@echopath-labs/forgerail 0.1.0-alpha.1 → 0.1.0-alpha.2

package/scripts/fixtures/contracts/effective-profile-v2.valid.json

@@ -0,0 +1,53 @@
+{
+  "schemaVersion": "2.0",
+  "profileId": "profile:demo",
+  "revisionId": "profile-revision:demo-1",
+  "workspaceIdentityId": "workspace:demo",
+  "computed": true,
+  "computedAt": "2026-08-18T00:00:00Z",
+  "completeness": "complete",
+  "sourceIds": ["source:agents"],
+  "workspaceRelationshipIds": [],
+  "ruleClaims": [
+    {
+      "schemaVersion": "1.0",
+      "claimId": "claim:review",
+      "workspaceIdentityId": "workspace:demo",
+      "sourceId": "source:agents",
+      "ruleKey": "review.required",
+      "normalizedValue": true,
+      "precedenceClass": "workspace-instructions",
+      "applicabilityScope": ["code-change"],
+      "observationPoint": "AGENTS.md#review",
+      "status": "confirmed",
+      "enforcement": "enforceable",
+      "dependencyEdgeIds": ["edge:skill"],
+      "observedAt": "2026-08-18T00:00:00Z",
+      "limitedReason": null
+    }
+  ],
+  "dependencyEdges": [
+    {
+      "schemaVersion": "1.0",
+      "edgeId": "edge:skill",
+      "workspaceIdentityId": "workspace:demo",
+      "declaringSourceId": "source:agents",
+      "target": {
+        "kind": "skill",
+        "locator": ".codex/skills/review/SKILL.md",
+        "identity": "skill:review"
+      },
+      "requiredness": "required",
+      "applicabilityScope": ["code-change"],
+      "provenanceStatus": "structured",
+      "observationStatus": "available",
+      "affectedClaimIds": ["claim:review"],
+      "observedAt": "2026-08-18T00:00:00Z",
+      "limitedReason": null
+    }
+  ],
+  "applicablePackIds": [],
+  "conflicts": [],
+  "explanationId": "explanation:demo-1",
+  "limitedReasons": []
+}

package/scripts/fixtures/contracts/effective-profile.duplicate-rule.invalid.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": "1.0",
+  "workspace": "fixture-workspace",
+  "computed": true,
+  "rules": [
+    {
+      "id": "git.primary-branch",
+      "value": "main",
+      "source": "repository metadata",
+      "precedence": 1,
+      "status": "observed"
+    },
+    {
+      "id": "git.primary-branch",
+      "value": "develop",
+      "source": "inferred prose",
+      "precedence": 5,
+      "status": "inferred"
+    }
+  ],
+  "packs": [],
+  "conflicts": []
+}

package/scripts/fixtures/contracts/entry-mode.missing-evidence.invalid.json

@@ -0,0 +1,6 @@
+{
+  "schemaVersion": "1.0",
+  "mode": "imported",
+  "sourceEvidenceIds": [],
+  "observedAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/entry-mode.valid.json

