2's graph plus `anchors/`, so it takes v2's mandatory member list; the
-    // binary qualification projection has its own later anchored allocation and is not this one.
-    const isV6 = checked.manifest.format === BUNDLE_V6_FORMAT;
-    const mandatoryFiles = isV4 ? PUBLIC_BUNDLE_V4_FILES : PUBLIC_BUNDLE_FILES;
+    // Three independent axes, five formats. The qualification axis decides the mandatory member list,
+    // the evidence-catalog grammar, and the trust grammar; the anchor axis decides the `anchors/`
+    // allowlist and the `integrity-anchors` check; the disclosure axis decides the Report-extension
+    // edge and the `disclosure-specification` check. v6 is v2 plus anchors, v7 is v4 plus anchors
+    // (issue #3205), v8 is v7 plus disclosure (issue #2839) — no axis reinterprets another.
+    const carriesQualification = checked.manifest.format === BUNDLE_V4_FORMAT
+        || checked.manifest.format === BUNDLE_V7_FORMAT
+        || checked.manifest.format === BUNDLE_V8_FORMAT;
+    const carriesAnchors = checked.manifest.format === BUNDLE_V6_FORMAT
+        || checked.manifest.format === BUNDLE_V7_FORMAT
+        || checked.manifest.format === BUNDLE_V8_FORMAT;
+    const carriesDisclosure = checked.manifest.format === BUNDLE_V8_FORMAT;
+    const mandatoryFiles = carriesQualification ? PUBLIC_BUNDLE_V4_FILES : PUBLIC_BUNDLE_FILES;
     for (const path of mandatoryFiles) {
         if (!manifestPaths.has(path))
             refuse("record-integrity", path, `mandatory public bundle file "${path}" is missing`);
     }
     const evidenceBytes = read("evidence.json");
-    const evidence = isV4
+    const evidence = carriesQualification
         ? parseJson(evidenceBytes, BundleV4EvidenceCatalogSchema, "evidence.json")
         : parseJson(evidenceBytes, BundleEvidenceCatalogSchema, "evidence.json");
     requireCanonical(evidenceBytes, evidence, "evidence.json");
@@ -263,10 +315,10 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
         if (/^native\/inspect\/[a-f0-9]{64}\.eval$/u.test(path))
             expectedPaths.add(path);
     }
-    // `anchors/<sha256>.bin` is allowlisted only by the closure version that defines it: an anchor
-    // member in a v2 or v4 bundle is a non-allowlisted file, exactly as it was before this format.
+    // `anchors/<sha256>.bin` is allowlisted only by the closure versions that define it: an anchor
+    // member in a v2 or v4 bundle is a non-allowlisted file, exactly as it was before these formats.
     const anchorPaths = [];
-    if (isV6) {
+    if (carriesAnchors) {
         for (const path of manifestPaths) {
             if (/^anchors\/[a-f0-9]{64}\.bin$/u.test(path)) {
                 expectedPaths.add(path);
@@ -290,7 +342,7 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
         declaredRoles.set(record.sha256, new Set(record.roles));
     }
     const trustBytes = read("trust/public-keys.json");
-    const trust = isV4
+    const trust = carriesQualification
         ? parseJson(trustBytes, BundleV4TrustSchema, "trust/public-keys.json")
         : parseJson(trustBytes, BundleTrustSchema, "trust/public-keys.json");
     requireCanonical(trustBytes, trust, "trust/public-keys.json");
@@ -300,7 +352,7 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
         { keyId: entry.keyId, publicKey: publicKey(entry.spkiDerBase64, `trust.evaluators.${entry.evaluator}`) },
     ]));
     let qualification;
-    if (isV4) {
+    if (carriesQualification) {
         const qualificationBytes = read("qualification.json");
         qualification = parseJson(qualificationBytes, BundleQualificationSchema, "qualification.json");
         requireCanonical(qualificationBytes, qualification, "qualification.json");
@@ -348,7 +400,7 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
     // empty section and an omitted one are different claims, and §7.3's declared-but-absent bundle
     // carries the first.
     let claimAnchors;
-    if (isV6) {
+    if (carriesAnchors) {
         const anchorRecords = anchorPaths
             .map((path) => {
             const bytes = read(path);
@@ -384,6 +436,33 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
             throw cause;
         }
     }
+    // ── The disclosed closure's Report-extension edge and claim projection (issue #2839) ────────
+    //
+    // Read here, beside the anchors, and for the same two reasons: the evidence-closure walk below
+    // needs the edge to derive the record's role, and `assertClaimConsistency` needs the projection to
+    // rebuild the claim from the RECORD'S OWN BYTES rather than from the claim under test.
