@echopath-labs/forgerail 0.1.0-alpha.1 → 0.1.0-alpha.2

package/scripts/fixtures/contracts/provider-adapter-observation.unauthenticated-supported.invalid.json

@@ -0,0 +1,43 @@
+{
+  "schemaVersion": "1.0",
+  "observationId": "provider-observation:github-task",
+  "adapterId": "github-provider",
+  "adapterVersion": "1.0.0",
+  "providerId": "github",
+  "workspaceIdentityId": "workspace:forgerail",
+  "sourceIdentityId": "source:github-repository",
+  "scopeKind": "subject",
+  "taskId": "task:2.7",
+  "subjectId": "subject:commit-a",
+  "controlRevisionId": "control-revision:1",
+  "identity": {
+    "state": "unauthenticated",
+    "actorId": null,
+    "evidenceIdentityIds": ["evidence:github-auth-probe"],
+    "limitedReason": {
+      "schemaVersion": "1.0",
+      "reasonId": "reason:github-unauthenticated",
+      "code": "unauthenticated-provider",
+      "impact": "unavailable",
+      "summary": "Current provider identity could not be authenticated.",
+      "evidenceIdentityIds": ["evidence:github-auth-probe"],
+      "locators": ["provider://github/auth"],
+      "observedAt": "2026-08-18T15:30:00Z",
+      "sanitized": true
+    }
+  },
+  "authorizationClaim": false,
+  "capabilities": [
+    {
+      "capability": "authority-observation",
+      "state": "supported",
+      "requiresIdentity": true,
+      "sideEffectKinds": [],
+      "approvalRequirementIds": [],
+      "evidenceIdentityIds": ["evidence:forged-authority"],
+      "limitedReason": null
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/provider-adapter-observation.valid.json

@@ -0,0 +1,62 @@
+{
+  "schemaVersion": "1.0",
+  "observationId": "provider-observation:github-task",
+  "adapterId": "github-provider",
+  "adapterVersion": "1.0.0",
+  "providerId": "github",
+  "workspaceIdentityId": "workspace:forgerail",
+  "sourceIdentityId": "source:github-repository",
+  "scopeKind": "subject",
+  "taskId": "task:2.7",
+  "subjectId": "subject:commit-a",
+  "controlRevisionId": "control-revision:1",
+  "identity": {
+    "state": "unauthenticated",
+    "actorId": null,
+    "evidenceIdentityIds": ["evidence:github-auth-probe"],
+    "limitedReason": {
+      "schemaVersion": "1.0",
+      "reasonId": "reason:github-unauthenticated",
+      "code": "unauthenticated-provider",
+      "impact": "unavailable",
+      "summary": "Current provider identity could not be authenticated.",
+      "evidenceIdentityIds": ["evidence:github-auth-probe"],
+      "locators": ["provider://github/auth"],
+      "observedAt": "2026-08-18T15:30:00Z",
+      "sanitized": true
+    }
+  },
+  "authorizationClaim": false,
+  "capabilities": [
+    {
+      "capability": "source-observation",
+      "state": "supported",
+      "requiresIdentity": false,
+      "sideEffectKinds": [],
+      "approvalRequirementIds": [],
+      "evidenceIdentityIds": ["evidence:github-local-config"],
+      "limitedReason": null
+    },
+    {
+      "capability": "authority-observation",
+      "state": "unavailable",
+      "requiresIdentity": true,
+      "sideEffectKinds": [],
+      "approvalRequirementIds": [],
+      "evidenceIdentityIds": ["evidence:github-auth-probe"],
+      "limitedReason": {
+        "schemaVersion": "1.0",
+        "reasonId": "reason:github-authority-unavailable",
+        "code": "unauthenticated-provider",
+        "impact": "unavailable",
+        "summary": "Platform authority evidence is unavailable without authenticated identity.",
+        "evidenceIdentityIds": ["evidence:github-auth-probe"],
+        "locators": ["provider://github/authority"],
+        "observedAt": "2026-08-18T15:30:00Z",
+        "sanitized": true
+      }
+    }
+  ],
+  "observedAt": "2026-08-18T15:30:00Z",
+  "sanitized": true
+}