@@ -0,0 +1,6 @@
+{
+  "schemaVersion": "1.0",
+  "mode": "resumed",
+  "sourceEvidenceIds": ["evidence:existing-work"],
+  "observedAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/evidence-identity.unavailable-without-reason.invalid.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "1.0",
+  "evidenceId": "evidence:remote-policy",
+  "workspaceIdentityId": "workspace:echopath",
+  "scopeKind": "subject",
+  "taskId": "task:2.6",
+  "subjectId": "subject:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "source": {
+    "kind": "provider",
+    "providerId": "github",
+    "locator": "repository-policy",
+    "providerEvidenceId": null
+  },
+  "contentDigest": null,
+  "observedAt": "2026-08-18T08:30:00Z",
+  "availability": "unavailable",
+  "sanitized": true,
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/evidence-identity.valid.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "1.0",
+  "evidenceId": "evidence:task-2.6-tests",
+  "workspaceIdentityId": "workspace:echopath",
+  "scopeKind": "subject",
+  "taskId": "task:2.6",
+  "subjectId": "subject:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "source": {
+    "kind": "test",
+    "providerId": null,
+    "locator": "npm test",
+    "providerEvidenceId": null
+  },
+  "contentDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "observedAt": "2026-08-18T08:30:00Z",
+  "availability": "available",
+  "sanitized": true,
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/execution-context-identity.unavailable-without-reason.invalid.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": "1.0",
+  "executionContextIdentityId": "execution-context:npm-test",
+  "workspaceIdentityId": "workspace:forgerail",
+  "subjectId": "subject:commit-a",
+  "entrypoint": {
+    "entrypointId": "entrypoint:npm-test",
+    "kind": "local-command",
+    "locator": "plugins/forgerail/package.json#scripts.test",
+    "digest": null
+  },
+  "invocationRoot": "/workspace/plugins/forgerail",
+  "executor": { "executorId": "executor:codex", "kind": "host-agent" },
+  "runner": { "runnerId": "runner:local-node", "trustClass": "local-observed" },
+  "toolIdentities": ["node:24.15.0"],
+  "providerIdentities": [],
+  "dependencies": [
+    {
+      "dependencyId": "execution-dependency:ancestor-env",
+      "kind": "environment-file",
+      "locator": "external://ancestor/.env",
+      "boundary": "unavailable-external",
+      "declared": false,
+      "availability": "unavailable",
+      "evidenceIdentityId": null,
+      "limitedReason": null
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/execution-context-identity.valid.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": "1.0",
+  "executionContextIdentityId": "execution-context:npm-test",
+  "workspaceIdentityId": "workspace:forgerail",
+  "subjectId": "subject:commit-a",
+  "entrypoint": {
+    "entrypointId": "entrypoint:npm-test",
+    "kind": "local-command",
+    "locator": "plugins/forgerail/package.json#scripts.test",
+    "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+  },
+  "invocationRoot": "/workspace/plugins/forgerail",
+  "executor": { "executorId": "executor:codex", "kind": "host-agent" },
+  "runner": { "runnerId": "runner:local-node", "trustClass": "local-observed" },
+  "toolIdentities": ["node:24.15.0"],
+  "providerIdentities": [],
+  "dependencies": [
+    {
+      "dependencyId": "execution-dependency:node",
+      "kind": "toolchain",
+      "locator": "toolchain://node/24.15.0",
+      "boundary": "allowlisted-external",
+      "declared": true,
+      "availability": "available",
+      "evidenceIdentityId": "evidence:node-version",
+      "limitedReason": null
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/gate-result.satisfied-without-evidence.invalid.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "1.0",
+  "gateResultId": "gate-result:task-2.6-validation",
+  "gateId": "gate:task-2.6-validation",
+  "gateKind": "validation",
+  "workspaceIdentityId": "workspace:echopath",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "disposition": "satisfied",
+  "evidenceIdentityIds": [],
+  "evaluatedAt": "2026-08-18T08:30:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/gate-result.valid.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "1.0",
+  "gateResultId": "gate-result:task-2.6-validation",
+  "gateId": "gate:task-2.6-validation",
+  "gateKind": "validation",
+  "workspaceIdentityId": "workspace:echopath",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "disposition": "satisfied",
+  "evidenceIdentityIds": ["evidence:task-2.6-tests"],
+  "evaluatedAt": "2026-08-18T08:30:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/governance-source.unavailable-without-reason.invalid.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "1.0",
+  "sourceId": "source:platform-policy",
+  "workspaceIdentityId": "workspace:demo",
+  "sourceKind": "platform-policy",
+  "locator": "provider:repository-policy",
+  "ownerId": null,
+  "precedenceClass": "platform-enforced",
+  "applicabilityScope": ["protected-branch"],
+  "workspaceRelationshipIds": [],
+  "observationStatus": "unavailable",
+  "ruleClaimIds": [],
+  "dependencyEdgeIds": [],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/governance-source.valid.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "1.0",
+  "sourceId": "source:agents",
+  "workspaceIdentityId": "workspace:demo",
+  "sourceKind": "instructions",
+  "locator": "AGENTS.md",
+  "ownerId": "owner:demo",
+  "precedenceClass": "workspace-instructions",
+  "applicabilityScope": ["workspace"],
+  "workspaceRelationshipIds": [],
+  "observationStatus": "observed",
+  "ruleClaimIds": ["claim:review"],
+  "dependencyEdgeIds": ["edge:skill"],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/host-adapter-observation.claims-authorization.invalid.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": "1.0",
+  "observationId": "host-observation:codex-task",
+  "adapterId": "codex",
+  "adapterVersion": "0.1.0-alpha.1",
+  "hostIdentityId": "host:codex-desktop",
+  "workspaceIdentityId": "workspace:forgerail",
+  "scopeKind": "subject",
+  "taskId": "task:2.7",
+  "subjectId": "subject:commit-a",
+  "controlRevisionId": "control-revision:1",
+  "authorizationClaim": true,
+  "capabilities": [
+    {
+      "capability": "mutation",
+      "state": "supported",
+      "evidenceIdentityIds": ["evidence:host-can-write"],
+      "limitedReason": null
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/host-adapter-observation.valid.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": "1.0",
+  "observationId": "host-observation:codex-task",
+  "adapterId": "codex",
+  "adapterVersion": "0.1.0-alpha.1",
+  "hostIdentityId": "host:codex-desktop",
+  "workspaceIdentityId": "workspace:forgerail",
+  "scopeKind": "subject",
+  "taskId": "task:2.7",
+  "subjectId": "subject:commit-a",
+  "controlRevisionId": "control-revision:1",
+  "authorizationClaim": false,
+  "capabilities": [
+    {
+      "capability": "execution-context",
+      "state": "supported",
+      "evidenceIdentityIds": ["evidence:execution-context"],
+      "limitedReason": null
+    },
+    {
+      "capability": "mutation",
+      "state": "profile-only",
+      "evidenceIdentityIds": [],
+      "limitedReason": {
+        "schemaVersion": "1.0",
+        "reasonId": "reason:host-mutation-needs-grant",
+        "code": "unsupported-capability",
+        "impact": "unverified",
+        "summary": "Host mutation capability does not claim current operation authorization.",
+        "evidenceIdentityIds": [],
+        "locators": ["host://codex/mutation"],
+        "observedAt": "2026-08-18T15:30:00Z",
+        "sanitized": true
+      }
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/host-adapter.codex.valid.json

