@contractspec/bundle.library 0.0.0-canary-20260206014742

package/dist/components/docs/safety/SafetyOverviewPage.js

@@ -0,0 +1,197 @@
+import { ChevronRight } from "lucide-react";
+import { jsx, jsxs } from "react/jsx-runtime";
+import Link from "@contractspec/lib.ui-link";
+
+//#region src/components/docs/safety/SafetyOverviewPage.tsx
+function SafetyOverviewPage() {
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-8",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [/* @__PURE__ */ jsx("h1", {
+					className: "text-4xl font-bold",
+					children: "Safety Overview"
+				}), /* @__PURE__ */ jsxs("p", {
+					className: "text-muted-foreground",
+					children: [
+						"ContractSpec is designed with ",
+						/* @__PURE__ */ jsx("strong", { children: "safety by default" }),
+						". Every operation is governed by policies, every change is audited, and every deployment is reversible. This section covers the core safety mechanisms that protect your application and data."
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [/* @__PURE__ */ jsx("h2", {
+					className: "text-2xl font-bold",
+					children: "Core safety features"
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "space-y-6",
+					children: [
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: /* @__PURE__ */ jsx(Link, {
+									href: "/docs/safety/signing",
+									className: "text-violet-400 hover:text-violet-300",
+									children: "Spec Signing"
+								})
+							}), /* @__PURE__ */ jsx("p", {
+								className: "text-muted-foreground",
+								children: "All specifications are cryptographically signed before deployment. This ensures that only authorized changes reach production and that specs cannot be tampered with in transit or at rest. Signatures are verified at runtime, and unsigned specs are rejected."
+							})]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: /* @__PURE__ */ jsx(Link, {
+									href: "/docs/safety/pdp",
+									className: "text-violet-400 hover:text-violet-300",
+									children: "Policy Decision Points (PDP)"
+								})
+							}), /* @__PURE__ */ jsx("p", {
+								className: "text-muted-foreground",
+								children: "Every API call, UI render, and data access passes through a centralized Policy Decision Point. The PDP evaluates attribute-based access control (ABAC) rules and PII policies to determine whether the operation is allowed. This ensures consistent enforcement across your entire application."
+							})]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: /* @__PURE__ */ jsx(Link, {
+									href: "/docs/safety/auditing",
+									className: "text-violet-400 hover:text-violet-300",
+									children: "Audit Logs"
+								})
+							}), /* @__PURE__ */ jsx("p", {
+								className: "text-muted-foreground",
+								children: "ContractSpec automatically records every operation in tamper-evident audit logs. These logs capture who did what, when, and why—including policy decisions, data access, and administrative actions. Audit logs are essential for compliance, security investigations, and debugging."
+							})]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: /* @__PURE__ */ jsx(Link, {
+									href: "/docs/safety/migrations",
+									className: "text-violet-400 hover:text-violet-300",
+									children: "Migrations"
+								})
+							}), /* @__PURE__ */ jsxs("p", {
+								className: "text-muted-foreground",
+								children: [
+									"Schema and data migrations are managed through",
+									" ",
+									/* @__PURE__ */ jsx("strong", { children: "MigrationSpecs" }),
+									". Each migration is versioned, reversible, and tested before deployment. This allows you to evolve your application safely without downtime or data loss."
+								]
+							})]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: "Dark Launch & Rollback"
+							}), /* @__PURE__ */ jsx("p", {
+								className: "text-muted-foreground",
+								children: "New features can be deployed in \"dark launch\" mode, where they run in production but are not visible to users. This allows you to test performance and correctness with real traffic before enabling the feature. If issues arise, you can instantly roll back to the previous version without redeploying."
+							})]
+						}),
+						/* @__PURE__ */ jsxs("div", {
+							className: "space-y-2",
+							children: [/* @__PURE__ */ jsx("h3", {
+								className: "text-xl font-semibold",
+								children: "Data Classification"
+							}), /* @__PURE__ */ jsx("p", {
+								className: "text-muted-foreground",
+								children: "Fields in your specs can be tagged with sensitivity levels (e.g., PII, PHI, confidential). The policy engine uses these tags to enforce access controls, redaction rules, and data retention policies automatically. This reduces the risk of accidental data leaks."
+							})]
+						})
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Why safety matters"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "Modern applications handle sensitive data and critical operations. A single bug or misconfiguration can lead to data breaches, compliance violations, or service outages. ContractSpec's safety features are not optional add-ons—they are built into the core platform and enforced automatically."
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "By making safety the default, ContractSpec allows you to move fast without breaking things. You can deploy new features confidently, knowing that policies are enforced, changes are audited, and rollbacks are always available."
