@echopath-labs/forgerail 0.1.0-alpha.1 → 0.1.0-alpha.2

package/scripts/fixtures/contracts/validation-result.valid.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "1.0",
+  "resultId": "validation-result:contract-fixtures",
+  "topologyId": "topology:forgerail-contracts",
+  "topologyRevisionId": "topology-revision:1",
+  "requirementId": "validation:contract-fixtures",
+  "workspaceIdentityId": "workspace:forgerail",
+  "envelopeRevisionId": "envelope-revision:1",
+  "controlRevisionId": "control-revision:1",
+  "subjectId": "subject:commit-a",
+  "executionContextIdentityId": "execution-context:npm-test",
+  "status": "passed",
+  "expectedResult": "passed",
+  "trustClass": "local-observed",
+  "evidenceIdentityIds": ["evidence:npm-test"],
+  "waiver": null,
+  "observedAt": "2026-08-18T15:30:00Z",
+  "limitedReason": null
+}

package/scripts/fixtures/contracts/validation-topology.dangling-requirement.invalid.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "1.0",
+  "topologyId": "topology:forgerail-contracts",
+  "topologyRevisionId": "topology-revision:1",
+  "workspaceIdentityId": "workspace:forgerail",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:1",
+  "subjectId": "subject:commit-a",
+  "coverageMode": "required",
+  "changedSurfaces": [
+    {
+      "surfaceId": "surface:contracts",
+      "locator": "plugins/forgerail/contracts",
+      "ownerIds": ["owner:forgerail"],
+      "consumerIds": ["consumer:cli"],
+      "validationRequirementIds": ["validation:missing"],
+      "sourceIdentityIds": ["source:openspec-topology"]
+    }
+  ],
+  "validationRequirements": [
+    {
+      "requirementId": "validation:contract-fixtures",
+      "entrypointId": "entrypoint:npm-test",
+      "prerequisiteDependencyEdgeIds": [],
+      "acceptedTrustClasses": ["local-observed"],
+      "expectedResults": ["passed"],
+      "evidenceLocators": ["npm test"],
+      "selected": true
+    }
+  ],
+  "declaredAt": "2026-08-18T15:30:00Z"
+}

package/scripts/fixtures/contracts/validation-topology.protected-environment.valid.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "1.0",
+  "topologyId": "topology:protected-release",
+  "topologyRevisionId": "topology-revision:protected-release-1",
+  "workspaceIdentityId": "workspace:forgerail",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:1",
+  "subjectId": "subject:commit-a",
+  "coverageMode": "required",
+  "changedSurfaces": [
+    {
+      "surfaceId": "surface:release",
+      "locator": "release:forgerail",
+      "ownerIds": ["owner:forgerail"],
+      "consumerIds": ["consumer:registry"],
+      "validationRequirementIds": ["validation:protected-release"],
+      "sourceIdentityIds": ["source:release-policy"]
+    }
+  ],
+  "validationRequirements": [
+    {
+      "requirementId": "validation:protected-release",
+      "entrypointId": "entrypoint:protected-release",
+      "prerequisiteDependencyEdgeIds": [],
+      "acceptedTrustClasses": ["protected-environment"],
+      "expectedResults": ["passed"],
+      "evidenceLocators": ["provider:protected-release"],
+      "selected": true
+    }
+  ],
+  "declaredAt": "2026-08-19T16:45:00Z"
+}

package/scripts/fixtures/contracts/validation-topology.valid.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "1.0",
+  "topologyId": "topology:forgerail-contracts",
+  "topologyRevisionId": "topology-revision:1",
+  "workspaceIdentityId": "workspace:forgerail",
+  "profileId": "profile:forgerail",
+  "profileRevisionId": "profile-revision:1",
+  "subjectId": "subject:commit-a",
+  "coverageMode": "required",
+  "changedSurfaces": [
+    {
+      "surfaceId": "surface:contracts",
+      "locator": "plugins/forgerail/contracts",
+      "ownerIds": ["owner:forgerail"],
+      "consumerIds": ["consumer:cli", "consumer:host-adapter"],
+      "validationRequirementIds": ["validation:contract-fixtures"],
+      "sourceIdentityIds": ["source:openspec-topology"]
+    }
+  ],
+  "validationRequirements": [
+    {
+      "requirementId": "validation:contract-fixtures",
+      "entrypointId": "entrypoint:npm-test",
+      "prerequisiteDependencyEdgeIds": ["dependency:validate-fixtures"],
+      "acceptedTrustClasses": ["local-observed", "trusted-runner"],
+      "expectedResults": ["passed"],
+      "evidenceLocators": ["npm test"],
+      "selected": true
+    }
+  ],
+  "declaredAt": "2026-08-18T15:30:00Z"
+}