package/scripts/fixtures/contracts/return-receipt-v2.changed-subject.valid.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": "2.0",
+  "receiptId": "receipt:task-2.6-changed-subject",
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-2",
+  "subjectId": "subject:task-2.6-rewritten",
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-2",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "exercisedOperationGrantIds": ["grant:task-2.6-write"],
+  "changedScope": ["plugins/forgerail/contracts"],
+  "validationEvidenceIdentityIds": ["evidence:task-2.6-tests-rewritten"],
+  "externalSideEffects": [],
+  "confirmedNonMutations": ["No public projection", "No remote operation"],
+  "residualRisks": [],
+  "rollbackEnvelopeLineageId": null,
+  "deviations": [],
+  "claimStatus": "verified",
+  "verificationGateResultId": "gate-result:task-2.6-receipt-rewritten",
+  "closeout": "complete",
+  "claimedAt": "2026-08-19T16:45:00Z"
+}

package/scripts/fixtures/contracts/return-receipt-v2.unverified-closeout.invalid.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": "2.0",
+  "receiptId": "receipt:task-2.6",
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "exercisedOperationGrantIds": ["grant:task-2.6-write"],
+  "changedScope": ["plugins/forgerail/contracts"],
+  "validationEvidenceIdentityIds": [],
+  "externalSideEffects": [],
+  "confirmedNonMutations": ["No public projection"],
+  "residualRisks": [],
+  "rollbackEnvelopeLineageId": null,
+  "deviations": [],
+  "claimStatus": "claimed",
+  "verificationGateResultId": null,
+  "closeout": "complete",
+  "claimedAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/return-receipt-v2.valid.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": "2.0",
+  "receiptId": "receipt:task-2.6",
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "controlRevisionId": "control-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "exercisedOperationGrantIds": ["grant:task-2.6-write"],
+  "changedScope": ["plugins/forgerail/contracts", "plugins/forgerail/scripts", "plugins/forgerail/docs"],
+  "validationEvidenceIdentityIds": ["evidence:task-2.6-tests"],
+  "externalSideEffects": [],
+  "confirmedNonMutations": ["No public projection", "No remote operation"],
+  "residualRisks": ["Exhaustive compatibility matrix is deferred to task 2.9 and 2.10"],
+  "rollbackEnvelopeLineageId": null,
+  "deviations": [],
+  "claimStatus": "verified",
+  "verificationGateResultId": "gate-result:task-2.6-receipt",
+  "closeout": "complete",
+  "claimedAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/review-authority-requirement.transitive.invalid.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": "1.0",
+  "requirementId": "review:req-ownership",
+  "workspaceIdentityId": "workspace:forgerail",
+  "operation": "merge",
+  "authorityClass": "ownership_approval",
+  "subjectId": "subject:commit-a",
+  "scope": ["plugins/forgerail/contracts"],
+  "authoritySourceIds": ["source:codeowners"],
+  "acceptedEvidenceKinds": ["provider-review"],
+  "quorum": { "minimumCount": 2, "distinctActors": true },
+  "actorConstraints": {
+    "eligibleActorSourceIds": ["source:codeowners"],
+    "excludedRelations": ["subject-author", "executor"]
+  },
+  "ownerCoverage": { "required": true, "surfaceIds": ["surface:contracts"] },
+  "freshness": { "maxAgeSeconds": 3600, "expiresRequired": true },
+  "substitutionPolicy": {
+    "mode": "bounded-equivalence",
+    "equivalenceEdges": [
+      {
+        "edgeId": "equivalence:agent-to-owner",
+        "fromAuthorityClass": "agent_review",
+        "toRequirementId": "review:req-ownership",
+        "sourceId": "source:project-policy",
+        "direction": "one-way",
+        "transitive": true
+      }
+    ]
+  },
+  "waiverPolicy": { "allowed": false, "requiredAuthorityClass": null },
+  "declaredAt": "2026-08-18T15:30:00Z"
+}

