@getbourdon/conformance 0.6.0 → 0.8.0

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA2B;AAC3B,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAH9B;AA0BA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,QACV,iCAAa,0BAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,aAAO,+BAAW,QAAQ,EAAE,WAAO,6BAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,QACpB,iCAAa,0BAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,eAAW,0BAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\nimport { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,yBAA2B;AAC3B,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAJ9B;AA2BA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,QACV,iCAAa,0BAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,aAAO,+BAAW,QAAQ,EAAE,WAAO,6BAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,QACpB,iCAAa,0BAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,eAAW,0BAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/dist/index.js

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, resolve } from "node:path";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,IACV,aAAa,QAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,WAAW,QAAQ,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,QAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,WAAW,QAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// SPDX-License-Identifier: Apache-2.0\nimport { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AACA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,IACV,aAAa,QAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,WAAW,QAAQ,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,QAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,WAAW,QAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/fixtures/leak_cases.json

@@ -2,6 +2,8 @@
   "_doc": "Cross-impl federation leak-audit parity. Oracle = bourdon.core.leak_audit.audit_manifest. Each case feeds `manifest` through the auditor; `expected_findings` pins [{kind, location}] in the oracle's emission order (visibility entities, visibility sessions, then the total credential walk). kind in {'credential','visibility'}; location is a json-path like 'known_entities[0].summary'. audit_manifest NEVER raises -- garbage manifests yield []. Credential cases use keyword-shaped triggers only; no token literal is committed.",
   "audit_schema_version": "federation-leak-audit/v1",
   "private_tag_families": [
+    "client-confidential",
+    "confidential",
     "credential",
     "family",
     "financial",

