@fabricorg/platform-host 8.9.0 → 8.10.0

package/dist/index.d.cts

@@ -1,5 +1,79 @@
 import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyContext, AgentActionPolicyDecision, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
 import { AssemblyLockfile } from "@fabricorg/assembly";
+//#region src/erasure-types.d.ts
+type StoredRecordErasureTarget = {
+  readonly kind: "invocation";
+  readonly invocationId: string;
+} | {
+  readonly kind: "event";
+  readonly eventId: string;
+};
+interface ErasurePayloadFields {
+  invocation: "parameters" | "result" | "error" | "provenance" | "authorizationBinding" | "authorizationReconciliation" | "adapterReconciliation" | "hitlReason" | "approvalDecision" | "mutationFootprint" | "executionPrincipal" | "runtimeEvidence" | "pendingCompletion" | "externalCompletion" | "pendingStateTransition" | "finalizationCheckpoint" | "approvalExpiry" | "agentProposal" | "submissionRefusal";
+  adapter: "input" | "output" | "error" | "reconciliation";
+  staged: "parameters" | "lastError";
+  policy_evaluation: "outcome";
+  policy_obligation: "description" | "evidenceReferences" | "metadata";
+  execution_attestation: "attestation";
+  external_reconciliation: "reconciliation";
+  event: "payload" | "provenance";
+  outbox: "lastError" | "traceContext" | "payload" | "provenance";
+  outbox_requeue: "reason" | "priorLastError";
+}
+type ErasureRecordKind = keyof ErasurePayloadFields;
+/** Protected nested keys are omitted from the callback; stores restore structure and overwrite payload digests. */
+type StoredRecordErasureView = { [K in ErasureRecordKind]: {
+  readonly kind: K;
+  readonly id: string;
+  readonly tenantId: string;
+  readonly spaceId: string;
+  readonly invocationId?: string;
+  readonly eventId?: string;
+  readonly eventType?: string;
+  fields: Partial<Record<ErasurePayloadFields[K], unknown>>;
+}; }[ErasureRecordKind];
+/** Validated identifying facts sent to the application authorizer; no stored payload or callback. */
+interface StoredRecordErasureAuthorizationInput {
+  /** Trusted operator identity supplied by the authenticated application session. */
+  readonly actorId: string;
+  readonly actorType: ActorType;
+  readonly tenantId: string;
+  readonly spaceId: string;
+  readonly requestId: string;
+  readonly targets: readonly StoredRecordErasureTarget[];
+}
+interface EraseStoredRecordsInput extends StoredRecordErasureAuthorizationInput {
+  /** Target-lock acquisition budget in milliseconds, 1–60000; default 250. */
+  readonly lockTimeoutMs?: number;
+  /** Rewrite work budget in milliseconds, 1–60000; default 5000. */
+  readonly workTimeoutMs?: number;
+  /** Synchronous JSON-data transformation. A thrown error or invalid result rolls back the batch. */
+  readonly redact: (record: StoredRecordErasureView) => StoredRecordErasureView;
+}
+type StoredRecordErasureOutcome = "erased" | "already_erased" | "active" | "not_found";
+interface EraseStoredRecordsResult {
+  targets: Array<StoredRecordErasureTarget & {
+    outcome: StoredRecordErasureOutcome;
+  }>;
+  /** Records processed, including records processed again by repeat erasure. */
+  counts: Partial<Record<ErasureRecordKind, number>>;
+}
+interface ErasablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  /**
+   * Unauthenticated storage port, not an authorization boundary; callers must enforce authorization.
+   * Atomic rewrite/marker/audit operation. The audit retains actorId/actorType as identifying metadata.
+   * Invocation reads expose storedRecordsErased after commit.