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Next steps"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "Explore each safety feature in detail using the links above, or continue with the advanced topics:"
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-wrap gap-4 pt-4",
+						children: [
+							/* @__PURE__ */ jsxs(Link, {
+								href: "/docs/safety/signing",
+								className: "btn-primary",
+								children: ["Spec Signing ", /* @__PURE__ */ jsx(ChevronRight, {
+									size: 16,
+									className: "inline"
+								})]
+							}),
+							/* @__PURE__ */ jsxs(Link, {
+								href: "/docs/safety/pdp",
+								className: "btn-ghost",
+								children: ["Policy Decision Points ", /* @__PURE__ */ jsx(ChevronRight, {
+									size: 16,
+									className: "inline"
+								})]
+							}),
+							/* @__PURE__ */ jsxs(Link, {
+								href: "/docs/safety/auditing",
+								className: "btn-ghost",
+								children: ["Audit Logs ", /* @__PURE__ */ jsx(ChevronRight, {
+									size: 16,
+									className: "inline"
+								})]
+							}),
+							/* @__PURE__ */ jsxs(Link, {
+								href: "/docs/safety/migrations",
+								className: "btn-ghost",
+								children: ["Migrations ", /* @__PURE__ */ jsx(ChevronRight, {
+									size: 16,
+									className: "inline"
+								})]
+							}),
+							/* @__PURE__ */ jsxs(Link, {
+								href: "/docs/safety/security-trust",
+								className: "btn-ghost",
+								children: ["Security & Trust ", /* @__PURE__ */ jsx(ChevronRight, {
+									size: 16,
+									className: "inline"
+								})]
+							})
+						]
+					})
+				]
+			})
+		]
+	});
+}
+
+//#endregion
+export { SafetyOverviewPage };
+//# sourceMappingURL=SafetyOverviewPage.js.map

package/dist/components/docs/safety/SafetyOverviewPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SafetyOverviewPage.js","names":[],"sources":["../../../../src/components/docs/safety/SafetyOverviewPage.tsx"],"sourcesContent":["import Link from '@contractspec/lib.ui-link';\nimport { ChevronRight } from 'lucide-react';\n\n// export const metadata = {\n//   title: 'Safety Overview: ContractSpec Docs',\n//   description:\n//     \"Learn about ContractSpec's safety features: spec signing, policy decision points, audit logs, migrations, and more.\",\n// };\n\nexport function SafetyOverviewPage() {\n  return (\n    <div className=\"space-y-8\">\n      <div className=\"space-y-4\">\n        <h1 className=\"text-4xl font-bold\">Safety Overview</h1>\n        <p className=\"text-muted-foreground\">\n          ContractSpec is designed with <strong>safety by default</strong>.\n          Every operation is governed by policies, every change is audited, and\n          every deployment is reversible. This section covers the core safety\n          mechanisms that protect your application and data.\n        </p>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">Core safety features</h2>\n        <div className=\"space-y-6\">\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">\n              <Link\n                href=\"/docs/safety/signing\"\n                className=\"text-violet-400 hover:text-violet-300\"\n              >\n                Spec Signing\n              </Link>\n            </h3>\n            <p className=\"text-muted-foreground\">\n              All specifications are cryptographically signed before deployment.\n              This ensures that only authorized changes reach production and\n              that specs cannot be tampered with in transit or at rest.\n              Signatures are verified at runtime, and unsigned specs are\n              rejected.\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">\n              <Link\n                href=\"/docs/safety/pdp\"\n                className=\"text-violet-400 hover:text-violet-300\"\n              >\n                Policy Decision Points (PDP)\n              </Link>\n            </h3>\n            <p className=\"text-muted-foreground\">\n              Every API call, UI render, and data access passes through a\n              centralized Policy Decision Point. The PDP evaluates\n              attribute-based access control (ABAC) rules and PII policies to\n              determine whether the operation is allowed. This ensures\n              consistent enforcement across your entire application.\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">\n              <Link\n                href=\"/docs/safety/auditing\"\n                className=\"text-violet-400 hover:text-violet-300\"\n              >\n                Audit Logs\n              </Link>\n            </h3>\n            <p className=\"text-muted-foreground\">\n              ContractSpec automatically records every operation in\n              tamper-evident audit logs. These logs capture who did what, when,\n              and why—including policy decisions, data access, and\n              administrative actions. Audit logs are essential for compliance,\n              security investigations, and debugging.\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">\n              <Link\n                href=\"/docs/safety/migrations\"\n                className=\"text-violet-400 hover:text-violet-300\"\n              >\n                Migrations\n              </Link>\n            </h3>\n            <p className=\"text-muted-foreground\">\n              Schema and data migrations are managed through{' '}\n              <strong>MigrationSpecs</strong>. Each migration is versioned,\n              reversible, and tested before deployment. This allows you to\n              evolve your application safely without downtime or data loss.