package/fixtures/manifest.json

@@ -1,8 +1,8 @@
 {
   "_doc": "Index of cross-impl parity fixtures. conformance_version bumps on any fixture change (patch=added cases, minor=new family, major=changed expected-output = a reviewed behavior change). Python is the oracle; this file is generated by tools/gen_conformance.py.",
-  "conformance_version": "2.5.0",
+  "conformance_version": "5.1.0",
   "produced_against": {
-    "bourdon_version": "0.17.0"
+    "bourdon_version": "0.24.0"
   },
   "fixtures": [
     {
@@ -12,17 +12,17 @@
     },
     {
       "path": "leak_cases.json",
-      "sha256": "4142107183dd967d00fc6f4b3678a84270480fb146a6e1c51dead7fa625ae685",
+      "sha256": "c1a221aa35b2d6a82845ce76fa3885f0187b24a67c37711d9f6f4f6c8cfedc03",
       "producer": "tools/gen_conformance.py::leak_cases"
     },
     {
       "path": "recognition_vectors.json",
-      "sha256": "248b2af23e35f6e1e86a918896ba4243e7edc54aa30daabc0f4b32e260c47bc1",
+      "sha256": "5f19085be347d089774a79c12aa16ec41885f6d9f5e2bd83799d92a607314251",
       "producer": "tools/gen_conformance.py::recognition_vectors"
     },
     {
       "path": "recognition_golden_v1.yaml",
-      "sha256": "9059e2615118a934b2ec3523c06238345de4aac5138d99611418cc70eeb53956",
+      "sha256": "644cab8367f7915fbe2b7ab184573b9f24cf66c8bf6d44d411775920a0c0fd9b",
       "producer": "tools/gen_conformance.py::recognition_vectors"
     },
     {
@@ -137,7 +137,7 @@
     },
     {
       "path": "tier_matrix.json",
-      "sha256": "9753ad1fd4a092bdf4110b3b24576f2bfe7001d6d6758ef55047ee5da851e25c",
+      "sha256": "92954294831c3c5b318b73ae7deae8e338fb2f8d3c4ddfac3b1dd09b9b6b7c0a",
       "producer": "tools/gen_conformance.py::tier_matrix"
     },
     {
@@ -197,7 +197,7 @@
     },
     {
       "path": "mcp_snapshots/prepare_recognition_context_drifting.res.json",
-      "sha256": "2d217ba56593bf6593216546c223adf0b972470632adb326bb82eb5d5996acc8",
+      "sha256": "0c55d6d1b55f6dc8d4bf417473b31091eb12d9f8f6ef53396d150bc6e05dd649",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -270,6 +270,16 @@
       "sha256": "d8bf31fa8a2e23b126139e209eda1c6d3167070717122fdd53b46168cdc28853",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/describe_caller.req.json",
+      "sha256": "dc8391d7a81a214547d7ceefaf9461450a809fdaa001f5668ad37309a35caae6",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/describe_caller.res.json",
+      "sha256": "a86d352f38c7ec13bcf83ef22f692e7c80bf1e9254105355ecb0d27b0139752a",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/commit_to_federation.req.json",
       "sha256": "07c43423cb303a567214217063c7c0b0d7629e1ec91c6f79c5b56858315ae2d8",
@@ -297,7 +307,7 @@
     },
     {
       "path": "mcp_snapshots/prepare_recognition_context.res.json",
-      "sha256": "dfb2d73ddb812d41dfe8e0b17dddeb1399373904972c09cf80e0bf9daa65941f",
+      "sha256": "11c90ab8cb537a46e625f5fda2bcf203b0ebbc9b4337040ce79d7b1e61551561",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -310,6 +320,36 @@
       "sha256": "d662fd546ee6ba3315a751d68d2d096b5d21d338cf3c65970f09431f666f5e6b",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/trace_entity.req.json",
+      "sha256": "543ae888dedad51fdf2872dc32a130a348deec7bfd19571a5e0ea2235cdf014e",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/trace_entity.res.json",
+      "sha256": "980c6b6fec01a06453ebc80204da03a553bdfbe3d069ae5ce6c8fa511f1c99cf",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/ingest_meeting.req.json",
+      "sha256": "7bdac92f1f2374639e1088c7f048e5c5a732c53d32a21766af3555102d420b63",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/ingest_meeting.res.json",
+      "sha256": "434ccc3f41e274ade88da857eddda5ab550e1fd8ec23328d929cc768c881b6aa",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/compile_turn.req.json",
+      "sha256": "64e17a2db8d624a4f26a8a0601f3967d1ec96d149b555bf52251d7b6200aea69",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/compile_turn.res.json",
+      "sha256": "5c35e344307a200e71ad83fef9ff6e7eaed79c1f77cb897f32b59ffa9f5ef282",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/get_deeper_context.req.json",
       "sha256": "ca5d6f3472a3a74b1710e8ee093e5648b737bf6635656a21306ef73656fd533f",
@@ -320,6 +360,46 @@
       "sha256": "c92ec338c23f2cdc3f1215751812c7f5c2c08aa86fb3ff097288e4c831313053",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
+    {
+      "path": "mcp_snapshots/search_federation.req.json",
+      "sha256": "ec8da2fb5d95ac050afe2cd3ff3335f10b003338a5f7c832cbb78abc3e77df79",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/search_federation.res.json",
+      "sha256": "1db5bfed711a2ccba3478a26e4e189d8124edbd83921c1ecf1f87590fac60463",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/capture_clip.req.json",
+      "sha256": "e640f67b05c7465bc4dc05f3e3e884f12b41861e0cc155bd9e061e75eb100e61",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/capture_clip.res.json",
+      "sha256": "e6f2f77a7593c8de234d3f1baf50424f267634d0f45ca60b05ac833f2f28acdf",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/propose_consensus.req.json",
+      "sha256": "e63fb8dfae9b4ba6db1893cd79e0331c82dc32c0e1a57d79859f856282ad9efe",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/propose_consensus.res.json",
+      "sha256": "357ce9ab7d9ceef757900996050b7758793e6a75880c2f580e42b7a767dd4522",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/vote_consensus.req.json",
+      "sha256": "c4dcfa2af2c95cff0f97d2e49b3fe197444ede4302e63f1ef55898f3519e0ced",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
+    {
+      "path": "mcp_snapshots/vote_consensus.res.json",
+      "sha256": "b244f65eeed1edfb9468acbbd6d6449a660388bae59bde0b6d4cb9c5d89f06b0",
+      "producer": "tools/gen_conformance.py::mcp_snapshots"
+    },
     {
       "path": "mcp_snapshots/list_memory_versions.req.json",
       "sha256": "d74a7d4ca7aaef454887f3a84e7db9d01a9141899a2d3a2e4dd43863a09c67df",
@@ -352,12 +432,12 @@
     },
     {
       "path": "mcp_snapshots/seed_library.json",
-      "sha256": "f0210a4b63af53728f3d7a1f56baede0bc110ad902a36530b2b35312c71e69ff",
+      "sha256": "4315d9be6b52c899d7d3f0449e243fc0a8baa31f53eec141314cd526c9d29095",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
       "path": "mcp_snapshots/_normalizer.json",
-      "sha256": "438071a3b1de83fb23083fd9ad2d4a734a27032d84faabf9d5772f14779a1721",
+      "sha256": "43db802a917f5ed286384ba175d3ec336a4a72fb48a99257ad9865b826f4c6ea",
       "producer": "tools/gen_conformance.py::mcp_snapshots"
     },
     {
@@ -437,7 +517,7 @@
     },
     {
       "path": "turn_compiler_vectors.json",
-      "sha256": "add466b02d93cd706c92cdd1f0a2c43b9d633efe19d7ae0319eaa2ade7530f38",
+      "sha256": "d8649a227bc4ae0d3760f76dc424a67a4402446742e5d27aa6b31113ce9d7e71",
       "producer": "tools/gen_conformance.py::turn_compiler_vectors"
     }
   ]

package/fixtures/mcp_snapshots/_normalizer.json

@@ -154,6 +154,8 @@
   "float_precision": 4,
   "freeze_fields": [
     "age_s",
+    "clip_id",
+    "created_at",
     "digest",
     "generated_at",
     "generated_from",

package/fixtures/mcp_snapshots/capture_clip.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "content": "Bourdon research note",
+    "title": "Bourdon Note"
+  },
+  "tool": "capture_clip"
+}

