@fourier-labs/harbour-contracts 0.6.0 → 0.10.0

package/fixtures/ai/valid-blocked-trace-event.json

@@ -0,0 +1,31 @@
+{
+  "schema": "harbour.ai-trace-event/1.0",
+  "traceId": "trc_blocked123",
+  "requestId": "req_blocked123",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "production",
+  "versionId": "fourier#support-assistant#production#000124",
+  "policyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "requestedModel": "gpt-4.1-mini",
+  "governedModelAlias": "harbour/standard",
+  "outcome": "blocked",
+  "costMicroUsd": 0,
+  "latencyMs": 4,
+  "retryCount": 0,
+  "fallbackUsed": false,
+  "reservationId": "req_blocked123#budget",
+  "attempts": [],
+  "guardrailResults": [
+    {
+      "ruleId": "input-secret-pattern",
+      "detectorId": "input.secret_pattern",
+      "detectorVersion": "1.0.0",
+      "phase": "input",
+      "action": "BLOCK",
+      "result": "blocked"
+    }
+  ],
+  "contentCaptureStatus": "off",
+  "occurredAt": "2026-08-02T10:00:00Z"
+}

package/fixtures/ai/valid-budget-ledger-event.json

@@ -0,0 +1,15 @@
+{
+  "schema": "harbour.ai-budget-ledger-event/2.0",
+  "eventId": "ledger_000124_1",
+  "idempotencyKey": "reserve_000124",
+  "budgetScope": "fourier/support-assistant/production",
+  "period": "2026-08",
+  "eventType": "RESERVED",
+  "reservationId": "req_example123#budget",
+  "requestId": "req_example123",
+  "amountMicroUsd": 500,
+  "committedMicroUsdAfter": 10500,
+  "pricingRevisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "eventDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "occurredAt": "2026-08-10T10:00:00Z"
+}

package/fixtures/ai/valid-classification-stamp.json

@@ -0,0 +1,19 @@
+{
+  "schema": "harbour.ai-classification-stamp/1.0",
+  "stampId": "cls_000124",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "status": "AVAILABLE",
+  "classification": "Yellow",
+  "classifierId": "harbour-source-classifier",
+  "classifierVersion": "1.0.0",
+  "sourceDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "inventoryDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "securityEvidenceDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "evidenceDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "stampDigest": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "stampedAt": "2026-08-10T10:00:00Z"
+}

package/fixtures/ai/valid-composite-policy-digest.json

@@ -0,0 +1,11 @@
+{
+  "input": {
+    "schema": "harbour.ai-composite-policy-digest/1.0",
+    "baselineDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "classificationStampDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+    "tenantPolicyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+    "applicationPolicyDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+  },
+  "preimage": "harbour.ai-composite-policy-digest/1\nsha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\nsha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb\nsha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\nsha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd\n-",
+  "digest": "sha256:b6cf8539c27e06d64213c564c40455d56303cbf30fd346253ea1842c7377d2a0"
+}

package/fixtures/ai/valid-deployment-gate-decision.json

@@ -0,0 +1,18 @@
+{
+  "schema": "harbour.ai-deployment-gate-decision/1.0",
+  "decisionId": "gate_000124_1",
+  "sequence": 1,
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "decision": "PASS",
+  "reasonCodes": [],
+  "classificationStampDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "planDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "policyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "evidenceDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "decisionDigest": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "decidedAt": "2026-08-10T10:05:00Z"
+}