+   */
+  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+}
+interface StoredRecordErasureHost {
+  /** Throws StoredRecordErasureAuthorizationError (not_authorized) before store access on authorization refusal. */
+  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+}
+export declare const HOST_RECORDS_ERASED_EVENT: "HostRecordsErased";
+/** Sentinel replacing required payload digests after stored-record erasure. */
+export declare const ERASED_DIGEST: "erased";
+//#endregion
 //#region src/observability.d.ts
 /** Version of the vendor-neutral health/readiness contract. */
 export declare const PLATFORM_HOST_HEALTH_CONTRACT_VERSION: 1;
@@ -641,6 +715,7 @@ export interface AdapterInvocationWriteInput {
   };
 }
 export interface PlatformHostStore<TDb> {
+  getSubmissionOutcomeByKey?(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   readonly db: TDb;
   /**
    * Run against the store's domain handle. This base seam does not promise a
@@ -1949,83 +2024,41 @@ export interface OutboxRequeueHost {
    */
   requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterInput): Promise<RequeueOutboxDeadLetterResult>;
 }
-//#endregion
-//#region src/erasure-types.d.ts
-type StoredRecordErasureTarget = {
-  readonly kind: "invocation";
-  readonly invocationId: string;
-} | {
-  readonly kind: "event";
-  readonly eventId: string;
-};
-interface ErasurePayloadFields {
-  invocation: "parameters" | "result" | "error" | "provenance" | "authorizationBinding" | "authorizationReconciliation" | "adapterReconciliation" | "hitlReason" | "approvalDecision" | "mutationFootprint" | "executionPrincipal" | "runtimeEvidence" | "pendingCompletion" | "externalCompletion" | "pendingStateTransition" | "finalizationCheckpoint" | "approvalExpiry" | "agentProposal" | "submissionRefusal";
-  adapter: "input" | "output" | "error" | "reconciliation";
-  staged: "parameters" | "lastError";
-  policy_evaluation: "outcome";
-  policy_obligation: "description" | "evidenceReferences" | "metadata";
-  execution_attestation: "attestation";
-  external_reconciliation: "reconciliation";
-  event: "payload" | "provenance";
-  outbox: "lastError" | "traceContext" | "payload" | "provenance";
-  outbox_requeue: "reason" | "priorLastError";
-}
-type ErasureRecordKind = keyof ErasurePayloadFields;
-/** Protected nested keys are omitted from the callback; stores restore structure and overwrite payload digests. */
-type StoredRecordErasureView = { [K in ErasureRecordKind]: {
-  readonly kind: K;
-  readonly id: string;
-  readonly tenantId: string;
-  readonly spaceId: string;
-  readonly invocationId?: string;
-  readonly eventId?: string;
-  readonly eventType?: string;
-  fields: Partial<Record<ErasurePayloadFields[K], unknown>>;
-}; }[ErasureRecordKind];
-/** Validated identifying facts sent to the application authorizer; no stored payload or callback. */
-interface StoredRecordErasureAuthorizationInput {
-  /** Trusted operator identity supplied by the authenticated application session. */
-  readonly actorId: string;
-  readonly actorType: ActorType;
-  readonly tenantId: string;
-  readonly spaceId: string;
-  readonly requestId: string;
-  readonly targets: readonly StoredRecordErasureTarget[];
-}
-interface EraseStoredRecordsInput extends StoredRecordErasureAuthorizationInput {
-  /** Target-lock acquisition budget in milliseconds, 1–60000; default 250. */
-  readonly lockTimeoutMs?: number;
-  /** Rewrite work budget in milliseconds, 1–60000; default 5000. */
-  readonly workTimeoutMs?: number;
-  /** Synchronous JSON-data transformation. A thrown error or invalid result rolls back the batch. */
-  readonly redact: (record: StoredRecordErasureView) => StoredRecordErasureView;
-}
-type StoredRecordErasureOutcome = "erased" | "already_erased" | "active" | "not_found";
-interface EraseStoredRecordsResult {
-  targets: Array<StoredRecordErasureTarget & {
-    outcome: StoredRecordErasureOutcome;
-  }>;
-  /** Records processed, including records processed again by repeat erasure. */
-  counts: Partial<Record<ErasureRecordKind, number>>;
+/** Exact durable key scope; an empty idempotency key is valid. */
+export interface SubmissionOutcomeKey {
+  tenantId: string;
+  spaceId: string;
+  actionId: ActionId;
+  idempotencyKey: string;
 }
-interface ErasablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-  /**
-   * Unauthenticated storage port, not an authorization boundary; callers must enforce authorization.
-   * Atomic rewrite/marker/audit operation. The audit retains actorId/actorType as identifying metadata.
-   * Invocation reads expose storedRecordsErased after commit.