\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">Dark Launch & Rollback</h3>\n            <p className=\"text-muted-foreground\">\n              New features can be deployed in \"dark launch\" mode, where they run\n              in production but are not visible to users. This allows you to\n              test performance and correctness with real traffic before enabling\n              the feature. If issues arise, you can instantly roll back to the\n              previous version without redeploying.\n            </p>\n          </div>\n\n          <div className=\"space-y-2\">\n            <h3 className=\"text-xl font-semibold\">Data Classification</h3>\n            <p className=\"text-muted-foreground\">\n              Fields in your specs can be tagged with sensitivity levels (e.g.,\n              PII, PHI, confidential). The policy engine uses these tags to\n              enforce access controls, redaction rules, and data retention\n              policies automatically. This reduces the risk of accidental data\n              leaks.\n            </p>\n          </div>\n        </div>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">Why safety matters</h2>\n        <p className=\"text-muted-foreground\">\n          Modern applications handle sensitive data and critical operations. A\n          single bug or misconfiguration can lead to data breaches, compliance\n          violations, or service outages. ContractSpec's safety features are not\n          optional add-ons—they are built into the core platform and enforced\n          automatically.\n        </p>\n        <p className=\"text-muted-foreground\">\n          By making safety the default, ContractSpec allows you to move fast\n          without breaking things. You can deploy new features confidently,\n          knowing that policies are enforced, changes are audited, and rollbacks\n          are always available.\n        </p>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">Next steps</h2>\n        <p className=\"text-muted-foreground\">\n          Explore each safety feature in detail using the links above, or\n          continue with the advanced topics:\n        </p>\n        <div className=\"flex flex-wrap gap-4 pt-4\">\n          <Link href=\"/docs/safety/signing\" className=\"btn-primary\">\n            Spec Signing <ChevronRight size={16} className=\"inline\" />\n          </Link>\n          <Link href=\"/docs/safety/pdp\" className=\"btn-ghost\">\n            Policy Decision Points <ChevronRight size={16} className=\"inline\" />\n          </Link>\n          <Link href=\"/docs/safety/auditing\" className=\"btn-ghost\">\n            Audit Logs <ChevronRight size={16} className=\"inline\" />\n          </Link>\n          <Link href=\"/docs/safety/migrations\" className=\"btn-ghost\">\n            Migrations <ChevronRight size={16} className=\"inline\" />\n          </Link>\n          <Link href=\"/docs/safety/security-trust\" className=\"btn-ghost\">\n            Security & Trust <ChevronRight size={16} className=\"inline\" />\n          </Link>\n        </div>\n      </div>\n    </div>\n  );\n}\n"],"mappings":";;;;;AASA,SAAgB,qBAAqB;AACnC,QACE,qBAAC;EAAI,WAAU;;GACb,qBAAC;IAAI,WAAU;eACb,oBAAC;KAAG,WAAU;eAAqB;MAAoB,EACvD,qBAAC;KAAE,WAAU;;MAAwB;MACL,oBAAC,sBAAO,sBAA0B;;;MAI9D;KACA;GAEN,qBAAC;IAAI,WAAU;eACb,oBAAC;KAAG,WAAU;eAAqB;MAAyB,EAC5D,qBAAC;KAAI,WAAU;;MACb,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBACZ,oBAAC;SACC,MAAK;SACL,WAAU;mBACX;UAEM;SACJ,EACL,oBAAC;QAAE,WAAU;kBAAwB;SAMjC;QACA;MAEN,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBACZ,oBAAC;SACC,MAAK;SACL,WAAU;mBACX;UAEM;SACJ,EACL,oBAAC;QAAE,WAAU;kBAAwB;SAMjC;QACA;MAEN,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBACZ,oBAAC;SACC,MAAK;SACL,WAAU;mBACX;UAEM;SACJ,EACL,oBAAC;QAAE,WAAU;kBAAwB;SAMjC;QACA;MAEN,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBACZ,oBAAC;SACC,MAAK;SACL,WAAU;mBACX;UAEM;SACJ,EACL,qBAAC;QAAE,WAAU;;SAAwB;SACY;SAC/C,oBAAC,sBAAO,mBAAuB;;;SAG7B;QACA;MAEN,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBAAwB;SAA2B,EACjE,oBAAC;QAAE,WAAU;kBAAwB;SAMjC;QACA;MAEN,qBAAC;OAAI,WAAU;kBACb,oBAAC;QAAG,WAAU;kBAAwB;SAAwB,EAC9D,oBAAC;QAAE,WAAU;kBAAwB;SAMjC;QACA;;MACF;KACF;GAEN,qBAAC;IAAI,WAAU;;KACb,oBAAC;MAAG,WAAU;gBAAqB;OAAuB;KAC1D,oBAAC;MAAE,WAAU;gBAAwB;OAMjC;KACJ,oBAAC;MAAE,WAAU;gBAAwB;OAKjC;;KACA;GAEN,qBAAC;IAAI,WAAU;;KACb,oBAAC;MAAG,WAAU;gBAAqB;OAAe;KAClD,oBAAC;MAAE,WAAU;gBAAwB;OAGjC;KACJ,qBAAC;MAAI,WAAU;;OACb,qBAAC;QAAK,MAAK;QAAuB,WAAU;mBAAc,iBAC3C,oBAAC;SAAa,MAAM;SAAI,WAAU;UAAW;SACrD;OACP,qBAAC;QAAK,MAAK;QAAmB,WAAU;mBAAY,2BAC3B,oBAAC;SAAa,MAAM;SAAI,WAAU;UAAW;SAC/D;OACP,qBAAC;QAAK,MAAK;QAAwB,WAAU;mBAAY,eAC5C,oBAAC;SAAa,MAAM;SAAI,WAAU;UAAW;SACnD;OACP,qBAAC;QAAK,MAAK;QAA0B,WAAU;mBAAY,eAC9C,oBAAC;SAAa,MAAM;SAAI,WAAU;UAAW;SACnD;OACP,qBAAC;QAAK,MAAK;QAA8B,WAAU;mBAAY,qBAC5C,oBAAC;SAAa,MAAM;SAAI,WAAU;UAAW;SACzD;;OACH;;KACF;;GACF"}

package/dist/components/docs/safety/SafetyPDPPage.d.ts

@@ -0,0 +1,7 @@
+import * as react_jsx_runtime0 from "react/jsx-runtime";
+
+//#region src/components/docs/safety/SafetyPDPPage.d.ts
+declare function SafetyPDPPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+export { SafetyPDPPage };
+//# sourceMappingURL=SafetyPDPPage.d.ts.map