package/fixtures/ai/valid-failed-trace-event.json

@@ -0,0 +1,50 @@
+{
+  "schema": "harbour.ai-trace-event/1.0",
+  "traceId": "trc_failed123",
+  "requestId": "req_failed123",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "production",
+  "versionId": "fourier#support-assistant#production#000124",
+  "callsiteFingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "policyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "routeRevision": "harbour/standard#3",
+  "requestedModel": "gpt-4.1-mini",
+  "governedModelAlias": "harbour/standard",
+  "provider": "openai",
+  "providerModel": "gpt-4.1-mini",
+  "outcome": "failed",
+  "priceRevision": "openai-gpt-4.1-mini-2026-08-01",
+  "costMicroUsd": 48,
+  "latencyMs": 31204,
+  "retryCount": 1,
+  "fallbackUsed": false,
+  "reservationId": "req_failed123#budget",
+  "attempts": [
+    {
+      "attempt": 1,
+      "provider": "openai",
+      "providerModel": "gpt-4.1-mini",
+      "priceRevision": "openai-gpt-4.1-mini-2026-08-01",
+      "outcome": "failed",
+      "usage": null,
+      "costMicroUsd": 0,
+      "latencyMs": 30001,
+      "errorCode": "provider_unavailable"
+    },
+    {
+      "attempt": 2,
+      "provider": "openai",
+      "providerModel": "gpt-4.1-mini",
+      "priceRevision": "openai-gpt-4.1-mini-2026-08-01",
+      "outcome": "failed",
+      "usage": { "inputTokens": 120, "outputTokens": 0 },
+      "costMicroUsd": 48,
+      "latencyMs": 1203,
+      "errorCode": "provider_server_error"
+    }
+  ],
+  "guardrailResults": [],
+  "contentCaptureStatus": "off",
+  "occurredAt": "2026-08-02T10:00:00Z"
+}

package/fixtures/ai/valid-gateway-key-lifecycle-event.json

@@ -0,0 +1,16 @@
+{
+  "schema": "harbour.ai-gateway-key-lifecycle-event/1.0",
+  "eventId": "keyevt_000124_2",
+  "sequence": 2,
+  "keyId": "0123456789abcdef0123456789abcdef",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "fromStatus": "PENDING",
+  "toStatus": "ACTIVE",
+  "cause": "ACTIVATION",
+  "secretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+  "eventDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "occurredAt": "2026-08-10T10:03:00Z"
+}

package/fixtures/ai/valid-gateway-key-lookup.json

@@ -0,0 +1,14 @@
+{
+  "schema": "harbour.ai-gateway-key-lookup/1.0",
+  "keyId": "0123456789abcdef0123456789abcdef",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "tokenPrefix": "hbr_test_",
+  "status": "ACTIVE",
+  "keyMac": "AQIDBAUGBwgJCgsMDQ4PEBESExQVFhcYGRobHB0eHyA=",
+  "createdAt": "2026-08-02T09:59:00Z",
+  "activatedAt": "2026-08-02T10:00:00Z",
+  "expiresAt": "2026-09-01T10:00:00Z"
+}

package/fixtures/ai/valid-governance-decision.json

@@ -0,0 +1,53 @@
+{
+  "schema": "harbour.ai-governance-decision/1.0",
+  "phase": "PLAN",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "decision": "PASS",
+  "interceptionPath": "DETERMINISTIC_ADAPTER",
+  "reasonCodes": [],
+  "uncoveredCallsiteFingerprints": [],
+  "inventoryDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "policyDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "runtimeContractDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "interceptionPlan": [
+    {
+      "callSiteFingerprint": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "sourcePath": "src/ai-client.ts",
+      "expectedSourceFileSha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "strategy": "deterministic_adapter",
+      "allowedSyntaxKinds": ["ImportDeclaration", "NewExpression"],
+      "transformId": "google-genai-client-boundary",
+      "transformVersion": "1.0.0",
+      "runtimeShimName": "@harbour/gemini-compat",
+      "runtimeShimVersion": "1.0.0",
+      "runtimeShimDigest": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    }
+  ],
+  "interceptionPlanDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "runtimeContract": {
+    "schema": "harbour.ai-runtime-contract/1.0",
+    "tenantId": "fourier",
+    "appId": "support-assistant",
+    "environment": "preview",
+    "versionId": "fourier#support-assistant#preview#000124",
+    "sourceRevision": "0123456789abcdef",
+    "mode": "enforce",
+    "gatewayBaseUrl": "https://ai.harbour.example/v1",
+    "gatewayKeySecretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+    "modelAliases": { "generation": "harbour/standard" },
+    "policyDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+    "runtimeBinding": {
+      "schema": "harbour.ai-runtime-binding/1.0",
+      "platform": "aws_lambda",
+      "workloadIdentityRef": "iam-role://harbour/preview/support-assistant/000124",
+      "secretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+      "runtimeBindingDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+    },
+    "requiredStrategies": ["deterministic_adapter"]
+  },
+  "decidedAt": "2026-08-02T10:00:00Z"
+}