+    let disclosureExtensionDigest;
+    let claimDisclosure;
+    if (carriesDisclosure) {
+        const descriptor = readReportDisclosureExtension(report);
+        if (descriptor === undefined) {
+            refuse("record-integrity", "disclosure-specification", `a ${BUNDLE_V8_FORMAT} bundle must carry ${DISCLOSURE_SPECIFICATION_EXTENSION} on its Report`);
+        }
+        disclosureExtensionDigest = descriptor.digest.sha256;
+        const disclosureBytes = records.get(disclosureExtensionDigest);
+        if (disclosureBytes === undefined) {
+            refuse("record-integrity", `records/${disclosureExtensionDigest}.bin`, "the bundle does not carry the disclosure-specification record its Report names");
+        }
+        try {
+            claimDisclosure = deriveDisclosureSpecification(disclosureBytes);
+        }
+        catch (cause) {
+            if (cause instanceof DisclosureProjectionError) {
+                refuse("record-integrity", `records/${disclosureExtensionDigest}.bin`, cause.message);
+            }
+            throw cause;
+        }
+    }
     const assembly = parseAssembly(read("verification/assembly.jsonl"));
     const expectedNativePaths = new Set(assembly.header.graph.solveDeliveries.flatMap((delivery) => delivery.outputs
         .filter((output) => output.name === "inspect-log")
@@ -415,6 +494,18 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
     const cellsByKey = new Map(assembly.cells.map((cell) => [cell.cellKey, cell]));
     const coordinatesByKey = new Map(expectedCoordinates.map((coord) => [coord.cellKey, coord]));
     const expectedRoles = new Map();
+    // ── The disclosed closure's one graph edge (issue #2839, design §6.2 / §10.2) ───────────────
+    //
+    // The Report extension IS the edge: it is the only thing that derives the
+    // `disclosure-specification` role for any record. Adding it here — and only on `/8` — is what
+    // makes the two refusals in §6.5.2 fire on every other format without a bespoke guard. A
+    // standalone disclosure record on a `/7` bundle makes `declaredRoles` exceed `expectedRoles` and
+    // trips the size compare; the role appended to an existing graph record's array leaves the sizes
+    // equal and trips the per-digest compare instead. Both refusals already existed and cannot be
+    // forgotten.
+    if (disclosureExtensionDigest !== undefined) {
+        addRole(expectedRoles, disclosureExtensionDigest, DISCLOSURE_SPECIFICATION_BUNDLE_ROLE);
+    }
     const evaluationSpecs = new Map();
     const taskSpecs = new Map();
     const inspectSelections = new Map();
@@ -1476,6 +1567,11 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
     if (!equalBytes(canonicalJsonBytes(verifiedReport.record), reportBytes))
         refuse("record-integrity", "report-verification", "verified Report payload does not match report.json");
     checks.push("report-verification");
+    // Task-selection provenance (#2980). Runs under the `claim-consistency` check because that is
+    // exactly the question it answers -- does the claim's declared selection survive contact with
+    // the records? -- and because the claim pins the check list byte-for-byte, so a new named check
+    // would be a bundle-format bump rather than an addition.
+    assertTaskSelectionConsistency({ benchmarkRecord: benchmark, runRecord: run });
     assertClaimConsistency({
         claim,
         identities,
@@ -1490,12 +1586,41 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
             : {}),
         ...(assembly.header.rehearsal === undefined ? {} : { rehearsal: assembly.header.rehearsal }),
         ...(claimAnchors === undefined ? {} : { anchors: claimAnchors }),
+        ...(claimDisclosure === undefined ? {} : { disclosure: claimDisclosure }),
     });
     checks.push("claim-consistency");
-    // Always present for this closure version, and never for any earlier one: an anchored bundle
-    // whose anchors were stripped is a closure failure above, not a shorter check list here.
-    if (isV6)
+    // Always present for the anchored closure versions, and never for any earlier one: an anchored
+    // bundle whose anchors were stripped is a closure failure above, not a shorter check list here.
+    if (carriesAnchors)
         checks.push("integrity-anchors");
+    // ── disclosure-specification (issue #2839, design §7 steps 1-9) ────────────────────────────
+    //
+    // Runs after `claim-consistency` because step 10 — projection equality — is delivered BY that
+    // check's existing whole-claim byte-compare rather than by a second comparison here. What is left
+    // for this block is authenticating the record itself and pairing the two claim identifiers.
+    let disclosureReport;
+    if (carriesDisclosure) {
+        // Step 9: claim-id pairing. `qualification.json`'s `claimSchema` names WHICH PROJECTION SHAPE
+        // the qualification graph was built for, and that shape is claim-package/2's on every binary
+        // allocation — so the frozen literal does not move, while `claim-package.json` declares the
+        // closure. Either field carrying the other's value refuses, so the two cannot drift together.
