@iowarp/clio-coder 0.3.3 → 0.3.6

package/dist/{chunk-SRDMMSEP.js → chunk-QM3F2GKX.js}

@@ -1,9 +1,11 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  createRedactionTally,
-  redactSecretsDeep,
-  redactSecretsText
-} from "./chunk-4BJ5BYCE.js";
+  protectedArtifactFromSessionEntry,
+  protectedArtifactStateFromSessionEntries,
+  readAuditRows,
+  readSessionEntriesForId,
+  responseModelIdObservationFromRecord
+} from "./chunk-CJUB2JJ2.js";
 import {
   FLEET_COMMAND_BASE_ENV,
   describeWriteBoundary,
@@ -23,7 +25,7 @@ import {
   sumEvalHarnessMetrics,
   verifyReceiptIntegrity,
   withReceiptIntegrity
-} from "./chunk-AGYYIBLL.js";
+} from "./chunk-OH3TOQTB.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -34,10 +36,7 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-OOJYHWRB.js";
-import {
-  probeWorkspace
-} from "./chunk-G4BMMOKF.js";
+} from "./chunk-TSHXZTOQ.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
   RETRYABLE_OUTCOMES,
@@ -59,32 +58,29 @@ import {
   claudeSubprocessPermissionConfigForAutonomy,
   competeStanceLiner,
   createRunEffectsRecorder,
+  describeCallAction,
   isBoundedGateRolePrompt,
   isClaudeCanonicalTool,
   isResponseSchemaRejection,
   isRunOutcomeCode,
-  isSessionEntry,
-  isSessionHeader,
   networkToolsDisabled,
   projectExecutionHandoffs,
   renderAgentLedger,
+  resolveToolBudgetEnvelope,
   responseSchemaConflictsWithTools,
   runKindSupportsLiveSteering,
   runtimeSpeaksResponseSchemaDialect,
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-LWLEKMDQ.js";
+} from "./chunk-XXQNGV4M.js";
 import {
-  DEFAULT_AUTONOMY_LEVEL,
   WRITE_ROOT_REFUSED_TOOLS,
   assessFinishContract,
-  autonomyDenyRejection,
-  mapAutonomy,
   parseJsonObjectPayload,
   parseVerifierResult,
   validateRecipeResult
-} from "./chunk-STBPMHSX.js";
+} from "./chunk-EKY57CSP.js";
 import {
   appliesRecipeResultContract,
   decideRoute,
@@ -107,31 +103,46 @@ import {
   sameRouteIdentity,
   toRouteCandidate,
   withAttemptRole
-} from "./chunk-GGXXDWE4.js";
+} from "./chunk-22NAGB7X.js";
 import {
   agentSpecFingerprint,
   assertAgentSpecPolicy,
   classify,
-  detectValidationCommand,
   isUserVisibleAgent,
   normalizeAgentSpec,
-  protectArtifact,
   resolveAgentToolCompatibility
-} from "./chunk-5UUP6MWO.js";
+} from "./chunk-AOCYTWAV.js";
+import {
+  detectValidationCommand
+} from "./chunk-MV3K5QF2.js";
 import {
   canonicalJson,
   endpointIdentityHash,
   parseAgentLedgerBody
 } from "./chunk-CMZWFGD2.js";
 import {
+  compareCodepoints
+} from "./chunk-FYYLNIL5.js";
+import {
+  isProjectVerifierCheckId,
   isVerificationScriptName
-} from "./chunk-7MNJORFF.js";
+} from "./chunk-UL3WSD3F.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
 import {
   isSkillActivation
-} from "./chunk-T6YILFSB.js";
+} from "./chunk-GOXNB3AO.js";
+import {
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyDenyRejection,
+  mapAutonomy
+} from "./chunk-HWUFFB6L.js";
+import {
+  createRedactionTally,
+  redactSecretsDeep,
+  redactSecretsText
+} from "./chunk-4BJ5BYCE.js";
 import {
   truncateUtf8
 } from "./chunk-6XLNIQDB.js";
@@ -141,45 +152,28 @@ import {
 } from "./chunk-CGKSTWHD.js";
 import {
   canonicalizeWireModelId,
-  ceilChars,
   firstRuntimeResolutionError,
   isDispatchEligibleRuntime,
   resolveEffectivePricing,
   resolveModelCapabilities,
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
-  runtimeTargetSnapshot,
-  stripTokenizerSentinels
-} from "./chunk-LZSJBIVT.js";
+  runtimeTargetSnapshot
+} from "./chunk-DJVECN66.js";
 import {
   DEFAULT_DELEGATION_CONNECT_TIMEOUT_MS,
   DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
   DEFAULT_SETTINGS,
   THINKING_LEVELS
-} from "./chunk-ZDOOVTXZ.js";
+} from "./chunk-4OC57DA6.js";
 import {
   targetRequiresAuth
 } from "./chunk-4VP4KH3K.js";
-import {
-  CURRENT_SESSION_FORMAT_VERSION,
-  appendSessionFileEntry,
-  atomicWrite,
-  createSession,
-  cwdHash,
-  openSession,
-  readSessionFileEntries,
-  readSessionMeta,
-  resumeSession,
-  sessionPaths
-} from "./chunk-M6SHUN7Q.js";
-import {
-  assertSafeId
-} from "./chunk-R346GLFC.js";
 import {
   gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-COU2UHX6.js";
+} from "./chunk-VEZEGCGW.js";
 import {
   MAX_TIMER_DELAY_MS,
   rawDurationMs
@@ -194,6 +188,15 @@ import {
   processAlive,
   processBirthToken
 } from "./chunk-3I7MS7N2.js";
+import {
+  ceilChars
+} from "./chunk-GEYXPTRF.js";
+import {
+  atomicWrite
+} from "./chunk-FO5ZOVUY.js";
+import {
+  assertSafeId
+} from "./chunk-R346GLFC.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
@@ -208,7 +211,7 @@ import {
 } from "./chunk-6EJMN2Y3.js";
 import {
   BusChannels
-} from "./chunk-OQ33BKR3.js";
+} from "./chunk-G7MUEIGA.js";
 import {
   readClioVersion,
   readPiMonoVersion,
@@ -1426,8 +1429,8 @@ init_esm_shims();
 
 // src/domains/evidence/build.ts
 init_esm_shims();
-import { mkdir, readFile as readFile3, writeFile } from "node:fs/promises";
-import { join as join19 } from "node:path";
+import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
+import { join as join16 } from "node:path";
 
 // src/domains/dispatch/index.ts
 init_esm_shims();
@@ -1540,12 +1543,15 @@ var AcpEventMapper = class {
     if (!this.toolStarts.has(toolCallId) && (status === "pending" || status === "in_progress")) {
       const startedAt = Date.now();
       this.toolStarts.set(toolCallId, performance2.now());
+      const action = describeCallAction(update.kind ?? title, update.rawInput);
       out.push({
         type: "clio_tool_start",
         payload: {
           tool: update.kind ?? title,
+          toolCallId,
           posture: "operating",
-          startedAt
+          startedAt,
+          ...action !== null ? { action } : {}
         }
       });
       out.push({
@@ -1571,6 +1577,7 @@ var AcpEventMapper = class {
         type: "clio_tool_finish",
         payload: {
           tool: update.kind ?? title,
+          toolCallId,
           posture: "operating",
           durationMs: Math.round(performance2.now() - startedAtClock),
           outcome: isError ? "error" : "ok",
@@ -4577,6 +4584,7 @@ function envelopeFromReceipt(receipt, status, receiptPath) {
     ...receipt.agentAudience !== void 0 ? { agentAudience: receipt.agentAudience } : {},
     ...receipt.requestOrigin !== void 0 ? { requestOrigin: receipt.requestOrigin } : {},
     task: receipt.task,
+    ...receipt.budget !== void 0 ? { budget: receipt.budget } : {},
     ...receipt.briefing !== void 0 ? { briefing: receipt.briefing } : {},
     ...receipt.steering !== void 0 ? { steering: receipt.steering } : {},
     targetId: receipt.targetId,
@@ -6351,6 +6359,7 @@ function openLedger(opts) {
         ...input.agentAudience !== void 0 ? { agentAudience: input.agentAudience } : {},
         ...input.requestOrigin !== void 0 ? { requestOrigin: input.requestOrigin } : {},
         task: input.task,
+        ...input.budget !== void 0 ? { budget: structuredClone(input.budget) } : {},
         ...input.briefing !== void 0 ? { briefing: structuredClone(input.briefing) } : {},
         ...input.steering !== void 0 ? { steering: structuredClone(input.steering) } : {},
         targetId: input.targetId,
@@ -7135,7 +7144,7 @@ function assertWriteRootsEnforceable(runtime, writeRoots) {
 function assertWorkerBudgetEnforceable(runtime, hasDeclaredBudget) {
   if (!hasDeclaredBudget || runtime.kind !== "subprocess") return;
   throw new Error(
-    `dispatch: runtime '${runtime.id}' cannot enforce an explicit agent budget because subprocess workers do not expose per-tool mediation; choose a native or claude-sdk worker`
+    `dispatch: runtime '${runtime.id}' cannot enforce an explicit dispatch budget because subprocess workers do not expose per-tool mediation; choose a native or claude-sdk worker`
   );
 }
 var TOOL_CARRYING_API_FAMILIES = /* @__PURE__ */ new Set([
@@ -7188,18 +7197,27 @@ function assertPostRuntimeToolCompatibility(agentId, spec, effectiveTools, targe
     `dispatch: admission denied: agent '${agentId}' is incompatible with runtime '${target.runtime.id}' after tool narrowing; missing required tools: ${compatibility.missingRequired.join(", ")}`
   );
 }
-function resolveEffectiveWorkerBudget(input) {
+function workerToolCallHardCap(settings) {
   const rawEnvCap = process.env.CLIO_CODER_WORKER_TOOL_CALL_CAP?.trim();
   const parsedEnvCap = rawEnvCap && /^[1-9]\d*$/.test(rawEnvCap) ? Number(rawEnvCap) : Number.NaN;
-  const hardCap = Number.isSafeInteger(parsedEnvCap) ? parsedEnvCap : input.settings?.guardrails.workerToolCallCap ?? GUARDRAIL_DEFAULTS.workerToolCallCap;
+  return Number.isSafeInteger(parsedEnvCap) ? parsedEnvCap : settings?.guardrails.workerToolCallCap ?? GUARDRAIL_DEFAULTS.workerToolCallCap;
+}
+function resolveEffectiveWorkerBudget(input) {
+  const hardCap = workerToolCallHardCap(input.settings);
   const declared = input.declared ?? {
     toolCalls: hardCap,
     readReserve: Math.min(5, Math.max(0, hardCap - 1)),
     synthesis: true
   };
-  const toolCalls = Math.min(declared.toolCalls, hardCap);
-  const readReserve = input.allowedTools.includes(ToolNames.Read) ? Math.min(declared.readReserve, Math.max(0, toolCalls - 1)) : 0;
-  return { toolCalls, readReserve, synthesis: declared.synthesis, hardCap };
+  return resolveToolBudgetEnvelope({
+    recipeId: input.recipeId,
+    policy: declared,
+    ...input.req.budget === void 0 ? {} : { request: input.req.budget },
+    hardCap,
+    hasReadTool: input.allowedTools.includes(ToolNames.Read),
+    retry: (input.req.lineage?.attempt ?? 0) > 0,
+    revision: input.req.gate?.role === "builder" && input.req.gate.cycle > 1 && input.req.gate.verdict === "revise"
+  });
 }
 function frozenProtectedArtifactState(state) {
   return {
@@ -8477,7 +8495,7 @@ function createDispatchBundle(context, options) {
     );
     enforceCapabilityGate(target.target.id, target.modelCapabilities, req.requiredCapabilities);
     assertRuntimeCanHonorWorkerPermissionMode(target.runtime, settings?.workers.onPermission ?? "deny");
-    assertWorkerBudgetEnforceable(target.runtime, spec.budget !== null);
+    assertWorkerBudgetEnforceable(target.runtime, spec.budget !== null || req.budget !== void 0);
     const cwd = req.cwd ?? process.cwd();
     const sessionAutonomy = settings?.autonomy ?? "auto-edit";
     const effectiveAutonomy = clampWorkerAutonomy(sessionAutonomy, req.autonomy);
@@ -8510,7 +8528,13 @@ function createDispatchBundle(context, options) {
       workingContextPaths: workerWorkingContextPaths(req)
     });
     const systemPrompt = compiledWorkerPrompt.systemPrompt;
-    const budget = resolveEffectiveWorkerBudget({ declared: spec.budget, allowedTools: effectiveTools, settings });
+    const budgetEnvelope = resolveEffectiveWorkerBudget({
+      req,
+      recipeId: recipe.id,
+      declared: spec.budget,
+      allowedTools: effectiveTools,
+      settings
+    });
     const tier = spec.projectContextTier;
     const project = projectContext && tier === "bounded" ? projectContext.projectStructuredContext(cwd) : null;
     const dynamicPromptMessages = buildDynamicPromptMessages(req, {
@@ -8560,7 +8584,8 @@ function createDispatchBundle(context, options) {
       operatorProfileApplied: compiledWorkerPrompt.operatorProfileApplied ?? false,
       capabilityMismatch,
       effectiveAutonomy,
-      budget,
+      budget: budgetEnvelope.effective,
+      budgetEnvelope,
       ...settings ? { settings } : {}
     };
   }
@@ -8734,12 +8759,16 @@ function createDispatchBundle(context, options) {
         tokenMeter.cacheReadTokens += typeof u.cacheRead === "number" ? u.cacheRead : 0;
         tokenMeter.cacheWriteTokens += typeof u.cacheWrite === "number" ? u.cacheWrite : 0;
         tokenMeter.reasoningTokens += extractReasoningTokenCount(u);
-        const model = readStringOrNull(event.message.model);
-        const responseModel = readStringOrNull(event.message.responseModel);
-        const responseId = readStringOrNull(event.message.responseId);
-        if (model !== null || responseModel !== null || responseId !== null) {
-          upstreamResponses.push({ model, responseModel, responseId });
-        }
+        const requestedModelId = readStringOrNull(event.message.model);
+        const responseModelIdObservation = responseModelIdObservationFromRecord(event.message, "not-observed");
+        const differingResponseModelId = readStringOrNull(event.message.responseModel);
+        const providerResponseId = readStringOrNull(event.message.responseId);
+        upstreamResponses.push({
+          requestedModelId,
+          responseModelIdObservation,
+          differingResponseModelId,
+          providerResponseId
+        });
         if (event.message.stopReason === "error") {
           const message = readStringOrNull(event.message.errorMessage);
           if (message !== null) failureMessage = message;
@@ -9294,6 +9323,11 @@ function createDispatchBundle(context, options) {
       return handle;
     };
     if (req.delegationAgentId) {
+      if (req.budget !== void 0) {
+        throw new Error(
+          "dispatch: budget envelopes cannot be enforced on an ACP delegation target; dispatch to a native or claude-sdk worker"
+        );
+      }
       assertPlannedNodeIdentity(req, { id: "local", kind: "local" });
       assertProtectedArtifactsEnforceable("acp-delegation", false, protectedArtifactState);
       if (req.responseSchema !== void 0) {
@@ -9553,12 +9587,16 @@ function createDispatchBundle(context, options) {
         tokenMeter.cacheReadTokens += typeof u.cacheRead === "number" ? u.cacheRead : 0;
         tokenMeter.cacheWriteTokens += typeof u.cacheWrite === "number" ? u.cacheWrite : 0;
         tokenMeter.reasoningTokens += extractReasoningTokenCount(u);
-        const model = readStringOrNull(event.message.model);
-        const responseModel = readStringOrNull(event.message.responseModel);
-        const responseId = readStringOrNull(event.message.responseId);
-        if (model !== null || responseModel !== null || responseId !== null) {
-          upstreamResponses.push({ model, responseModel, responseId });
-        }