package/scripts/fixtures/contracts/review-authority-requirement.valid.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "1.0",
+  "requirementId": "review:req-ownership",
+  "workspaceIdentityId": "workspace:forgerail",
+  "operation": "merge",
+  "authorityClass": "ownership_approval",
+  "subjectId": "subject:commit-a",
+  "scope": ["plugins/forgerail/contracts"],
+  "authoritySourceIds": ["source:codeowners"],
+  "acceptedEvidenceKinds": ["provider-review"],
+  "quorum": { "minimumCount": 2, "distinctActors": true },
+  "actorConstraints": {
+    "eligibleActorSourceIds": ["source:codeowners"],
+    "excludedRelations": ["subject-author", "executor"]
+  },
+  "ownerCoverage": { "required": true, "surfaceIds": ["surface:contracts"] },
+  "freshness": { "maxAgeSeconds": 3600, "expiresRequired": true },
+  "substitutionPolicy": { "mode": "none", "equivalenceEdges": [] },
+  "waiverPolicy": { "allowed": false, "requiredAuthorityClass": null },
+  "declaredAt": "2026-08-18T15:30:00Z"
+}

package/scripts/fixtures/contracts/rollback-envelope-lineage.reused-grant.invalid.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "1.0",
+  "lineageId": "rollback-lineage:task-2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "forwardEnvelope": {
+    "envelopeId": "envelope:task-2.6",
+    "revisionId": "envelope-revision:task-2.6-1",
+    "subjectId": "subject:task-2.6-forward"
+  },
+  "rollbackEnvelope": {
+    "envelopeId": "envelope:task-2.6-rollback",
+    "revisionId": "envelope-revision:task-2.6-rollback-1",
+    "subjectId": "subject:task-2.6-rollback"
+  },
+  "forwardOperationGrantIds": ["grant:task-2.6-forward"],
+  "rollbackOperationGrantIds": ["grant:task-2.6-forward"],
+  "rollbackOperationIds": ["operation:task-2.6-revert"],
+  "state": "authorized",
+  "validationGateResultIds": [],
+  "rollbackReceiptId": null,
+  "declaredByEvidenceId": "evidence:task-2.6-rollback-candidate",
+  "reason": "Incorrectly reuse the forward grant.",
+  "createdAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/rollback-envelope-lineage.valid.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "1.0",
+  "lineageId": "rollback-lineage:task-2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "forwardEnvelope": {
+    "envelopeId": "envelope:task-2.6",
+    "revisionId": "envelope-revision:task-2.6-1",
+    "subjectId": "subject:task-2.6-forward"
+  },
+  "rollbackEnvelope": {
+    "envelopeId": "envelope:task-2.6-rollback",
+    "revisionId": "envelope-revision:task-2.6-rollback-1",
+    "subjectId": "subject:task-2.6-rollback"
+  },
+  "forwardOperationGrantIds": ["grant:task-2.6-forward"],
+  "rollbackOperationGrantIds": ["grant:task-2.6-rollback"],
+  "rollbackOperationIds": ["operation:task-2.6-revert"],
+  "state": "authorized",
+  "validationGateResultIds": [],
+  "rollbackReceiptId": null,
+  "declaredByEvidenceId": "evidence:task-2.6-rollback-candidate",
+  "reason": "Restore the exact pre-task 2.6 contract baseline.",
+  "createdAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/rule-claim.inferred-enforceable.invalid.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "1.0",
+  "claimId": "claim:inferred-release",
+  "workspaceIdentityId": "workspace:demo",
+  "sourceId": "source:readme",
+  "ruleKey": "release.approval",
+  "normalizedValue": "two-reviewers",
+  "precedenceClass": "documentation",
+  "applicabilityScope": ["release"],
+  "observationPoint": "README.md#release",
+  "status": "inferred",
+  "enforcement": "enforceable",
+  "dependencyEdgeIds": [],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/rule-claim.valid.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "1.0",
+  "claimId": "claim:review",
+  "workspaceIdentityId": "workspace:demo",
+  "sourceId": "source:agents",
+  "ruleKey": "review.required",
+  "normalizedValue": true,
+  "precedenceClass": "workspace-instructions",
+  "applicabilityScope": ["code-change"],
+  "observationPoint": "AGENTS.md#review",
+  "status": "confirmed",
+  "enforcement": "enforceable",
+  "dependencyEdgeIds": ["edge:skill"],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/source-dependency-edge.unavailable-without-reason.invalid.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": "1.0",
+  "edgeId": "edge:missing-command",
+  "workspaceIdentityId": "workspace:demo",
+  "declaringSourceId": "source:agents",
+  "target": {
+    "kind": "command",
+    "locator": "npm run missing",
+    "identity": null
+  },
+  "requiredness": "required",
+  "applicabilityScope": ["code-change"],
+  "provenanceStatus": "structured",
+  "observationStatus": "unavailable",
+  "affectedClaimIds": ["claim:review"],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/source-dependency-edge.valid.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": "1.0",
+  "edgeId": "edge:skill",
+  "workspaceIdentityId": "workspace:demo",
+  "declaringSourceId": "source:agents",
+  "target": {
+    "kind": "skill",
+    "locator": ".codex/skills/review/SKILL.md",
+    "identity": "skill:review"
+  },
+  "requiredness": "required",
+  "applicabilityScope": ["code-change"],
+  "provenanceStatus": "structured",
+  "observationStatus": "available",
+  "affectedClaimIds": ["claim:review"],
+  "observedAt": "2026-08-18T00:00:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/task-control-revision.closed-without-receipt.invalid.json