package/fixtures/ai/valid-inventory.json

@@ -0,0 +1,30 @@
+{
+  "schema": "harbour.ai-callsite-inventory/1.0",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "analyzerVersion": "ai-callsites/1.0",
+  "coverage": "complete_for_supported_sdks",
+  "scanStatus": "cybersecurity_scan_unavailable",
+  "callsites": [
+    {
+      "fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "path": "src/ai-client.ts",
+      "sourceFileSha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "line": 18,
+      "language": "typescript",
+      "sdk": "openai",
+      "method": "responses.create",
+      "requestedModel": "gpt-4.1-mini",
+      "strategy": "deployment_injection",
+      "status": "detected",
+      "securityFindingIds": [],
+      "evidence": {
+        "fingerprint": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        "excerpt": "openai call via responses.create"
+      }
+    }
+  ]
+}

package/fixtures/ai/valid-metering-policy.json

@@ -0,0 +1,8 @@
+{
+  "schema": "harbour.ai-metering-policy/2.0",
+  "policyDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "pricingRevisionDigests": ["sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"],
+  "reservationMode": "committed_exposure",
+  "policyDigestV2": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "publishedAt": "2026-08-10T09:00:00Z"
+}

package/fixtures/ai/valid-policy-snapshot.json

@@ -0,0 +1,117 @@
+{
+  "schema": "harbour.ai-policy-snapshot/1.0",
+  "scope": {
+    "level": "application_environment",
+    "tenantId": "fourier",
+    "appId": "support-assistant",
+    "environment": "preview"
+  },
+  "revision": 3,
+  "publishedAt": "2026-08-02T10:00:00Z",
+  "contentDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "baselineDigest": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+  "classificationMinimum": {
+    "classification": "Yellow",
+    "mappingDigest": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+  },
+  "providers": [
+    {
+      "id": "openai-primary",
+      "provider": "openai",
+      "baseUrl": "https://api.openai.com/v1",
+      "credentialSecretRef": "aws-sm://harbour/nonprod/ai/providers/openai/primary",
+      "enabled": true
+    }
+  ],
+  "models": [
+    {
+      "id": "openai-gpt-4.1-mini",
+      "providerId": "openai-primary",
+      "providerModel": "gpt-4.1-mini",
+      "capabilities": ["generation"],
+      "approved": true,
+      "pricing": {
+        "revision": "openai-gpt-4.1-mini-2026-08-01",
+        "inputMicroUsdPerMillion": 400000,
+        "outputMicroUsdPerMillion": 1600000
+      }
+    }
+  ],
+  "routes": [
+    {
+      "alias": "harbour/standard",
+      "version": 3,
+      "capability": "generation",
+      "targets": [
+        { "modelId": "openai-gpt-4.1-mini", "priority": 0, "weight": 10000 }
+      ],
+      "retryCount": 1,
+      "timeoutMs": 30000
+    }
+  ],
+  "policies": [
+    {
+      "name": "default-generation",
+      "version": 2,
+      "maxRequestBytes": 2097152,
+      "maxInputTokens": 32000,
+      "maxOutputTokens": 4096,
+      "bufferedDelivery": false,
+      "permittedRequestFields": {
+        "temperature": true,
+        "maxOutputTokens": true,
+        "responseFormat": false,
+        "tools": true
+      },
+      "guardrails": [
+        {
+          "ruleId": "input-tool-name-allowlist",
+          "detectorId": "tool.name_allowlist",
+          "detectorVersion": "1.0.0",
+          "phase": "input",
+          "action": "BLOCK",
+          "parameters": {
+            "allowedTools": ["search_documents"]
+          }
+        },
+        {
+          "ruleId": "output-json-shape",
+          "detectorId": "output.json_schema",
+          "detectorVersion": "1.0.0",
+          "phase": "output",
+          "action": "BLOCK",
+          "parameters": {
+            "jsonSchema": {
+              "type": "object",
+              "additionalProperties": false,
+              "properties": {
+                "answer": { "type": "string", "maxLength": 4000 },
+                "citations": {
+                  "type": "array",
+                  "maxItems": 16,
+                  "items": { "type": "string", "maxLength": 256 }
+                }
+              },
+              "required": ["answer"]
+            }
+          }
+        }
+      ]
+    }
+  ],
+  "limits": [
+    {
+      "name": "application-default",
+      "enabled": true,
+      "scope": "application",
+      "requestsPerMinute": 60,
+      "tokensPerMinute": 100000,
+      "monthlyBudgetMicroUsd": 100000000
+    }
+  ],
+  "retention": {
+    "captureMode": "BEST_EFFORT",
+    "retentionDays": 30,
+    "revealRoles": ["tenant-admin"]
+  }
+}