@@ -11,7 +11,7 @@
   "activationBoundary": "new-task-required",
   "verification": {
     "mode": "new-task-discovery",
-    "expectedSkills": ["forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"]
+    "expectedSkills": ["architecture-convergence-audit", "forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"]
   },
   "limitations": ["A new task is required after adoption."]
 }

package/scripts/fixtures/contracts/host-adapter.false-supported.invalid.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "1.0",
+  "id": "claude-code",
+  "displayName": "Claude Code",
+  "status": "supported",
+  "instructionDiscovery": "task-start",
+  "skillDiscovery": "agent-skills",
+  "bindingTarget": "CLAUDE.md",
+  "bindingModes": ["managed-block", "thin-reference"],
+  "managedMarker": "forgerail:binding:claude-code:v1",
+  "activationBoundary": "host-specific-verification-required",
+  "verification": { "mode": "profile-only", "expectedSkills": [] },
+  "limitations": ["End-to-end activation has not been verified for alpha.1."]
+}

package/scripts/fixtures/contracts/host-binding-receipt.valid.json

@@ -16,7 +16,7 @@
   ],
   "changedFiles": ["AGENTS.md"],
   "validationEvidence": ["Applied content digest matched the approved Adoption Plan."],
-  "discoveredSkills": ["forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"],
+  "discoveredSkills": ["architecture-convergence-audit", "forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"],
   "activationVerification": {
     "mode": "new-task",
     "verified": true

package/scripts/fixtures/contracts/launch-contract.execution-owner.invalid.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "1.0",
+  "envelope": {
+    "schemaVersion": "1.0",
+    "taskId": "fixture-task-1",
+    "intent": "Update local documentation with ForgeRail guidance.",
+    "nonGoals": ["Publish a release"],
+    "ownerWorkspace": "fixture-workspace",
+    "allowedOperations": ["read files", "edit documentation", "run local validation"],
+    "prohibitedOperations": ["push", "merge", "tag", "release"],
+    "packs": [],
+    "approvalGates": ["remote-integration-approval", "release-approval"],
+    "validation": ["git diff --check passes"],
+    "returnContract": "forgerail-return-receipt-v1"
+  },
+  "effectiveRuleSources": ["AGENTS.md", "ForgeRail Core"],
+  "hostAgent": "Codex",
+  "executionOwner": "forgerail"
+}