package/fixtures/mcp_snapshots/capture_clip.res.json

@@ -0,0 +1,7 @@
+{
+  "access_level": "team",
+  "agent_id": "operator",
+  "clip_id": "<frozen>",
+  "ok": true,
+  "title": "Bourdon Note"
+}

package/fixtures/mcp_snapshots/compile_turn.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "prompt": "Bourdon recognition"
+  },
+  "tool": "compile_turn"
+}

package/fixtures/mcp_snapshots/compile_turn.res.json

@@ -0,0 +1,5 @@
+{
+  "_status": "deferred",
+  "reason": "compile_turn output is environment-bound (resolves the live cwd, git repo name + remote, and repo-identity scoring) and is not a portable cross-impl parity fixture until a TS universal turn compiler lands. The req pins the tool surface + arg defaults; the res is this deferred stub.",
+  "schema_version": "bourdon.turn-brief/v1"
+}

package/fixtures/mcp_snapshots/describe_caller.req.json

@@ -0,0 +1,4 @@
+{
+  "args": {},
+  "tool": "describe_caller"
+}

package/fixtures/mcp_snapshots/describe_caller.res.json

@@ -0,0 +1,4 @@
+{
+  "error": "not_configured",
+  "version": 1
+}

package/fixtures/mcp_snapshots/ingest_meeting.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+  },
+  "tool": "ingest_meeting"
+}

package/fixtures/mcp_snapshots/ingest_meeting.res.json

@@ -0,0 +1,33 @@
+{
+  "actions_count": 0,
+  "attendees": [
+    "ada",
+    "grace"
+  ],
+  "commit": {
+    "agent_id": "meetings",
+    "digest": "<frozen>",
+    "entities_added": 0,
+    "entities_updated": 0,
+    "last_updated": "<frozen>",
+    "mode": "merge",
+    "notes_added": 0,
+    "notes_updated": 0,
+    "path": "<frozen>",
+    "sessions_added": 1,
+    "sessions_updated": 0,
+    "total_entities": 0,
+    "total_notes": 0,
+    "total_sessions": 1,
+    "total_workstreams": 0,
+    "workstreams_added": 0,
+    "workstreams_updated": 0
+  },
+  "date": "2026-06-09",
+  "decisions_count": 1,
+  "entities_count": 0,
+  "notes_count": 0,
+  "status": "ingested",
+  "title": "Weekly Sync",
+  "workstreams_count": 0
+}

package/fixtures/mcp_snapshots/prepare_recognition_context.res.json

@@ -1,12 +1,13 @@
 {
   "access_level": "team",
   "confidence": "medium",
-  "hydration": "# Bourdon\n\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
-  "hydration_chars": 310,
+  "hydration": "## Bourdon (project)\nknown by: claude-code, codex\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
+  "hydration_chars": 349,
   "hydration_scheduled": true,
   "include_private": false,
   "matched_entities": [
     {
+      "confidence": "medium",
       "name": "Bourdon",
       "source_agents": [
         "claude-code",
@@ -16,6 +17,6 @@
     }
   ],
   "prompt": "what about Bourdon",
-  "prompt_context": "Bourdon recognition context\nImmediate recognition: Oh -- Bourdon, the project.\nMatched entities:\n- Bourdon (project) via claude-code, codex: Cross-agent memory federation (granted side).\nUse this as timing-layer context, not as a final answer.",
-  "recognition": "Oh -- Bourdon, the project."
+  "prompt_context": "Bourdon recognition context\nBourdon (project; known by 2 agents): Federation, codex view.\nKnown by: Bourdon via claude-code, codex.\nUse this as timing-layer context, not as a final answer.",
+  "recognition": "Bourdon (project; known by 2 agents): Federation, codex view."
 }

package/fixtures/mcp_snapshots/prepare_recognition_context_drifting.res.json

@@ -8,12 +8,13 @@
       "reason": "yielded nothing this run - last yielded 400 record(s) at 2026-06-29T09:00:00Z"
     }
   ],
-  "hydration": "# Bourdon\n\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
-  "hydration_chars": 310,
+  "hydration": "## Bourdon (project)\nknown by: claude-code, codex\nConformance fixture synopsis. L1 hydration is byte-checkable, so this text is\npinned verbatim into the interop vectors -- which is exactly why it must be\nfixture-owned rather than real documentation. A second implementation has to\nreproduce THIS, not whatever the project's docs happen to say today.",
+  "hydration_chars": 349,
   "hydration_scheduled": true,
   "include_private": false,
   "matched_entities": [
     {
+      "confidence": "medium",
       "name": "Bourdon",
       "source_agents": [
         "claude-code",
@@ -23,6 +24,6 @@
     }
   ],
   "prompt": "what about Bourdon",
-  "prompt_context": "Bourdon recognition context\nImmediate recognition: Oh -- Bourdon, the project.\nMatched entities:\n- Bourdon (project) via claude-code, codex: Cross-agent memory federation (granted side).\nUse this as timing-layer context, not as a final answer.",
-  "recognition": "Oh -- Bourdon, the project."
+  "prompt_context": "Bourdon recognition context\nBourdon (project; known by 2 agents): Federation, codex view.\nKnown by: Bourdon via claude-code, codex.\nUse this as timing-layer context, not as a final answer.",
+  "recognition": "Bourdon (project; known by 2 agents): Federation, codex view."
 }

