@fourier-labs/harbour-contracts 0.9.0 → 0.11.0

package/gen-ts/sanitized-binding-evidence.ts

@@ -0,0 +1,51 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+export type SanitizedBindingIdentifier = string;
+export type SanitizedBindingSourceRef = string;
+export type SanitizedBindingSourceRevision = string;
+export type SanitizedBindingDigest = string;
+export type SanitizedRuntimeBinding = {
+  kind: 'configuration' | 'secret';
+  /**
+   * Approved non-secret configuration literal. Provider-credential values are never approved or persisted here.
+   */
+  value?: string;
+  /**
+   * Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract.
+   */
+  secretRef?: string;
+};
+export type SanitizedBindingProviderId = 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+
+/**
+ * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration, app secrets or approved data-source credential references and never an AI-mapping-owned provider credential.
+ */
+export interface SanitizedBindingEvidence {
+  schema: 'harbour.sanitized-binding-evidence/1.0';
+  tenantId: SanitizedBindingIdentifier;
+  appId: SanitizedBindingIdentifier;
+  environment: 'preview' | 'prod';
+  versionId: string;
+  sourceRef: SanitizedBindingSourceRef;
+  sourceRevision: SanitizedBindingSourceRevision;
+  sourceRevisionDigest: SanitizedBindingDigest;
+  classificationDigest: SanitizedBindingDigest;
+  /**
+   * Exact approved runtime-binding set keyed by environment name. Object keys make duplicate bindings unrepresentable. A provider_credential kind and rejected binding metadata/value are unrepresentable.
+   */
+  bindings: {
+    [k: string]: SanitizedRuntimeBinding;
+  };
+  /**
+   * DCP-validated supported AI mapping requirements keyed by mapping ID. This records what later PLAN/provisioning milestones must enforce; it does not claim those later controls are already active.
+   */
+  requiredAiMappings: {
+    [k: string]: SanitizedBindingAiMapping;
+  };
+  sanitizedBindingDigest: SanitizedBindingDigest;
+}
+export interface SanitizedBindingAiMapping {
+  mappingVersion: string;
+  providerId: SanitizedBindingProviderId;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/binding-classification-subject.schema.json