package/scripts/fixtures/contracts/workspace-identity.missing-root.invalid.json

@@ -0,0 +1,6 @@
+{
+  "schemaVersion": "1.0",
+  "workspaceIdentityId": "workspace:demo",
+  "boundaryClaims": [],
+  "observedAt": "2026-08-18T00:00:00Z"
+}

package/scripts/fixtures/contracts/workspace-identity.valid.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "1.0",
+  "workspaceIdentityId": "workspace:demo",
+  "canonicalRootLocator": ".",
+  "boundaryClaims": [
+    {
+      "providerId": "git",
+      "kind": "repository",
+      "identity": "repository:demo",
+      "observedAt": "2026-08-18T00:00:00Z"
+    }
+  ],
+  "observedAt": "2026-08-18T00:00:00Z"
+}

package/scripts/fixtures/contracts/workspace-relationship.inferred-authority.invalid.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "1.0",
+  "relationshipId": "relationship:physical-parent",
+  "sourceWorkspaceIdentityId": "workspace:outer",
+  "targetWorkspaceIdentityId": "workspace:inner",
+  "relationshipType": "governance-scope",
+  "governanceApplicability": "scoped",
+  "applicabilityScope": ["all"],
+  "declaredBySourceId": "source:filesystem-observation",
+  "provenanceStatus": "inferred",
+  "authorityTransfer": true,
+  "observedAt": "2026-08-18T00:00:00Z"
+}

package/scripts/fixtures/contracts/workspace-relationship.valid.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "1.0",
+  "relationshipId": "relationship:coordination-to-demo",
+  "sourceWorkspaceIdentityId": "workspace:coordination",
+  "targetWorkspaceIdentityId": "workspace:demo",
+  "relationshipType": "governance-scope",
+  "governanceApplicability": "scoped",
+  "applicabilityScope": ["release-coordination"],
+  "declaredBySourceId": "source:coordination-plan",
+  "provenanceStatus": "provider-declared",
+  "authorityTransfer": false,
+  "observedAt": "2026-08-18T00:00:00Z"
+}

package/scripts/fixtures/control-system/architecture-convergence-cases.json

@@ -0,0 +1,25 @@
+{
+  "schemaVersion": "1.0",
+  "matrixId": "architecture-convergence-audit",
+  "risk": "medium",
+  "analyzeFirst": true,
+  "defaultMutation": "read-only",
+  "createsState": false,
+  "requiresAuthentication": false,
+  "cases": [
+    { "caseId": "diagnosis-routes-source-discovery", "signal": "nearest instructions and commands are unknown", "evidenceCompleteness": "complete", "expectedOwner": "diagnosis", "expectedFinding": "route", "expectedAction": "discover-sources" },
+    { "caseId": "health-routes-stale-worktrees", "signal": "worktrees are stale and unclaimed", "evidenceCompleteness": "complete", "expectedOwner": "health", "expectedFinding": "route", "expectedAction": "assess-recurring-health" },
+    { "caseId": "core-routes-authority", "signal": "exact operation authority is unresolved", "evidenceCompleteness": "complete", "expectedOwner": "core", "expectedFinding": "route", "expectedAction": "evaluate-deterministic-control" },
+    { "caseId": "thin-seam-retained", "signal": "thin interface owns authorization substitution", "evidenceCompleteness": "complete", "expectedOwner": "existing-component", "expectedFinding": "independent-invariant", "expectedAction": "retain" },
+    { "caseId": "large-cohesive-slice-retained", "signal": "large slice owns one independently useful invariant", "evidenceCompleteness": "complete", "expectedOwner": "existing-component", "expectedFinding": "cohesive-slice", "expectedAction": "retain" },
+    { "caseId": "second-identity-fence", "signal": "two components normalize and persist the same canonical identity", "evidenceCompleteness": "complete", "expectedOwner": "canonical-identity-owner", "expectedFinding": "confirmed-redundancy", "expectedAction": "consolidate" },
+    { "caseId": "parallel-state-machine", "signal": "two state machines own the same durable transition", "evidenceCompleteness": "complete", "expectedOwner": "durable-state-owner", "expectedFinding": "confirmed-redundancy", "expectedAction": "delete-duplicate" },
+    { "caseId": "duplicate-parser", "signal": "two parsers interpret the same authoritative format", "evidenceCompleteness": "complete", "expectedOwner": "format-owner", "expectedFinding": "confirmed-redundancy", "expectedAction": "reuse-parser" },
+    { "caseId": "speculative-compatibility", "signal": "compatibility layer has no current or committed consumer", "evidenceCompleteness": "complete", "expectedOwner": "none", "expectedFinding": "retention-burden-failed", "expectedAction": "defer-or-delete" },
+    { "caseId": "recovery-multiplication", "signal": "two resume paths reconstruct the same state", "evidenceCompleteness": "complete", "expectedOwner": "recovery-owner", "expectedFinding": "confirmed-redundancy", "expectedAction": "consolidate" },
+    { "caseId": "implementation-shaped-tests", "signal": "tests only preserve an obsolete duplicate abstraction", "evidenceCompleteness": "complete", "expectedOwner": "behavior-owner", "expectedFinding": "obsolete-coverage", "expectedAction": "delete-tests-preserve-invariants" },
+    { "caseId": "incomplete-evidence", "signal": "callers and durable fact owner are not verified", "evidenceCompleteness": "incomplete", "expectedOwner": "unverified", "expectedFinding": "inferred-redundancy", "expectedAction": "verify-before-deletion" },
+    { "caseId": "existing-profile-objects", "signal": "project facts are required for the audit", "evidenceCompleteness": "complete", "expectedOwner": "governance-source-profile-envelope", "expectedFinding": "reuse-existing-state", "expectedAction": "read-existing-objects" },
+    { "caseId": "issue-without-authorization", "signal": "local audit recommends a tracking issue", "evidenceCompleteness": "complete", "expectedOwner": "host-provider-boundary", "expectedFinding": "external-write-not-authorized", "expectedAction": "return-template-only" }
+  ]
+}