+        const requestedModelId = readStringOrNull(event.message.model);
+        const responseModelIdObservation = responseModelIdObservationFromRecord(event.message, "not-observed");
+        const differingResponseModelId = readStringOrNull(event.message.responseModel);
+        const providerResponseId = readStringOrNull(event.message.responseId);
+        upstreamResponses.push({
+          requestedModelId,
+          responseModelIdObservation,
+          differingResponseModelId,
+          providerResponseId
+        });
         if (event.message.stopReason === "error") {
           const message = readStringOrNull(event.message.errorMessage);
           if (message !== null) failureMessage = message;
@@ -9629,6 +9667,7 @@ function createDispatchBundle(context, options) {
         agentAudience: lifecycle.agentAudience,
         requestOrigin: lifecycle.requestOrigin,
         task: req.task,
+        budget: lifecycle.budgetEnvelope,
         targetId: lifecycle.target.target.id,
         wireModelId: lifecycle.target.wireModelId,
         runtimeId: lifecycle.target.runtime.id,
@@ -9686,6 +9725,7 @@ function createDispatchBundle(context, options) {
       });
       await ledgerRef.persist();
       const fleetIdentity = {
+        budget: lifecycle.budgetEnvelope,
         ...placement !== void 0 && placement !== null ? { node: placement.node.id } : {},
         ...req.gate !== void 0 ? { gate: { role: req.gate.role, cycle: req.gate.cycle } } : {},
         ...req.reroutes !== void 0 && req.reroutes.length > 0 ? { rerouteCount: req.reroutes.length } : {},
@@ -9777,6 +9817,7 @@ function createDispatchBundle(context, options) {
       requestOrigin: lifecycle.requestOrigin,
       agentId: req.agentId,
       task: req.task,
+      budget: lifecycle.budgetEnvelope,
       cwd: lifecycle.cwd,
       node: placement?.node ?? null,
       aborted: false,
@@ -9820,6 +9861,7 @@ function createDispatchBundle(context, options) {
         agentAudience: lifecycle.agentAudience,
         requestOrigin: lifecycle.requestOrigin,
         task: req.task,
+        budget: lifecycle.budgetEnvelope,
         targetId: lifecycle.target.target.id,
         wireModelId: lifecycle.target.wireModelId,
         runtimeId: lifecycle.target.runtime.id,
@@ -10232,6 +10274,11 @@ function createDispatchBundle(context, options) {
     if (!validated.ok) throw new Error(`dispatch: invalid spec: ${validated.errors.join("; ")}`);
     req = validation.restore(validated.spec);
     if (req.delegationAgentId) {
+      if (req.budget !== void 0) {
+        throw new Error(
+          "dispatch: budget envelopes cannot be enforced on an ACP delegation target; dispatch to a native or claude-sdk worker"
+        );
+      }
       const protectedArtifactState = getProtectedArtifactState();
       assertProtectedArtifactsEnforceable("acp-delegation", false, protectedArtifactState);
       if (req.responseSchema !== void 0) {
@@ -10293,6 +10340,7 @@ function createDispatchBundle(context, options) {
     );
     assertPostRuntimeToolCompatibility(req.agentId, agentSpec, effectiveTools, target);
     assertRuntimeCanHonorWorkerPermissionMode(target.runtime, settings?.workers.onPermission ?? "deny");
+    assertWorkerBudgetEnforceable(target.runtime, agentSpec.budget !== null || req.budget !== void 0);
     assertResponseSchemaEnforceable(target.runtime, target.modelCapabilities, req.responseSchema, effectiveTools.length);
     assertWriteRootsEnforceable(target.runtime, req.writeRoots);
     assertProtectedArtifactsEnforceable(
@@ -10300,6 +10348,13 @@ function createDispatchBundle(context, options) {
       target.runtime.kind !== "subprocess",
       getProtectedArtifactState()
     );
+    resolveEffectiveWorkerBudget({
+      req,
+      recipeId: recipe.id,
+      declared: agentSpec.budget,
+      allowedTools: effectiveTools,
+      settings
+    });
     return {
       agentId: req.agentId,
       specFingerprint: agentSpecFingerprint(agentSpec),
@@ -10624,6 +10679,7 @@ function createDispatchBundle(context, options) {
         runId: run.runId,
         agentId: run.agentId,
         task: run.task,
+        ...run.budget !== void 0 ? { budget: run.budget } : {},
         runtimeKind: run.runtimeKind,
         outcomePhase: run.stallKilled ? "terminating" : run.aborted ? "aborting" : "running",
         heartbeat,
@@ -12577,1521 +12633,807 @@ function createDispatchDomainModule(options = {}) {
   };
 }
 
-// src/domains/session/index.ts
-init_esm_shims();
-
-// src/domains/session/extension.ts
-init_esm_shims();
-
-// src/domains/session/checkpoint.ts
-init_esm_shims();
-async function performCheckpoint(state, reason) {
-  await state.writer.persistTree();
-  if (stateRootRemoved()) return;
-  const paths = sessionPaths(state.meta);
-  const at = (/* @__PURE__ */ new Date()).toISOString();
-  const enriched = {
-    ...state.meta,
-    lastCheckpointAt: at,
-    lastCheckpointReason: reason ?? null
-  };
-  atomicWrite(paths.meta, JSON.stringify(enriched, null, 2));
-  Object.assign(state.meta, enriched);
-}
-
-// src/domains/session/history.ts
-init_esm_shims();
-import { existsSync as existsSync14, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync2 } from "node:fs";
-import { join as join15 } from "node:path";
-
-// src/domains/session/compaction/session-entries.ts
+// src/domains/evidence/failure-attribution.ts
 init_esm_shims();
-function collectSessionEntries(turns, filePath) {
-  const out = [];
-  for (const raw of turns) {
-    if (!isSessionEntry(raw)) {
-      throw new Error(
-        `session ledger contains an unreadable entry (missing kind discriminant): ${filePath}. Remove or compact the session to reset.`
-      );
-    }
-    out.push(raw);
-  }
-  return out;
-}
-
-// src/domains/session/history.ts
-function listSessionsForCwd(cwd) {
-  const hash = cwdHash(cwd);
-  const dir = join15(clioStateDir(), "sessions", hash);
-  if (!existsSync14(dir)) return [];
-  const metas = [];
-  for (const entry of readdirSync6(dir, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    const sessionDir = join15(dir, entry.name);
-    const metaPath = join15(sessionDir, "meta.json");
-    if (!existsSync14(metaPath)) continue;
-    let meta;
-    try {
-      if (!statSync2(metaPath).isFile()) continue;
-      const raw = readFileSync12(metaPath, "utf8");
-      meta = JSON.parse(raw);
-    } catch {
-      continue;
-    }
-    enrichMetaForListing(meta, join15(sessionDir, "current.jsonl"));
-    metas.push(meta);
-  }
-  metas.sort((a, b) => {
-    const aKey = a.lastActivityAt ?? a.createdAt ?? "";
-    const bKey = b.lastActivityAt ?? b.createdAt ?? "";
-    return aKey === bKey ? 0 : aKey > bKey ? -1 : 1;
-  });
-  return metas;
-}
-var PREVIEW_MAX_CHARS = 240;
-function collapseWhitespace(text) {
-  return text.replace(/\s+/g, " ").trim();
-}
-function extractUserText(payload) {
-  if (typeof payload === "string") {
-    const collapsed = collapseWhitespace(payload);
-    return collapsed.length > 0 ? collapsed : null;
+function attributeEvidenceFailure(facts) {
+  if (facts.outcomeCode === "worker_tool_call_cap_exhausted" || facts.outcomeCode === "loop_guard_tools_disabled_exhausted") {
+    return "tool-loop";
   }
-  if (!payload || typeof payload !== "object") return null;
-  const obj = payload;
-  if (typeof obj.text === "string") {
-    const collapsed = collapseWhitespace(obj.text);
-    if (collapsed.length > 0) return collapsed;
+  if (facts.outcome === "timed_out" || facts.outcome === "stalled") return "timeout";
+  const diagnostic = [facts.outcomeDetail, facts.failureMessage].filter((value) => value !== null).join("\n").toLowerCase();
+  if (diagnostic.length === 0) return "unknown";
+  if (/\b(?:401|403)\b|unauthorized|forbidden|invalid api key|authentication/.test(diagnostic)) {
+    return "auth-failure";
   }
-  if (Array.isArray(obj.content)) {
-    const parts = [];
-    for (const part of obj.content) {
-      if (part && typeof part === "object" && part.type === "text" && typeof part.text === "string") {
-        parts.push(part.text);
-      }
-    }
-    const joined = collapseWhitespace(parts.join(" "));
-    if (joined.length > 0) return joined;
+  if (/\b429\b|rate[ -]?limit|too many requests|temporar(?:y|ily)|unavailable|\b50[234]\b/.test(diagnostic)) {
+    return "provider-transient";
   }
-  return null;
-}
-function scanCurrentJsonl(currentPath) {
-  const result = {
-    firstUserMessage: null,
-    messageCount: 0,
-    lastTimestamp: null,
-    name: null,
-    labels: /* @__PURE__ */ new Map()
-  };
-  if (!existsSync14(currentPath)) return result;
-  const records = readSessionFileEntries(currentPath).filter((entry) => !isSessionHeader(entry));
-  for (const parsed of collectSessionEntries(records, currentPath)) {
-    if (result.lastTimestamp === null || parsed.timestamp > result.lastTimestamp) {
-      result.lastTimestamp = parsed.timestamp;
-    }
-    if (parsed.kind === "message" && parsed.role === "user") {
-      result.messageCount += 1;
-      if (result.firstUserMessage === null) {
-        const text = extractUserText(parsed.payload);
-        if (text !== null) result.firstUserMessage = text;
-      }
-    }
-    if (parsed.kind === "sessionInfo") {
-      const info = parsed;
-      if (info.name !== void 0) {
-        const trimmed = info.name.trim();
-        result.name = trimmed.length > 0 ? trimmed : null;
-      }
-      if (info.targetTurnId && info.label !== void 0) {
-        const existing = result.labels.get(info.targetTurnId);
-        if (!existing || existing.timestamp <= info.timestamp) {
-          result.labels.set(info.targetTurnId, { label: info.label, timestamp: info.timestamp });
-        }
-      }
-    }
-    if (parsed.kind === "label") {
-      const label = parsed;
-      const existing = result.labels.get(label.targetTurnId);
-      if (!existing || existing.timestamp <= label.timestamp) {
-        result.labels.set(label.targetTurnId, { label: label.label ?? "", timestamp: label.timestamp });
-      }
-    }
+  if (/context (?:length|window)|context[_ -]?overflow|maximum context|too many tokens/.test(diagnostic)) {
+    return "context-overflow";
   }
-  return result;
-}
-function enrichMetaForListing(meta, currentPath) {
-  const scan = scanCurrentJsonl(currentPath);
-  if (scan.name) meta.name = scan.name;
-  const labelValues = [...scan.labels.values()].map((entry) => entry.label.trim()).filter((label) => label.length > 0);
-  if (labelValues.length > 0) meta.labels = labelValues;
-  if (scan.firstUserMessage) {
-    meta.firstMessagePreview = scan.firstUserMessage.length > PREVIEW_MAX_CHARS ? `${scan.firstUserMessage.slice(0, PREVIEW_MAX_CHARS - 1)}\u2026` : scan.firstUserMessage;
+  if (/module not found|cannot find module|missing (?:dependency|package)|dependency .* missing/.test(diagnostic)) {
+    return "missing-dependency";
   }
-  if (scan.messageCount > 0) meta.messageCount = scan.messageCount;
-  const fallbackMtime = readMtimeIso(currentPath);
-  const activity = scan.lastTimestamp ?? fallbackMtime ?? meta.endedAt ?? meta.createdAt ?? null;
-  if (activity) meta.lastActivityAt = activity;
-}
-function readMtimeIso(path2) {
-  try {
-    return statSync2(path2).mtime.toISOString();
-  } catch {
-    return null;
+  if (/wrong runtime|runtime mismatch|model mismatch|unsupported runtime/.test(diagnostic)) return "wrong-runtime";
+  if (/\b(?:test|tests|pytest|ctest)\b.*(?:fail|error)|(?:fail|error).*\b(?:test|tests|pytest|ctest)\b/.test(diagnostic)) {
+    return "test-failure";
   }
+  if (/\bbuild\b.*(?:fail|error)|(?:fail|error).*\bbuild\b/.test(diagnostic)) return "build-failure";
+  return "unknown";
 }
-function enrichForkMeta(meta, parentSessionId, parentTurnId) {
-  Object.assign(meta, { parentSessionId, parentTurnId });
-  const paths = sessionPaths(meta);
-  atomicWrite(paths.meta, JSON.stringify(meta, null, 2));
-}
-
-// src/domains/session/manager.ts
-init_esm_shims();
-
-// node_modules/uuid/dist-node/index.js
-init_esm_shims();
 
-// node_modules/uuid/dist-node/stringify.js
+// src/domains/evidence/provenance.ts
 init_esm_shims();
-var byteToHex = [];
-for (let i = 0; i < 256; ++i) {
-  byteToHex.push((i + 256).toString(16).slice(1));
-}
-function unsafeStringify(arr, offset = 0) {
-  return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
+var PERSONA_HASH_PREFIX_CHARS = 12;
+function extractRunProvenance(receipt) {
+  const view = {};
+  if (receipt.pipeline !== void 0) view.pipeline = receipt.pipeline;
+  if (receipt.personaOverride !== void 0) view.personaOverride = receipt.personaOverride;
+  const escalation = escalationCountsFrom(receipt.safety);
+  if (escalation !== null) view.escalation = escalation;
+  if (receipt.autonomyEnforcement !== void 0) view.autonomyEnforcement = receipt.autonomyEnforcement;
+  return view;
 }
-
-// node_modules/uuid/dist-node/rng.js
-init_esm_shims();
-var rnds8 = new Uint8Array(16);
-function rng() {
-  return crypto.getRandomValues(rnds8);
+function hasRunProvenance(view) {
+  return view.pipeline !== void 0 || view.personaOverride !== void 0 || view.escalation !== void 0 || view.autonomyEnforcement !== void 0;
 }
-
-// node_modules/uuid/dist-node/v7.js
-init_esm_shims();
-var _state = {};
-function v7(options, buf, offset) {
-  let bytes;
-  if (options) {
-    bytes = v7Bytes(options.random ?? options.rng?.() ?? rng(), options.msecs, options.seq, buf, offset);
-  } else {
-    const now = Date.now();
-    const rnds = rng();
-    updateV7State(_state, now, rnds);
-    bytes = v7Bytes(rnds, _state.msecs, _state.seq, buf, offset);
-  }
-  return buf ?? unsafeStringify(bytes);
-}
-function updateV7State(state, now, rnds) {
-  state.msecs ??= -Infinity;
-  state.seq ??= 0;
-  if (now > state.msecs) {
-    state.seq = rnds[6] << 23 | rnds[7] << 16 | rnds[8] << 8 | rnds[9];
-    state.msecs = now;
-  } else {
-    state.seq = state.seq + 1 | 0;
-    if (state.seq === 0) {
-      state.msecs++;
-    }
-  }
-  return state;
+function runProvenanceFromUnknown(value) {
+  if (!isRecord9(value)) return {};
+  const view = {};
+  const pipeline = pipelineFromUnknown(value.pipeline);
+  if (pipeline !== null) view.pipeline = pipeline;