package/dist/components/docs/safety/SafetyPDPPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SafetyPDPPage.d.ts","names":[],"sources":["../../../../src/components/docs/safety/SafetyPDPPage.tsx"],"mappings":";;;iBASgB,aAAA,CAAA,GAAa,kBAAA,CAAA,GAAA,CAAA,OAAA"}

package/dist/components/docs/safety/SafetyPDPPage.js

@@ -0,0 +1,221 @@
+import { ChevronRight } from "lucide-react";
+import { jsx, jsxs } from "react/jsx-runtime";
+import Link from "@contractspec/lib.ui-link";
+
+//#region src/components/docs/safety/SafetyPDPPage.tsx
+function SafetyPDPPage() {
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-8",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [/* @__PURE__ */ jsx("h1", {
+					className: "text-4xl font-bold",
+					children: "Policy Decision Points"
+				}), /* @__PURE__ */ jsxs("p", {
+					className: "text-muted-foreground",
+					children: [
+						"A ",
+						/* @__PURE__ */ jsx("strong", { children: "Policy Decision Point (PDP)" }),
+						" is a centralized component that evaluates access control policies and makes authorization decisions. According to",
+						" ",
+						/* @__PURE__ */ jsx("a", {
+							href: "https://www.strongdm.com/blog/policy-decision-point",
+							target: "_blank",
+							rel: "noopener noreferrer",
+							className: "text-violet-400 hover:text-violet-300",
+							children: "StrongDM"
+						}),
+						", the PDP \"receives requests for access to resources, evaluates them against policies, and returns a decision (permit or deny).\""
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "How the PDP works in ContractSpec"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "In ContractSpec, the PDP is invoked on every operation—whether it's rendering a UI component, executing a capability, or querying a data view. The flow is:"
+					}),
+					/* @__PURE__ */ jsxs("ol", {
+						className: "text-muted-foreground list-inside list-decimal space-y-3",
+						children: [
+							/* @__PURE__ */ jsxs("li", { children: [
+								/* @__PURE__ */ jsx("strong", { children: "Request evaluation" }),
+								" – The runtime sends a request to the PDP containing:",
+								/* @__PURE__ */ jsxs("ul", {
+									className: "mt-2 ml-6 list-inside list-disc space-y-1",
+									children: [
+										/* @__PURE__ */ jsx("li", { children: "The user's identity and attributes (roles, groups, location, etc.)" }),
+										/* @__PURE__ */ jsx("li", { children: "The resource being accessed (capability, field, workflow step)" }),
+										/* @__PURE__ */ jsx("li", { children: "The action being performed (read, write, execute)" }),
+										/* @__PURE__ */ jsx("li", { children: "Contextual information (time of day, device type, IP address)" })
+									]
+								})
+							] }),
+							/* @__PURE__ */ jsxs("li", { children: [
+								/* @__PURE__ */ jsx("strong", { children: "Policy evaluation" }),
+								" – The PDP evaluates the request against all applicable ",
+								/* @__PURE__ */ jsx("strong", { children: "PolicySpecs" }),
+								". These specs define rules using attribute-based access control (ABAC) and can reference:",
+								/* @__PURE__ */ jsxs("ul", {
+									className: "mt-2 ml-6 list-inside list-disc space-y-1",
+									children: [
+										/* @__PURE__ */ jsx("li", { children: "User attributes (e.g., \"role == 'admin'\")" }),
+										/* @__PURE__ */ jsx("li", { children: "Resource attributes (e.g., \"field.sensitivity == 'PII'\")" }),
+										/* @__PURE__ */ jsx("li", { children: "Environmental attributes (e.g., \"time.hour >= 9 AND time.hour < 17\")" })
+									]
+								})
+							] }),
+							/* @__PURE__ */ jsxs("li", { children: [
+								/* @__PURE__ */ jsx("strong", { children: "Decision return" }),
+								" – The PDP returns one of:",
+								/* @__PURE__ */ jsxs("ul", {
+									className: "mt-2 ml-6 list-inside list-disc space-y-1",
+									children: [
+										/* @__PURE__ */ jsxs("li", { children: [
+											/* @__PURE__ */ jsx("code", {
+												className: "bg-background/50 rounded px-2 py-1",
+												children: "PERMIT"
+											}),
+											" ",
+											"– The operation is allowed."
+										] }),
+										/* @__PURE__ */ jsxs("li", { children: [
+											/* @__PURE__ */ jsx("code", {
+												className: "bg-background/50 rounded px-2 py-1",
+												children: "DENY"
+											}),
+											" ",
+											"– The operation is blocked."
+										] }),
+										/* @__PURE__ */ jsxs("li", { children: [
+											/* @__PURE__ */ jsx("code", {
+												className: "bg-background/50 rounded px-2 py-1",
+												children: "REDACT"
+											}),
+											" ",
+											"– The operation is allowed, but sensitive fields are masked."
+										] })
+									]
+								})
+							] }),
+							/* @__PURE__ */ jsxs("li", { children: [/* @__PURE__ */ jsx("strong", { children: "Enforcement" }), " – The runtime enforces the decision. If denied, the operation fails with a clear error message. If redacted, sensitive fields are replaced with placeholders."] }),
+							/* @__PURE__ */ jsxs("li", { children: [
+								/* @__PURE__ */ jsx("strong", { children: "Auditing" }),
+								" – Every PDP decision is logged to the",
+								" ",
+								/* @__PURE__ */ jsx(Link, {
+									href: "/docs/safety/auditing",
+									className: "text-violet-400 hover:text-violet-300",
+									children: "audit log"
+								}),
+								", including the request, decision, and reasoning."