package/scripts/fixtures/control-system/task-2.9-invalid-boundary-matrix.json

@@ -0,0 +1,203 @@
+{
+  "schemaVersion": "1.0",
+  "matrixId": "task-2.9-invalid-boundaries",
+  "evaluatorImplemented": false,
+  "cases": [
+    {
+      "caseId": "missing-identity",
+      "validationLayer": "schema",
+      "contractFixtures": [
+        {
+          "type": "task-envelope-v2",
+          "path": "contracts/task-envelope-v2.missing-workspace-identity.invalid.json",
+          "expectedSchemaValid": false
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "missing-identity",
+      "observations": {
+        "requiredIdentity": "workspaceIdentityId",
+        "observedIdentity": null
+      }
+    },
+    {
+      "caseId": "stale-base-digest",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "profile-candidate",
+          "path": "contracts/profile-change-candidate.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "stale-base-digest",
+      "observations": {
+        "candidateBaseDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "observedTargetDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      }
+    },
+    {
+      "caseId": "forged-grant",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "operation-grant",
+          "path": "contracts/operation-grant.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "forged-grant",
+      "observations": {
+        "declaredGrantDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        "expectedGrantDigest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+      }
+    },
+    {
+      "caseId": "ineligible-issuer",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "operation-authority-requirement",
+          "path": "contracts/operation-authority-requirement.valid.json",
+          "expectedSchemaValid": true
+        },
+        {
+          "type": "operation-grant",
+          "path": "contracts/operation-grant.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "ineligible-issuer",
+      "observations": {
+        "eligibleIssuerSourceIds": ["source:user-approval"],
+        "observedIssuerSourceId": "source:self-described-caller"
+      }
+    },
+    {
+      "caseId": "duplicate-actor",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "review-authority-requirement",
+          "path": "contracts/review-authority-requirement.valid.json",
+          "expectedSchemaValid": true
+        },
+        {
+          "type": "authority-evidence",
+          "path": "contracts/authority-evidence.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "duplicate-actor",
+      "observations": {
+        "minimumDistinctActors": 2,
+        "observedActorIds": ["actor:owner-a", "actor:owner-a"]
+      }
+    },
+    {
+      "caseId": "revoked-approval",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "review-authority-requirement",
+          "path": "contracts/review-authority-requirement.valid.json",
+          "expectedSchemaValid": true
+        },
+        {
+          "type": "authority-evidence",
+          "path": "contracts/authority-evidence.revoked.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "revoked-approval",
+      "observations": {
+        "requiredLifecycle": "current",
+        "observedLifecycle": "revoked"
+      }
+    },
+    {
+      "caseId": "wrong-trust",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "validation-topology",
+          "path": "contracts/validation-topology.protected-environment.valid.json",
+          "expectedSchemaValid": true
+        },
+        {
+          "type": "validation-result",
+          "path": "contracts/validation-result.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "wrong-trust",
+      "observations": {
+        "acceptedTrustClasses": ["protected-environment"],
+        "observedTrustClass": "local-observed"
+      }
+    },
+    {
+      "caseId": "dangling-dependency",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "validation-topology",
+          "path": "contracts/validation-topology.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "dangling-dependency",
+      "observations": {
+        "declaredDependencyEdgeIds": ["dependency:validate-fixtures"],
+        "availableDependencyEdgeIds": []
+      }
+    },
+    {
+      "caseId": "changed-subject",
+      "validationLayer": "cross-contract",
+      "contractFixtures": [
+        {
+          "type": "task-envelope-v2",
+          "path": "contracts/task-envelope-v2.valid.json",
+          "expectedSchemaValid": true
+        },
+        {
+          "type": "return-receipt-v2",
+          "path": "contracts/return-receipt-v2.changed-subject.valid.json",
+          "expectedSchemaValid": true
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "changed-subject",
+      "observations": {
+        "envelopeSubjectId": "subject:task-2.6",
+        "receiptSubjectId": "subject:task-2.6-rewritten"
+      }
+    },
+    {
+      "caseId": "cross-workspace-authority-collapse",
+      "validationLayer": "schema",
+      "contractFixtures": [
+        {
+          "type": "cross-workspace-pack-composition",
+          "path": "contracts/cross-workspace-pack-composition.authority-collapse.invalid.json",
+          "expectedSchemaValid": false
+        }
+      ],
+      "expectedDisposition": "rejected",
+      "expectedReason": "cross-workspace-authority-collapse",
+      "observations": {
+        "authorityTransfer": true,
+        "operationGrantTransfer": true,
+        "receiptSubstitution": true
+      }
+    }
+  ]
+}