package/fixtures/ai/valid-pricing-revision.json

@@ -0,0 +1,14 @@
+{
+  "schema": "harbour.ai-pricing-revision/2.0",
+  "revisionId": "openai-gpt-test-2026-08-10",
+  "provider": "openai",
+  "providerModel": "gpt-test",
+  "currency": "USD",
+  "dimensions": [
+    { "dimension": "tokens", "direction": "input", "unit": "token", "scale": 1000000, "microUsdPerScale": 100000 },
+    { "dimension": "tokens", "direction": "output", "unit": "token", "scale": 1000000, "microUsdPerScale": 200000 }
+  ],
+  "revisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "effectiveAt": "2026-08-10T00:00:00Z",
+  "publishedAt": "2026-08-10T09:00:00Z"
+}

package/fixtures/ai/valid-runtime-binding.json

@@ -0,0 +1,7 @@
+{
+  "schema": "harbour.ai-runtime-binding/1.0",
+  "platform": "aws_lambda",
+  "workloadIdentityRef": "iam-role://harbour/preview/support-assistant/000124",
+  "secretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+  "runtimeBindingDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+}

package/fixtures/ai/valid-runtime-contract.json

@@ -0,0 +1,24 @@
+{
+  "schema": "harbour.ai-runtime-contract/1.0",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "mode": "observe",
+  "gatewayBaseUrl": "https://ai.harbour.example/v1",
+  "gatewayKeySecretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+  "modelAliases": {
+    "generation": "harbour/standard",
+    "embeddings": "harbour/embeddings"
+  },
+  "policyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "runtimeBinding": {
+    "schema": "harbour.ai-runtime-binding/1.0",
+    "platform": "aws_lambda",
+    "workloadIdentityRef": "iam-role://harbour/preview/support-assistant/000124",
+    "secretRef": "aws-sm://harbour/ai/fourier/support-assistant/preview/versions/000124/gateway-key",
+    "runtimeBindingDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+  },
+  "requiredStrategies": ["deployment_injection"]
+}

package/fixtures/ai/valid-sanitized-binding-evidence.json

@@ -0,0 +1,32 @@
+{
+  "schema": "harbour.sanitized-binding-evidence/1.0",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "versionId": "fourier#support-copilot#preview#123456",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688",
+  "bindings": {
+    "LOG_LEVEL": {
+      "kind": "configuration",
+      "value": "debug"
+    },
+    "STRIPE_API_KEY": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/secret/STRIPE_API_KEY"
+    }
+  },
+  "requiredAiMappings": {
+    "anthropic-messages-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "anthropic"
+    },
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "sanitizedBindingDigest": "sha256:2cc57565f45a645f96060c046d27e313531f34ff7d8dc24732b5f85572ca12a8"
+}

package/fixtures/ai/valid-source-revision-digest.json

@@ -0,0 +1,6 @@
+{
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "preimage": "D27:harbour.source-revision/1.0\nS50:https://github.com/Fourier-Labs-AI/support-copilot49:git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "digest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9"
+}

package/fixtures/ai/valid-trace-event-v2.json

@@ -0,0 +1,24 @@
+{
+  "schema": "harbour.ai-trace-event/2.0",
+  "traceId": "trc_example123",
+  "requestId": "req_example123",
+  "policyDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "outcome": "succeeded",
+  "usageLineItems": [
+    {
+      "attempt": 1,
+      "dimension": "tokens",
+      "direction": "input",
+      "quantity": 120,
+      "unit": "token",
+      "priceRevisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "scale": 1000000,
+      "costMicroUsd": 12,
+      "provenance": "reported"
+    }
+  ],
+  "totalCostMicroUsd": 12,
+  "reservationId": "req_example123#budget",
+  "meteringStatus": "settled",
+  "occurredAt": "2026-08-10T10:00:00Z"
+}