+  const personaOverride = personaOverrideFromUnknown(value.personaOverride);
+  if (personaOverride !== null) view.personaOverride = personaOverride;
+  const escalation = escalationFromUnknown(value.safety);
+  if (escalation !== null) view.escalation = escalation;
+  const autonomyEnforcement = autonomyEnforcementFromUnknown(value.autonomyEnforcement);
+  if (autonomyEnforcement !== null) view.autonomyEnforcement = autonomyEnforcement;
+  return view;
 }
-function v7Bytes(rnds, msecs, seq, buf, offset = 0) {
-  if (rnds.length < 16) {
-    throw new Error("Random bytes length must be >= 16");
-  }
-  if (!buf) {
-    buf = new Uint8Array(16);
-    offset = 0;
-  } else {
-    if (offset < 0 || offset + 16 > buf.length) {
-      throw new RangeError(`UUID byte range ${offset}:${offset + 15} is out of buffer bounds`);
-    }
-  }
-  msecs ??= Date.now();
-  seq ??= rnds[6] * 127 << 24 | rnds[7] << 16 | rnds[8] << 8 | rnds[9];
-  buf[offset++] = msecs / 1099511627776 & 255;
-  buf[offset++] = msecs / 4294967296 & 255;
-  buf[offset++] = msecs / 16777216 & 255;
-  buf[offset++] = msecs / 65536 & 255;
-  buf[offset++] = msecs / 256 & 255;
-  buf[offset++] = msecs & 255;
-  buf[offset++] = 112 | seq >>> 28 & 15;
-  buf[offset++] = seq >>> 20 & 255;
-  buf[offset++] = 128 | seq >>> 14 & 63;
-  buf[offset++] = seq >>> 6 & 255;
-  buf[offset++] = seq << 2 & 255 | rnds[10] & 3;
-  buf[offset++] = rnds[11];
-  buf[offset++] = rnds[12];
-  buf[offset++] = rnds[13];
-  buf[offset++] = rnds[14];
-  buf[offset++] = rnds[15];
-  return buf;
-}
-var v7_default = v7;
-
-// src/domains/session/migrations/index.ts
-init_esm_shims();
-function runMigrations(meta, sessionPath) {
-  const from = meta.sessionFormatVersion ?? 1;
-  if (from < CURRENT_SESSION_FORMAT_VERSION) {
-    throw new Error(
-      `session metadata has an unsupported format version (expected version 3, got ${from}): ${sessionPath}. Remove the session directory to start a new session.`
-    );
-  }
-  return { migrated: false, from, to: from };
+function isRecord9(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-
-// src/domains/session/manager.ts
-function newTurnId() {
-  return v7_default();
+function finiteNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
 }
-function startSession(input) {
-  const { meta, writer } = createSession({
-    cwd: input.cwd,
-    model: input.model ?? null,
-    target: input.target ?? null,
-    ...input.initialEntries !== void 0 ? { initialEntries: input.initialEntries } : {},
-    ...input.initialTree !== void 0 ? { initialTree: input.initialTree } : {},
-    ...input.parentSession !== void 0 ? { parentSession: input.parentSession } : {},
-    ...input.parentTurnId !== void 0 ? { parentTurnId: input.parentTurnId } : {}
-  });
-  return { meta, writer };
+function pipelineFromUnknown(value) {
+  if (!isRecord9(value)) return null;
+  const position = finiteNumber(value.position);
+  const inputBytes = finiteNumber(value.inputBytes);
+  if (position === null || inputBytes === null) return null;
+  const fromRunId = typeof value.fromRunId === "string" ? value.fromRunId : null;
+  return { fromRunId, position, inputBytes, inputTruncated: value.inputTruncated === true };
 }
-function persistSessionMeta(state) {
-  if (stateRootRemoved()) return;
-  atomicWrite(sessionPaths(state.meta).meta, JSON.stringify(state.meta, null, 2));
+function personaOverrideFromUnknown(value) {
+  if (!isRecord9(value) || typeof value.promptHash !== "string" || value.promptHash.length === 0) return null;
+  return { promptHash: value.promptHash };
 }
-function resumeSessionState(sessionId) {
-  const persistedMeta = readSessionMeta(sessionId);
-  const paths = sessionPaths(persistedMeta);
-  runMigrations(persistedMeta, paths.meta);
-  const { meta, writer, tree } = resumeSession(sessionId);
-  return { state: { meta, writer }, nodes: tree };
+function autonomyEnforcementFromUnknown(value) {
+  if (!isRecord9(value)) return null;
+  if (value.grade !== "mediated" && value.grade !== "approximated" && value.grade !== "bypassed") return null;
+  if (typeof value.autonomy !== "string" || value.autonomy.length === 0) return null;
+  const view = { grade: value.grade, autonomy: value.autonomy };
+  if (typeof value.externalMode === "string" && value.externalMode.length > 0) view.externalMode = value.externalMode;
+  if (typeof value.dangerousBypass === "boolean") view.dangerousBypass = value.dangerousBypass;
+  return view;
 }
-function appendTurn(state, input) {
-  const record = {
-    id: input.id ?? newTurnId(),
-    parentId: input.parentId,
-    at: input.at ?? (/* @__PURE__ */ new Date()).toISOString(),
-    kind: input.kind,
-    payload: input.payload
+function escalationFromUnknown(safety) {
+  if (!isRecord9(safety)) return null;
+  const decisions = safety.decisions;
+  if (!isRecord9(decisions)) return null;
+  const requested = finiteNumber(decisions.escalationRequested);
+  if (requested === null) return null;
+  return {
+    requested,
+    approved: finiteNumber(decisions.escalationApproved) ?? 0,
+    denied: finiteNumber(decisions.escalationDenied) ?? 0,
+    timedOut: finiteNumber(decisions.escalationTimedOut) ?? 0
   };
-  const entry = {
-    kind: "message",
-    turnId: record.id,
-    parentTurnId: record.parentId,
-    timestamp: record.at,
-    role: record.kind,
-    payload: record.payload
+}
+function escalationCountsFrom(safety) {
+  const decisions = safety?.decisions;
+  if (decisions === void 0 || decisions.escalationRequested === void 0) return null;
+  return {
+    requested: decisions.escalationRequested,
+    approved: decisions.escalationApproved ?? 0,
+    denied: decisions.escalationDenied ?? 0,
+    timedOut: decisions.escalationTimedOut ?? 0
   };
-  state.writer.appendEntry(entry, {
-    treeNode: {
-      id: record.id,
-      parentId: record.parentId,
-      at: record.at,
-      kind: record.kind
-    }
-  });
-  return record;
 }
-function appendEntry(state, input) {
-  const turnId = input.turnId ?? newTurnId();
-  const timestamp = input.timestamp ?? (/* @__PURE__ */ new Date()).toISOString();
-  const entry = { ...input, turnId, timestamp };
-  if (!isSessionEntry(entry)) throw new Error(`session.appendEntry: invalid ${String(input.kind)} entry`);
-  state.writer.appendEntry(entry);
-  return entry;
+function formatPersonaHashPrefix(promptHash2) {
+  if (promptHash2.length <= PERSONA_HASH_PREFIX_CHARS) return promptHash2;
+  return `${promptHash2.slice(0, PERSONA_HASH_PREFIX_CHARS)}...`;
 }
-function replaceEntries(state, entries) {
-  for (const entry of entries) {
-    if (!isSessionEntry(entry)) throw new Error("session.replaceEntries: invalid entry");
+function provenanceTranscriptLines(view) {
+  const lines = [];
+  if (view.pipeline !== void 0) {
+    const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
+    const source = fromRunId ?? "unknown";
+    const truncation = inputTruncated ? "input truncated" : "not truncated";
+    lines.push(`pipeline: step ${position}, input ${inputBytes} bytes from ${source} (${truncation})`);
   }
-  state.writer.replaceEntries(entries);
-}
-
-// src/domains/session/tree/fork.ts
-init_esm_shims();
-
-// src/domains/session/tree/active-path.ts
-init_esm_shims();
-function filterEntriesToActivePath(entries, leafTurnId) {
-  const messages = [];
-  const messagesById = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    if (entry.kind !== "message") continue;
-    messages.push(entry);
-    messagesById.set(entry.turnId, entry);
-  }
-  const latest2 = messages[messages.length - 1];
-  const pinnedLeaf = resolveLeafMessage(entries, messagesById, leafTurnId);
-  if (!hasBranch(messages) && (pinnedLeaf === void 0 || pinnedLeaf.turnId === latest2?.turnId)) return [...entries];
-  const leaf = pinnedLeaf ?? latest2;
-  if (!leaf) return [...entries];
-  const pathIds = /* @__PURE__ */ new Set();
-  let current = leaf;
-  while (current && !pathIds.has(current.turnId)) {
-    pathIds.add(current.turnId);
-    if (current.parentTurnId === null) break;
-    current = messagesById.get(current.parentTurnId);
-  }
-  const leafIndex = entries.findIndex((entry) => entry.kind === "message" && entry.turnId === leaf.turnId);
-  return entries.filter((entry, index) => entryBelongsToPath(entry, pathIds, leafIndex >= 0 && index <= leafIndex));
-}
-function resolveLeafMessage(entries, messagesById, leafTurnId) {
-  if (leafTurnId === void 0) return void 0;
-  const direct = messagesById.get(leafTurnId);
-  if (direct) return direct;
-  const sidecar = entries.find((entry) => entry.turnId === leafTurnId);
-  if (!sidecar) return void 0;
-  const anchor = sidecarAnchorTurnId(sidecar);
-  return anchor === null ? void 0 : messagesById.get(anchor);
-}
-function sidecarAnchorTurnId(entry) {
-  if (entry.kind === "label") return entry.targetTurnId;
-  if (entry.kind === "sessionInfo") return entry.targetTurnId ?? entry.parentTurnId;
-  if (entry.kind === "compactionSummary" && entry.firstKeptTurnId.length > 0) return entry.firstKeptTurnId;
-  return entry.parentTurnId;
-}
-function hasBranch(messages) {
-  const seenParents = /* @__PURE__ */ new Set();
-  for (const message of messages) {
-    if (message.parentTurnId === null) continue;
-    if (seenParents.has(message.parentTurnId)) return true;
-    seenParents.add(message.parentTurnId);
+  if (view.personaOverride !== void 0) {
+    lines.push(`persona override: prompt hash ${formatPersonaHashPrefix(view.personaOverride.promptHash)}`);
   }
-  return false;
-}
-function entryBelongsToPath(entry, pathIds, atOrBeforeLeaf) {
-  if (entry.kind === "message") return pathIds.has(entry.turnId);
-  if (entry.kind === "label") return pathIds.has(entry.targetTurnId);
-  if (entry.kind === "sessionInfo") return entry.targetTurnId === void 0 || pathIds.has(entry.targetTurnId);
-  if (entry.kind === "compactionSummary" && entry.firstKeptTurnId.length > 0 && pathIds.has(entry.firstKeptTurnId)) {
-    return true;
+  if (view.escalation !== void 0) {
+    const { requested, approved, denied, timedOut } = view.escalation;
+    lines.push(`escalations: ${requested} requested, ${approved} approved, ${denied} denied, ${timedOut} timed out`);
   }
-  return entry.parentTurnId === null ? atOrBeforeLeaf : pathIds.has(entry.parentTurnId);
-}
-
-// src/domains/session/tree/fork.ts
-function linkedRecordFromEntry(entry) {
-  return {
-    id: entry.turnId,
-    parentId: entry.parentTurnId,
-    timestamp: entry.timestamp,
-    treeKind: entry.kind === "message" ? entry.role : null,
-    raw: entry
-  };
-}
-function traceAncestry(records, leafTurnId) {
-  const byId = /* @__PURE__ */ new Map();
-  for (const record of records) byId.set(record.id, record);
-  const path2 = [];
-  let current = byId.get(leafTurnId);
-  if (!current) throw new Error(`session.fork: parent turn not found: ${leafTurnId}`);
-  const seen = /* @__PURE__ */ new Set();
-  while (current) {
-    if (seen.has(current.id)) throw new Error(`session.fork: cycle in parent chain at ${current.id}`);
-    seen.add(current.id);
-    path2.unshift(current);
-    if (current.parentId === null) break;
-    const next = byId.get(current.parentId);
-    if (!next) throw new Error(`session.fork: broken parent chain at ${current.id}`);
-    current = next;
+  if (view.autonomyEnforcement !== void 0) {
+    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
+    const mode = externalMode !== void 0 ? ` mode=${externalMode}` : "";
+    const bypass = dangerousBypass === true ? " dangerousBypass=true" : "";
+    lines.push(`autonomy enforcement: ${grade} autonomy=${autonomy}${mode}${bypass}`);
   }
-  return path2;
-}
-function treeFromLinearPath(path2) {
-  return path2.filter((record) => record.treeKind !== null).map((record) => ({
-    id: record.id,
-    parentId: record.parentId,
-    at: record.timestamp,
-    kind: record.treeKind
-  }));
+  return lines;
 }
-function sessionEntryBelongsToPath(entry, pathIds, atOrBeforeForkPoint) {
-  if (entry.kind === "compactionSummary" && !atOrBeforeForkPoint) return false;
-  return entryBelongsToPath(entry, pathIds, atOrBeforeForkPoint);
-}
-function branchEntriesFromParent(parentMeta, leafTurnId) {
-  const parentCurrentPath = sessionPaths(parentMeta).current;
-  const records = readSessionFileEntries(parentCurrentPath).filter((entry) => !isSessionHeader(entry));
-  const parsed = collectSessionEntries(records, parentCurrentPath);
-  const linked = parsed.map(linkedRecordFromEntry);
-  const path2 = traceAncestry(linked, leafTurnId);
-  const pathIds = new Set(path2.map((record) => record.id));
-  const forkPointIndex = parsed.findIndex((entry) => linkedRecordFromEntry(entry).id === leafTurnId);
-  const entries = parsed.filter(
-    (entry, index) => sessionEntryBelongsToPath(entry, pathIds, forkPointIndex >= 0 && index <= forkPointIndex)
-  );
-  return {
-    parentCurrentPath,
-    entries,
-    tree: treeFromLinearPath(path2)
-  };
-}
-function forkFromState(input) {
-  const parentMeta = input.from.meta;
-  input.from.writer.flushAppends();
-  const branch = branchEntriesFromParent(parentMeta, input.parentTurnId);
-  const cwd = input.cwd ?? parentMeta.cwd;
-  const next = startSession({
-    cwd,
-    model: parentMeta.model,
-    target: parentMeta.target,
-    initialEntries: branch.entries,
-    initialTree: branch.tree,
-    parentSession: branch.parentCurrentPath,
-    parentTurnId: input.parentTurnId
-  });
-  enrichForkMeta(next.meta, parentMeta.id, input.parentTurnId);
-  void input.from.writer.close();
-  return { next, parentMeta, nodes: branch.tree };
+function provenanceCompactSuffix(view) {
+  const parts = [];
+  if (view.pipeline !== void 0) {
+    const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
+    const from = fromRunId ?? "unknown";
+    parts.push(`pipeline=step${position} from=${from} in=${inputBytes}b${inputTruncated ? " truncated" : ""}`);
+  }
+  if (view.personaOverride !== void 0) {
+    parts.push(`persona=${formatPersonaHashPrefix(view.personaOverride.promptHash)}`);
+  }
+  if (view.escalation !== void 0) {
+    const { requested, approved, denied, timedOut } = view.escalation;
+    parts.push(`escalations=${requested}req/${approved}appr/${denied}deny/${timedOut}timeout`);
