@emilia-protocol/gate 0.9.4 → 0.9.5

package/aec-execution.js

@@ -50,6 +50,19 @@ function humanFloorSatisfied(result, floor) {
   return classA || quorum;
 }
 
+function evidenceSatisfied(result) {
+  try {
+    if (!result || typeof result !== 'object') return false;
+    // New verifiers expose the evidence-layer term. Older supported 3.x
+    // verifiers expose the equivalent `allow` result only. If `satisfied` is
+    // present, it is authoritative so a conflicting compatibility alias can
+    // never upgrade a refusal.
+    return own(result, 'satisfied') ? result.satisfied === true : result.allow === true;
+  } catch {
+    return false;
+  }
+}
+
 function consumptionKey(result) {
   // Consume the executor-owned action instance, not a presenter-selected
   // component identifier. Otherwise an invalid decoy component or an alternate
@@ -216,7 +229,7 @@ export function createAECExecutionGate({
       expectedAction: actionSnapshot,
       verificationTime,
     });
-    if (!result.allow) return deny('aec_refused', result, { reasons: result.reasons });
+    if (!evidenceSatisfied(result)) return deny('aec_refused', result, { reasons: result.reasons });
     if (!humanFloorSatisfied(result, humanFloor)) return deny('human_floor_unsatisfied', result);
 
     const key = consumptionKey(result);
@@ -294,6 +307,7 @@ export const __aecExecutionSecurityInternals = Object.freeze({
   validLogRecord,
   validComponent,
   humanFloorSatisfied,
+  evidenceSatisfied,
   consumptionKey,
   instant,
 });

package/deploy/helm/README.md

@@ -50,7 +50,7 @@ kubectl -n emilia create secret generic emilia-gate-issuer-keys \
 helm install gate ./emilia-gate \
   --namespace emilia --create-namespace \
   --set image.repository=YOUR_REGISTRY/emilia-gate \
-  --set image.tag=0.9.0 \
+  --set image.tag=0.9.5 \
   --set issuerKeys.existingSecret=emilia-gate-issuer-keys
 
 # 3. (Optional) expose /metrics + ServiceMonitor stub (needs Prometheus Operator).

package/deploy/helm/emilia-gate/Chart.yaml

@@ -19,7 +19,7 @@ type: application
 version: 0.1.0
 # Version of @emilia-protocol/gate this chart tracks; used as the default
 # image tag when .Values.image.tag is empty.
-appVersion: "0.9.0"
+appVersion: "0.9.5"
 kubeVersion: ">=1.23.0-0"
 home: https://emiliaprotocol.ai
 sources:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilia-protocol/gate",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "repository": {
     "type": "git",
     "url": "https://github.com/emiliaprotocol/emilia-protocol.git",