package/scripts/fixtures/contracts/limited-reason.unbounded.invalid.json

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "1.0",
+  "reasonId": "reason:unbounded",
+  "code": "arbitrary-secret-bearing-reason",
+  "impact": "unavailable",
+  "summary": "Unbounded reason codes are not an interoperable control contract.",
+  "evidenceIdentityIds": [],
+  "locators": [],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": false
+}

package/scripts/fixtures/contracts/limited-reason.valid.json

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "1.0",
+  "reasonId": "reason:provider-unavailable",
+  "code": "unavailable-provider",
+  "impact": "unavailable",
+  "summary": "The provider could not be observed from the current execution context.",
+  "evidenceIdentityIds": ["evidence:provider-probe"],
+  "locators": ["provider://github/authority"],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/operation-authority-requirement.no-issuer.invalid.json

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": "1.0",
+  "requirementId": "authority-requirement:task-2.6-write",
+  "workspaceIdentityId": "workspace:echopath",
+  "operation": "workspace.write",
+  "target": {
+    "kind": "directory",
+    "locator": "plugins/forgerail/contracts",
+    "identity": "target:forgerail-contracts",
+    "ref": "feat/forgerail-product-architecture",
+    "environment": null
+  },
+  "subjectId": "subject:task-2.6",
+  "scope": ["plugins/forgerail/contracts/**"],
+  "eligibleIssuerSourceIds": [],
+  "acceptedIssuerEvidenceKinds": ["explicit-current-user-instruction"],
+  "freshness": {
+    "maxAgeSeconds": 86400,
+    "expiresRequired": true
+  },
+  "declaredAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/operation-authority-requirement.valid.json

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": "1.0",
+  "requirementId": "authority-requirement:task-2.6-write",
+  "workspaceIdentityId": "workspace:echopath",
+  "operation": "workspace.write",
+  "target": {
+    "kind": "directory",
+    "locator": "plugins/forgerail/contracts",
+    "identity": "target:forgerail-contracts",
+    "ref": "feat/forgerail-product-architecture",
+    "environment": null
+  },
+  "subjectId": "subject:task-2.6",
+  "scope": ["plugins/forgerail/contracts/**"],
+  "eligibleIssuerSourceIds": ["source:user-approval"],
+  "acceptedIssuerEvidenceKinds": ["explicit-current-user-instruction"],
+  "freshness": {
+    "maxAgeSeconds": 86400,
+    "expiresRequired": true
+  },
+  "declaredAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/operation-grant.missing-issuer-evidence.invalid.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": "1.0",
+  "grantId": "grant:task-2.6-write",
+  "grantDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "authorityRequirementId": "authority-requirement:task-2.6-write",
+  "workspaceIdentityId": "workspace:echopath",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "executorId": "host:codex",
+  "operation": "workspace.write",
+  "target": {
+    "kind": "directory",
+    "locator": "plugins/forgerail",
+    "identity": "target:forgerail-private-source",
+    "ref": "feat/forgerail-product-architecture",
+    "environment": null
+  },
+  "subjectId": "subject:task-2.6",
+  "candidateId": null,
+  "scope": ["plugins/forgerail/**"],
+  "issuerId": "user:workspace-owner",
+  "issuerEvidenceId": "",
+  "issuedAt": "2026-08-18T08:00:00Z",
+  "notBefore": "2026-08-18T08:00:00Z",
+  "expiresAt": "2026-08-19T08:00:00Z",
+  "status": "current",
+  "invalidatedAt": null,
+  "invalidationEvidenceId": null,
+  "supersededByGrantId": null,
+  "retroactiveEffect": {
+    "applies": false,
+    "scope": []
+  }
+}

package/scripts/fixtures/contracts/operation-grant.valid.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": "1.0",
+  "grantId": "grant:task-2.6-write",
+  "grantDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "authorityRequirementId": "authority-requirement:task-2.6-write",
+  "workspaceIdentityId": "workspace:echopath",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "executorId": "host:codex",
+  "operation": "workspace.write",
+  "target": {
+    "kind": "directory",
+    "locator": "plugins/forgerail",
+    "identity": "target:forgerail-private-source",
+    "ref": "feat/forgerail-product-architecture",
+    "environment": null
+  },
+  "subjectId": "subject:task-2.6",
+  "candidateId": null,
+  "scope": ["plugins/forgerail/**"],
+  "issuerId": "user:workspace-owner",
+  "issuerEvidenceId": "evidence:user-approval-task-2.6",
+  "issuedAt": "2026-08-18T08:00:00Z",
+  "notBefore": "2026-08-18T08:00:00Z",
+  "expiresAt": "2026-08-19T08:00:00Z",
+  "status": "current",
+  "invalidatedAt": null,
+  "invalidationEvidenceId": null,
+  "supersededByGrantId": null,
+  "retroactiveEffect": {
+    "applies": false,
+    "scope": []
+  }
+}