+  }
+  if (view.autonomyEnforcement !== void 0) {
+    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
+    const mode = externalMode !== void 0 ? `/${externalMode}` : "";
+    const bypass = dangerousBypass === true ? "/bypass" : "";
+    parts.push(`enforcement=${grade}:${autonomy}${mode}${bypass}`);
+  }
+  return parts.length === 0 ? "" : ` ${parts.join(" ")}`;
 }
 
-// src/domains/session/tree/manager.ts
+// src/domains/evidence/run-trust.ts
 init_esm_shims();
-import { existsSync as existsSync15, renameSync as renameSync5, rmSync as rmSync4 } from "node:fs";
-import { dirname as dirname3, join as join16 } from "node:path";
-function readTreeBundle(sessionId) {
-  const reader = openSession(sessionId);
-  const meta = reader.meta();
-  const paths = sessionPaths(meta);
-  const nodes = [...reader.tree()];
-  const entries = collectSessionEntries(reader.turns(), paths.current);
-  const labels = resolveLabelMap(entries);
-  return { sessionId, meta, nodes, entries, labels };
-}
-function resolveLabelMap(entries) {
-  const out = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    const info = labelFields(entry);
-    if (!info) continue;
-    const existing = out.get(info.targetTurnId);
-    if (existing && existing.timestamp > info.timestamp) continue;
-    if (info.label === void 0 || info.label === "") {
-      out.set(info.targetTurnId, { label: "", timestamp: info.timestamp });
-      continue;
-    }
-    out.set(info.targetTurnId, { label: info.label, timestamp: info.timestamp });
-  }
-  return out;
-}
-function labelFields(entry) {
-  if (entry.kind === "label") return entry;
-  if (entry.kind !== "sessionInfo") return null;
-  const info = entry;
-  if (!info.targetTurnId) return null;
-  const out = {
-    targetTurnId: info.targetTurnId,
-    timestamp: info.timestamp
-  };
-  if (info.label !== void 0) out.label = info.label;
-  return out;
-}
-function appendEntryToSessionFile(sessionId, entry) {
-  const meta = readSessionMeta(sessionId);
-  const paths = sessionPaths(meta);
-  appendSessionFileEntry(paths.current, entry);
-}
-function removeSessionDirectory(sessionId) {
-  const meta = readSessionMeta(sessionId);
-  const paths = sessionPaths(meta);
-  const dir = dirname3(paths.meta);
-  rmSync4(dir, { recursive: true, force: true });
-}
-function tombstoneSession(sessionId) {
-  const meta = readSessionMeta(sessionId);
-  const paths = sessionPaths(meta);
-  if (!existsSync15(paths.meta)) return;
-  const tombstone = join16(dirname3(paths.meta), "meta.deleted.json");
-  renameSync5(paths.meta, tombstone);
-}
 
-// src/domains/session/tree/navigator.ts
+// src/domains/evidence/trust-status.ts
 init_esm_shims();
-function pickMeta(meta) {
-  const out = {
-    id: meta.id,
-    cwd: meta.cwd,
-    createdAt: meta.createdAt,
-    endedAt: meta.endedAt,
-    model: meta.model,
-    target: meta.target
-  };
-  if (meta.parentSessionId !== void 0) out.parentSessionId = meta.parentSessionId;
-  if (meta.parentTurnId !== void 0) out.parentTurnId = meta.parentTurnId;
-  return out;
+var TRUST_STATUS_VERSION = 1;
+var TRUST_STATUS_MAX_ARTIFACT_REFERENCES = 16;
+var TRUST_STATUS_MAX_IDENTIFIER_LENGTH = 512;
+var TRUST_STATUS_AXES = [
+  "artifactIntegrity",
+  "validationGrounding",
+  "independentReview",
+  "contextProvenance",
+  "autonomyEnforcement",
+  "completionEvidence"
+];
+var TRUST_STATUS_STATES = {
+  artifactIntegrity: ["verified", "failed", "absent", "unknown", "not_applicable"],
+  validationGrounding: ["validated", "failed", "ungrounded", "absent", "unknown", "not_applicable"],
+  independentReview: ["passed", "failed", "inconclusive", "not_independent", "absent", "unknown", "not_applicable"],
+  contextProvenance: ["recorded", "invalid", "absent", "unknown", "not_applicable"],
+  autonomyEnforcement: ["enforced", "approximated", "bypassed", "absent", "unknown", "not_applicable"],
+  completionEvidence: ["evidenced", "incomplete", "limited", "absent", "unknown", "not_applicable"]
+};
+var SELF_REPORTED_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+  "finish_contract_evidence",
+  "run_receipt"
+]);
+var AXIS_STATES = {
+  artifactIntegrity: new Set(TRUST_STATUS_STATES.artifactIntegrity),
+  validationGrounding: new Set(TRUST_STATUS_STATES.validationGrounding),
+  independentReview: new Set(TRUST_STATUS_STATES.independentReview),
+  contextProvenance: new Set(TRUST_STATUS_STATES.contextProvenance),
+  autonomyEnforcement: new Set(TRUST_STATUS_STATES.autonomyEnforcement),
+  completionEvidence: new Set(TRUST_STATUS_STATES.completionEvidence)
+};
+var AXIS_SOURCES = {
+  artifactIntegrity: /* @__PURE__ */ new Set(["receipt_integrity_verification", "compatibility"]),
+  validationGrounding: /* @__PURE__ */ new Set(["run_receipt", "evidence_bundle", "compatibility"]),
+  independentReview: /* @__PURE__ */ new Set(["gate_decision", "compatibility"]),
+  contextProvenance: /* @__PURE__ */ new Set(["run_receipt", "evidence_bundle", "compatibility"]),
+  autonomyEnforcement: /* @__PURE__ */ new Set(["run_receipt", "compatibility"]),
+  completionEvidence: /* @__PURE__ */ new Set(["finish_contract", "compatibility"])
+};
+var SOURCE_AUTHORITIES = {
+  receipt_integrity_verification: /* @__PURE__ */ new Set(["clio"]),
+  run_receipt: /* @__PURE__ */ new Set(["clio", "validator", "runtime", "external_system", "unknown"]),
+  gate_decision: /* @__PURE__ */ new Set(["clio", "reviewer", "operator", "unknown"]),
+  evidence_bundle: /* @__PURE__ */ new Set(["clio"]),
+  finish_contract: /* @__PURE__ */ new Set(["clio"]),
+  compatibility: /* @__PURE__ */ new Set(["clio", "unknown"])
+};
+var ABSENCE_REASONS = /* @__PURE__ */ new Set([
+  "not_recorded",
+  "not_observed",
+  "artifact_missing",
+  "historical_format"
+]);
+var SOURCE_KINDS = /* @__PURE__ */ new Set([
+  "receipt_integrity_verification",
+  "run_receipt",
+  "gate_decision",
+  "evidence_bundle",
+  "finish_contract",
+  "compatibility"
+]);
+var AUTHORITY_KINDS = /* @__PURE__ */ new Set([
+  "clio",
+  "validator",
+  "reviewer",
+  "operator",
+  "runtime",
+  "external_system",
+  "unknown"
+]);
+var ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+  "run_receipt",
+  "validation_result",
+  "gate_decision",
+  "briefing",
+  "project_context",
+  "autonomy_policy",
+  "finish_contract_evidence",
+  "evidence_bundle",
+  "session_entry"
+]);
+function isRecord10(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function computeLeafId(nodes) {
-  if (nodes.length === 0) return null;
-  const hasChild = /* @__PURE__ */ new Set();
-  for (const node of nodes) {
-    if (node.parentId) hasChild.add(node.parentId);
-  }
-  let leaf = null;
-  for (const node of nodes) {
-    if (hasChild.has(node.id)) continue;
-    if (!leaf || node.at >= leaf.at) leaf = node;
-  }
-  return leaf?.id ?? null;
+function hasExactKeys(value, keys) {
+  const expected = new Set(keys);
+  return Object.keys(value).length === expected.size && Object.keys(value).every((key) => expected.has(key));
 }
-function buildTreeSnapshot(input) {
-  const nodesById = {};
-  for (const node of input.nodes) {
-    const entry = {
-      id: node.id,
-      parentId: node.parentId,
-      at: node.at,
-      kind: node.kind,
-      children: []
-    };
-    const resolved = input.labels.get(node.id);
-    if (resolved && resolved.label !== "") entry.label = resolved.label;
-    const preview = input.previews?.get(node.id);
-    if (preview !== void 0 && preview.length > 0) entry.preview = preview;
-    nodesById[node.id] = entry;
-  }
-  const rootIds = [];
-  for (const node of input.nodes) {
-    const parent = node.parentId ? nodesById[node.parentId] : void 0;
-    if (!parent) {
-      rootIds.push(node.id);
-    } else {
-      parent.children.push(node.id);
-    }
+function isTrustStatusIdentifier(value) {
+  if (typeof value !== "string" || value.trim().length === 0 || value.length > TRUST_STATUS_MAX_IDENTIFIER_LENGTH) {
+    return false;
   }
-  const byTime = (a, b) => {
-    const na = nodesById[a];
-    const nb = nodesById[b];
-    if (!na || !nb) return a < b ? -1 : a > b ? 1 : 0;
-    if (na.at === nb.at) return na.id < nb.id ? -1 : na.id > nb.id ? 1 : 0;
-    return na.at < nb.at ? -1 : 1;
-  };
-  rootIds.sort(byTime);
-  for (const key of Object.keys(nodesById)) {
-    const entry = nodesById[key];
-    if (entry) entry.children.sort(byTime);
+  for (const character of value) {
+    const codePoint = character.codePointAt(0);
+    if (codePoint !== void 0 && (codePoint < 32 || codePoint === 127)) return false;
   }
-  const leafId = input.leafId !== void 0 ? input.leafId : computeLeafId(input.nodes);
-  return {
-    sessionId: input.meta.id,
-    meta: pickMeta(input.meta),
-    leafId,
-    nodesById,
-    rootIds
-  };
-}
-
-// src/domains/session/tree/preview.ts
-init_esm_shims();
-var TURN_PREVIEW_MAX_CHARS = 60;
-var ESC = String.fromCharCode(27);
-var ANSI_CSI_RE = new RegExp(`${ESC}\\[[0-9;?]*[ -/]*[@-~]`, "g");
-var ANSI_FALLBACK_RE = new RegExp(`${ESC}[@-_]`, "g");
-function stripAnsi(text) {
-  return text.replace(ANSI_CSI_RE, "").replace(ANSI_FALLBACK_RE, "");
-}
-function collapseSingleLine(text) {
-  return text.replace(/\s+/g, " ").trim();
-}
-function sanitize(text) {
-  return collapseSingleLine(stripTokenizerSentinels(stripAnsi(text)));
+  return true;
 }
-function clamp(text, max) {
-  if (text.length <= max) return text;
-  if (max <= 1) return text.slice(0, max);
-  return `${text.slice(0, max - 1)}\u2026`;
+function compareArtifactReferences(left, right) {
+  const leftKey = `${left.kind}\0${left.id}\0${left.digest?.value ?? ""}`;
+  const rightKey = `${right.kind}\0${right.id}\0${right.digest?.value ?? ""}`;
+  return leftKey < rightKey ? -1 : leftKey > rightKey ? 1 : 0;
 }
-function extractPlainText(payload) {
-  if (typeof payload === "string") {
-    const sanitized = sanitize(payload);
-    return sanitized.length > 0 ? sanitized : null;
+function normalizeArtifactReference(value, path2) {
+  if (!isRecord10(value)) throw new Error(`${path2} must be an object`);
+  if (!hasExactKeys(value, value.digest === void 0 ? ["kind", "id"] : ["kind", "id", "digest"])) {
+    throw new Error(`${path2} has unknown or missing fields`);
   }
-  if (!payload || typeof payload !== "object") return null;
-  const obj = payload;
-  if (typeof obj.text === "string") {
-    const sanitized = sanitize(obj.text);
-    if (sanitized.length > 0) return sanitized;
+  if (typeof value.kind !== "string" || !ARTIFACT_KINDS.has(value.kind)) {
+    throw new Error(`${path2}.kind is invalid`);
   }
-  if (Array.isArray(obj.content)) {
-    const parts = [];
-    for (const block of obj.content) {
-      if (!block || typeof block !== "object") continue;
-      const b = block;
-      if (b.type === "text" && typeof b.text === "string") parts.push(b.text);
-    }
-    if (parts.length > 0) {
-      const sanitized = sanitize(parts.join(" "));
-      if (sanitized.length > 0) return sanitized;
+  if (!isTrustStatusIdentifier(value.id)) throw new Error(`${path2}.id is invalid`);
+  const reference = { kind: value.kind, id: value.id };
+  if (value.digest !== void 0) {
+    if (!isRecord10(value.digest) || !hasExactKeys(value.digest, ["algorithm", "value"]) || value.digest.algorithm !== "sha256" || typeof value.digest.value !== "string" || !/^[a-f0-9]{64}$/u.test(value.digest.value)) {
+      throw new Error(`${path2}.digest is invalid`);
     }
+    reference.digest = { algorithm: "sha256", value: value.digest.value };
   }
-  return null;
+  return reference;
 }
-function pickToolArg(toolName, args) {
-  if (!args || typeof args !== "object") return "";
-  const a = args;
-  const preferred = {
-    read: ["path"],
-    write: ["path"],
-    edit: ["path"],
-    bash: ["command"],
-    code_nav: ["query", "mode"],
-    git: ["op"],
-    verify: ["check"],
-    grep: ["pattern", "query"],
-    search: ["query", "pattern"],
-    web_fetch: ["url"],
-    web_search: ["query"]
-  };
-  const order = preferred[toolName] ?? [];
-  for (const key of order) {
-    const value = a[key];
-    if (typeof value === "string" && value.length > 0) return sanitize(value);
-    if (typeof value === "number") return String(value);
+function normalizeAttributedStatus(axis, value) {
+  if (!hasExactKeys(value, ["state", "source", "authority", "artifacts"])) {
+    throw new Error(`${axis} has unknown or missing fields`);
   }
-  for (const [, value] of Object.entries(a)) {
-    if (typeof value === "string" && value.length > 0) return sanitize(value);
-    if (typeof value === "number" || typeof value === "boolean") return String(value);
+  if (!isRecord10(value.source) || !hasExactKeys(value.source, ["kind", "id"])) {
+    throw new Error(`${axis}.source is invalid`);
   }
-  return "";
-}
-function extractToolCall(payload) {
-  if (!payload || typeof payload !== "object") return null;
-  const p = payload;
-  const toolName = typeof p.name === "string" ? p.name : typeof p.toolName === "string" ? p.toolName : null;
-  if (!toolName) return null;
-  const args = p.args !== void 0 ? p.args : p.arguments ?? p.input;
-  return { toolName, args };
-}
-function extractToolResult(payload) {
-  if (!payload || typeof payload !== "object") return null;
-  const p = payload;
-  if (!("toolCallId" in p) && !("result" in p) && !("isError" in p)) return null;
-  const isError = p.isError === true;
-  let text = "";
-  const result = p.result;
-  if (typeof result === "string") text = result;
-  else if (result && typeof result === "object") {
-    const r = result;
-    if (Array.isArray(r.content)) {
-      const parts = [];
-      for (const block of r.content) {
-        if (!block || typeof block !== "object") continue;
-        const b = block;
-        if (b.type === "text" && typeof b.text === "string") parts.push(b.text);
-      }
-      text = parts.join(" ");
-    } else if (typeof r.text === "string") {
-      text = r.text;
-    }
+  if (typeof value.source.kind !== "string" || !SOURCE_KINDS.has(value.source.kind) || !AXIS_SOURCES[axis].has(value.source.kind) || !isTrustStatusIdentifier(value.source.id)) {
+    throw new Error(`${axis}.source is invalid`);
   }
-  if (text.length === 0 && typeof p.errorMessage === "string") text = p.errorMessage;