package/fixtures/mcp_snapshots/propose_consensus.req.json

@@ -0,0 +1,11 @@
+{
+  "args": {
+    "options": [
+      "Option A",
+      "Option B"
+    ],
+    "proposal_id": "prop_snapshot",
+    "topic": "Federation Protocol"
+  },
+  "tool": "propose_consensus"
+}

package/fixtures/mcp_snapshots/propose_consensus.res.json

@@ -0,0 +1,17 @@
+{
+  "created_at": "<frozen>",
+  "metadata": {
+    "description": "",
+    "strategy": "majority"
+  },
+  "options": [
+    "Option A",
+    "Option B"
+  ],
+  "proposal_id": "prop_snapshot",
+  "proposed_by": "operator",
+  "quorum": 2,
+  "status": "active",
+  "topic": "Federation Protocol",
+  "votes": {}
+}

package/fixtures/mcp_snapshots/search_federation.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "query": "Bourdon",
+    "top_k": 5
+  },
+  "tool": "search_federation"
+}

package/fixtures/mcp_snapshots/search_federation.res.json

@@ -0,0 +1,4 @@
+{
+  "query": "Bourdon",
+  "total_matches": 0
+}

package/fixtures/mcp_snapshots/seed_library.json

@@ -1,11 +1,12 @@
 {
-  "_doc": "The mcp_snapshots/*.res.json were produced by driving the live create_l6_server tool + resource closures (OPERATOR / trusted, = stdio) over a TEMP copy of this seed library, then normalizing each response. Every tool and resource the server registers is covered (the generator refuses to emit otherwise). The TS mirror loads the SAME seed and must reproduce every normalized res. Each payload travels the wire as a single TextContent whose .text = json.dumps(payload); the snapshot is the json.loads of that text. resource_* snapshots are taken FIRST (pure seed view); rollback_agent_memory runs LAST (it restores the seeded prior version of claude-code).",
+  "_doc": "The mcp_snapshots/*.res.json were produced by driving the live create_l6_server tool + resource closures (OPERATOR / trusted, = stdio) over a TEMP copy of this seed library, then normalizing each response. Every tool and resource the server registers is covered (the generator refuses to emit otherwise). The TS mirror loads the SAME seed and must reproduce every normalized res. Each payload travels the wire as a single TextContent whose .text = json.dumps(payload); the snapshot is the json.loads of that text. resource_* snapshots are taken FIRST (pure seed view); rollback_agent_memory runs LAST (it restores the seeded prior version of claude-code). describe_caller pins only the not_configured response because caller_audience is unset; authenticated caller behavior is not covered by this seed.",
   "caller": {
     "agent_id": "operator",
     "tier": "trusted"
   },
   "deferred": [
-    "compile_codex_turn"
+    "compile_codex_turn",
+    "compile_turn"
   ],
   "drift_seed": {
     "_doc": "prepare_recognition_context_drifting.{req,res}.json were driven under this SEEDED participant drift watermark (written through the real participant_watermark.record writer, stamps then pinned), taken BEFORE the main tool loop and removed afterwards -- the plain prepare_recognition_context.res.json is therefore the healthy half of the pair, with drifting_surfaces ABSENT. The TS mirror must seed the SAME record to reproduce the drifting res.",
@@ -73,11 +74,19 @@
     "list_notes",
     "list_agents",
     "export_agents",
+    "describe_caller",
     "commit_to_federation",
     "get_cross_agent_summary",
     "prepare_recognition_context",
     "compile_codex_turn",
+    "trace_entity",
+    "ingest_meeting",
+    "compile_turn",
     "get_deeper_context",
+    "search_federation",
+    "capture_clip",
+    "propose_consensus",
+    "vote_consensus",
     "list_memory_versions",
     "explain_memory_change",
     "rollback_agent_memory"

package/fixtures/mcp_snapshots/trace_entity.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "access_level": "team",
+    "entity": "Bourdon"
+  },
+  "tool": "trace_entity"
+}