@@ -0,0 +1,119 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/binding-classification-subject.schema.json",
+  "title": "BindingClassificationSubject",
+  "description": "Complete, immutable and value-free classification of the exact declared environment-binding names for one provider-neutral normalized source revision before DCP allocates a version. The caller never guesses a versionId. DCP validates this subject, allocates the sole versionId and chains classificationDigest into separately persisted SanitizedBindingEvidence; it must never relabel this source-bound evidence.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "status", "tenantId", "appId", "environment", "sourceRef", "sourceRevision", "sourceRevisionDigest", "classifierRevision", "classifications", "requestedAiMappings", "classificationDigest"],
+  "properties": {
+    "schema": { "type": "string", "const": "harbour.binding-classification-subject/1.0" },
+    "status": { "type": "string", "const": "COMPLETE", "description": "Partial or unavailable classification cannot be represented as an admissible subject." },
+    "tenantId": { "$ref": "#/definitions/BindingClassificationIdentifier" },
+    "appId": { "$ref": "#/definitions/BindingClassificationIdentifier" },
+    "environment": { "type": "string", "enum": ["preview", "prod"] },
+    "sourceRef": { "$ref": "#/definitions/BindingClassificationSourceRef" },
+    "sourceRevision": { "$ref": "#/definitions/BindingClassificationSourceRevision" },
+    "sourceRevisionDigest": { "$ref": "#/definitions/BindingClassificationDigest" },
+    "classifierRevision": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._/-]*$" },
+    "classifications": {
+      "description": "Exact classification set keyed by every declared environment-binding name. Object keys make missing duplication tricks and two classifications for one name unrepresentable. Literal values and secret references are intentionally unrepresentable. DCP additionally requires these keys to equal the names in the request's environmentBindings before allocation.",
+      "type": "object",
+      "minProperties": 0,
+      "maxProperties": 512,
+      "propertyNames": { "$ref": "#/definitions/BindingClassificationName" },
+      "additionalProperties": { "$ref": "#/definitions/BindingClassificationEntry" }
+    },
+    "requestedAiMappings": {
+      "description": "Exact set keyed by requested AI mapping ID of supported mappings intended to own provider-client credentials for this source revision. This is pre-PLAN request evidence, not a claim that enforcement already exists. Provider-credential classifications reference one of these exact mapping IDs.",
+      "type": "object",
+      "minProperties": 0,
+      "maxProperties": 64,
+      "propertyNames": { "$ref": "#/definitions/BindingClassificationIdentifier" },
+      "additionalProperties": { "$ref": "#/definitions/BindingClassificationAiMapping" }
+    },
+    "classificationDigest": { "$ref": "#/definitions/BindingClassificationDigest" }
+  },
+  "definitions": {
+    "BindingClassificationIdentifier": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9_.-]*$"
+    },
+    "BindingClassificationName": {
+      "type": "string",
+      "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+    },
+    "BindingClassificationDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "BindingClassificationSourceRef": {
+      "description": "Provider-neutral, normalized and credential-free source repository reference. Current GitHub HTTPS references and future SCM adapters use the same safe hierarchical grammar; userinfo, ports, percent encoding, query strings and fragments are unrepresentable.",
+      "type": "string",
+      "maxLength": 1024,
+      "pattern": "^[a-z][a-z0-9+.-]*://[A-Za-z0-9][A-Za-z0-9.-]{0,127}(?:/[A-Za-z0-9][A-Za-z0-9._~-]{0,255})+$"
+    },
+    "BindingClassificationSourceRevision": {
+      "description": "Provider-neutral exact revision identifier expressed as algorithm:value. Current Git adapters use git-sha1:<40 lowercase hex>; another SCM or Git hash algorithm does not require a shape change.",
+      "type": "string",
+      "minLength": 9,
+      "maxLength": 320,
+      "pattern": "^[a-z][a-z0-9._-]{0,31}:[A-Za-z0-9][A-Za-z0-9._-]{6,287}$"
+    },
+    "BindingClassificationProviderId": {
+      "type": "string",
+      "enum": ["openai", "anthropic", "gemini", "openrouter"]
+    },
+    "BindingClassificationCredentialCategory": {
+      "description": "Closed current credential category. Add a reviewed contract version before supporting another credential mechanism.",
+      "type": "string",
+      "enum": ["api_key"]
+    },
+    "BindingClassificationAiMapping": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mappingVersion", "providerId"],
+      "properties": {
+        "mappingVersion": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+        "providerId": { "$ref": "#/definitions/BindingClassificationProviderId" }
+      }
+    },
+    "BindingClassificationEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "confidence"],
+      "properties": {
+        "kind": { "type": "string", "enum": ["configuration", "secret", "provider_credential"] },
+        "confidence": { "type": "string", "enum": ["high", "low"] },
+        "providerId": { "$ref": "#/definitions/BindingClassificationProviderId" },
+        "category": { "$ref": "#/definitions/BindingClassificationCredentialCategory" },
+        "requestedAiMappingId": { "$ref": "#/definitions/BindingClassificationIdentifier" }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "kind": { "const": "provider_credential" } }, "required": ["kind"] },
+          "then": { "required": ["providerId", "category", "requestedAiMappingId"] },
+          "else": { "not": { "anyOf": [{ "required": ["providerId"] }, { "required": ["category"] }, { "required": ["requestedAiMappingId"] }] } }
+        }
+      ]
+    }
+  },
+  "x-digest": {
+    "field": "classificationDigest",
+    "algorithm": "sha256",
+    "encoding": "utf8",
+    "canonicalization": "harbour-length-prefixed-records/1.0",
+    "excludedFields": ["classificationDigest"],
+    "semanticPreconditions": ["classifications object keys exactly equal the declared environmentBindings names", "each provider_credential entry references a present requestedAiMappings key with the same providerId"]
+  },
+  "x-source-revision-digest": {
+    "field": "sourceRevisionDigest",
+    "domain": "harbour.source-revision/1.0",
+    "algorithm": "sha256",
+    "encoding": "utf8",
+    "canonicalization": "harbour-length-prefixed-records/1.0",
+    "inputs": ["sourceRef", "sourceRevision"]
+  }
+}