-  return { isError, text: sanitize(text) };
-}
-function assistantStopMarker(payload) {
-  if (!payload || typeof payload !== "object") return null;
-  const sr = payload.stopReason;
-  if (sr === "aborted") return "(aborted)";
-  if (sr === "error") return "(error)";
-  return null;
-}
-function buildTurnPreview(turn, max = TURN_PREVIEW_MAX_CHARS) {
-  const budget = Math.max(1, max);
-  switch (turn.kind) {
-    case "user": {
-      const text = extractPlainText(turn.payload);
-      return text === null ? "(empty)" : clamp(text, budget);
-    }
-    case "assistant": {
-      const stop = assistantStopMarker(turn.payload);
-      const text = extractPlainText(turn.payload);
-      if (text !== null) return clamp(text, budget);
-      if (stop !== null) return stop;
-      if (turn.payload && typeof turn.payload === "object" && Array.isArray(turn.payload.content)) {
-        const content = turn.payload.content;
-        const toolCalls = content.filter(
-          (b) => b && typeof b === "object" && b.type === "toolCall"
-        );
-        if (toolCalls.length > 0) {
-          const names = toolCalls.map((b) => b.name).filter((n) => typeof n === "string");
-          if (names.length > 0) return clamp(`(tool calls) ${names.join(", ")}`, budget);
-        }
-      }
-      return "(empty)";
-    }
-    case "tool_call": {
-      const call = extractToolCall(turn.payload);
-      if (!call) return "(empty)";
-      const arg = pickToolArg(call.toolName, call.args);
-      const inner = arg.length > 0 ? `"${clamp(arg, Math.max(8, budget - call.toolName.length - 4))}"` : "";
-      const composed = `${call.toolName}(${inner})`;
-      return clamp(composed, budget);
-    }
-    case "tool_result": {
-      const result = extractToolResult(turn.payload);
-      if (!result) return "(empty)";
-      const status = result.isError ? "err" : "ok";
-      const head = `[${status}]`;
-      if (result.text.length === 0) return head;
-      const remaining = Math.max(4, budget - head.length - 1);
-      return `${head} ${clamp(result.text, remaining)}`;
-    }
-    case "system": {
-      const text = extractPlainText(turn.payload);
-      return text === null ? "(system)" : clamp(text, budget);
-    }
-    case "checkpoint":
-      return "(checkpoint)";
-    default:
-      return `(${String(turn.kind)})`;
+  if (!isRecord10(value.authority) || !hasExactKeys(value.authority, ["kind", "id"])) {
+    throw new Error(`${axis}.authority is invalid`);
   }
-}
-
-// src/domains/session/extension.ts
-function createSessionBundle(context) {
-  let state = null;
-  let currentTurnId = null;
-  function emitPark(sessionId, reason) {
-    context.bus.emit(BusChannels.SessionParked, { sessionId, reason, at: Date.now() });
-  }
-  function emitResume(sessionId, via) {
-    context.bus.emit(BusChannels.SessionResumed, { sessionId, via, at: Date.now() });
-  }
-  function emitTurnSwitched(sessionId, turnId) {
-    context.bus.emit(BusChannels.SessionTurnSwitched, { sessionId, turnId, at: Date.now() });
-  }
-  function resolveLeafOnOpen(resumed) {
-    const pinned = resumed.state.meta.pinnedLeafTurnId;
-    if (pinned && resumed.nodes.some((node) => node.id === pinned)) return pinned;
-    return computeLeafId(resumed.nodes);
-  }
-  async function closeCurrent(reason = "close") {
-    if (!state) return;
-    const s = state;
-    emitPark(s.meta.id, reason);
-    state = null;
-    currentTurnId = null;
-    await s.writer.close();
-  }
-  async function flushIfCurrent(sessionId) {
-    if (state?.meta.id === sessionId) {
-      await state.writer.persistTree();
-    }
-  }
-  function structuralTreeNodes(entries, previews) {
-    const nodes = [];
-    for (const entry of entries) {
-      if (entry.kind === "compactionSummary") {
-        nodes.push({ id: entry.turnId, parentId: entry.parentTurnId, at: entry.timestamp, kind: "compaction" });
-        const summarized = entry.messagesSummarized === void 0 ? "history" : `${entry.messagesSummarized} entries`;
-        const after = entry.tokensAfter === void 0 ? "" : ` -> ~${entry.tokensAfter}`;
-        previews.set(entry.turnId, `${summarized} summarized, ~${entry.tokensBefore}${after} tokens`);
-        continue;
-      }
-      if (entry.kind === "branchSummary") {
-        nodes.push({ id: entry.turnId, parentId: entry.parentTurnId, at: entry.timestamp, kind: "branch" });
-        const text = entry.summary.split("\n", 1)[0] ?? "";
-        previews.set(
-          entry.turnId,
-          text.length > 0 ? `returned from ${entry.fromTurnId}: ${text}` : `returned from ${entry.fromTurnId}`
-        );
-      }
-    }
-    return nodes;
+  if (typeof value.authority.kind !== "string" || !AUTHORITY_KINDS.has(value.authority.kind) || !SOURCE_AUTHORITIES[value.source.kind].has(
+    value.authority.kind
+  ) || !isTrustStatusIdentifier(value.authority.id)) {
+    throw new Error(`${axis}.authority is invalid`);
   }
-  function snapshotFor(sessionId) {
-    const bundle = readTreeBundle(sessionId);
-    const meta = state?.meta.id === sessionId ? state.meta : bundle.meta;
-    const previews = /* @__PURE__ */ new Map();
-    let structural = [];
-    try {
-      for (const entry of bundle.entries) {
-        if (entry.kind !== "message") continue;
-        const text = buildTurnPreview({ kind: entry.role, payload: entry.payload });
-        if (text.length > 0) previews.set(entry.turnId, text);
-      }
-      structural = structuralTreeNodes(bundle.entries, previews);
-    } catch {
-    }
-    const persistedLeaf = bundle.meta.pinnedLeafTurnId && bundle.nodes.some((node) => node.id === bundle.meta.pinnedLeafTurnId) ? bundle.meta.pinnedLeafTurnId : computeLeafId(bundle.nodes);
-    return buildTreeSnapshot({
-      meta,
-      nodes: [...bundle.nodes, ...structural],
-      labels: bundle.labels,
-      previews,
-      // The leaf is the next append point, so it is computed over turn nodes
-      // only: a structural node marks a moment in the timeline, never a place
-      // the session continues from.
-      leafId: state?.meta.id === sessionId ? currentTurnId : persistedLeaf
-    });
+  if (value.source.kind === "compatibility" && value.state !== "unknown" && value.state !== "not_applicable") {
+    throw new Error(`${axis} compatibility source cannot establish ${value.state}`);
   }
-  const contract = {
-    current: () => state?.meta ?? null,
-    create(input) {
-      const cwd = input?.cwd ?? process.cwd();
-      const startInput = { cwd };
-      if (input?.model !== void 0) startInput.model = input.model;
-      if (input?.target !== void 0) startInput.target = input.target;
-      if (state) {
-        const prior = state;
-        emitPark(prior.meta.id, "create_new");
-        state = null;
-        void prior.writer.close();
-      }
-      const next = startSession(startInput);
-      next.meta.workspace = probeWorkspace(cwd);
-      persistSessionMeta(next);
-      state = next;
-      currentTurnId = null;
-      return next.meta;
-    },
-    append(turn) {
-      if (!state) throw new Error("session.append: no current session");
-      if (turn.parentId !== currentTurnId) {
-        throw new Error(
-          `session.append: turn parentId ${turn.parentId ?? "null"} is not this session's current leaf (expected ${currentTurnId ?? "null"}); refusing to parent a turn onto another session's turn`
-        );
-      }
-      const record = appendTurn(state, turn);
-      currentTurnId = record.id;
-      if (state.meta.pinnedLeafTurnId !== void 0 && state.meta.pinnedLeafTurnId !== null) {
-        state.meta.pinnedLeafTurnId = null;
-        persistSessionMeta(state);
-      }
-      return record;
-    },
-    appendEntry(entry) {
-      if (!state) throw new Error("session.appendEntry: no current session");
-      return appendEntry(state, entry);
-    },
-    replaceEntries(entries) {
-      if (!state) throw new Error("session.replaceEntries: no current session");
-      replaceEntries(state, entries);
-    },
-    recordSkillActivation(activation) {
-      if (!state) throw new Error("session.recordSkillActivation: no current session");
-      appendEntry(state, {
-        kind: "skillActivation",
-        parentTurnId: activation.turnId ?? null,
-        activation
-      });
-      const existing = state.meta.skillActivations ?? [];
-      state.meta.skillActivations = [...existing, activation];
-      persistSessionMeta(state);
-      return activation;
-    },
-    async checkpoint(reason) {
-      if (!state) throw new Error("session.checkpoint: no current session");
-      await performCheckpoint(state, reason);
-    },
-    flushAppends() {
-      if (!state) throw new Error("session.flushAppends: no current session");
-      state.writer.flushAppends();
-    },
-    resume(sessionId) {
-      if (state && state.meta.id === sessionId) return state.meta;
-      const resumed = resumeSessionState(sessionId);
-      if (state) {
-        const prior = state;
-        emitPark(prior.meta.id, "resume_other");
-        void prior.writer.close();
-      }
-      state = resumed.state;
-      currentTurnId = resolveLeafOnOpen(resumed);
-      emitResume(resumed.state.meta.id, "resume");
-      return resumed.state.meta;
-    },
-    fork(parentTurnId, input) {
-      if (!state) throw new Error("session.fork: no current session to fork from");
-      const prior = state;
-      const { next, nodes } = forkFromState({
-        from: prior,
-        parentTurnId,
-        ...input?.cwd !== void 0 ? { cwd: input.cwd } : {}
-      });
-      emitPark(prior.meta.id, "fork");
-      state = next;
-      currentTurnId = computeLeafId(nodes);
-      return next.meta;
-    },
-    tree(sessionId) {
-      const id = sessionId ?? state?.meta.id;
-      if (!id) throw new Error("session.tree: no sessionId provided and no current session");
-      if (state?.meta.id === id) void flushIfCurrent(id);
-      return snapshotFor(id);
-    },
-    switchBranch(sessionId) {
-      if (state?.meta.id === sessionId) return state.meta;
-      const resumed = resumeSessionState(sessionId);
-      if (state) {
-        const prior = state;
-        emitPark(prior.meta.id, "switch_branch");
-        void prior.writer.close();
-      }
-      state = resumed.state;
-      currentTurnId = resolveLeafOnOpen(resumed);
-      emitResume(resumed.state.meta.id, "switch_branch");
-      return resumed.state.meta;
-    },
-    switchTurn(turnId) {
-      if (!state) throw new Error("session.switchTurn: no current session");
-      void flushIfCurrent(state.meta.id);
-      const nodes = readTreeBundle(state.meta.id).nodes;
-      if (!nodes.some((node) => node.id === turnId)) {
-        throw new Error(`session.switchTurn: turn not found: ${turnId}`);
-      }
-      currentTurnId = turnId;
-      state.meta.pinnedLeafTurnId = turnId;
-      persistSessionMeta(state);
-      emitTurnSwitched(state.meta.id, turnId);
-      return state.meta;
-    },
-    editLabel(turnId, label, sessionId) {
-      const targetId = sessionId ?? state?.meta.id;
-      if (!targetId) throw new Error("session.editLabel: no sessionId provided and no current session");
-      if (state && state.meta.id === targetId) {
-        appendEntry(state, {
-          kind: "label",
-          parentTurnId: null,
-          targetTurnId: turnId,
-          label
-        });
-        return;
-      }
-      const entry = {
-        kind: "label",
-        turnId: newTurnId(),
-        parentTurnId: null,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        targetTurnId: turnId,
-        label
-      };
-      appendEntryToSessionFile(targetId, entry);
-    },
-    setName(name, sessionId) {
-      const targetId = sessionId ?? state?.meta.id;
-      if (!targetId) throw new Error("session.setName: no sessionId provided and no current session");
-      if (state && state.meta.id === targetId) {
-        appendEntry(state, {
-          kind: "sessionInfo",
-          parentTurnId: null,
-          name
-        });
-        return;
-      }
-      const entry = {
-        kind: "sessionInfo",
-        turnId: newTurnId(),
-        parentTurnId: null,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        name
-      };
-      appendEntryToSessionFile(targetId, entry);
-    },
-    deleteSession(id, opts) {
-      if (state?.meta.id === id) {
-        throw new Error("session.deleteSession: refusing to delete the currently open session; close() first");
-      }
-      const options = opts ?? {};
-      if (options.keepFiles) {
-        tombstoneSession(id);
-      } else {
-        removeSessionDirectory(id);
-      }
-    },
-    history() {
-      const cwd = state?.meta.cwd ?? process.cwd();
-      return listSessionsForCwd(cwd);
-    },
-    async close() {
-      await closeCurrent();
-    }
-  };
-  const extension = {
-    async start() {
-    },
-    async stop() {
-      if (!state) return;
-      try {
-        await performCheckpoint(state, "shutdown");
-      } catch (err) {
-        process.stderr.write(
-          `[clio:session] shutdown checkpoint failed: ${err instanceof Error ? err.message : String(err)}
-`
-        );
-      }
-      await closeCurrent("shutdown");
-    }
-  };
-  return { extension, contract };
-}
-
-// src/domains/session/manifest.ts
-init_esm_shims();
-var SessionManifest = {
-  name: "session",
-  dependsOn: ["config"]
-};
-
-// src/domains/session/archive-readers.ts
-init_esm_shims();
-import { readdir, readFile } from "node:fs/promises";
-import { join as join17 } from "node:path";
-async function readAuditRows(stateDir) {
-  const root = join17(stateDir, "audit");
-  let files;
-  try {
-    files = await readdir(root);
-  } catch (error) {
-    const err = error;
-    if (err.code === "ENOENT") return { rows: [], errors: [] };
-    return { rows: [], errors: [`audit root read error: ${err.message ?? String(err)}`] };
+  if (!Array.isArray(value.artifacts) || value.artifacts.length > TRUST_STATUS_MAX_ARTIFACT_REFERENCES) {
+    throw new Error(`${axis}.artifacts exceeds the bounded reference list`);
   }
-  const rows = [];
-  const errors = [];