package/scripts/fixtures/contracts/phase-slice-correlation.aggregate-closure.invalid.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "1.0",
+  "correlationId": "correlation:task-2.6",
+  "taskId": "task:2.6",
+  "parentTaskId": "task:forgerail-control-system",
+  "phaseId": "phase:contracts",
+  "sliceId": "slice:task-2.6",
+  "executionAttemptId": "attempt:task-2.6-1",
+  "ownerWorkspaceIdentityId": "workspace:echopath",
+  "requiredSliceIds": ["slice:other"],
+  "aggregateClosureClaim": true
+}

package/scripts/fixtures/contracts/phase-slice-correlation.valid.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "1.0",
+  "correlationId": "correlation:task-2.6",
+  "taskId": "task:2.6",
+  "parentTaskId": "task:forgerail-control-system",
+  "phaseId": "phase:contracts",
+  "sliceId": "slice:task-2.6",
+  "executionAttemptId": "attempt:task-2.6-1",
+  "ownerWorkspaceIdentityId": "workspace:echopath",
+  "requiredSliceIds": ["slice:task-2.6"],
+  "aggregateClosureClaim": false
+}

package/scripts/fixtures/contracts/profile-change-candidate.unconfirmed.invalid.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "1.0",
+  "candidateId": "candidate:fixture-validation-rule",
+  "workspace": "fixture-workspace",
+  "ruleId": "validation.docs-links",
+  "proposedValue": "run documentation link validation after navigation changes",
+  "evidence": ["three completed tasks required the same missing link check"],
+  "targetOwner": "fixture-workspace",
+  "targetSource": "AGENTS.md",
+  "reason": "The candidate cannot bypass the explicit confirmation boundary.",
+  "requiresConfirmation": false,
+  "status": "candidate"
+}

package/scripts/fixtures/contracts/profile-explanation.false-complete.invalid.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": "1.0",
+  "explanationId": "explanation:demo-2",
+  "profileId": "profile:demo",
+  "profileRevisionId": "profile-revision:demo-2",
+  "workspaceIdentityId": "workspace:demo",
+  "generatedAt": "2026-08-18T00:00:00Z",
+  "completeness": "complete",
+  "sourceSummaries": [
+    {
+      "sourceId": "source:agents",
+      "status": "unavailable",
+      "claimIds": ["claim:review"],
+      "limitedReason": "Source cannot be read."
+    }
+  ],
+  "claimDecisions": [
+    {
+      "claimId": "claim:review",
+      "sourceId": "source:agents",
+      "disposition": "unresolved",
+      "reasonCode": "required-source-unavailable",
+      "dependencyEdgeIds": ["edge:skill"]
+    }
+  ],
+  "conflicts": [],
+  "confirmationNeeds": [
+    {
+      "needId": "confirmation:review",
+      "claimIds": ["claim:review"],
+      "reasonCode": "required-source-unavailable",
+      "prompt": "Confirm the governing review source."
+    }
+  ],
+  "limitedReasons": []
+}

package/scripts/fixtures/contracts/profile-explanation.valid.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": "1.0",
+  "explanationId": "explanation:demo-1",
+  "profileId": "profile:demo",
+  "profileRevisionId": "profile-revision:demo-1",
+  "workspaceIdentityId": "workspace:demo",
+  "generatedAt": "2026-08-18T00:00:00Z",
+  "completeness": "complete",
+  "sourceSummaries": [
+    {
+      "sourceId": "source:agents",
+      "status": "observed",
+      "claimIds": ["claim:review"],
+      "limitedReason": null
+    }
+  ],
+  "claimDecisions": [
+    {
+      "claimId": "claim:review",
+      "sourceId": "source:agents",
+      "disposition": "active",
+      "reasonCode": "highest-applicable-precedence",
+      "dependencyEdgeIds": ["edge:skill"]
+    }
+  ],
+  "conflicts": [],
+  "confirmationNeeds": [],
+  "limitedReasons": []
+}