-   */
-  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+export type StoredSubmissionOutcomeRecord = Readonly<SubmissionOutcomeKey & Pick<ActionInvocationRecord, "id" | "actionVersion" | "actorId" | "actorType" | "authorizationBindingId" | "idempotencyActorId" | "idempotencyAuthorizationBindingId" | "status" | "submissionRefusal" | "storedRecordsErased">>;
+export interface ReadSubmissionOutcomeInput extends SubmissionOutcomeKey {
+  actorId: string;
+  actorType: ActorType;
+  authorizationBindingId?: string;
 }
-interface StoredRecordErasureHost {
-  /** Throws StoredRecordErasureAuthorizationError (not_authorized) before store access on authorization refusal. */
-  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+type ReceiptIdentity = {
+  actionInvocationId: string;
+  actionVersion: number;
+};
+export type ReadSubmissionOutcomeResult = {
+  kind: "no_record";
+} | (ReceiptIdentity & {
+  kind: "submission_refused";
+  submissionRefusal: SubmissionRefusalDescriptor;
+}) | (ReceiptIdentity & {
+  kind: "invocation";
+  status: Exclude<ActionStatus, "submission_refused">;
+}) | (ReceiptIdentity & {
+  kind: "records_erased";
+  recordedStatus: ActionStatus;
+});
+export interface SubmissionOutcomeReader {
+  readSubmissionOutcome(input: Readonly<ReadSubmissionOutcomeInput>): Promise<ReadSubmissionOutcomeResult>;
 }
-export declare const HOST_RECORDS_ERASED_EVENT: "HostRecordsErased";
-/** Sentinel replacing required payload digests after stored-record erasure. */
-export declare const ERASED_DIGEST: "erased";
 //#endregion
 //#region src/host.d.ts
-export declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): GovernedActionHost & OutboxRequeueHost & ApprovalExpiryHost & ApprovalDecisionRecordingHost & StoredRecordErasureHost;
+export declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): SubmissionOutcomeReader & GovernedActionHost & OutboxRequeueHost & ApprovalExpiryHost & ApprovalDecisionRecordingHost & StoredRecordErasureHost;
 //#endregion
 //#region src/memory-store.d.ts
 /**
@@ -2040,6 +2073,7 @@ export interface MemoryPlatformHostTransactionProvider<TDb> {
 }
 export declare class MemoryPlatformHostStore<TDb> implements ErasablePlatformHostStore<TDb>, RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb>, StagedInvocationPlatformHostStore<TDb> {
   readonly db: TDb;
+  getSubmissionOutcomeByKey(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   readonly transactionalOutbox: boolean;
   readonly transactionalApprovalLifecycle: boolean;
   readonly transactionalApprovalAuthorization = true;
@@ -2291,6 +2325,7 @@ export declare class PostgresPlatformHostStore<TDb> implements ErasablePlatformH
   ensureSchema(): Promise<void>;
   eraseStoredRecords(request: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
   transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
+  getSubmissionOutcomeByKey(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
   recordSubmissionRefusal(input: RecordSubmissionRefusalInput): Promise<ActionInvocationRecord>;
   createActionInvocationForStagedLease(input: CreateStagedActionInvocationInput): Promise<CreateStagedActionInvocationResult>;
@@ -2925,4 +2960,17 @@ export declare function isConfirmedTransactionRollback(error: unknown): error is
 /** Inspect up to 16 errors, failing closed on cycles or unreadable properties. Intended for handlerRetry.classify. */
 export declare function isTransientPostgresTransactionError(error: unknown): boolean;
 //#endregion
+//#region src/submission-outcome.d.ts
+export declare class SubmissionOutcomeUnsupportedError extends Error {
+  constructor();
+}
+//#endregion
+//#region src/submission-outcome-conformance.d.ts
+/**
+ * Isolated destructive probe with fresh identities and timestamps from new Date().
+ * Refusal and erasure sections run only with their respective store capabilities;
+ * returned evidence identifies each unexercised optional section with `skipped:`.