-  for (const file of files.filter((name) => name.endsWith(".jsonl")).sort(compareStrings2)) {
-    const path2 = join17(root, file);
-    let raw;
-    try {
-      raw = await readFile(path2, "utf8");
-    } catch (error) {
-      const err = error;
-      errors.push(`${path2}: ${err.message ?? String(err)}`);
-      continue;
-    }
-    const lines = raw.split("\n");
-    for (let index = 0; index < lines.length; index += 1) {
-      const line = lines[index];
-      if (line === void 0 || line.length === 0) continue;
-      let parsed;
-      try {
-        parsed = JSON.parse(line);
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        errors.push(`${path2}:${index + 1}: invalid JSON: ${message}`);
-        continue;
-      }
-      if (!isRecord9(parsed)) {
-        errors.push(`${path2}:${index + 1}: expected object`);
-        continue;
-      }
-      const auditKind = readOptionalString(parsed.kind) ?? "tool_call";
-      rows.push({
-        file,
-        line: index + 1,
-        row: parsed,
-        ts: readOptionalString(parsed.ts),
-        auditKind,
-        correlationId: readOptionalString(parsed.correlationId) ?? ""
-      });
+  const artifacts = value.artifacts.map(
+    (entry, index) => normalizeArtifactReference(entry, `${axis}.artifacts[${index}]`)
+  );
+  artifacts.sort(compareArtifactReferences);
+  for (let index = 1; index < artifacts.length; index += 1) {
+    if (compareArtifactReferences(
+      artifacts[index - 1],
+      artifacts[index]
+    ) === 0) {
+      throw new Error(`${axis}.artifacts contains a duplicate reference`);
     }
   }
-  return { rows, errors };
+  return {
+    state: value.state,
+    source: { kind: value.source.kind, id: value.source.id },
+    authority: { kind: value.authority.kind, id: value.authority.id },
+    artifacts
+  };
 }
-async function readSessionEntriesForId(stateDir, sessionId) {
-  const root = join17(stateDir, "sessions");
-  let cwdHashes;
-  try {
-    cwdHashes = await readdir(root);
-  } catch (error) {
-    const err = error;
-    if (err.code === "ENOENT") return { entries: [], missing: true, errors: [] };
-    return { entries: [], missing: false, errors: [`session root read error: ${err.message ?? String(err)}`] };
+function normalizeAxis(axis, value) {
+  if (!isRecord10(value) || typeof value.state !== "string" || !AXIS_STATES[axis].has(value.state)) {
+    throw new Error(`${axis}.state is invalid`);
   }
-  for (const cwdHash2 of cwdHashes.sort(compareStrings2)) {
-    const currentPath = join17(root, cwdHash2, sessionId, "current.jsonl");
-    let raw;
-    let source = currentPath;
-    try {
-      raw = await readFile(currentPath, "utf8");
-    } catch (error) {
-      const err = error;
-      if (err.code === "ENOENT") {
-        const tmpPath = `${currentPath}.tmp`;
-        try {
-          raw = await readFile(tmpPath, "utf8");
-          source = tmpPath;
-        } catch {
-          continue;
-        }
-      } else if (err.code === "ENOTDIR") {
-        continue;
-      } else {
-        return { entries: [], missing: false, errors: [`${currentPath}: ${err.message ?? String(err)}`] };
-      }
+  if (value.state === "absent") {
+    if (!hasExactKeys(value, ["state", "reason"]) || typeof value.reason !== "string" || !ABSENCE_REASONS.has(value.reason)) {
+      throw new Error(`${axis} absent state is invalid`);
     }
-    return parseSessionEntries(raw, source);
+    return { state: "absent", reason: value.reason };
   }
-  return { entries: [], missing: true, errors: [] };
+  return normalizeAttributedStatus(axis, value);
 }
-function parseSessionEntries(raw, source) {
-  const entries = [];
-  const errors = [];
-  const lines = raw.split("\n");
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index];
-    if (line === void 0 || line.trim().length === 0) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      errors.push(`${source}:${index + 1}: invalid JSON: ${message}`);
-      continue;
-    }
-    if (isSessionHeader(parsed)) continue;
-    if (isSessionEntry(parsed)) {
-      entries.push(parsed);
-      continue;
-    }
-    errors.push(
-      `session ledger contains an unreadable entry (missing kind discriminant): ${source}. Remove or compact the session to reset.`
+function normalizeTrustStatus(value) {
+  if (!isRecord10(value) || !hasExactKeys(value, ["version", ...TRUST_STATUS_AXES])) {
+    throw new Error("trust status has unknown or missing fields");
+  }
+  if (value.version !== TRUST_STATUS_VERSION) throw new Error("trust status version is invalid");
+  return {
+    version: TRUST_STATUS_VERSION,
+    artifactIntegrity: normalizeAxis("artifactIntegrity", value.artifactIntegrity),
+    validationGrounding: normalizeAxis("validationGrounding", value.validationGrounding),
+    independentReview: normalizeAxis("independentReview", value.independentReview),
+    contextProvenance: normalizeAxis("contextProvenance", value.contextProvenance),
+    autonomyEnforcement: normalizeAxis("autonomyEnforcement", value.autonomyEnforcement),
+    completionEvidence: normalizeAxis("completionEvidence", value.completionEvidence)
+  };
+}
+function absentTrustStatus(reason) {
+  return { state: "absent", reason };
+}
+function composeTrustStatus(...projections) {
+  const axes = {
+    artifactIntegrity: absentTrustStatus("not_recorded"),
+    validationGrounding: absentTrustStatus("not_recorded"),
+    independentReview: absentTrustStatus("not_recorded"),
+    contextProvenance: absentTrustStatus("not_recorded"),
+    autonomyEnforcement: absentTrustStatus("not_recorded"),
+    completionEvidence: absentTrustStatus("not_recorded")
+  };
+  for (const projection of projections) {
+    if (projection.artifactIntegrity !== void 0) axes.artifactIntegrity = projection.artifactIntegrity;
+    if (projection.validationGrounding !== void 0) axes.validationGrounding = projection.validationGrounding;
+    if (projection.independentReview !== void 0) axes.independentReview = projection.independentReview;
+    if (projection.contextProvenance !== void 0) axes.contextProvenance = projection.contextProvenance;
+    if (projection.autonomyEnforcement !== void 0) axes.autonomyEnforcement = projection.autonomyEnforcement;
+    if (projection.completionEvidence !== void 0) axes.completionEvidence = projection.completionEvidence;
+  }
+  return normalizeTrustStatus({ version: TRUST_STATUS_VERSION, ...axes });
+}
+function sha256Reference(kind, id, digest) {
+  const reference = { kind, id };
+  if (digest !== void 0 && /^[a-f0-9]{64}$/u.test(digest)) {
+    reference.digest = { algorithm: "sha256", value: digest };
+  }
+  return reference;
+}
+function receiptReference(receipt) {
+  return sha256Reference("run_receipt", receipt.runId, receipt.integrity?.digest);
+}
+function attributed(state, source, authority, artifacts) {
+  return { state, source, authority, artifacts: [...artifacts].sort(compareArtifactReferences) };
+}
+function receiptSource(receipt) {
+  return { kind: "run_receipt", id: receipt.runId };
+}
+function compatibilitySource(receipt, field) {
+  return { kind: "compatibility", id: `run_receipt:${receipt.runId}:${field}` };
+}
+var DISPATCH_AUTHORITY = { kind: "clio", id: "dispatch" };
+var COMPATIBILITY_AUTHORITY = { kind: "unknown", id: "historical-persisted-format" };
+function adaptReceiptIntegrityStatus(receipt, verification) {
+  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
+  const artifacts = [receiptReference(receipt)];
+  if (verification === void 0 || verification.ok && receipt.integrity === void 0) {
+    return attributed(
+      "unknown",
+      {
+        kind: "compatibility",
+        id: `run_receipt:${receipt.runId}:${receipt.integrity === void 0 ? "integrity-missing" : "integrity-unchecked"}`
+      },
+      COMPATIBILITY_AUTHORITY,
+      artifacts
     );
   }
-  return { entries, missing: false, errors };
+  return attributed(
+    verification.ok ? "verified" : "failed",
+    { kind: "receipt_integrity_verification", id: receipt.runId },
+    { kind: "clio", id: "receipt-integrity" },
+    artifacts
+  );
 }
-async function listSessionLedgerRefs(stateDir, onlyCwdHash) {
-  const root = join17(stateDir, "sessions");
-  let cwdHashes;
-  try {
-    cwdHashes = await readdir(root);
-  } catch {
-    return [];
+function validationArtifacts(receipt) {
+  const artifacts = [receiptReference(receipt)];
+  for (const fact of receipt.quality?.typedValidations ?? []) {
+    artifacts.push(sha256Reference("validation_result", fact.sourceId, fact.validatorDigest));
   }
-  const refs = [];
-  for (const cwdHash2 of cwdHashes.sort(compareStrings2)) {
-    if (onlyCwdHash !== void 0 && cwdHash2 !== onlyCwdHash) continue;
-    let sessionIds;
-    try {
-      sessionIds = await readdir(join17(root, cwdHash2));
-    } catch {
-      continue;
-    }
-    for (const sessionId of sessionIds.sort(compareStrings2)) {
-      refs.push({ cwdHash: cwdHash2, sessionId, path: join17(root, cwdHash2, sessionId, "current.jsonl") });
-    }
+  const resultContract = receipt.quality?.resultContract;
+  if (resultContract !== null && resultContract !== void 0) {
+    artifacts.push(sha256Reference("validation_result", resultContract.sourceId, resultContract.validatorDigest));
   }
-  return refs;
+  return uniqueBoundedReferences(artifacts);
 }
-function readOptionalString(value) {
-  return typeof value === "string" && value.length > 0 ? value : null;
+function qualityHasFailure(quality) {
+  if (quality === void 0) return false;
+  if (quality.typedValidations.some((fact) => !fact.passed)) return true;
+  return quality.resultContract?.conformance === "fail" || quality.resultContract?.quality === "fail";
 }
-function isRecord9(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function compareStrings2(a, b) {
-  return a.localeCompare(b);
+function qualityHasValidation(quality) {
+  if (quality === void 0) return false;
+  if (quality.typedValidations.some((fact) => fact.passed)) return true;
+  return quality.resultContract?.quality === "pass";
 }
-
-// src/domains/session/protected-artifacts.ts
-init_esm_shims();
-function protectedArtifactEntryFromArtifact(artifact, context) {
-  const entry = {
-    kind: "protectedArtifact",
-    parentTurnId: context.parentTurnId,
-    action: "protect",
-    artifact: artifactSnapshot(artifact)
-  };
-  if (context.toolName !== void 0) entry.toolName = context.toolName;
-  if (context.toolCallId !== void 0) entry.toolCallId = context.toolCallId;
-  if (context.runId !== void 0) entry.runId = context.runId;
-  if (context.correlationId !== void 0) entry.correlationId = context.correlationId;
-  return entry;
-}
-function protectedArtifactFromSessionEntry(entry) {
-  return protectedArtifactFromSnapshot(entry.artifact);
-}
-function protectedArtifactStateFromSessionEntries(entries) {
-  let state = { artifacts: [] };
-  const protectedEntries = entries.map((entry, index) => ({ entry, index })).filter((item) => item.entry.kind === "protectedArtifact").sort(compareProtectedEntryPositions);
-  for (const item of protectedEntries) {
-    if (item.entry.action !== "protect") continue;
-    state = protectArtifact(state, protectedArtifactFromSessionEntry(item.entry));
-  }
-  return state;
-}
-function artifactSnapshot(artifact) {
-  const snapshot = {
-    path: artifact.path,
-    protectedAt: artifact.protectedAt,
-    reason: artifact.reason,
-    source: artifact.source
-  };
-  if (artifact.validationCommand !== void 0) snapshot.validationCommand = artifact.validationCommand;
-  if (artifact.validationExitCode !== void 0) snapshot.validationExitCode = artifact.validationExitCode;
-  return snapshot;
-}
-function protectedArtifactFromSnapshot(snapshot) {
-  const artifact = {
-    path: snapshot.path,
-    protectedAt: snapshot.protectedAt,
-    reason: snapshot.reason,
-    source: snapshot.source
-  };
-  if (snapshot.validationCommand !== void 0) artifact.validationCommand = snapshot.validationCommand;
-  if (snapshot.validationExitCode !== void 0) artifact.validationExitCode = snapshot.validationExitCode;
-  return artifact;
-}
-function compareProtectedEntryPositions(left, right) {
-  return compareStrings3(left.entry.timestamp, right.entry.timestamp) || compareStrings3(left.entry.turnId, right.entry.turnId) || left.index - right.index;
-}
-function compareStrings3(left, right) {
-  if (left < right) return -1;
-  if (left > right) return 1;
-  return 0;
-}
-
-// src/domains/session/usage.ts
-init_esm_shims();
-function numberAt(source, key) {
-  const value = source[key];
-  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
-}
-function reasoningTokensOf(usage) {
-  const direct = numberAt(usage, "reasoningTokens");
-  if (direct > 0) return direct;
-  const details = usage.outputTokensDetails ?? usage.completionTokensDetails;
-  if (details && typeof details === "object") return numberAt(details, "reasoningTokens");
-  return 0;
-}
-function stringAt(source, ...keys) {
-  for (const key of keys) {
-    const value = source[key];
-    if (typeof value === "string" && value.trim().length > 0) return value;
+function verificationStatus(verification, receipt, artifacts) {
+  if (verification.state === "verified") {
+    return attributed("validated", receiptSource(receipt), { kind: "validator", id: verification.basis }, artifacts);
   }
-  return null;
-}
-function ledgerUsageCalls(entries, defaults = {}) {
-  const calls = [];
-  let currentTarget = defaults.target ?? null;
-  let currentModel = defaults.model ?? null;
-  for (const entry of entries) {
-    if (entry?.kind === "compactionSummary") {
-      const usage2 = entry.usage;
-      if (!usage2 || usage2.totalTokens <= 0) continue;
-      calls.push({
-        providerId: currentTarget ?? "unknown",
-        modelId: currentModel ?? "unknown",
-        input: usage2.input,
-        output: usage2.output,
-        cacheRead: usage2.cacheRead,
-        cacheWrite: usage2.cacheWrite,
-        reasoningTokens: usage2.reasoning,
-        totalTokens: usage2.totalTokens,
-        costUsd: usage2.cost.total,
-        // A split turn runs two summarization streams under one entry; the
-        // provider served that many calls even though one row records them.
