@getbourdon/conformance 0.6.0 → 0.7.0

package/fixtures/fed_seed_library/agents/lovable.l5.yaml

@@ -0,0 +1,65 @@
+spec_version: '0.1'
+agent:
+  id: lovable
+  type: code-assistant
+  instance: cloud
+  role_narrative: Cloud app-building agent. Ships full-stack web apps from chat.
+last_updated: '2026-08-26T12:00:00+00:00'
+capabilities:
+- app-building
+- full-stack-generation
+- deploy-preview
+known_entities:
+- name: Acme Site
+  type: project
+  aliases:
+  - acme.example
+  summary: Marketing site for Acme, an automation and AI systems studio.
+  tags:
+  - lovable
+  - client
+  visibility: team
+- name: Bourdon
+  type: project
+  summary: Recognition-first memory federation (granted side, Lovable view).
+  tags:
+  - infra
+  visibility: public
+- name: Client Billing Export
+  type: concept
+  summary: Unpublished billing integration details.
+  tags:
+  - client-confidential
+  visibility: private
+recent_sessions:
+- date: '2026-08-25'
+  project_focus:
+  - Acme Site
+  key_actions:
+  - rebuilt hero section
+  files_touched:
+  - src/routes/index.tsx
+  visibility: team
+- date: '2026-08-24'
+  project_focus:
+  - Bourdon
+  key_actions:
+  - drafted participant adapter
+  visibility: public
+- date: '2026-08-23'
+  project_focus:
+  - Client Billing Export
+  key_actions:
+  - private review
+  visibility: private
+visibility_policy:
+  default: team
+  private_tags:
+  - personal
+  - credential
+  - secret
+  - client-confidential
+  team_tags:
+  - lovable
+  - project
+  - client

package/fixtures/leak_cases.json

@@ -2,6 +2,7 @@
   "_doc": "Cross-impl federation leak-audit parity. Oracle = bourdon.core.leak_audit.audit_manifest. Each case feeds `manifest` through the auditor; `expected_findings` pins [{kind, location}] in the oracle's emission order (visibility entities, visibility sessions, then the total credential walk). kind in {'credential','visibility'}; location is a json-path like 'known_entities[0].summary'. audit_manifest NEVER raises -- garbage manifests yield []. Credential cases use keyword-shaped triggers only; no token literal is committed.",
   "audit_schema_version": "federation-leak-audit/v1",
   "private_tag_families": [
+    "client-confidential",
     "credential",
     "family",
     "financial",

package/fixtures/manifest.json

@@ -1,8 +1,8 @@
 {
   "_doc": "Index of cross-impl parity fixtures. conformance_version bumps on any fixture change (patch=added cases, minor=new family, major=changed expected-output = a reviewed behavior change). Python is the oracle; this file is generated by tools/gen_conformance.py.",
-  "conformance_version": "2.5.0",
+  "conformance_version": "2.6.0",
   "produced_against": {
-    "bourdon_version": "0.17.0"
+    "bourdon_version": "0.23.0"
   },
   "fixtures": [
     {
@@ -12,17 +12,17 @@
     },
     {
       "path": "leak_cases.json",
-      "sha256": "4142107183dd967d00fc6f4b3678a84270480fb146a6e1c51dead7fa625ae685",
+      "sha256": "cb85515a3fbfafecf5a72e0a361a80ce5da1e8cdb5c25cdef3227029d955322f",
       "producer": "tools/gen_conformance.py::leak_cases"
     },
     {
       "path": "recognition_vectors.json",
-      "sha256": "248b2af23e35f6e1e86a918896ba4243e7edc54aa30daabc0f4b32e260c47bc1",
+      "sha256": "5f19085be347d089774a79c12aa16ec41885f6d9f5e2bd83799d92a607314251",
       "producer": "tools/gen_conformance.py::recognition_vectors"
     },
     {
       "path": "recognition_golden_v1.yaml",
-      "sha256": "9059e2615118a934b2ec3523c06238345de4aac5138d99611418cc70eeb53956",
+      "sha256": "644cab8367f7915fbe2b7ab184573b9f24cf66c8bf6d44d411775920a0c0fd9b",
       "producer": "tools/gen_conformance.py::recognition_vectors"
     },
     {
@@ -197,7 +197,7 @@
     },
     {
       "path": "mcp_snapshots/prepare_recognition_context_drifting.res.json",
-      "sha256": "2d217ba56593bf6593216546c223adf0b972470632adb326bb82eb5d5996acc8",
+      "sha256": "0c55d6d1b55f6dc8d4bf417473b31091eb12d9f8f6ef53396d150bc6e05dd649",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -270,6 +270,16 @@
       "sha256": "d8bf31fa8a2e23b126139e209eda1c6d3167070717122fdd53b46168cdc28853",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/describe_caller.req.json",
+      "sha256": "dc8391d7a81a214547d7ceefaf9461450a809fdaa001f5668ad37309a35caae6",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/describe_caller.res.json",
+      "sha256": "a86d352f38c7ec13bcf83ef22f692e7c80bf1e9254105355ecb0d27b0139752a",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/commit_to_federation.req.json",
       "sha256": "07c43423cb303a567214217063c7c0b0d7629e1ec91c6f79c5b56858315ae2d8",
@@ -297,7 +307,7 @@
     },
     {
       "path": "mcp_snapshots/prepare_recognition_context.res.json",
-      "sha256": "dfb2d73ddb812d41dfe8e0b17dddeb1399373904972c09cf80e0bf9daa65941f",
+      "sha256": "11c90ab8cb537a46e625f5fda2bcf203b0ebbc9b4337040ce79d7b1e61551561",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -352,7 +362,7 @@
     },
     {
       "path": "mcp_snapshots/seed_library.json",
-      "sha256": "f0210a4b63af53728f3d7a1f56baede0bc110ad902a36530b2b35312c71e69ff",
+      "sha256": "9438518dadb691feaeb44c7bebf6583958ddf55289df3d3fef8ad7b123500827",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {

package/fixtures/mcp_snapshots/describe_caller.req.json

@@ -0,0 +1,4 @@
+{
+  "args": {},
+  "tool": "describe_caller"
+}

package/fixtures/mcp_snapshots/describe_caller.res.json

@@ -0,0 +1,4 @@
+{
+  "error": "not_configured",
+  "version": 1
+}

package/fixtures/mcp_snapshots/prepare_recognition_context.res.json

@@ -1,12 +1,13 @@
 {
   "access_level": "team",
   "confidence": "medium",
-  "hydration": "# Bourdon\n\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
-  "hydration_chars": 310,
+  "hydration": "## Bourdon (project)\nknown by: claude-code, codex\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
+  "hydration_chars": 349,
   "hydration_scheduled": true,
   "include_private": false,
   "matched_entities": [
     {
+      "confidence": "medium",
       "name": "Bourdon",
       "source_agents": [
         "claude-code",
@@ -16,6 +17,6 @@
     }
   ],
   "prompt": "what about Bourdon",
-  "prompt_context": "Bourdon recognition context\nImmediate recognition: Oh -- Bourdon, the project.\nMatched entities:\n- Bourdon (project) via claude-code, codex: Cross-agent memory federation (granted side).\nUse this as timing-layer context, not as a final answer.",
-  "recognition": "Oh -- Bourdon, the project."
+  "prompt_context": "Bourdon recognition context\nBourdon (project; known by 2 agents): Federation, codex view.\nKnown by: Bourdon via claude-code, codex.\nUse this as timing-layer context, not as a final answer.",
+  "recognition": "Bourdon (project; known by 2 agents): Federation, codex view."
 }

package/fixtures/mcp_snapshots/prepare_recognition_context_drifting.res.json

@@ -8,12 +8,13 @@
       "reason": "yielded nothing this run - last yielded 400 record(s) at 2026-06-29T09:00:00Z"
     }
   ],
-  "hydration": "# Bourdon\n\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
-  "hydration_chars": 310,
+  "hydration": "## Bourdon (project)\nknown by: claude-code, codex\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
+  "hydration_chars": 349,
   "hydration_scheduled": true,
   "include_private": false,
   "matched_entities": [
     {
+      "confidence": "medium",
       "name": "Bourdon",
       "source_agents": [
         "claude-code",
@@ -23,6 +24,6 @@
     }
   ],
   "prompt": "what about Bourdon",
-  "prompt_context": "Bourdon recognition context\nImmediate recognition: Oh -- Bourdon, the project.\nMatched entities:\n- Bourdon (project) via claude-code, codex: Cross-agent memory federation (granted side).\nUse this as timing-layer context, not as a final answer.",
-  "recognition": "Oh -- Bourdon, the project."
+  "prompt_context": "Bourdon recognition context\nBourdon (project; known by 2 agents): Federation, codex view.\nKnown by: Bourdon via claude-code, codex.\nUse this as timing-layer context, not as a final answer.",
+  "recognition": "Bourdon (project; known by 2 agents): Federation, codex view."
 }