package/fixtures/ai/valid-trace-event.json

@@ -0,0 +1,41 @@
+{
+  "schema": "harbour.ai-trace-event/1.0",
+  "traceId": "trc_example123",
+  "requestId": "req_example123",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "production",
+  "versionId": "fourier#support-assistant#production#000124",
+  "callsiteFingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "policyDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "routeRevision": "harbour/standard#3",
+  "requestedModel": "gpt-4.1-mini",
+  "governedModelAlias": "harbour/standard",
+  "provider": "openai",
+  "providerModel": "gpt-4.1-mini",
+  "outcome": "succeeded",
+  "usage": { "inputTokens": 120, "outputTokens": 45 },
+  "priceRevision": "openai-gpt-4.1-mini-2026-08-01",
+  "costMicroUsd": 210,
+  "latencyMs": 842,
+  "retryCount": 0,
+  "fallbackUsed": false,
+  "reservationId": "req_example123#budget",
+  "attempts": [
+    {
+      "attempt": 1,
+      "provider": "openai",
+      "providerModel": "gpt-4.1-mini",
+      "priceRevision": "openai-gpt-4.1-mini-2026-08-01",
+      "outcome": "succeeded",
+      "usage": { "inputTokens": 120, "outputTokens": 45 },
+      "costMicroUsd": 210,
+      "latencyMs": 842
+    }
+  ],
+  "guardrailResults": [],
+  "contentCaptureStatus": "captured",
+  "contentRef": "s3://harbour-ai-evidence/fourier/support-assistant/trc_example123.enc",
+  "retentionExpiresAt": "2026-09-01T10:00:00Z",
+  "occurredAt": "2026-08-02T10:00:00Z"
+}

package/fixtures/ai/valid-transform-event.json

@@ -0,0 +1,32 @@
+{
+  "schema": "harbour.ai-transform-event/1.0",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "workspace": {
+    "bucket": "harbour-deployment-workspaces",
+    "key": "fourier/support-assistant/000124/source.tgz",
+    "sha256": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+    "size": 1024
+  },
+  "inventoryDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "policyDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "runtimeContractDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "interceptionPlanDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "entries": [
+    {
+      "callSiteFingerprint": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "sourcePath": "src/ai-client.ts",
+      "expectedSourceFileSha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "strategy": "deterministic_adapter",
+      "transformId": "google-genai-client-boundary",
+      "transformVersion": "1.0.0",
+      "allowedSyntaxKinds": ["CallExpression", "ImportDeclaration", "NewExpression"],
+      "runtimeShimName": "@harbour/gemini-compat",
+      "runtimeShimVersion": "1.0.0",
+      "runtimeShimDigest": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    }
+  ]
+}

package/fixtures/ai/valid-transform-result.json

@@ -0,0 +1,23 @@
+{
+  "schema": "harbour.ai-transform-result/1.0",
+  "workspace": {
+    "bucket": "harbour-deployment-workspaces",
+    "key": "fourier/support-assistant/000124/ai-derived.tgz",
+    "sha256": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+    "size": 1030
+  },
+  "interceptionPlanDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "transformerVersion": "ai-interception/1.0.0",
+  "applied": [
+    {
+      "callSiteFingerprint": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "transformId": "google-genai-client-boundary",
+      "transformVersion": "1.0.0",
+      "sourcePath": "src/ai-client.ts",
+      "beforeSha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "afterSha256": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "governedBoundaryFingerprint": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+      "runtimeShimDigest": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    }
+  ]
+}

package/fixtures/ai/valid-verification-evidence.json

@@ -0,0 +1,33 @@
+{
+  "schema": "harbour.ai-verification-evidence/1.0",
+  "tenantId": "fourier",
+  "appId": "support-assistant",
+  "environment": "preview",
+  "versionId": "fourier#support-assistant#preview#000124",
+  "sourceRevision": "0123456789abcdef",
+  "inventoryDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "interceptionPlanDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "runtimeContractDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+  "policyDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "runtimeBindingDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+  "finalWorkspaceDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "verifiedCallsiteFingerprints": ["sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"],
+  "appliedTransforms": [
+    {
+      "callSiteFingerprint": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "governedBoundaryFingerprint": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+      "transformId": "google-genai-client-boundary",
+      "transformVersion": "1.0.0",
+      "beforeSha256": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "afterSha256": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+      "runtimeShimDigest": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
+    }
+  ],
+  "endpointChecks": [
+    { "name": "gateway-smoke", "passed": true, "configurationMappingVersion": "openai-compatible/1.0.0" }
+  ],
+  "providerCredentialsAbsent": true,
+  "smokeTraceId": "trc_smoke123",
+  "evidenceDigest": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+  "verifiedAt": "2026-08-02T10:05:00Z"
+}