@@ -0,0 +1,37 @@
+{
+  "schemaVersion": "1.0",
+  "revisionId": "control-revision:task-2.6-1",
+  "predecessorRevisionId": null,
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "entryMode": {
+    "schemaVersion": "1.0",
+    "mode": "new",
+    "sourceEvidenceIds": [],
+    "observedAt": "2026-08-18T08:00:00Z"
+  },
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "state": "closed",
+  "operationGrantIds": ["grant:task-2.6-write"],
+  "gateResultIds": ["gate-result:task-2.6-validation"],
+  "evidenceIdentityIds": ["evidence:task-2.6-tests"],
+  "deviationEvidenceIds": [],
+  "returnReceiptId": null,
+  "observedAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/task-control-revision.valid.json

@@ -0,0 +1,37 @@
+{
+  "schemaVersion": "1.0",
+  "revisionId": "control-revision:task-2.6-1",
+  "predecessorRevisionId": null,
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "envelopeId": "envelope:task-2.6",
+  "envelopeRevisionId": "envelope-revision:task-2.6-1",
+  "subjectId": "subject:task-2.6",
+  "entryMode": {
+    "schemaVersion": "1.0",
+    "mode": "new",
+    "sourceEvidenceIds": [],
+    "observedAt": "2026-08-18T08:00:00Z"
+  },
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "state": "closed",
+  "operationGrantIds": ["grant:task-2.6-write"],
+  "gateResultIds": ["gate-result:task-2.6-validation"],
+  "evidenceIdentityIds": ["evidence:task-2.6-tests"],
+  "deviationEvidenceIds": [],
+  "returnReceiptId": "receipt:task-2.6",
+  "observedAt": "2026-08-18T08:30:00Z"
+}

package/scripts/fixtures/contracts/task-envelope-v2.missing-workspace-identity.invalid.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": "2.0",
+  "envelopeId": "envelope:task-2.9",
+  "revisionId": "envelope-revision:task-2.9-1",
+  "taskId": "task:2.9",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.8",
+  "subject": {
+    "subjectId": "subject:task-2.9",
+    "kind": "workspace-state",
+    "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "locator": "plugins/forgerail"
+  },
+  "intent": "Exercise the missing Workspace Identity boundary.",
+  "nonGoals": ["No evaluator implementation"],
+  "entryMode": {
+    "schemaVersion": "1.0",
+    "mode": "new",
+    "sourceEvidenceIds": [],
+    "observedAt": "2026-08-19T16:45:00Z"
+  },
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.9",
+    "taskId": "task:2.9",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:fixtures",
+    "sliceId": "slice:task-2.9",
+    "executionAttemptId": "attempt:task-2.9-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.9"],
+    "aggregateClosureClaim": false
+  },
+  "operations": [],
+  "prohibitedOperations": ["git.push", "package.publish"],
+  "requiredGateIds": ["gate:task-2.9-validation"],
+  "returnContract": "return-receipt-v2",
+  "createdAt": "2026-08-19T16:45:00Z"
+}