+							] })
+						]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Example PolicySpec"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "Here's a simple policy that restricts access to PII fields:"
+					}),
+					/* @__PURE__ */ jsx("div", {
+						className: "bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm",
+						children: /* @__PURE__ */ jsx("pre", { children: `policyId: pii-access-control
+version: '1.0.0'.0.0
+rules:
+  - id: allow-admin-full-access
+    effect: PERMIT
+    condition: user.role == 'admin'
+    
+  - id: redact-pii-for-support
+    effect: REDACT
+    condition: |
+      user.role == 'support' AND
+      field.sensitivity == 'PII'
+    redactFields: ['ssn', 'creditCard', 'dateOfBirth']
+    
+  - id: deny-pii-for-others
+    effect: DENY
+    condition: |
+      user.role NOT IN ['admin', 'support'] AND
+      field.sensitivity == 'PII'` })
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "With this policy, admins see all data, support staff see redacted PII, and other users cannot access PII at all."
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [/* @__PURE__ */ jsx("h2", {
+					className: "text-2xl font-bold",
+					children: "Benefits of centralized decision-making"
+				}), /* @__PURE__ */ jsxs("ul", {
+					className: "text-muted-foreground list-inside list-disc space-y-2",
+					children: [
+						/* @__PURE__ */ jsxs("li", { children: [/* @__PURE__ */ jsx("strong", { children: "Consistency" }), " – Policies are enforced uniformly across all surfaces (API, UI, workflows)."] }),
+						/* @__PURE__ */ jsxs("li", { children: [/* @__PURE__ */ jsx("strong", { children: "Auditability" }), " – Every decision is logged, making it easy to trace why access was granted or denied."] }),
+						/* @__PURE__ */ jsxs("li", { children: [/* @__PURE__ */ jsx("strong", { children: "Flexibility" }), " – Policies can be updated without changing application code."] }),
+						/* @__PURE__ */ jsxs("li", { children: [/* @__PURE__ */ jsx("strong", { children: "Security" }), " – Reduces the risk of authorization bugs by removing ad-hoc checks scattered throughout the codebase."] })
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Performance considerations"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "Because the PDP is invoked on every operation, performance is critical. ContractSpec optimizes this by:"
+					}),
+					/* @__PURE__ */ jsxs("ul", {
+						className: "text-muted-foreground list-inside list-disc space-y-2",
+						children: [
+							/* @__PURE__ */ jsx("li", { children: "Caching policy decisions for identical requests" }),
+							/* @__PURE__ */ jsx("li", { children: "Compiling policies into efficient bytecode" }),
+							/* @__PURE__ */ jsx("li", { children: "Evaluating only the minimal set of rules needed for each request" }),
+							/* @__PURE__ */ jsx("li", { children: "Running the PDP in-process to avoid network latency" })
+						]
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "In practice, PDP overhead is typically less than 1ms per request."
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "flex items-center gap-4 pt-4",
+				children: [/* @__PURE__ */ jsx(Link, {
+					href: "/docs/safety/signing",
+					className: "btn-ghost",
+					children: "Previous: Spec Signing"
+				}), /* @__PURE__ */ jsxs(Link, {
+					href: "/docs/safety/auditing",
+					className: "btn-primary",
+					children: ["Next: Audit Logs ", /* @__PURE__ */ jsx(ChevronRight, { size: 16 })]
+				})]
+			})
+		]
+	});
+}
+
+//#endregion
+export { SafetyPDPPage };
+//# sourceMappingURL=SafetyPDPPage.js.map

package/dist/components/docs/safety/SafetyPDPPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SafetyPDPPage.js","names":[],"sources":["../../../../src/components/docs/safety/SafetyPDPPage.tsx"],"sourcesContent":["import Link from '@contractspec/lib.ui-link';\nimport { ChevronRight } from 'lucide-react';\n\n// export const metadata = {\n//   title: 'Policy Decision Points: ContractSpec Docs',\n//   description:\n//     \"Learn how ContractSpec's Policy Decision Point (PDP) enforces access control and data protection policies.\",\n// };\n\nexport function SafetyPDPPage() {\n  return (\n    <div className=\"space-y-8\">\n      <div className=\"space-y-4\">\n        <h1 className=\"text-4xl font-bold\">Policy Decision Points</h1>\n        <p className=\"text-muted-foreground\">\n          A <strong>Policy Decision Point (PDP)</strong> is a centralized\n          component that evaluates access control policies and makes\n          authorization decisions. According to{' '}\n          <a\n            href=\"https://www.strongdm.com/blog/policy-decision-point\"\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            className=\"text-violet-400 hover:text-violet-300\"\n          >\n            StrongDM\n          </a>\n          , the PDP \"receives requests for access to resources, evaluates them\n          against policies, and returns a decision (permit or deny).