package/fixtures/mcp_snapshots/trace_entity.res.json

@@ -0,0 +1,133 @@
+{
+  "aliases": [
+    "Continuo",
+    "NeuroLayer"
+  ],
+  "attributions": [
+    {
+      "agent_id": "claude-code",
+      "aliases": [
+        "Continuo",
+        "NeuroLayer"
+      ],
+      "first_seen": "2026-06-28T12:00:00Z",
+      "first_version_id": "20260628T120000000000Z-7ec802e0",
+      "matching_notes": [
+        {
+          "date": "2026-06-09",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "text": "Public release note.",
+          "visibility": "public"
+        }
+      ],
+      "matching_sessions": [
+        {
+          "cwd": "bourdon",
+          "date": "2026-06-08",
+          "files_touched": [
+            "tools/gen_conformance.py"
+          ],
+          "key_actions": [
+            "wired tier matrix fixtures"
+          ],
+          "project_focus": [
+            "Bourdon"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "matching_workstreams": [
+        {
+          "last_touched": "2026-06-10",
+          "name": "Release",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "status": "active",
+          "summary": "Prepare the public Bourdon release.",
+          "tags": [
+            "launch"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "provenance_count": 1,
+      "summary": "Cross-agent memory federation (granted side).",
+      "tags": [
+        "infra"
+      ],
+      "types": [
+        "project"
+      ],
+      "version_count": 1,
+      "visibility": "public"
+    },
+    {
+      "agent_id": "codex",
+      "matching_notes": [
+        {
+          "date": "2026-06-10",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "text": "Codex public release note.",
+          "visibility": "public"
+        }
+      ],
+      "matching_workstreams": [
+        {
+          "last_touched": "2026-06-11",
+          "name": "release",
+          "related_entities": [
+            "Bourdon"
+          ],
+          "status": "paused",
+          "tags": [
+            "coordination"
+          ],
+          "visibility": "public"
+        }
+      ],
+      "provenance_count": 0,
+      "summary": "Federation, codex view.",
+      "types": [
+        "project"
+      ],
+      "version_count": 0,
+      "visibility": "public"
+    }
+  ],
+  "first_seen": "2026-06-28T12:00:00Z",
+  "known_by": [
+    "claude-code",
+    "codex"
+  ],
+  "matched": true,
+  "name": "Bourdon",
+  "schema_version": "bourdon.entity-trace/v1",
+  "tags": [
+    "infra"
+  ],
+  "timeline": [
+    {
+      "agent_id": "claude-code",
+      "description": "Bourdon",
+      "kind": "session",
+      "ref": "bourdon",
+      "timestamp": "2026-06-08"
+    },
+    {
+      "agent_id": "claude-code",
+      "description": "Entity observed in claude-code memory",
+      "kind": "entity_origin",
+      "ref": "20260628T120000000000Z-7ec802e0",
+      "timestamp": "2026-06-28T12:00:00Z"
+    }
+  ],
+  "types": [
+    "project"
+  ],
+  "visibility": "team"
+}

package/fixtures/mcp_snapshots/vote_consensus.req.json

@@ -0,0 +1,7 @@
+{
+  "args": {
+    "choice": "Option A",
+    "proposal_id": "prop_snapshot"
+  },
+  "tool": "vote_consensus"
+}

package/fixtures/mcp_snapshots/vote_consensus.res.json

@@ -0,0 +1,56 @@
+{
+  "ok": true,
+  "proposal": {
+    "created_at": "<frozen>",
+    "metadata": {
+      "description": "",
+      "strategy": "majority"
+    },
+    "options": [
+      "Option A",
+      "Option B"
+    ],
+    "proposal_id": "prop_snapshot",
+    "proposed_by": "operator",
+    "quorum": 2,
+    "status": "active",
+    "topic": "Federation Protocol",
+    "votes": {
+      "operator": {
+        "agent_id": "operator",
+        "confidence": 1.0,
+        "created_at": "<frozen>",
+        "option": "Option A",
+        "rationale": ""
+      }
+    }
+  },
+  "tally": {
+    "is_tie": false,
+    "leader": "Option A",
+    "margin_weighted": 1.0,
+    "options_summary": {
+      "Option A": {
+        "voters": [
+          {
+            "agent_id": "operator",
+            "confidence": 1.0,
+            "rationale": ""
+          }
+        ],
+        "votes": 1,
+        "weighted_score": 1.0
+      },
+      "Option B": {
+        "votes": 0,
+        "weighted_score": 0.0
+      }
+    },
+    "proposal_id": "prop_snapshot",
+    "quorum": 2,
+    "quorum_reached": false,
+    "status": "active",
+    "topic": "Federation Protocol",
+    "total_votes": 1
+  }
+}

package/fixtures/recognition_golden_v1.yaml

@@ -104,3 +104,33 @@ cases:
         - {name: Gamma}
         - {name: Delta}
     expected_entities: [Alpha, Beta, Gamma]
+
+  # Fuzzy tier (0.21.0): a long name (>= 3 meaningful terms) matches when at
+  # least 60% of its terms (never fewer than two) appear anywhere in the prompt.
+  # Here the name has five meaningful terms, so three must overlap.
+  - id: fuzzy-long-name-paraphrase
+    prompt: "how do we improve the recognition first runtime protocol"
+    manifest:
+      known_entities:
+        - {name: Bourdon recognition first runtime layer, type: topic}
+    expected_entities: [Bourdon recognition first runtime layer]
+    expected_confidence: medium
+
+  # Two of five terms is not enough: the fuzzy tier must not turn every
+  # mention of "runtime" into a recognition.
+  - id: fuzzy-long-name-too-little-overlap
+    prompt: "the runtime layer is slow today"
+    manifest:
+      known_entities:
+        - {name: Bourdon recognition first runtime layer, type: topic}
+    expected_entities: []
+
+  # Short names never take the fuzzy path: the contiguous rule (and with it the
+  # short-name guard) still governs them.
+  - id: fuzzy-never-applies-to-short-names
+    prompt: "the memory federation is the product"
+    manifest:
+      known_entities:
+        - {name: Bourdon memory federation, type: topic}
+        - {name: Bourdon federation, type: topic}
+    expected_entities: [Bourdon memory federation]