package/schema/deploy-request.schema.json

@@ -5,7 +5,7 @@
   "description": "JSON body for POST /v1/tenants/{tenant}/apps/{app}/deployments. tenant and app come from path parameters and are not body fields. The preview MVP requires environment=preview. Every accepted POST is a new deployment intent; idempotencyKey is retained only as request correlation.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["source", "environment", "branch", "commit"],
+  "required": ["source", "environment", "branch", "commit", "bindingClassification"],
   "properties": {
     "source": {
       "$ref": "#/definitions/DeployRequestSource"
@@ -33,6 +33,10 @@
     },
     "environmentBindings": {
       "$ref": "#/definitions/DeployRequestEnvironmentBindings"
+    },
+    "bindingClassification": {
+      "$ref": "binding-classification-subject.schema.json",
+      "description": "Complete pre-allocation, value-free binding-name classification. DCP verifies its tenant/app/environment/source identity and exact name coverage before minting the versionId."
     }
   },
   "definitions": {
@@ -107,7 +111,21 @@
       "environment": "preview",
       "branch": "preview-deployment",
       "commit": "abc1234567890abcdef1234567890abcdef12345",
-      "idempotencyKey": "deploy-attempt-123"
+      "idempotencyKey": "deploy-attempt-123",
+      "bindingClassification": {
+        "schema": "harbour.binding-classification-subject/1.0",
+        "status": "COMPLETE",
+        "tenantId": "fourier",
+        "appId": "focus-list",
+        "environment": "preview",
+        "sourceRef": "https://github.com/Fourier-Labs-AI/focus-list",
+        "sourceRevision": "git-sha1:abc1234567890abcdef1234567890abcdef12345",
+        "sourceRevisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "classifierRevision": "secret-name-classifier-2.0",
+        "classifications": {},
+        "requestedAiMappings": {},
+        "classificationDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      }
     },
     {
       "source": {
@@ -122,6 +140,23 @@
           { "name": "STRIPE_API_KEY", "secretRef": "secretref://tenants/fourier/apps/reports/STRIPE_API_KEY" },
           { "name": "LOG_LEVEL", "value": "debug" }
         ]
+      },
+      "bindingClassification": {
+        "schema": "harbour.binding-classification-subject/1.0",
+        "status": "COMPLETE",
+        "tenantId": "fourier",
+        "appId": "focus-list",
+        "environment": "preview",
+        "sourceRef": "https://github.com/Fourier-Labs-AI/focus-list",
+        "sourceRevision": "git-sha1:abc1234567890abcdef1234567890abcdef12345",
+        "sourceRevisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "classifierRevision": "secret-name-classifier-2.0",
+        "classifications": {
+          "LOG_LEVEL": { "kind": "configuration", "confidence": "high" },
+          "STRIPE_API_KEY": { "kind": "secret", "confidence": "high" }
+        },
+        "requestedAiMappings": {},
+        "classificationDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
       }
     }
   ]

package/schema/deploy-response.schema.json

@@ -5,7 +5,7 @@
   "description": "202 Accepted body returned by POST /v1/tenants/{tenant}/apps/{app}/deployments only after the authoritative QUEUED version exists and its version-qualified SQS message is accepted.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["requestId", "versionId", "tenant", "app", "environment", "status", "acceptedAt", "statusUrl"],
+  "required": ["requestId", "versionId", "tenant", "app", "environment", "status", "classificationDigest", "sanitizedBindingDigest", "acceptedAt", "statusUrl"],
   "properties": {
     "requestId": {
       "type": "string",
@@ -36,6 +36,16 @@
       "type": "string",
       "enum": ["QUEUED"]
     },
+    "classificationDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$",
+      "description": "Digest of the validated pre-allocation BindingClassificationSubject."
+    },
+    "sanitizedBindingDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$",
+      "description": "Digest of the exact version-bound SanitizedBindingEvidence persisted atomically before this response."
+    },
     "acceptedAt": {
       "type": "string",
       "format": "date-time"