+ */
+export declare function checkSubmissionOutcomeStore(store: PlatformHostStore<unknown>): Promise<string[]>;
+//#endregion
 export { type ErasablePlatformHostStore, type EraseStoredRecordsInput, type EraseStoredRecordsResult, type ErasurePayloadFields, type ErasureRecordKind, type StoredRecordErasureAuthorizationInput, type StoredRecordErasureHost, type StoredRecordErasureOutcome, type StoredRecordErasureTarget, type StoredRecordErasureView, canonicalJson };

package/dist/index.d.ts

@@ -1,5 +1,79 @@
 import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyContext, AgentActionPolicyDecision, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, StagedInvocationRequest, canonicalJson } from "@fabricorg/platform";
 import { AssemblyLockfile } from "@fabricorg/assembly";
+//#region src/erasure-types.d.ts
+type StoredRecordErasureTarget = {
+  readonly kind: "invocation";
+  readonly invocationId: string;
+} | {
+  readonly kind: "event";
+  readonly eventId: string;
+};
+interface ErasurePayloadFields {
+  invocation: "parameters" | "result" | "error" | "provenance" | "authorizationBinding" | "authorizationReconciliation" | "adapterReconciliation" | "hitlReason" | "approvalDecision" | "mutationFootprint" | "executionPrincipal" | "runtimeEvidence" | "pendingCompletion" | "externalCompletion" | "pendingStateTransition" | "finalizationCheckpoint" | "approvalExpiry" | "agentProposal" | "submissionRefusal";
+  adapter: "input" | "output" | "error" | "reconciliation";
+  staged: "parameters" | "lastError";
+  policy_evaluation: "outcome";
+  policy_obligation: "description" | "evidenceReferences" | "metadata";
+  execution_attestation: "attestation";
+  external_reconciliation: "reconciliation";
+  event: "payload" | "provenance";
+  outbox: "lastError" | "traceContext" | "payload" | "provenance";
+  outbox_requeue: "reason" | "priorLastError";
+}
+type ErasureRecordKind = keyof ErasurePayloadFields;
+/** Protected nested keys are omitted from the callback; stores restore structure and overwrite payload digests. */
+type StoredRecordErasureView = { [K in ErasureRecordKind]: {
+  readonly kind: K;
+  readonly id: string;
+  readonly tenantId: string;
+  readonly spaceId: string;
+  readonly invocationId?: string;
+  readonly eventId?: string;
+  readonly eventType?: string;
+  fields: Partial<Record<ErasurePayloadFields[K], unknown>>;
+}; }[ErasureRecordKind];
+/** Validated identifying facts sent to the application authorizer; no stored payload or callback. */
+interface StoredRecordErasureAuthorizationInput {
+  /** Trusted operator identity supplied by the authenticated application session. */
+  readonly actorId: string;
+  readonly actorType: ActorType;
+  readonly tenantId: string;
+  readonly spaceId: string;
+  readonly requestId: string;
+  readonly targets: readonly StoredRecordErasureTarget[];
+}
+interface EraseStoredRecordsInput extends StoredRecordErasureAuthorizationInput {
+  /** Target-lock acquisition budget in milliseconds, 1–60000; default 250. */
+  readonly lockTimeoutMs?: number;
+  /** Rewrite work budget in milliseconds, 1–60000; default 5000. */
+  readonly workTimeoutMs?: number;
+  /** Synchronous JSON-data transformation. A thrown error or invalid result rolls back the batch. */
+  readonly redact: (record: StoredRecordErasureView) => StoredRecordErasureView;
+}
+type StoredRecordErasureOutcome = "erased" | "already_erased" | "active" | "not_found";
+interface EraseStoredRecordsResult {
+  targets: Array<StoredRecordErasureTarget & {
+    outcome: StoredRecordErasureOutcome;
+  }>;
+  /** Records processed, including records processed again by repeat erasure. */
+  counts: Partial<Record<ErasureRecordKind, number>>;
+}
+interface ErasablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  /**
+   * Unauthenticated storage port, not an authorization boundary; callers must enforce authorization.
+   * Atomic rewrite/marker/audit operation. The audit retains actorId/actorType as identifying metadata.
+   * Invocation reads expose storedRecordsErased after commit.