package/fixtures/recognition_vectors.json

@@ -165,6 +165,113 @@
     }
   ],
   "recognition_strings": [
+    {
+      "name": "fuzzy_long_name_paraphrase",
+      "prompt": "how do we improve the recognition first runtime protocol",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon recognition first runtime layer",
+            "type": "topic"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Bourdon recognition first runtime layer"
+      ],
+      "recognition": "Bourdon recognition first runtime layer (topic).",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Bourdon recognition first runtime layer": "medium"
+      }
+    },
+    {
+      "name": "fuzzy_too_little_overlap",
+      "prompt": "the runtime layer is slow today",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon recognition first runtime layer",
+            "type": "topic"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [],
+      "recognition": "",
+      "confidence": "none",
+      "entity_confidences": {}
+    },
+    {
+      "name": "cluster_by_alias",
+      "prompt": "compare Bourdon and Continuo",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Bourdon",
+            "type": "project",
+            "aliases": [
+              "Continuo"
+            ],
+            "source_agents": [
+              "claude-code",
+              "codex"
+            ]
+          },
+          {
+            "name": "Continuo",
+            "type": "oss-product",
+            "source_agents": [
+              "codex"
+            ]
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Bourdon"
+      ],
+      "recognition": "Bourdon (project; known by 2 agents; also known as Continuo).",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Bourdon": "medium"
+      }
+    },
+    {
+      "name": "gloss_freshest_summary_stale",
+      "prompt": "what is Nimbletron",
+      "manifest": {
+        "known_entities": [
+          {
+            "name": "Nimbletron",
+            "type": "project",
+            "source_agents": [
+              "alpha",
+              "beta"
+            ],
+            "summaries": {
+              "alpha": "Nimbletron is the batch renderer for the print pipeline, owned by the platform team.",
+              "beta": "renderer"
+            },
+            "touched": {
+              "alpha": "2019-06-01",
+              "beta": "2020-01-01"
+            },
+            "last_touched": "2020-01-01"
+          }
+        ]
+      },
+      "access_level": "team",
+      "matched_names": [
+        "Nimbletron"
+      ],
+      "recognition": "Nimbletron (project; known by 2 agents): Nimbletron is the batch renderer for the print pipeline, owned by the platform team. Last touched 2020-01-01, may be stale.",
+      "confidence": "medium",
+      "entity_confidences": {
+        "Nimbletron": "medium"
+      }
+    },
     {
       "name": "single_with_type",
       "prompt": "tell me about Bourdon",
@@ -180,7 +287,7 @@
       "matched_names": [
         "Bourdon"
       ],
-      "recognition": "Oh -- Bourdon, the project.",
+      "recognition": "Bourdon (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Bourdon": "medium"
@@ -200,7 +307,7 @@
       "matched_names": [
         "Alpha"
       ],
-      "recognition": "Oh -- Alpha.",
+      "recognition": "Alpha.",
       "confidence": "medium",
       "entity_confidences": {
         "Alpha": "medium"
@@ -230,7 +337,7 @@
         "Bourdon",
         "Zephyr"
       ],
-      "recognition": "You're asking about Bourdon and Zephyr -- I have both.",
+      "recognition": "You're asking about Bourdon and Zephyr.\n- Bourdon (project).\n- Zephyr (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Bourdon": "medium",
@@ -262,7 +369,7 @@
         "Beta",
         "Gamma"
       ],
-      "recognition": "You're asking about Alpha, Beta, and Gamma -- I have all of those.",
+      "recognition": "You're asking about Alpha, Beta, and Gamma.\n- Alpha.\n- Beta.\n- Gamma.",
       "confidence": "medium",
       "entity_confidences": {
         "Alpha": "medium",
@@ -302,7 +409,7 @@
       "matched_names": [
         "NAS"
       ],
-      "recognition": "Oh -- NAS, the hardware.",
+      "recognition": "NAS (hardware).",
       "confidence": "medium",
       "entity_confidences": {
         "NAS": "medium"
@@ -328,7 +435,7 @@
       "matched_names": [
         "PublicProj"
       ],
-      "recognition": "Oh -- PublicProj, the project.",
+      "recognition": "PublicProj (project).",
       "confidence": "medium",
       "entity_confidences": {
         "PublicProj": "medium"
@@ -350,7 +457,7 @@
       "matched_names": [
         "Nimbletron"
       ],
-      "recognition": "Oh -- Nimbletron, the project (archived 2026-01-01).",
+      "recognition": "Nimbletron (project; archived 2026-01-01).",
       "confidence": "medium",
       "entity_confidences": {
         "Nimbletron": "medium"
@@ -374,7 +481,7 @@
       "matched_names": [
         "LegacyThing"
       ],
-      "recognition": "Oh -- LegacyThing, the tool (archived).",
+      "recognition": "LegacyThing (tool; archived).",
       "confidence": "medium",
       "entity_confidences": {
         "LegacyThing": "medium"
@@ -398,7 +505,7 @@
       "matched_names": [
         "QUIP"
       ],
-      "recognition": "Oh -- QUIP, the product.",
+      "recognition": "QUIP (product).",
       "confidence": "medium",
       "entity_confidences": {
         "QUIP": "medium"
@@ -438,7 +545,7 @@
       "matched_names": [
         "Multi Word Project"
       ],
-      "recognition": "Oh -- Multi Word Project, the project.",
+      "recognition": "Multi Word Project (project).",
       "confidence": "medium",
       "entity_confidences": {
         "Multi Word Project": "medium"