package/schema/promotion-request.schema.json

@@ -5,7 +5,7 @@
   "description": "JSON body for POST /v1/tenants/{tenant}/apps/{app}/promotions. Repository identity is loaded from stored application and preview records, not supplied by the caller.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["previewVersionId", "commit", "idempotencyKey"],
+  "required": ["previewVersionId", "commit", "idempotencyKey", "bindingClassification"],
   "properties": {
     "previewVersionId": {
       "type": "string",
@@ -24,6 +24,10 @@
     },
     "environmentBindings": {
       "$ref": "#/definitions/PromotionRequestEnvironmentBindings"
+    },
+    "bindingClassification": {
+      "$ref": "binding-classification-subject.schema.json",
+      "description": "Complete pre-allocation, value-free classification for the exact production source revision and declared production binding names. It intentionally has no production versionId; DCP allocates that identity atomically."
     }
   },
   "definitions": {
@@ -54,11 +58,11 @@
         },
         "secretRef": {
           "type": "string",
-          "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/app/[A-Za-z0-9._-]+/secret/[A-Z][A-Z0-9_]{0,127}$",
-          "description": "Governance reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it."
+          "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$",
+          "description": "Governance app secret, app-scoped minted data-source credential, or approved tenant-source credential reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it."
         }
       },
-      "description": "One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only the app-secret shape, which is what keeps a promotion from naming a tenant integration credential."
+      "description": "One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only app secrets, app-scoped minted data-source credentials and tenant-scoped source credentials from an approved BYO grant; integration and provider credentials remain unrepresentable."
     }
   }
 }

package/schema/promotion-response.schema.json

@@ -5,7 +5,7 @@
   "description": "202 Accepted body returned after the production version and its durable idempotency binding exist.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["idempotencyKey", "versionId", "previewVersionId", "tenant", "app", "environment", "status", "acceptedAt", "statusUrl"],
+  "required": ["idempotencyKey", "versionId", "previewVersionId", "tenant", "app", "environment", "status", "classificationDigest", "sanitizedBindingDigest", "acceptedAt", "statusUrl"],
   "properties": {
     "idempotencyKey": {
       "type": "string",
@@ -38,6 +38,16 @@
       "type": "string",
       "enum": ["QUEUED"]
     },
+    "classificationDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$",
+      "description": "Digest of the validated production BindingClassificationSubject."
+    },
+    "sanitizedBindingDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$",
+      "description": "Digest of the exact production-version SanitizedBindingEvidence persisted atomically before this response."
+    },
     "acceptedAt": {
       "type": "string",
       "format": "date-time"

