@inflexa-ai/harness 0.7.0 → 0.7.2

package/dist/provenance/exec-frame.js

@@ -8,10 +8,20 @@
  * `runs/{priorRunId}/...`) so `classifyReadPath` and the collector's
  * `stepPrefix` normalization see the shapes they expect.
  *
+ * A read naming a same-run sibling this step never declared is refused here,
+ * before it reaches the collector: a ref the collector never holds cannot
+ * become an attestation target, so the edge is unrepresentable rather than
+ * merely filtered downstream. Each refused path is logged once per step — an
+ * edge asserted over a step that was still writing is invisible by nature, so a
+ * silent drop would rebuild exactly the blind spot the refusal exists to close,
+ * while re-narrating a path already reported adds no fact and buries the rest.
+ *
  * Degrades safely: a disabled or absent frame records the command with no
- * inputs and no writes (its outputs fall back to leaves at registration).
- * It never throws — provenance is best-effort and must not fail an exec.
+ * inputs and no writes (its outputs fall back to leaves at registration), and a
+ * frame whose every read is refused still records its command. It never throws —
+ * provenance is best-effort and must not fail an exec.
  */
+import { createNoopLogger } from "../lib/console-logger.js";
 import { classifyReadPath } from "./collector.js";
 /**
  * Strip the `/{resourceId}/` mount prefix from an absolute frame path.
@@ -40,11 +50,24 @@ export function feedExecFrame(args) {
         collector.recordCommandExecution(cmd, [...cmdArgs], code, duration, [], undefined, []);
         return;
     }
+    // Resolved once so the read loop logs unconditionally instead of threading
+    // `?.` through every diagnostic.
+    const logger = (args.logger ?? createNoopLogger()).named("exec-frame");
     const commandReads = [];
     for (const read of provenance.reads) {
         const rel = stripMountPrefix(mountRoot, read.path);
-        const context = classifyReadPath(rel, collector.stepId, collector.runId, collector.dependsOn);
-        commandReads.push(collector.trackInputAccess(mountRoot, rel, null, context));
+        const classification = classifyReadPath(rel, collector.stepId, collector.runId, collector.dependsOn);
+        if (!classification.admissible) {
+            if (collector.claimRefusalNarration(rel)) {
+                logger.warn("refusing lineage edge to an undeclared same-run path", {
+                    path: rel,
+                    refRunId: classification.refRunId,
+                    refStepId: classification.refStepId,
+                });
+            }
+            continue;
+        }
+        commandReads.push(collector.trackInputAccess(mountRoot, rel, null, classification.context));
     }
     const writes = provenance.writes.map((w) => ({
         path: stripMountPrefix(mountRoot, w.path),