package/fixtures/tier_matrix.json

@@ -164,6 +164,39 @@
       "decision": "allow",
       "denial": null
     },
+    {
+      "tool": "trace_entity",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "entity": "Bourdon"
+      },
+      "decision": "allow",
+      "denial": null
+    },
+    {
+      "tool": "compile_turn",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "prompt": "what about Bourdon"
+      },
+      "decision": "allow",
+      "denial": null
+    },
+    {
+      "tool": "ingest_meeting",
+      "tier": "trusted",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+      },
+      "decision": "allow",
+      "denial": null
+    },
     {
       "tool": "query_agent_memory",
       "tier": "quarantined",
@@ -393,6 +426,57 @@
         "tier": "quarantined",
         "detail": "tier 'quarantined' may not call this tool"
       }
+    },
+    {
+      "tool": "trace_entity",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "entity": "Bourdon"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "trace_entity",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
+    },
+    {
+      "tool": "compile_turn",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "prompt": "what about Bourdon"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "compile_turn",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
+    },
+    {
+      "tool": "ingest_meeting",
+      "tier": "quarantined",
+      "namespace": null,
+      "granted": null,
+      "args": {
+        "content": "# Weekly Sync\nDate: 2026-06-09\nAttendees: ada, grace\n\n## Decisions\n- Adopt the meetings participant\n"
+      },
+      "decision": "deny",
+      "denial": {
+        "error": "access denied",
+        "op": "ingest_meeting",
+        "agent": "openclaw",
+        "tier": "quarantined",
+        "detail": "tier 'quarantined' may not call this tool"
+      }
     }
   ]
 }