+        if (claim.claimSchema !== DISCLOSED_CLAIM_PACKAGE_SCHEMA_ID) {
+            refuse("record-integrity", "claim-package.json", `a ${BUNDLE_V8_FORMAT} bundle's claim must declare ${DISCLOSED_CLAIM_PACKAGE_SCHEMA_ID}`);
+        }
+        if (qualification?.claimSchema !== BINARY_QUALIFICATION_CLAIM_PACKAGE_SCHEMA_ID) {
+            refuse("record-integrity", "qualification.json", `a ${BUNDLE_V8_FORMAT} bundle's qualification document must keep its frozen`
+                + ` ${BINARY_QUALIFICATION_CLAIM_PACKAGE_SCHEMA_ID} projection literal`);
+        }
+        disclosureReport = assertDisclosureSpecification({
+            extensionDigestSha256: disclosureExtensionDigest,
+            catalogRoles: declaredRoles,
+            recordBytes: records,
+            matrixSha256: identities.matrixSha256,
+            reportAuthor: verifiedReport.record.author,
+            refuse: (path, message) => refuse("record-integrity", path, message),
+        });
+        checks.push("disclosure-specification");
+    }
     const dissentCellKeys = assembly.cells
         .filter((cell) => new Set(cell.verdicts.map((verdict) => verdict.verdict)).size > 1)
         .map((cell) => cell.cellKey)
@@ -1520,17 +1645,15 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
         }),
         dissentCellKeys,
     };
-    // Reader v1 remains able to authenticate bundles published before the
-    // human comparison projection existed. A bundle must match one complete,
-    // deterministic presentation profile; individual assets cannot be mixed.
-    const legacyAssets = qualification === undefined ? buildPublicAssets(assetFacts) : undefined;
-    const isLegacyPresentation = legacyAssets !== undefined
-        && Object.entries(legacyAssets).every(([path, bytes]) => equalBytes(read(path), bytes));
+    // The closure selects the presentation profile and the bundle must byte-match that one
+    // profile completely — assets cannot be mixed, and there is no second profile to fall back
+    // to (issue #2984). A qualification-projecting bundle (`/4`, `/7`) renders the
+    // instrument-qualification graph; every other one renders the human comparison, which
+    // `derivePublicComparison` above always produces. The comparison-absent rendering a
+    // pre-comparison producer would have written is therefore no bundle's profile.
     const expectedAssets = qualification !== undefined
         ? buildPublicAssets({ ...assetFacts, binaryQualification: binaryAssetQualification })
-        : isLegacyPresentation
-            ? legacyAssets
-            : buildPublicAssets({ ...assetFacts, comparison });
+        : buildPublicAssets({ ...assetFacts, comparison });
     for (const [path, bytes] of Object.entries(expectedAssets)) {
         if (!equalBytes(read(path), bytes))
             refuse("record-integrity", path, `${path} is not the exact projection of verified public facts`);
@@ -1547,9 +1670,11 @@ export async function verifyPublicBundleSnapshot(bundleDir, deps = {}) {
             format: checked.manifest.format,
             identity: checked.identity,
             checks,
+            signers: legacyBundleSigners(trust, new Set(verdictCatalog.verdicts.map((verdict) => verdict.evaluator))),
             ...identities,
             ...(runtimeMethod === undefined ? {} : { runtimeMethod }),
             ...(anchorReport === undefined ? {} : { anchors: anchorReport }),
+            ...(disclosureReport === undefined ? {} : { disclosure: disclosureReport }),
             ...(qualification === undefined ? {} : {
                 qualification: {
                     publicationGrade: qualification.publicationGrade,

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** Public verifier release line. Kept in one module for output and bundle instructions. */
-export declare const VERIFIER_VERSION: "0.1.0";
+export declare const VERIFIER_VERSION: "0.2.1";

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Public verifier release line. Kept in one module for output and bundle instructions. */
-export const VERIFIER_VERSION = "0.1.0";
+export const VERIFIER_VERSION = "0.2.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@colophon-claims/verify",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "Standalone public-bundle verifier for Colophon claims.",
   "type": "module",
   "engines": {
@@ -47,28 +47,28 @@
     "@fontsource-variable/newsreader": "5.3.0",
     "@fontsource-variable/public-sans": "5.3.0",
     "@fontsource/ibm-plex-mono": "5.3.0",
-    "@jinn-network/benchmarking-aggregate": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-evidence": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-interop": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-local": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-protocol": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-records": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/benchmarking-run": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/task-admission": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/task-execution-profiles": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/task-execution-protocol": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
-    "@jinn-network/trust-core": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
+    "@jinn-network/benchmarking-aggregate": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-evidence": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-interop": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-local": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-protocol": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-records": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/benchmarking-run": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/task-admission": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/task-execution-profiles": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/task-execution-protocol": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
+    "@jinn-network/trust-core": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
     "zod": "4.4.3"
   },
   "resolutions": {
     "@noble/hashes": "2.2.0"
   },
   "devDependencies": {
-    "@jinn-network/trust-testing": "0.1.0-canary.sha.1ed36166faf16ea4b96b021ceff0397f83a0a80c",
+    "@jinn-network/trust-testing": "0.1.0-canary.sha.0533a224cf99f06d7facf0c23455f2781a5b9e62",
     "@types/node": "^22.0.0",
     "ajv": "8.17.1",
     "typescript": "^5.9.3",
     "vitest": "^4.1.8"
   },
-  "gitHead": "2f249073718111afd810127ff7bbbc19b206dc93"
+  "gitHead": "56d36e4167d395ee496b5b4baa72d3527970060f"
 }