\"\n        </p>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">\n          How the PDP works in ContractSpec\n        </h2>\n        <p className=\"text-muted-foreground\">\n          In ContractSpec, the PDP is invoked on every operation—whether it's\n          rendering a UI component, executing a capability, or querying a data\n          view. The flow is:\n        </p>\n        <ol className=\"text-muted-foreground list-inside list-decimal space-y-3\">\n          <li>\n            <strong>Request evaluation</strong> – The runtime sends a request to\n            the PDP containing:\n            <ul className=\"mt-2 ml-6 list-inside list-disc space-y-1\">\n              <li>\n                The user's identity and attributes (roles, groups, location,\n                etc.)\n              </li>\n              <li>\n                The resource being accessed (capability, field, workflow step)\n              </li>\n              <li>The action being performed (read, write, execute)</li>\n              <li>\n                Contextual information (time of day, device type, IP address)\n              </li>\n            </ul>\n          </li>\n          <li>\n            <strong>Policy evaluation</strong> – The PDP evaluates the request\n            against all applicable <strong>PolicySpecs</strong>. These specs\n            define rules using attribute-based access control (ABAC) and can\n            reference:\n            <ul className=\"mt-2 ml-6 list-inside list-disc space-y-1\">\n              <li>User attributes (e.g., \"role == 'admin'\")</li>\n              <li>Resource attributes (e.g., \"field.sensitivity == 'PII'\")</li>\n              <li>\n                Environmental attributes (e.g., \"time.hour &gt;= 9 AND time.hour\n                &lt; 17\")\n              </li>\n            </ul>\n          </li>\n          <li>\n            <strong>Decision return</strong> – The PDP returns one of:\n            <ul className=\"mt-2 ml-6 list-inside list-disc space-y-1\">\n              <li>\n                <code className=\"bg-background/50 rounded px-2 py-1\">\n                  PERMIT\n                </code>{' '}\n                – The operation is allowed.\n              </li>\n              <li>\n                <code className=\"bg-background/50 rounded px-2 py-1\">DENY</code>{' '}\n                – The operation is blocked.\n              </li>\n              <li>\n                <code className=\"bg-background/50 rounded px-2 py-1\">\n                  REDACT\n                </code>{' '}\n                – The operation is allowed, but sensitive fields are masked.\n              </li>\n            </ul>\n          </li>\n          <li>\n            <strong>Enforcement</strong> – The runtime enforces the decision. If\n            denied, the operation fails with a clear error message. If redacted,\n            sensitive fields are replaced with placeholders.\n          </li>\n          <li>\n            <strong>Auditing</strong> – Every PDP decision is logged to the{' '}\n            <Link\n              href=\"/docs/safety/auditing\"\n              className=\"text-violet-400 hover:text-violet-300\"\n            >\n              audit log\n            </Link>\n            , including the request, decision, and reasoning.\n          </li>\n        </ol>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">Example PolicySpec</h2>\n        <p className=\"text-muted-foreground\">\n          Here's a simple policy that restricts access to PII fields:\n        </p>\n        <div className=\"bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm\">\n          <pre>{`policyId: pii-access-control\nversion: '1.0.0'.0.0\nrules:\n  - id: allow-admin-full-access\n    effect: PERMIT\n    condition: user.role == 'admin'\n    \n  - id: redact-pii-for-support\n    effect: REDACT\n    condition: |\n      user.role == 'support' AND\n      field.sensitivity == 'PII'\n    redactFields: ['ssn', 'creditCard', 'dateOfBirth']\n    \n  - id: deny-pii-for-others\n    effect: DENY\n    condition: |\n      user.role NOT IN ['admin', 'support'] AND\n      field.sensitivity == 'PII'`}</pre>\n        </div>\n        <p className=\"text-muted-foreground\">\n          With this policy, admins see all data, support staff see redacted PII,\n          and other users cannot access PII at all.\n        </p>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">\n          Benefits of centralized decision-making\n        </h2>\n        <ul className=\"text-muted-foreground list-inside list-disc space-y-2\">\n          <li>\n            <strong>Consistency</strong> – Policies are enforced uniformly\n            across all surfaces (API, UI, workflows).\n          </li>\n          <li>\n            <strong>Auditability</strong> – Every decision is logged, making it\n            easy to trace why access was granted or denied.\n          </li>\n          <li>\n            <strong>Flexibility</strong> – Policies can be updated without\n            changing application code.