package/scripts/fixtures/control-system/task-4-diagnosis-health-separation.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "1.0",
+  "matrixId": "task-4-diagnosis-health-separation",
+  "analyzeFirst": true,
+  "mutationsAllowed": false,
+  "cases": [
+    { "caseId": "nested-owner-boundary", "question": "what-exists", "observations": ["independent child repository", "nearest agent entry"], "expectedOwner": "diagnosis", "expectedOutput": "bounded-source-inventory" },
+    { "caseId": "nearest-governance-sources", "question": "what-exists", "observations": ["agent entry", "skills", "ownership source", "specification source", "native command entry"], "expectedOwner": "diagnosis", "expectedOutput": "source-locators-with-provenance" },
+    { "caseId": "dependency-unavailable", "question": "what-exists", "observations": ["required executable unavailable"], "expectedOwner": "diagnosis", "expectedOutput": "unavailable-with-limited-reason" },
+    { "caseId": "baseline-debt", "question": "what-exists", "observations": ["failure predates selected change"], "expectedOwner": "diagnosis", "expectedOutput": "baseline-debt-separated-from-diff" },
+    { "caseId": "stale-unclaimed-worktree", "question": "is-governance-healthy", "observations": ["worktree has no current owner", "recovery entry is stale"], "expectedOwner": "health", "expectedOutput": "recurring-stale-worktree-signal" },
+    { "caseId": "specification-adr-residue", "question": "is-governance-healthy", "observations": ["completed specification remains active", "architecture link points to superseded record"], "expectedOwner": "health", "expectedOutput": "lifecycle-and-recovery-drift" },
+    { "caseId": "ci-generated-drift", "question": "is-governance-healthy", "observations": ["declared CI topology differs from provider observation", "generated artifact differs from source"], "expectedOwner": "health", "expectedOutput": "drift-without-provider-pass" },
+    { "caseId": "compatibility-test-abstraction-bloat", "question": "is-governance-healthy", "observations": ["multiple compatibility paths", "implementation-shaped tests", "unclear current consumer"], "expectedOwner": "health", "expectedOutput": "maintenance-debt-signal" },
+    { "caseId": "runner-qualification-stale", "question": "is-governance-healthy", "observations": ["runner configuration changed after qualification"], "expectedOwner": "health", "expectedOutput": "qualification-freshness-risk" },
+    { "caseId": "exact-authority-and-receipt", "question": "can-transition-proceed", "observations": ["exact subject", "authority requirement", "validation topology", "receipt identity"], "expectedOwner": "core", "expectedOutput": "deterministic-control-result" },
+    { "caseId": "duplicate-capability-owner", "question": "what-minimal-implementation-remains", "observations": ["two state machines claim the same durable fact"], "expectedOwner": "architecture-convergence", "expectedOutput": "owner-map-and-deletion-first-plan" }
+  ]
+}

package/scripts/fixtures/workspaces/no-node-project/AGENTS.md

@@ -0,0 +1,3 @@
+# Documentation Workspace Instructions
+
+Preserve existing documents. Diagnose before proposing changes, and do not create persistent tool state without explicit approval.

package/scripts/fixtures/workspaces/no-node-project/README.md

@@ -0,0 +1,3 @@
+# No-Node documentation fixture
+
+This fixture intentionally has no `package.json`, `node_modules`, or `.forgerail/` directory. It models a documentation-only project that uses Agent Plugin Skills without a project-local JavaScript runtime.

package/scripts/fixtures/workspaces/no-node-project/docs/adr/0001-durable-records.md

@@ -0,0 +1,3 @@
+# ADR 0001: Durable records
+
+Accepted decisions are stored as concise Markdown ADRs. Recommendations remain proposals until reviewed.