package/fixtures/mcp_snapshots/seed_library.json

@@ -1,5 +1,5 @@
 {
-  "_doc": "The mcp_snapshots/*.res.json were produced by driving the live create_l6_server tool + resource closures (OPERATOR / trusted, = stdio) over a TEMP copy of this seed library, then normalizing each response. Every tool and resource the server registers is covered (the generator refuses to emit otherwise). The TS mirror loads the SAME seed and must reproduce every normalized res. Each payload travels the wire as a single TextContent whose .text = json.dumps(payload); the snapshot is the json.loads of that text. resource_* snapshots are taken FIRST (pure seed view); rollback_agent_memory runs LAST (it restores the seeded prior version of claude-code).",
+  "_doc": "The mcp_snapshots/*.res.json were produced by driving the live create_l6_server tool + resource closures (OPERATOR / trusted, = stdio) over a TEMP copy of this seed library, then normalizing each response. Every tool and resource the server registers is covered (the generator refuses to emit otherwise). The TS mirror loads the SAME seed and must reproduce every normalized res. Each payload travels the wire as a single TextContent whose .text = json.dumps(payload); the snapshot is the json.loads of that text. resource_* snapshots are taken FIRST (pure seed view); rollback_agent_memory runs LAST (it restores the seeded prior version of claude-code). describe_caller pins only the not_configured response because caller_audience is unset; authenticated caller behavior is not covered by this seed.",
   "caller": {
     "agent_id": "operator",
     "tier": "trusted"
@@ -73,6 +73,7 @@
     "list_notes",
     "list_agents",
     "export_agents",
+    "describe_caller",
     "commit_to_federation",
     "get_cross_agent_summary",
     "prepare_recognition_context",

package/fixtures/recognition_golden_v1.yaml

@@ -104,3 +104,33 @@ cases:
         - {name: Gamma}
         - {name: Delta}
     expected_entities: [Alpha, Beta, Gamma]
+
+  # Fuzzy tier (0.21.0): a long name (>= 3 meaningful terms) matches when at
+  # least 60% of its terms (never fewer than two) appear anywhere in the prompt.
+  # Here the name has five meaningful terms, so three must overlap.
+  - id: fuzzy-long-name-paraphrase
+    prompt: "how do we improve the recognition first runtime protocol"
+    manifest:
+      known_entities:
+        - {name: Bourdon recognition first runtime layer, type: topic}
+    expected_entities: [Bourdon recognition first runtime layer]
+    expected_confidence: medium
+
+  # Two of five terms is not enough: the fuzzy tier must not turn every
+  # mention of "runtime" into a recognition.
+  - id: fuzzy-long-name-too-little-overlap
+    prompt: "the runtime layer is slow today"
+    manifest:
+      known_entities:
+        - {name: Bourdon recognition first runtime layer, type: topic}
+    expected_entities: []
+
+  # Short names never take the fuzzy path: the contiguous rule (and with it the
+  # short-name guard) still governs them.
+  - id: fuzzy-never-applies-to-short-names
+    prompt: "the memory federation is the product"
+    manifest:
+      known_entities:
+        - {name: Bourdon memory federation, type: topic}
+        - {name: Bourdon federation, type: topic}
+    expected_entities: [Bourdon memory federation]