\n          </li>\n          <li>\n            <strong>Security</strong> – Reduces the risk of authorization bugs\n            by removing ad-hoc checks scattered throughout the codebase.\n          </li>\n        </ul>\n      </div>\n\n      <div className=\"space-y-4\">\n        <h2 className=\"text-2xl font-bold\">Performance considerations</h2>\n        <p className=\"text-muted-foreground\">\n          Because the PDP is invoked on every operation, performance is\n          critical. ContractSpec optimizes this by:\n        </p>\n        <ul className=\"text-muted-foreground list-inside list-disc space-y-2\">\n          <li>Caching policy decisions for identical requests</li>\n          <li>Compiling policies into efficient bytecode</li>\n          <li>\n            Evaluating only the minimal set of rules needed for each request\n          </li>\n          <li>Running the PDP in-process to avoid network latency</li>\n        </ul>\n        <p className=\"text-muted-foreground\">\n          In practice, PDP overhead is typically less than 1ms per request.\n        </p>\n      </div>\n\n      <div className=\"flex items-center gap-4 pt-4\">\n        <Link href=\"/docs/safety/signing\" className=\"btn-ghost\">\n          Previous: Spec Signing\n        </Link>\n        <Link href=\"/docs/safety/auditing\" className=\"btn-primary\">\n          Next: Audit Logs <ChevronRight size={16} />\n        </Link>\n      </div>\n    </div>\n  );\n}\n"],"mappings":";;;;;AASA,SAAgB,gBAAgB;AAC9B,QACE,qBAAC;EAAI,WAAU;;GACb,qBAAC;IAAI,WAAU;eACb,oBAAC;KAAG,WAAU;eAAqB;MAA2B,EAC9D,qBAAC;KAAE,WAAU;;MAAwB;MACjC,oBAAC,sBAAO,gCAAoC;;MAER;MACtC,oBAAC;OACC,MAAK;OACL,QAAO;OACP,KAAI;OACJ,WAAU;iBACX;QAEG;;;MAGF;KACA;GAEN,qBAAC;IAAI,WAAU;;KACb,oBAAC;MAAG,WAAU;gBAAqB;OAE9B;KACL,oBAAC;MAAE,WAAU;gBAAwB;OAIjC;KACJ,qBAAC;MAAG,WAAU;;OACZ,qBAAC;QACC,oBAAC,sBAAO,uBAA2B;;QAEnC,qBAAC;SAAG,WAAU;;UACZ,oBAAC,kBAAG,uEAGC;UACL,oBAAC,kBAAG,mEAEC;UACL,oBAAC,kBAAG,sDAAsD;UAC1D,oBAAC,kBAAG,kEAEC;;UACF;WACF;OACL,qBAAC;QACC,oBAAC,sBAAO,sBAA0B;;QACX,oBAAC,sBAAO,gBAAoB;;QAGnD,qBAAC;SAAG,WAAU;;UACZ,oBAAC,kBAAG,gDAA8C;UAClD,oBAAC,kBAAG,+DAA6D;UACjE,oBAAC,kBAAG,2EAGC;;UACF;WACF;OACL,qBAAC;QACC,oBAAC,sBAAO,oBAAwB;;QAChC,qBAAC;SAAG,WAAU;;UACZ,qBAAC;WACC,oBAAC;YAAK,WAAU;sBAAqC;aAE9C;WAAC;WAAI;cAET;UACL,qBAAC;WACC,oBAAC;YAAK,WAAU;sBAAqC;aAAW;WAAC;WAAI;cAElE;UACL,qBAAC;WACC,oBAAC;YAAK,WAAU;sBAAqC;aAE9C;WAAC;WAAI;cAET;;UACF;WACF;OACL,qBAAC,mBACC,oBAAC,sBAAO,gBAAoB,sKAGzB;OACL,qBAAC;QACC,oBAAC,sBAAO,aAAiB;;QAAuC;QAChE,oBAAC;SACC,MAAK;SACL,WAAU;mBACX;UAEM;;WAEJ;;OACF;;KACD;GAEN,qBAAC;IAAI,WAAU;;KACb,oBAAC;MAAG,WAAU;gBAAqB;OAAuB;KAC1D,oBAAC;MAAE,WAAU;gBAAwB;OAEjC;KACJ,oBAAC;MAAI,WAAU;gBACb,oBAAC,mBAAK;;;;;;;;;;;;;;;;;;oCAkBwB;OAC1B;KACN,oBAAC;MAAE,WAAU;gBAAwB;OAGjC;;KACA;GAEN,qBAAC;IAAI,WAAU;eACb,oBAAC;KAAG,WAAU;eAAqB;MAE9B,EACL,qBAAC;KAAG,WAAU;;MACZ,qBAAC,mBACC,oBAAC,sBAAO,gBAAoB,oFAEzB;MACL,qBAAC,mBACC,oBAAC,sBAAO,iBAAqB,8FAE1B;MACL,qBAAC,mBACC,oBAAC,sBAAO,gBAAoB,qEAEzB;MACL,qBAAC,mBACC,oBAAC,sBAAO,aAAiB,8GAEtB;;MACF;KACD;GAEN,qBAAC;IAAI,WAAU;;KACb,oBAAC;MAAG,WAAU;gBAAqB;OAA+B;KAClE,oBAAC;MAAE,WAAU;gBAAwB;OAGjC;KACJ,qBAAC;MAAG,WAAU;;OACZ,oBAAC,kBAAG,oDAAoD;OACxD,oBAAC,kBAAG,+CAA+C;OACnD,oBAAC,kBAAG,qEAEC;OACL,oBAAC,kBAAG,wDAAwD;;OACzD;KACL,oBAAC;MAAE,WAAU;gBAAwB;OAEjC;;KACA;GAEN,qBAAC;IAAI,WAAU;eACb,oBAAC;KAAK,MAAK;KAAuB,WAAU;eAAY;MAEjD,EACP,qBAAC;KAAK,MAAK;KAAwB,WAAU;gBAAc,qBACxC,oBAAC,gBAAa,MAAM,KAAM;MACtC;KACH;;GACF"}

package/dist/components/docs/safety/SafetySecurityTrustPage.d.ts

@@ -0,0 +1,7 @@
+import * as react_jsx_runtime0 from "react/jsx-runtime";
+
+//#region src/components/docs/safety/SafetySecurityTrustPage.d.ts
+declare function SafetySecurityTrustPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+export { SafetySecurityTrustPage };
+//# sourceMappingURL=SafetySecurityTrustPage.d.ts.map

package/dist/components/docs/safety/SafetySecurityTrustPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SafetySecurityTrustPage.d.ts","names":[],"sources":["../../../../src/components/docs/safety/SafetySecurityTrustPage.tsx"],"mappings":";;;iBAGgB,uBAAA,CAAA,GAAuB,kBAAA,CAAA,GAAA,CAAA,OAAA"}

package/dist/components/docs/safety/SafetySecurityTrustPage.js

@@ -0,0 +1,157 @@
+import { ChevronRight } from "lucide-react";
+import { jsx, jsxs } from "react/jsx-runtime";
+import Link from "@contractspec/lib.ui-link";
+
+//#region src/components/docs/safety/SafetySecurityTrustPage.tsx
+function SafetySecurityTrustPage() {
+	return /* @__PURE__ */ jsxs("div", {
+		className: "space-y-8",
+		children: [
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [/* @__PURE__ */ jsx("h1", {
+					className: "text-4xl font-bold",
+					children: "Security & Trust"
+				}), /* @__PURE__ */ jsx("p", {
+					className: "text-muted-foreground",
+					children: "ContractSpec focuses on deterministic, auditable software delivery. This page summarizes our security posture and trust commitments so teams can adopt with clarity."