-        apiCalls: Math.max(1, Math.round(usage2.apiCalls))
-      });
-      continue;
-    }
-    if (entry?.kind === "modelChange") {
-      const change = entry;
-      if (typeof change.target === "string" && change.target.length > 0) currentTarget = change.target;
-      else if (typeof change.provider === "string" && change.provider.length > 0) currentTarget = change.provider;
-      if (typeof change.modelId === "string" && change.modelId.length > 0) currentModel = change.modelId;
-      continue;
-    }
-    if (entry?.kind !== "message" || entry.role !== "assistant") continue;
-    const payload = entry.payload;
-    if (!payload || typeof payload !== "object" || Array.isArray(payload)) continue;
-    const record = payload;
-    const stopReason = record.stopReason;
-    if (stopReason === "aborted" || stopReason === "error") continue;
-    const rawUsage = record.usage;
-    if (!rawUsage || typeof rawUsage !== "object" || Array.isArray(rawUsage)) continue;
-    const usage = rawUsage;
-    const input = numberAt(usage, "input");
-    const output = numberAt(usage, "output");
-    const cacheRead = numberAt(usage, "cacheRead");
-    const cacheWrite = numberAt(usage, "cacheWrite");
-    const totalTokens = numberAt(usage, "totalTokens") || input + output + cacheRead + cacheWrite;
-    if (totalTokens === 0) continue;
-    const cost = usage.cost;
-    const costUsd = cost && typeof cost === "object" ? numberAt(cost, "total") : 0;
-    calls.push({
-      providerId: currentTarget ?? stringAt(record, "provider", "api") ?? "unknown",
-      modelId: currentModel ?? stringAt(record, "responseModel", "model") ?? "unknown",
-      input,
-      output,
-      cacheRead,
-      cacheWrite,
-      reasoningTokens: reasoningTokensOf(usage),
-      totalTokens,
-      costUsd
-    });
+  if (verification.state === "unverified") return absentTrustStatus("not_observed");
+  if (verification.state === "not_applicable") {
+    return attributed("not_applicable", receiptSource(receipt), DISPATCH_AUTHORITY, artifacts);
   }
-  return calls;
+  return attributed(
+    "unknown",
+    receiptSource(receipt),
+    verification.basis === "acp-external-unobserved" ? { kind: "external_system", id: "acp-delegation" } : COMPATIBILITY_AUTHORITY,
+    artifacts
+  );
 }
-
-// src/domains/session/index.ts
-var SessionDomainModule = {
-  manifest: SessionManifest,
-  createExtension: createSessionBundle
-};
-
-// src/domains/evidence/failure-attribution.ts
-init_esm_shims();
-function attributeEvidenceFailure(facts) {
-  if (facts.outcomeCode === "worker_tool_call_cap_exhausted" || facts.outcomeCode === "loop_guard_tools_disabled_exhausted") {
-    return "tool-loop";
-  }
-  if (facts.outcome === "timed_out" || facts.outcome === "stalled") return "timeout";
-  const diagnostic = [facts.outcomeDetail, facts.failureMessage].filter((value) => value !== null).join("\n").toLowerCase();
-  if (diagnostic.length === 0) return "unknown";
-  if (/\b(?:401|403)\b|unauthorized|forbidden|invalid api key|authentication/.test(diagnostic)) {
-    return "auth-failure";
-  }
-  if (/\b429\b|rate[ -]?limit|too many requests|temporar(?:y|ily)|unavailable|\b50[234]\b/.test(diagnostic)) {
-    return "provider-transient";
-  }
-  if (/context (?:length|window)|context[_ -]?overflow|maximum context|too many tokens/.test(diagnostic)) {
-    return "context-overflow";
+function adaptRunReceiptValidationStatus(receipt) {
+  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
+  const artifacts = validationArtifacts(receipt);
+  if (qualityHasFailure(receipt.quality)) {
+    return attributed("failed", receiptSource(receipt), { kind: "validator", id: "receipt-quality" }, artifacts);
   }
-  if (/module not found|cannot find module|missing (?:dependency|package)|dependency .* missing/.test(diagnostic)) {
-    return "missing-dependency";
+  if ((receipt.validationGrounding?.ungrounded.length ?? 0) > 0 || receipt.validationGrounding !== void 0 && receipt.validationGrounding.claimed > receipt.validationGrounding.grounded) {
+    return attributed("ungrounded", receiptSource(receipt), { kind: "validator", id: "command-grounding" }, artifacts);
   }
-  if (/wrong runtime|runtime mismatch|model mismatch|unsupported runtime/.test(diagnostic)) return "wrong-runtime";
-  if (/\b(?:test|tests|pytest|ctest)\b.*(?:fail|error)|(?:fail|error).*\b(?:test|tests|pytest|ctest)\b/.test(diagnostic)) {
-    return "test-failure";
+  if (qualityHasValidation(receipt.quality)) {
+    return attributed("validated", receiptSource(receipt), { kind: "validator", id: "receipt-quality" }, artifacts);
   }
-  if (/\bbuild\b.*(?:fail|error)|(?:fail|error).*\bbuild\b/.test(diagnostic)) return "build-failure";
-  return "unknown";
-}
-
-// src/domains/evidence/provenance.ts
-init_esm_shims();
-var PERSONA_HASH_PREFIX_CHARS = 12;
-function extractRunProvenance(receipt) {
-  const view = {};
-  if (receipt.pipeline !== void 0) view.pipeline = receipt.pipeline;
-  if (receipt.personaOverride !== void 0) view.personaOverride = receipt.personaOverride;
-  const escalation = escalationCountsFrom(receipt.safety);
-  if (escalation !== null) view.escalation = escalation;
-  if (receipt.autonomyEnforcement !== void 0) view.autonomyEnforcement = receipt.autonomyEnforcement;
-  return view;
+  if (receipt.verification !== void 0) return verificationStatus(receipt.verification, receipt, artifacts);
+  return attributed("unknown", compatibilitySource(receipt, "verification"), COMPATIBILITY_AUTHORITY, artifacts);
 }
-function hasRunProvenance(view) {
-  return view.pipeline !== void 0 || view.personaOverride !== void 0 || view.escalation !== void 0 || view.autonomyEnforcement !== void 0;
+function validBriefing(briefing) {
+  return Number.isSafeInteger(briefing.bytes) && briefing.bytes >= 0 && /^[a-f0-9]{64}$/u.test(briefing.contentHash);
 }
-function runProvenanceFromUnknown(value) {
-  if (!isRecord10(value)) return {};
-  const view = {};
-  const pipeline = pipelineFromUnknown(value.pipeline);
-  if (pipeline !== null) view.pipeline = pipeline;
-  const personaOverride = personaOverrideFromUnknown(value.personaOverride);
-  if (personaOverride !== null) view.personaOverride = personaOverride;
-  const escalation = escalationFromUnknown(value.safety);
-  if (escalation !== null) view.escalation = escalation;
-  const autonomyEnforcement = autonomyEnforcementFromUnknown(value.autonomyEnforcement);
-  if (autonomyEnforcement !== null) view.autonomyEnforcement = autonomyEnforcement;
-  return view;
+function validBoundedProjectContext(context) {
+  return context.tier === "bounded" && Number.isSafeInteger(context.chars) && (context.chars ?? -1) >= 0 && typeof context.contentHash === "string" && /^[a-f0-9]{64}$/u.test(context.contentHash);
 }
-function isRecord10(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function contextArtifacts(receipt) {
+  const artifacts = [receiptReference(receipt)];
+  if (receipt.briefing !== void 0 && validBriefing(receipt.briefing)) {
+    artifacts.push(sha256Reference("briefing", `${receipt.runId}:briefing`, receipt.briefing.contentHash));
+  }
+  if (receipt.projectContext?.tier === "bounded" && validBoundedProjectContext(receipt.projectContext)) {
+    artifacts.push(
+      sha256Reference("project_context", `${receipt.runId}:project-context`, receipt.projectContext.contentHash)
+    );
+  }
+  return uniqueBoundedReferences(artifacts);
 }
-function finiteNumber(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
+function adaptRunReceiptContextStatus(receipt) {
+  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
+  const artifacts = contextArtifacts(receipt);
+  const source = receiptSource(receipt);
+  const briefingInvalid = receipt.briefing !== void 0 && !validBriefing(receipt.briefing);
+  if (briefingInvalid) return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
+  const context = receipt.projectContext;
+  if (context === void 0) {
+    if (receipt.briefing !== void 0) return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
+    return attributed("unknown", compatibilitySource(receipt, "projectContext"), COMPATIBILITY_AUTHORITY, artifacts);
+  }
+  if (context.tier === "none") {
+    if (context.chars !== void 0 || context.contentHash !== void 0 || context.sections !== void 0) {
+      return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
+    }
+    return receipt.briefing === void 0 ? attributed("not_applicable", source, DISPATCH_AUTHORITY, artifacts) : attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
+  }
+  return attributed(validBoundedProjectContext(context) ? "recorded" : "invalid", source, DISPATCH_AUTHORITY, artifacts);
 }
-function pipelineFromUnknown(value) {
-  if (!isRecord10(value)) return null;
-  const position = finiteNumber(value.position);
-  const inputBytes = finiteNumber(value.inputBytes);
-  if (position === null || inputBytes === null) return null;
-  const fromRunId = typeof value.fromRunId === "string" ? value.fromRunId : null;
-  return { fromRunId, position, inputBytes, inputTruncated: value.inputTruncated === true };
+function adaptRunReceiptAutonomyStatus(receipt) {
+  if (receipt === null || receipt === void 0) return absentTrustStatus("artifact_missing");
+  const enforcement = receipt.autonomyEnforcement;
+  const artifacts = [receiptReference(receipt)];
+  if (enforcement === void 0) {
+    return attributed("unknown", compatibilitySource(receipt, "autonomyEnforcement"), COMPATIBILITY_AUTHORITY, artifacts);
+  }
+  artifacts.push({ kind: "autonomy_policy", id: `${receipt.runId}:${enforcement.autonomy}` });
+  const authority = enforcement.grade === "mediated" ? { kind: "clio", id: "safety-autonomy" } : { kind: "runtime", id: enforcement.externalMode ?? "external-runtime" };
+  const state = enforcement.dangerousBypass === true || enforcement.grade === "bypassed" ? "bypassed" : enforcement.grade === "approximated" ? "approximated" : "enforced";
+  return attributed(state, receiptSource(receipt), authority, artifacts);
 }
-function personaOverrideFromUnknown(value) {
-  if (!isRecord10(value) || typeof value.promptHash !== "string" || value.promptHash.length === 0) return null;
-  return { promptHash: value.promptHash };
+function receiptClaimsAreAuthenticated(receipt, integrity) {
+  return receipt?.integrity !== void 0 && integrity?.ok === true;
 }
-function autonomyEnforcementFromUnknown(value) {
-  if (!isRecord10(value)) return null;
-  if (value.grade !== "mediated" && value.grade !== "approximated" && value.grade !== "bypassed") return null;
-  if (typeof value.autonomy !== "string" || value.autonomy.length === 0) return null;
-  const view = { grade: value.grade, autonomy: value.autonomy };
-  if (typeof value.externalMode === "string" && value.externalMode.length > 0) view.externalMode = value.externalMode;
-  if (typeof value.dangerousBypass === "boolean") view.dangerousBypass = value.dangerousBypass;
-  return view;
+function unauthenticatedReceiptProjection(receipt) {
+  if (receipt === null || receipt === void 0) {
+    return {
+      validationGrounding: absentTrustStatus("artifact_missing"),
+      contextProvenance: absentTrustStatus("artifact_missing"),
+      autonomyEnforcement: absentTrustStatus("artifact_missing")
+    };
+  }
+  if (receipt.integrity === void 0) {
+    const artifacts = [receiptReference(receipt)];
+    return {
+      validationGrounding: attributed(
+        "unknown",
+        compatibilitySource(receipt, "canonical-projection"),
+        COMPATIBILITY_AUTHORITY,
+        artifacts
+      ),
+      contextProvenance: attributed(
+        "unknown",
+        compatibilitySource(receipt, "canonical-projection"),
+        COMPATIBILITY_AUTHORITY,
+        artifacts
+      ),
+      autonomyEnforcement: attributed(
+        "unknown",
+        compatibilitySource(receipt, "canonical-projection"),
+        COMPATIBILITY_AUTHORITY,
+        artifacts
+      )
+    };
+  }
+  return {
+    validationGrounding: absentTrustStatus("not_observed"),
+    contextProvenance: absentTrustStatus("not_observed"),
+    autonomyEnforcement: absentTrustStatus("not_observed")
+  };
+}
+function adaptRunReceiptTrustStatus(receipt, options = {}) {
+  const authenticated2 = receiptClaimsAreAuthenticated(receipt, options.integrity);
+  const receiptProjection = authenticated2 ? {
+    validationGrounding: adaptRunReceiptValidationStatus(receipt),
+    contextProvenance: adaptRunReceiptContextStatus(receipt),
+    autonomyEnforcement: adaptRunReceiptAutonomyStatus(receipt)
+  } : unauthenticatedReceiptProjection(receipt);
+  return composeTrustStatus({
+    artifactIntegrity: adaptReceiptIntegrityStatus(receipt, options.integrity),
+    ...receiptProjection,
+    independentReview: absentTrustStatus(receipt === null || receipt === void 0 ? "artifact_missing" : "not_recorded"),
+    completionEvidence: absentTrustStatus(
+      receipt === null || receipt === void 0 ? "artifact_missing" : "not_recorded"
+    )
+  });
 }
-function escalationFromUnknown(safety) {
-  if (!isRecord10(safety)) return null;
-  const decisions = safety.decisions;
-  if (!isRecord10(decisions)) return null;
-  const requested = finiteNumber(decisions.escalationRequested);
-  if (requested === null) return null;
+function inspectRunReceiptTrustStatus(receipt, envelope) {