+   */
+  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+}
+interface StoredRecordErasureHost {
+  /** Throws StoredRecordErasureAuthorizationError (not_authorized) before store access on authorization refusal. */
+  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+}
+export declare const HOST_RECORDS_ERASED_EVENT: "HostRecordsErased";
+/** Sentinel replacing required payload digests after stored-record erasure. */
+export declare const ERASED_DIGEST: "erased";
+//#endregion
 //#region src/observability.d.ts
 /** Version of the vendor-neutral health/readiness contract. */
 export declare const PLATFORM_HOST_HEALTH_CONTRACT_VERSION: 1;
@@ -641,6 +715,7 @@ export interface AdapterInvocationWriteInput {
   };
 }
 export interface PlatformHostStore<TDb> {
+  getSubmissionOutcomeByKey?(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   readonly db: TDb;
   /**
    * Run against the store's domain handle. This base seam does not promise a
@@ -1949,83 +2024,41 @@ export interface OutboxRequeueHost {
    */
   requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterInput): Promise<RequeueOutboxDeadLetterResult>;
 }
-//#endregion
-//#region src/erasure-types.d.ts
-type StoredRecordErasureTarget = {
-  readonly kind: "invocation";
-  readonly invocationId: string;
-} | {
-  readonly kind: "event";
-  readonly eventId: string;
-};
-interface ErasurePayloadFields {
-  invocation: "parameters" | "result" | "error" | "provenance" | "authorizationBinding" | "authorizationReconciliation" | "adapterReconciliation" | "hitlReason" | "approvalDecision" | "mutationFootprint" | "executionPrincipal" | "runtimeEvidence" | "pendingCompletion" | "externalCompletion" | "pendingStateTransition" | "finalizationCheckpoint" | "approvalExpiry" | "agentProposal" | "submissionRefusal";
-  adapter: "input" | "output" | "error" | "reconciliation";
-  staged: "parameters" | "lastError";
-  policy_evaluation: "outcome";
-  policy_obligation: "description" | "evidenceReferences" | "metadata";
-  execution_attestation: "attestation";
-  external_reconciliation: "reconciliation";
-  event: "payload" | "provenance";
-  outbox: "lastError" | "traceContext" | "payload" | "provenance";
-  outbox_requeue: "reason" | "priorLastError";
-}
-type ErasureRecordKind = keyof ErasurePayloadFields;
-/** Protected nested keys are omitted from the callback; stores restore structure and overwrite payload digests. */
-type StoredRecordErasureView = { [K in ErasureRecordKind]: {
-  readonly kind: K;
-  readonly id: string;
-  readonly tenantId: string;
-  readonly spaceId: string;
-  readonly invocationId?: string;
-  readonly eventId?: string;
-  readonly eventType?: string;
-  fields: Partial<Record<ErasurePayloadFields[K], unknown>>;
-}; }[ErasureRecordKind];
-/** Validated identifying facts sent to the application authorizer; no stored payload or callback. */
-interface StoredRecordErasureAuthorizationInput {
-  /** Trusted operator identity supplied by the authenticated application session. */
-  readonly actorId: string;
-  readonly actorType: ActorType;
-  readonly tenantId: string;
-  readonly spaceId: string;
-  readonly requestId: string;
-  readonly targets: readonly StoredRecordErasureTarget[];
-}
-interface EraseStoredRecordsInput extends StoredRecordErasureAuthorizationInput {
-  /** Target-lock acquisition budget in milliseconds, 1–60000; default 250. */
-  readonly lockTimeoutMs?: number;
-  /** Rewrite work budget in milliseconds, 1–60000; default 5000. */
-  readonly workTimeoutMs?: number;
-  /** Synchronous JSON-data transformation. A thrown error or invalid result rolls back the batch. */
-  readonly redact: (record: StoredRecordErasureView) => StoredRecordErasureView;
-}
-type StoredRecordErasureOutcome = "erased" | "already_erased" | "active" | "not_found";
-interface EraseStoredRecordsResult {
-  targets: Array<StoredRecordErasureTarget & {
-    outcome: StoredRecordErasureOutcome;
-  }>;
-  /** Records processed, including records processed again by repeat erasure. */
-  counts: Partial<Record<ErasureRecordKind, number>>;
+/** Exact durable key scope; an empty idempotency key is valid. */
+export interface SubmissionOutcomeKey {
+  tenantId: string;
+  spaceId: string;
+  actionId: ActionId;
+  idempotencyKey: string;
 }
-interface ErasablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-  /**
-   * Unauthenticated storage port, not an authorization boundary; callers must enforce authorization.
-   * Atomic rewrite/marker/audit operation. The audit retains actorId/actorType as identifying metadata.
-   * Invocation reads expose storedRecordsErased after commit.