package/schema/sanitized-binding-evidence.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/sanitized-binding-evidence.schema.json",
+  "title": "SanitizedBindingEvidence",
+  "description": "Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration, app secrets or approved data-source credential references and never an AI-mapping-owned provider credential.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "tenantId", "appId", "environment", "versionId", "sourceRef", "sourceRevision", "sourceRevisionDigest", "classificationDigest", "bindings", "requiredAiMappings", "sanitizedBindingDigest"],
+  "properties": {
+    "schema": { "type": "string", "const": "harbour.sanitized-binding-evidence/1.0" },
+    "tenantId": { "$ref": "#/definitions/SanitizedBindingIdentifier" },
+    "appId": { "$ref": "#/definitions/SanitizedBindingIdentifier" },
+    "environment": { "type": "string", "enum": ["preview", "prod"] },
+    "versionId": { "type": "string", "minLength": 7, "maxLength": 320, "pattern": "^[^#]+#[^#]+#[^#]+#[0-9]{6,}$" },
+    "sourceRef": { "$ref": "#/definitions/SanitizedBindingSourceRef" },
+    "sourceRevision": { "$ref": "#/definitions/SanitizedBindingSourceRevision" },
+    "sourceRevisionDigest": { "$ref": "#/definitions/SanitizedBindingDigest" },
+    "classificationDigest": { "$ref": "#/definitions/SanitizedBindingDigest" },
+    "bindings": {
+      "description": "Exact approved runtime-binding set keyed by environment name. Object keys make duplicate bindings unrepresentable. A provider_credential kind and rejected binding metadata/value are unrepresentable.",
+      "type": "object",
+      "minProperties": 0,
+      "maxProperties": 512,
+      "propertyNames": { "$ref": "#/definitions/SanitizedBindingName" },
+      "additionalProperties": { "$ref": "#/definitions/SanitizedRuntimeBinding" }
+    },
+    "requiredAiMappings": {
+      "description": "DCP-validated supported AI mapping requirements keyed by mapping ID. This records what later PLAN/provisioning milestones must enforce; it does not claim those later controls are already active.",
+      "type": "object",
+      "minProperties": 0,
+      "maxProperties": 64,
+      "propertyNames": { "$ref": "#/definitions/SanitizedBindingIdentifier" },
+      "additionalProperties": { "$ref": "#/definitions/SanitizedBindingAiMapping" }
+    },
+    "sanitizedBindingDigest": { "$ref": "#/definitions/SanitizedBindingDigest" }
+  },
+  "definitions": {
+    "SanitizedBindingIdentifier": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9_.-]*$"
+    },
+    "SanitizedBindingName": {
+      "type": "string",
+      "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+    },
+    "SanitizedBindingDigest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "SanitizedBindingSourceRef": {
+      "type": "string",
+      "maxLength": 1024,
+      "pattern": "^[a-z][a-z0-9+.-]*://[A-Za-z0-9][A-Za-z0-9.-]{0,127}(?:/[A-Za-z0-9][A-Za-z0-9._~-]{0,255})+$"
+    },
+    "SanitizedBindingSourceRevision": {
+      "type": "string",
+      "minLength": 9,
+      "maxLength": 320,
+      "pattern": "^[a-z][a-z0-9._-]{0,31}:[A-Za-z0-9][A-Za-z0-9._-]{6,287}$"
+    },
+    "SanitizedBindingProviderId": {
+      "type": "string",
+      "enum": ["openai", "anthropic", "gemini", "openrouter"]
+    },
+    "SanitizedBindingAiMapping": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mappingVersion", "providerId"],
+      "properties": {
+        "mappingVersion": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$" },
+        "providerId": { "$ref": "#/definitions/SanitizedBindingProviderId" }
+      }
+    },
+    "SanitizedRuntimeBinding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind"],
+      "properties": {
+        "kind": { "type": "string", "enum": ["configuration", "secret"] },
+        "value": { "type": "string", "minLength": 1, "maxLength": 4096, "description": "Approved non-secret configuration literal. Provider-credential values are never approved or persisted here." },
+        "secretRef": { "type": "string", "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$", "description": "Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract." }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "kind": { "const": "configuration" } }, "required": ["kind"] },
+          "then": { "required": ["value"], "not": { "required": ["secretRef"] } },
+          "else": { "required": ["secretRef"], "not": { "required": ["value"] } }
+        }
+      ]
+    }
+  },
+  "x-digest": {
+    "field": "sanitizedBindingDigest",
+    "algorithm": "sha256",
+    "encoding": "utf8",
+    "canonicalization": "harbour-length-prefixed-records/1.0",
+    "excludedFields": ["sanitizedBindingDigest"],
+    "semanticPreconditions": ["tenantId, appId, environment, sourceRef, sourceRevision and sourceRevisionDigest exactly equal the validated classification subject", "classificationDigest exactly equals the validated classification subject digest", "requiredAiMappings exactly equals the validated subject requestedAiMappings", "versionId is the sole DCP-allocated version admitted atomically with this evidence", "binding keys are exactly the classification keys not classified as requested AI-mapping-owned provider_credential"]
+  }
+}