package/scripts/fixtures/contracts/task-envelope-v2.valid.json

@@ -0,0 +1,54 @@
+{
+  "schemaVersion": "2.0",
+  "envelopeId": "envelope:task-2.6",
+  "revisionId": "envelope-revision:task-2.6-1",
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "subject": {
+    "subjectId": "subject:task-2.6",
+    "kind": "workspace-state",
+    "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "locator": "plugins/forgerail"
+  },
+  "intent": "Define the bounded task 2.6 control contracts.",
+  "nonGoals": ["No evaluator implementation", "No public projection"],
+  "entryMode": {
+    "schemaVersion": "1.0",
+    "mode": "new",
+    "sourceEvidenceIds": [],
+    "observedAt": "2026-08-18T08:00:00Z"
+  },
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:echopath",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "operations": [
+    {
+      "operationId": "operation:task-2.6-write",
+      "operation": "workspace.write",
+      "target": {
+        "kind": "directory",
+        "locator": "plugins/forgerail",
+        "identity": "target:forgerail-private-source",
+        "ref": "feat/forgerail-product-architecture",
+        "environment": null
+      },
+      "scope": ["plugins/forgerail/**"],
+      "authorityRequirementId": "authority-requirement:task-2.6-write"
+    }
+  ],
+  "prohibitedOperations": ["git.push", "package.publish", "projection.write"],
+  "requiredGateIds": ["gate:task-2.6-validation"],
+  "returnContract": "return-receipt-v2",
+  "createdAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/task-envelope-v2.workspace-mismatch.invalid.json

@@ -0,0 +1,40 @@
+{
+  "schemaVersion": "2.0",
+  "envelopeId": "envelope:task-2.6",
+  "revisionId": "envelope-revision:task-2.6-1",
+  "taskId": "task:2.6",
+  "workspaceIdentityId": "workspace:echopath",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:forgerail-2.5",
+  "subject": {
+    "subjectId": "subject:task-2.6",
+    "kind": "workspace-state",
+    "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "locator": "plugins/forgerail"
+  },
+  "intent": "Define the bounded task 2.6 control contracts.",
+  "nonGoals": ["No evaluator implementation"],
+  "entryMode": {
+    "schemaVersion": "1.0",
+    "mode": "new",
+    "sourceEvidenceIds": [],
+    "observedAt": "2026-08-18T08:00:00Z"
+  },
+  "phaseSliceCorrelation": {
+    "schemaVersion": "1.0",
+    "correlationId": "correlation:task-2.6",
+    "taskId": "task:2.6",
+    "parentTaskId": "task:forgerail-control-system",
+    "phaseId": "phase:contracts",
+    "sliceId": "slice:task-2.6",
+    "executionAttemptId": "attempt:task-2.6-1",
+    "ownerWorkspaceIdentityId": "workspace:other",
+    "requiredSliceIds": ["slice:task-2.6"],
+    "aggregateClosureClaim": false
+  },
+  "operations": [],
+  "prohibitedOperations": ["git.push"],
+  "requiredGateIds": [],
+  "returnContract": "return-receipt-v2",
+  "createdAt": "2026-08-18T08:00:00Z"
+}

package/scripts/fixtures/contracts/validation-result.passed-without-evidence.invalid.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": "1.0",
+  "resultId": "validation-result:contract-fixtures",
+  "topologyId": "topology:forgerail-contracts",
+  "topologyRevisionId": "topology-revision:1",
+  "requirementId": "validation:contract-fixtures",
+  "workspaceIdentityId": "workspace:forgerail",
+  "envelopeRevisionId": "envelope-revision:1",
+  "controlRevisionId": "control-revision:1",
+  "subjectId": "subject:commit-a",
+  "executionContextIdentityId": "execution-context:npm-test",
+  "status": "passed",
+  "expectedResult": "passed",
+  "trustClass": "local-observed",
+  "evidenceIdentityIds": [],
+  "waiver": null,
+  "observedAt": "2026-08-18T15:30:00Z",
+  "limitedReason": {
+    "schemaVersion": "1.0",
+    "reasonId": "reason:missing-result",
+    "code": "missing-result",
+    "impact": "blocked",
+    "summary": "A passed result cannot replace missing evidence.",
+    "evidenceIdentityIds": [],
+    "locators": ["npm test"],
+    "observedAt": "2026-08-18T15:30:00Z",
+    "sanitized": true
+  }
+}