package/fixtures/recognition_vectors.json

@@ -165,6 +165,113 @@
     }
   ],
   "recognition_strings": [
+    {
+      "name": "fuzzy_long_name_paraphrase",
+      "prompt": "how do we improve the recognition first runtime protocol",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon recognition first runtime layer",
+            "type": "topic"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Bourdon recognition first runtime layer"
+      ],
+      "recognition": "Bourdon recognition first runtime layer (topic).",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Bourdon recognition first runtime layer": "medium"
+      }
+    },
+    {
+      "name": "fuzzy_too_little_overlap",
+      "prompt": "the runtime layer is slow today",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon recognition first runtime layer",
+            "type": "topic"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [],
+      "recognition": "",
+      "confidence": "none",
+      "entity_confidences": {}
+    },
+    {
+      "name": "cluster_by_alias",
+      "prompt": "compare Bourdon and Continuo",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon",
+            "type": "project",
+            "aliases": [
+              "Continuo"
+            ],
+            "source_agents": [
+              "claude-code",
+              "codex"
+            ]
+          },
+          {
+            "name": "Continuo",
+            "type": "oss-product",
+            "source_agents": [
+              "codex"
+            ]
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Bourdon"
+      ],
+      "recognition": "Bourdon (project; known by 2 agents; also known as Continuo).",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Bourdon": "medium"
+      }
+    },
+    {
+      "name": "gloss_freshest_summary_stale",
+      "prompt": "what is Nimbletron",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Nimbletron",
+            "type": "project",
+            "source_agents": [
+              "alpha",
+              "beta"
+            ],
+            "summaries": {
+              "alpha": "Nimbletron is the batch renderer for the print pipeline, owned by the platform team.",
+              "beta": "renderer"
+            },
+            "touched": {
+              "alpha": "2019-06-01",
+              "beta": "2020-01-01"
+            },
+            "last_touched": "2020-01-01"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Nimbletron"
+      ],
+      "recognition": "Nimbletron (project; known by 2 agents): Nimbletron is the batch renderer for the print pipeline, owned by the platform team. Last touched 2020-01-01, may be stale.",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Nimbletron": "medium"
+      }
+    },
     {
       "name": "single_with_type",
       "prompt": "tell me about Bourdon",
@@ -180,7 +287,7 @@
       "matched_names": [
         "Bourdon"
       ],
-      "recognition": "Oh -- Bourdon, the project.",
+      "recognition": "Bourdon (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Bourdon": "medium"
@@ -200,7 +307,7 @@
       "matched_names": [
         "Alpha"
       ],
-      "recognition": "Oh -- Alpha.",
+      "recognition": "Alpha.",
       "confidence": "medium",
       "entity_confidences": {
         "Alpha": "medium"
@@ -230,7 +337,7 @@
         "Bourdon",
         "Zephyr"
       ],
-      "recognition": "You're asking about Bourdon and Zephyr -- I have both.",
+      "recognition": "You're asking about Bourdon and Zephyr.\n- Bourdon (project).\n- Zephyr (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Bourdon": "medium",
@@ -262,7 +369,7 @@
         "Beta",
         "Gamma"
       ],
-      "recognition": "You're asking about Alpha, Beta, and Gamma -- I have all of those.",
+      "recognition": "You're asking about Alpha, Beta, and Gamma.\n- Alpha.\n- Beta.\n- Gamma.",
       "confidence": "medium",
       "entity_confidences": {
         "Alpha": "medium",
@@ -302,7 +409,7 @@
       "matched_names": [
         "NAS"
       ],
-      "recognition": "Oh -- NAS, the hardware.",
+      "recognition": "NAS (hardware).",
       "confidence": "medium",
       "entity_confidences": {
         "NAS": "medium"
@@ -328,7 +435,7 @@
       "matched_names": [
         "PublicProj"
       ],
-      "recognition": "Oh -- PublicProj, the project.",
+      "recognition": "PublicProj (project).",
       "confidence": "medium",
       "entity_confidences": {
         "PublicProj": "medium"
@@ -350,7 +457,7 @@
       "matched_names": [
         "Nimbletron"
       ],
-      "recognition": "Oh -- Nimbletron, the project (archived 2026-01-01).",
+      "recognition": "Nimbletron (project; archived 2026-01-01).",
       "confidence": "medium",
       "entity_confidences": {
         "Nimbletron": "medium"
@@ -374,7 +481,7 @@
       "matched_names": [
         "LegacyThing"
       ],
-      "recognition": "Oh -- LegacyThing, the tool (archived).",
+      "recognition": "LegacyThing (tool; archived).",
       "confidence": "medium",
       "entity_confidences": {
         "LegacyThing": "medium"
@@ -398,7 +505,7 @@
       "matched_names": [
         "QUIP"
       ],
-      "recognition": "Oh -- QUIP, the product.",
+      "recognition": "QUIP (product).",
       "confidence": "medium",
       "entity_confidences": {
         "QUIP": "medium"
@@ -438,7 +545,7 @@
       "matched_names": [
         "Multi Word Project"
       ],
-      "recognition": "Oh -- Multi Word Project, the project.",
+      "recognition": "Multi Word Project (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Multi Word Project": "medium"

package/fixtures.pin.json

@@ -1,5 +1,5 @@
 {
   "_doc": "The recorded fixture pin. CI and the package tests assert the vendored fixtures/manifest.json hashes to exactly this value, so the fixture set in any build is provably the reviewed one. Refresh via the re-pin ritual in README.md.",
-  "conformance_version": "2.5.0",
-  "manifest_sha256": "3e592307ebb44d694ed726d6fd3b78e8f5ebab0bc346166fa04b0d4ae07bbef2"
+  "conformance_version": "2.6.0",
+  "manifest_sha256": "0e5f12493974729e203cfeda4a04be39e55af2468510aaced80d3c40a38d3b06"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getbourdon/conformance",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Language-neutral cross-implementation parity fixtures for Bourdon. Python (pip install bourdon) is the oracle; the @getbourdon/* TypeScript mirror asserts against these exact bytes.",
   "license": "Apache-2.0",
   "type": "module",