-   */
-  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+export type StoredSubmissionOutcomeRecord = Readonly<SubmissionOutcomeKey & Pick<ActionInvocationRecord, "id" | "actionVersion" | "actorId" | "actorType" | "authorizationBindingId" | "idempotencyActorId" | "idempotencyAuthorizationBindingId" | "status" | "submissionRefusal" | "storedRecordsErased">>;
+export interface ReadSubmissionOutcomeInput extends SubmissionOutcomeKey {
+  actorId: string;
+  actorType: ActorType;
+  authorizationBindingId?: string;
 }
-interface StoredRecordErasureHost {
-  /** Throws StoredRecordErasureAuthorizationError (not_authorized) before store access on authorization refusal. */
-  eraseStoredRecords(input: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
+type ReceiptIdentity = {
+  actionInvocationId: string;
+  actionVersion: number;
+};
+export type ReadSubmissionOutcomeResult = {
+  kind: "no_record";
+} | (ReceiptIdentity & {
+  kind: "submission_refused";
+  submissionRefusal: SubmissionRefusalDescriptor;
+}) | (ReceiptIdentity & {
+  kind: "invocation";
+  status: Exclude<ActionStatus, "submission_refused">;
+}) | (ReceiptIdentity & {
+  kind: "records_erased";
+  recordedStatus: ActionStatus;
+});
+export interface SubmissionOutcomeReader {
+  readSubmissionOutcome(input: Readonly<ReadSubmissionOutcomeInput>): Promise<ReadSubmissionOutcomeResult>;
 }
-export declare const HOST_RECORDS_ERASED_EVENT: "HostRecordsErased";
-/** Sentinel replacing required payload digests after stored-record erasure. */
-export declare const ERASED_DIGEST: "erased";
 //#endregion
 //#region src/host.d.ts
-export declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): GovernedActionHost & OutboxRequeueHost & ApprovalExpiryHost & ApprovalDecisionRecordingHost & StoredRecordErasureHost;
+export declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): SubmissionOutcomeReader & GovernedActionHost & OutboxRequeueHost & ApprovalExpiryHost & ApprovalDecisionRecordingHost & StoredRecordErasureHost;
 //#endregion
 //#region src/memory-store.d.ts
 /**
@@ -2040,6 +2073,7 @@ export interface MemoryPlatformHostTransactionProvider<TDb> {
 }
 export declare class MemoryPlatformHostStore<TDb> implements ErasablePlatformHostStore<TDb>, RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb>, StagedInvocationPlatformHostStore<TDb> {
   readonly db: TDb;
+  getSubmissionOutcomeByKey(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   readonly transactionalOutbox: boolean;
   readonly transactionalApprovalLifecycle: boolean;
   readonly transactionalApprovalAuthorization = true;
@@ -2291,6 +2325,7 @@ export declare class PostgresPlatformHostStore<TDb> implements ErasablePlatformH
   ensureSchema(): Promise<void>;
   eraseStoredRecords(request: EraseStoredRecordsInput): Promise<EraseStoredRecordsResult>;
   transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
+  getSubmissionOutcomeByKey(key: Readonly<SubmissionOutcomeKey>): Promise<StoredSubmissionOutcomeRecord | undefined>;
   createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
   recordSubmissionRefusal(input: RecordSubmissionRefusalInput): Promise<ActionInvocationRecord>;
   createActionInvocationForStagedLease(input: CreateStagedActionInvocationInput): Promise<CreateStagedActionInvocationResult>;
@@ -2925,4 +2960,17 @@ export declare function isConfirmedTransactionRollback(error: unknown): error is
 /** Inspect up to 16 errors, failing closed on cycles or unreadable properties. Intended for handlerRetry.classify. */
 export declare function isTransientPostgresTransactionError(error: unknown): boolean;
 //#endregion
+//#region src/submission-outcome.d.ts
+export declare class SubmissionOutcomeUnsupportedError extends Error {
+  constructor();
+}
+//#endregion
+//#region src/submission-outcome-conformance.d.ts
+/**
+ * Isolated destructive probe with fresh identities and timestamps from new Date().
+ * Refusal and erasure sections run only with their respective store capabilities;
+ * returned evidence identifies each unexercised optional section with `skipped:`.
+ */
+export declare function checkSubmissionOutcomeStore(store: PlatformHostStore<unknown>): Promise<string[]>;
+//#endregion
 export { type ErasablePlatformHostStore, type EraseStoredRecordsInput, type EraseStoredRecordsResult, type ErasurePayloadFields, type ErasureRecordKind, type StoredRecordErasureAuthorizationInput, type StoredRecordErasureHost, type StoredRecordErasureOutcome, type StoredRecordErasureTarget, type StoredRecordErasureView, canonicalJson };