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "card-subtle space-y-4 p-6",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Security policy"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground text-sm",
+						children: "We publish a dedicated security policy that explains how to report vulnerabilities and how we respond."
+					}),
+					/* @__PURE__ */ jsxs(Link, {
+						href: "/SECURITY.md",
+						className: "btn-primary",
+						children: ["Read the security policy ", /* @__PURE__ */ jsx(ChevronRight, { size: 16 })]
+					})
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "grid gap-4 md:grid-cols-2",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "card-subtle space-y-3 p-6",
+					children: [
+						/* @__PURE__ */ jsx("h3", {
+							className: "text-lg font-semibold",
+							children: "Release hygiene"
+						}),
+						/* @__PURE__ */ jsx("p", {
+							className: "text-muted-foreground text-sm",
+							children: "We ship with deterministic CI, changesets, and contract validation so teams can trust every release."
+						}),
+						/* @__PURE__ */ jsxs("ul", {
+							className: "text-muted-foreground space-y-2 text-sm",
+							children: [
+								/* @__PURE__ */ jsx("li", { children: "Changesets required for published packages." }),
+								/* @__PURE__ */ jsx("li", { children: "CI gate for contract validation and drift detection." }),
+								/* @__PURE__ */ jsx("li", { children: "Rollback-friendly release process." })
+							]
+						})
+					]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "card-subtle space-y-3 p-6",
+					children: [
+						/* @__PURE__ */ jsx("h3", {
+							className: "text-lg font-semibold",
+							children: "Data handling"
+						}),
+						/* @__PURE__ */ jsx("p", {
+							className: "text-muted-foreground text-sm",
+							children: "ContractSpec promotes strict data classification and policy-driven access. Specs can tag sensitive fields for enforcement."
+						}),
+						/* @__PURE__ */ jsxs("ul", {
+							className: "text-muted-foreground space-y-2 text-sm",
+							children: [
+								/* @__PURE__ */ jsx("li", { children: "Schema-level sensitivity tags." }),
+								/* @__PURE__ */ jsx("li", { children: "Policy Decision Point enforcement." }),
+								/* @__PURE__ */ jsx("li", { children: "Audit logs for operational traceability." })
+							]
+						})
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "grid gap-4 md:grid-cols-2",
+				children: [/* @__PURE__ */ jsxs("div", {
+					className: "card-subtle space-y-3 p-6",
+					children: [
+						/* @__PURE__ */ jsx("h3", {
+							className: "text-lg font-semibold",
+							children: "Supply chain"
+						}),
+						/* @__PURE__ */ jsx("p", {
+							className: "text-muted-foreground text-sm",
+							children: "We track dependency updates and keep the monorepo build reproducible."
+						}),
+						/* @__PURE__ */ jsxs("ul", {
+							className: "text-muted-foreground space-y-2 text-sm",
+							children: [
+								/* @__PURE__ */ jsx("li", { children: "Dependabot + Renovate-style updates where available." }),
+								/* @__PURE__ */ jsx("li", { children: "Signed release artifacts planned for Studio release cycles." }),
+								/* @__PURE__ */ jsx("li", { children: "Transparent changelogs for every package." })
+							]
+						})
+					]
+				}), /* @__PURE__ */ jsxs("div", {
+					className: "card-subtle space-y-3 p-6",
+					children: [
+						/* @__PURE__ */ jsx("h3", {
+							className: "text-lg font-semibold",
+							children: "Responsible disclosure"
+						}),
+						/* @__PURE__ */ jsx("p", {
+							className: "text-muted-foreground text-sm",
+							children: "We respond quickly to security reports and coordinate fixes before public disclosure."
+						}),
+						/* @__PURE__ */ jsxs("ul", {
+							className: "text-muted-foreground space-y-2 text-sm",
+							children: [
+								/* @__PURE__ */ jsx("li", { children: "Security response within 5 business days." }),
+								/* @__PURE__ */ jsx("li", { children: "Private disclosure via security@contractspec.io." }),
+								/* @__PURE__ */ jsx("li", { children: "Credit for researchers (with permission)." })
+							]
+						})
+					]
+				})]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ jsx("h2", {
+						className: "text-2xl font-bold",
+						children: "Next steps"
+					}),
+					/* @__PURE__ */ jsx("p", {
+						className: "text-muted-foreground",
+						children: "Explore the broader safety controls or read the roadmap to see upcoming trust investments."
+					}),
+					/* @__PURE__ */ jsxs("div", {
+						className: "flex flex-wrap gap-4 pt-4",
+						children: [/* @__PURE__ */ jsxs(Link, {
+							href: "/docs/safety",
+							className: "btn-ghost",
+							children: ["Safety overview ", /* @__PURE__ */ jsx(ChevronRight, { size: 16 })]
+						}), /* @__PURE__ */ jsxs(Link, {
+							href: "/ROADMAP.md",
+							className: "btn-ghost",
+							children: ["Roadmap ", /* @__PURE__ */ jsx(ChevronRight, { size: 16 })]
+						})]
+					})
+				]
+			})
+		]
+	});
+}
+
+//#endregion
+export { SafetySecurityTrustPage };
+//# sourceMappingURL=SafetySecurityTrustPage.js.map