package/fixtures/turn_compiler_vectors.json

@@ -67,6 +67,24 @@
           "visibility": "public"
         }
       ]
+    },
+    "fable.l5.yaml": {
+      "spec_version": "0.1",
+      "agent": {
+        "id": "fable",
+        "type": "code-assistant"
+      },
+      "last_updated": "2026-06-29T12:00:00+00:00",
+      "recent_sessions": [
+        {
+          "date": "2026-06-27",
+          "cwd": "/projects/atlas",
+          "key_actions": [
+            "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session"
+          ],
+          "visibility": "public"
+        }
+      ]
     }
   },
   "codex_cases": [
@@ -132,7 +150,7 @@
             ],
             "evidence": [
               "session date 2026-06-28",
-              "cwd /projects/bourdon",
+              "cwd bourdon",
               "files touched: core/codex_turn_compiler.py"
             ]
           },
@@ -179,7 +197,7 @@
                 ],
                 "evidence": [
                   "session date 2026-06-28",
-                  "cwd /projects/bourdon",
+                  "cwd bourdon",
                   "files touched: core/codex_turn_compiler.py"
                 ]
               },
@@ -281,6 +299,166 @@
         }
       }
     },
+    {
+      "name": "codex_long_action_title",
+      "prompt": "what happened with Atlas ingest",
+      "cwd": "/projects/atlas",
+      "access_level": "team",
+      "recognition_confidence": "low",
+      "item_scores": [
+        {
+          "rank": 1,
+          "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+          "kind": "session",
+          "source": "l6_federation",
+          "score": 67.0
+        }
+      ],
+      "brief": {
+        "schema_version": "codex-turn-brief/v1",
+        "prompt": "what happened with Atlas ingest",
+        "cwd": "/projects/atlas",
+        "repo": {
+          "name": "atlas",
+          "root": null,
+          "remote": null
+        },
+        "health": {
+          "native_stage1": "unknown",
+          "strategy": "turn_compiled"
+        },
+        "routing": {
+          "mode": "inject",
+          "primary_surface": "explicit_pre_turn",
+          "surfaces": [
+            "explicit_pre_turn",
+            "mcp",
+            "repo_overlay_candidate"
+          ],
+          "confidence": "low",
+          "reason": "top anchor scored 67.0; source mix spans 1 surface(s); repo identity available as atlas",
+          "suppressed_surfaces": [
+            "memory_md",
+            "fallback_file"
+          ],
+          "next_action": "prepend delivery.explicit_text before the Codex turn"
+        },
+        "items": [
+          {
+            "rank": 1,
+            "score": 67.0,
+            "kind": "session",
+            "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+            "summary": "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session",
+            "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+            "source": "l6_federation",
+            "source_agents": [
+              "fable"
+            ],
+            "evidence": [
+              "session date 2026-06-27",
+              "cwd atlas"
+            ]
+          }
+        ],
+        "delivery": {
+          "explicit_text": "Bourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+          "mcp_payload": {
+            "schema_version": "codex-turn-brief/v1",
+            "strategy": "turn_compiled",
+            "native_stage1": "unknown",
+            "repo": {
+              "name": "atlas",
+              "root": null,
+              "remote": null
+            },
+            "items": [
+              {
+                "rank": 1,
+                "score": 67.0,
+                "kind": "session",
+                "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+                "summary": "- **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session",
+                "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence",
+                "source": "l6_federation",
+                "source_agents": [
+                  "fable"
+                ],
+                "evidence": [
+                  "session date 2026-06-27",
+                  "cwd atlas"
+                ]
+              }
+            ],
+            "prompt_context": "Bourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence"
+          },
+          "memory_md_block": "<!-- BEGIN BOURDON TURN BRIEF -->\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END BOURDON TURN BRIEF -->",
+          "fallback_block": "<!-- BEGIN Bourdon Turn Brief -->\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END Bourdon Turn Brief -->",
+          "repo_overlay_block": "<!-- BEGIN BOURDON REPO OVERLAY CANDIDATE -->\nRepo overlay candidate for atlas\nUse only as an explicit, human-reviewed overlay candidate.\n\nBourdon turn recognition brief\nStrategy: turn-scoped compiler; native Stage 1 is unknown.\nRepo: atlas\nUse these as recognition anchors, not as a final answer:\n1. Atlas ingest review: walked the phase 1.7 ingest plan end to end… [session, l6_federation, score 67.0] via fable\n   - **Atlas ingest** review: walked the phase 1.7 ingest plan end to end, argued the batching semantics, and left the backpressure question open for the next session\n   Why: prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence\n<!-- END BOURDON REPO OVERLAY CANDIDATE -->"
+        },
+        "trace": {
+          "routing_decision": {
+            "primary_surface": "explicit_pre_turn",
+            "confidence": "low",
+            "reason": "top anchor scored 67.0; source mix spans 1 surface(s); repo identity available as atlas"
+          },
+          "surface_health": {
+            "native_stage1": "unknown",
+            "repo_identity": "available",
+            "candidate_count": 1
+          },
+          "source_mix": {
+            "candidates": {
+              "l6_federation": 1
+            },
+            "selected": {
+              "l6_federation": 1
+            },
+            "ignored": {}
+          },
+          "selected_items": [
+            {
+              "name": "Atlas ingest review: walked the phase 1.7 ingest plan end to end…",
+              "kind": "session",
+              "score": 67.0,
+              "dominant_components": [
+                "cwd_repo",
+                "prompt",
+                "recency"
+              ],
+              "reason": "prompt matched Atlas ingest review: walked the phase 1.7 ingest plan end to end…; cwd matched prior Codex thread; repo name matched candidate; cwd basename matched candidate; recent work; continuity evidence"
+            }
+          ]
+        },
+        "diagnostics": {
+          "scoring_components": {
+            "Atlas ingest review: walked the phase 1.7 ingest plan end to end…": {
+              "prompt": 24.0,
+              "cwd_repo": 25.0,
+              "recency": 12.0,
+              "cross_agent": 0.0,
+              "continuity": 6.0,
+              "penalty": 0.0
+            }
+          },
+          "candidate_count": 1,
+          "delivery": "all",
+          "max_items": 6,
+          "max_chars": 1800,
+          "stage1_jobs": {
+            "total": 0,
+            "by_status": {},
+            "error_classes": {}
+          },
+          "exhausted_paths": [
+            "native_stage1_primary",
+            "static_fallback_primary",
+            "l5_export_only",
+            "sync_native_only"
+          ]
+        }
+      }
+    },
     {
       "name": "codex_prompt_only",
       "prompt": "tell me about the Roadmap",

package/fixtures.pin.json

@@ -1,5 +1,5 @@
 {
   "_doc": "The recorded fixture pin. CI and the package tests assert the vendored fixtures/manifest.json hashes to exactly this value, so the fixture set in any build is provably the reviewed one. Refresh via the re-pin ritual in README.md.",
-  "conformance_version": "2.5.0",
-  "manifest_sha256": "3e592307ebb44d694ed726d6fd3b78e8f5ebab0bc346166fa04b0d4ae07bbef2"
+  "conformance_version": "5.1.0",
+  "manifest_sha256": "cae79332b62523f48d9f306ddb74a9271ffceccda13f43ed3eeafc713c2b81bd"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getbourdon/conformance",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Language-neutral cross-implementation parity fixtures for Bourdon. Python (pip install bourdon) is the oracle; the @getbourdon/* TypeScript mirror asserts against these exact bytes.",
   "license": "Apache-2.0",
   "type": "module",