+  let integrity;
+  if (receipt === null || receipt === void 0) {
+    integrity = { ok: false, reason: "receipt unavailable" };
+  } else if (envelope === null || envelope === void 0) {
+    integrity = { ok: false, reason: "run ledger envelope unavailable" };
+  } else {
+    try {
+      integrity = verifyReceiptIntegrity(receipt, envelope);
+    } catch (error) {
+      integrity = {
+        ok: false,
+        reason: `receipt invalid: ${error instanceof Error ? error.message : String(error)}`
+      };
+    }
+  }
   return {
-    requested,
-    approved: finiteNumber(decisions.escalationApproved) ?? 0,
-    denied: finiteNumber(decisions.escalationDenied) ?? 0,
-    timedOut: finiteNumber(decisions.escalationTimedOut) ?? 0
-  };
+    integrity,
+    status: adaptRunReceiptTrustStatus(receipt, { integrity })
+  };
+}
+function gateReference(artifact) {
+  return sha256Reference("gate_decision", artifact.id, artifact.integrity.digest);
+}
+function gateAuthority(artifact) {
+  if (artifact.outcome === "operator-confirmed") return { kind: "operator", id: "gate-confirmation" };
+  if (artifact.outcome === "full-auto-applied") return { kind: "clio", id: "full-auto-gate-policy" };
+  return { kind: "reviewer", id: artifact.decider?.runId ?? "unavailable-decider" };
+}
+function adaptGateDecisionReviewStatus(artifact, subjectRunId, verification) {
+  if (artifact === null || artifact === void 0) return absentTrustStatus("artifact_missing");
+  const source = { kind: "gate_decision", id: artifact.id };
+  const artifacts = [gateReference(artifact)];
+  const authority = gateAuthority(artifact);
+  if (!artifact.subjects.some((subject) => subject.runId === subjectRunId)) return absentTrustStatus("not_recorded");
+  if (verification === void 0 || !verification.ok) {
+    return attributed(
+      "unknown",
+      source,
+      verification === void 0 ? COMPATIBILITY_AUTHORITY : { kind: "unknown", id: "unauthenticated-gate-artifact" },
+      artifacts
+    );
+  }
+  if (artifact.decider === void 0 || artifact.correlation === void 0) {
+    if (artifact.outcome === "operator-confirmed" || artifact.outcome === "full-auto-applied") {
+      return attributed("not_applicable", source, authority, artifacts);
+    }
+    return attributed("inconclusive", source, authority, artifacts);
+  }
+  if (!artifact.correlation.independent) return attributed("not_independent", source, authority, artifacts);
+  if (artifact.outcome === "pass") return attributed("passed", source, authority, artifacts);
+  if (artifact.outcome === "fail") return attributed("failed", source, authority, artifacts);
+  if (artifact.outcome === "winner") {
+    return attributed(
+      artifact.winner?.subject.runId === subjectRunId ? "passed" : "failed",
+      source,
+      authority,
+      artifacts
+    );
+  }
+  return attributed("inconclusive", source, authority, artifacts);
 }
-function escalationCountsFrom(safety) {
-  const decisions = safety?.decisions;
-  if (decisions === void 0 || decisions.escalationRequested === void 0) return null;
+function adaptGroundedEvidenceValidationStatus(input) {
+  const observed = (input.artifacts ?? []).filter((artifact) => !SELF_REPORTED_ARTIFACT_KINDS.has(artifact.kind));
+  if (observed.length === 0) return absentTrustStatus("not_observed");
+  return attributed(
+    "validated",
+    { kind: "evidence_bundle", id: `${input.evidenceId}:${input.runId}` },
+    { kind: "clio", id: "evidence-grounding" },
+    uniqueBoundedReferences([{ kind: "evidence_bundle", id: input.evidenceId }, ...observed])
+  );
+}
+function adaptFinishContractCompletionStatus(assessment, options = {}) {
+  const artifacts = uniqueBoundedReferences(
+    options.artifacts ?? assessment.evidence.map((evidence, index) => ({
+      kind: evidence.turnId === void 0 ? "finish_contract_evidence" : "session_entry",
+      id: evidence.turnId ?? `${evidence.kind}:${index + 1}`
+    }))
+  );
+  const source = { kind: "finish_contract", id: options.sourceId ?? assessment.reason };
+  const authority = { kind: "clio", id: "finish-contract" };
+  if (assessment.reason === "no_mutation") return attributed("not_applicable", source, authority, artifacts);
+  if (assessment.reason === "validation_evidence") return attributed("evidenced", source, authority, artifacts);
+  if (assessment.reason === "explicit_limitation") return attributed("limited", source, authority, artifacts);
+  return attributed("incomplete", source, authority, artifacts);
+}
+function uniqueBoundedReferences(references) {
+  const sorted = [...references].sort(compareArtifactReferences);
+  const unique = sorted.filter(
+    (reference, index) => index === 0 || compareArtifactReferences(sorted[index - 1], reference) !== 0
+  );
+  return unique.slice(0, TRUST_STATUS_MAX_ARTIFACT_REFERENCES);
+}
+
+// src/domains/evidence/types.ts
+init_esm_shims();
+var EVIDENCE_VERSION = 1;
+var FAILURE_CAUSE_TAG_ORDER = [
+  "timeout",
+  "auth-failure",
+  "missing-dependency",
+  "build-failure",
+  "test-failure",
+  "blocked-tool"
+];
+var FAILURE_CAUSE_TAGS = new Set(FAILURE_CAUSE_TAG_ORDER);
+
+// src/domains/evidence/run-trust.ts
+function buildEvidenceTrustStatusFile(input) {
   return {
-    requested: decisions.escalationRequested,
-    approved: decisions.escalationApproved ?? 0,
-    denied: decisions.escalationDenied ?? 0,
-    timedOut: decisions.escalationTimedOut ?? 0
+    version: EVIDENCE_VERSION,
+    evidenceId: input.evidenceId,
+    projection: "canonical",
+    runs: input.runSources.map((source) => ({
+      runId: source.envelope.id,
+      status: composeEvidenceRunTrustStatus({
+        evidenceId: input.evidenceId,
+        source,
+        gateDecisions: input.gateDecisions,
+        auditRows: input.auditRows,
+        validationEvidence: input.validationEvidence?.get(source.envelope.id) ?? []
+      })
+    }))
   };
 }
-function formatPersonaHashPrefix(promptHash2) {
-  if (promptHash2.length <= PERSONA_HASH_PREFIX_CHARS) return promptHash2;
-  return `${promptHash2.slice(0, PERSONA_HASH_PREFIX_CHARS)}...`;
-}
-function provenanceTranscriptLines(view) {
-  const lines = [];
-  if (view.pipeline !== void 0) {
-    const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
-    const source = fromRunId ?? "unknown";
-    const truncation = inputTruncated ? "input truncated" : "not truncated";
-    lines.push(`pipeline: step ${position}, input ${inputBytes} bytes from ${source} (${truncation})`);
-  }
-  if (view.personaOverride !== void 0) {
-    lines.push(`persona override: prompt hash ${formatPersonaHashPrefix(view.personaOverride.promptHash)}`);
+function composeEvidenceRunTrustStatus(input) {
+  const inspection = inspectRunReceiptTrustStatus(input.source.receipt, input.source.envelope);
+  const receiptRejected = inspection.status.artifactIntegrity.state === "failed";
+  let status = inspection.status;
+  const grounded = input.validationEvidence.filter((artifact) => isTrustStatusIdentifier(artifact.id));
+  if (grounded.length > 0 && (status.validationGrounding.state === "absent" || status.validationGrounding.state === "unknown")) {
+    status = composeTrustStatus(status, {
+      validationGrounding: adaptGroundedEvidenceValidationStatus({
+        evidenceId: input.evidenceId,
+        runId: input.source.envelope.id,
+        artifacts: grounded
+      })
+    });
   }
-  if (view.escalation !== void 0) {
-    const { requested, approved, denied, timedOut } = view.escalation;
-    lines.push(`escalations: ${requested} requested, ${approved} approved, ${denied} denied, ${timedOut} timed out`);
+  const gate = latestGateDecisionForRun(input.gateDecisions, input.source.envelope.id);
+  if (gate !== null) {
+    const artifactVerification = verifyGateDecisionArtifact(gate);
+    const subject = gate.subjects.find((entry) => entry.runId === input.source.envelope.id);
+    const receipt = inspection.integrity.ok ? input.source.receipt : null;
+    const verification = artifactVerification.ok && subject !== void 0 && receipt?.integrity !== void 0 && subject.digest === receipt.integrity.digest ? { ok: true } : {
+      ok: false,
+      reason: artifactVerification.ok ? "gate subject receipt digest unavailable or mismatched" : artifactVerification.reason
+    };
+    status = composeTrustStatus(status, {
+      independentReview: adaptGateDecisionReviewStatus(gate, input.source.envelope.id, verification)
+    });
   }
-  if (view.autonomyEnforcement !== void 0) {
-    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
-    const mode = externalMode !== void 0 ? ` mode=${externalMode}` : "";
-    const bypass = dangerousBypass === true ? " dangerousBypass=true" : "";
-    lines.push(`autonomy enforcement: ${grade} autonomy=${autonomy}${mode}${bypass}`);
+  const finish = latestFinishContractForRun(input.auditRows, input.source.envelope.id);
+  if (finish !== null) {
+    const completion = adaptFinishContractCompletionStatus(finish.assessment, {
+      sourceId: finish.sourceId,
+      artifacts: finish.artifacts
+    });
+    status = composeTrustStatus(status, {
+      completionEvidence: receiptRejected && completion.state === "evidenced" ? {
+        state: "unknown",
+        source: { kind: "finish_contract", id: finish.sourceId },
+        authority: { kind: "clio", id: "finish-contract" },
+        artifacts: finish.artifacts
+      } : completion
+    });
   }
-  return lines;
-}
-function provenanceCompactSuffix(view) {
-  const parts = [];
-  if (view.pipeline !== void 0) {
-    const { fromRunId, position, inputBytes, inputTruncated } = view.pipeline;
-    const from = fromRunId ?? "unknown";
-    parts.push(`pipeline=step${position} from=${from} in=${inputBytes}b${inputTruncated ? " truncated" : ""}`);
+  return status;
+}
+function latestGateDecisionForRun(decisions, runId) {
+  return decisions.filter((decision) => decision.subjects.some((subject) => subject.runId === runId)).sort(
+    (left, right) => compareCodepoints(left.createdAt, right.createdAt) || left.cycle - right.cycle || compareCodepoints(left.id, right.id)
+  ).at(-1) ?? null;
+}
+function latestFinishContractForRun(rows, runId) {
+  const candidates = rows.filter((row) => row.auditKind === "completion_contract" && row.runId === runId && row.confidence === "exact").flatMap((row) => {
+    const assessment = finishContractAssessmentFromAudit(row.row);
+    if (assessment === null) return [];
+    const correlationId = readOptionalString(row.row.correlationId) ?? `${runId}:completion-contract`;
+    if (!isTrustStatusIdentifier(correlationId)) return [];
+    const turnId = readOptionalString(row.row.turnId);
+    const artifacts = [
+      { kind: "finish_contract_evidence", id: correlationId },
+      ...turnId === null || !isTrustStatusIdentifier(turnId) ? [] : [{ kind: "session_entry", id: turnId }]
+    ];
+    return [{ sourceId: correlationId, assessment, artifacts, timestamp: row.ts ?? "" }];
+  }).sort(
+    (left, right) => compareCodepoints(left.timestamp, right.timestamp) || compareCodepoints(left.sourceId, right.sourceId)
+  );
+  const latest2 = candidates.at(-1);
+  return latest2 === void 0 ? null : { sourceId: latest2.sourceId, assessment: latest2.assessment, artifacts: latest2.artifacts };
+}
+function finishContractAssessmentFromAudit(row) {
+  const reason = readOptionalString(row.reason);
+  const decision = readOptionalString(row.decision);
+  const mutatedPaths = Array.isArray(row.mutatedPaths) ? row.mutatedPaths.filter((entry) => typeof entry === "string") : [];
+  const turnId = readOptionalString(row.turnId);
+  const evidenceKinds = Array.isArray(row.evidenceKinds) ? row.evidenceKinds.filter(isFinishContractEvidenceKind) : [];
+  const evidence = evidenceKinds.map((kind) => ({
+    kind,
+    summary: "recorded by the finish contract",
+    ...turnId === null ? {} : { turnId }
+  }));
+  if (decision === "ok" && reason === "no_mutation") {
+    return { kind: "ok", reason, evidence: [], mutatedPaths };
   }
-  if (view.personaOverride !== void 0) {
-    parts.push(`persona=${formatPersonaHashPrefix(view.personaOverride.promptHash)}`);
+  if (decision === "ok" && reason === "validation_evidence") {
+    return { kind: "ok", reason, evidence, mutatedPaths };
   }
-  if (view.escalation !== void 0) {
-    const { requested, approved, denied, timedOut } = view.escalation;
-    parts.push(`escalations=${requested}req/${approved}appr/${denied}deny/${timedOut}timeout`);
+  if (decision === "ok" && reason === "explicit_limitation") {
+    return { kind: "ok", reason, evidence: [], mutatedPaths };
   }
-  if (view.autonomyEnforcement !== void 0) {
-    const { grade, autonomy, externalMode, dangerousBypass } = view.autonomyEnforcement;
-    const mode = externalMode !== void 0 ? `/${externalMode}` : "";
-    const bypass = dangerousBypass === true ? "/bypass" : "";
-    parts.push(`enforcement=${grade}:${autonomy}${mode}${bypass}`);
+  if (decision === "engage" && reason === "unvalidated_mutation") {
+    return { kind: "engage", reason, message: "finish contract engaged", evidence: [], mutatedPaths };
   }
-  return parts.length === 0 ? "" : ` ${parts.join(" ")}`;
+  return null;
+}
+function isFinishContractEvidenceKind(value) {
+  return value === "validation_command" || value === "protected_artifact" || value === "dispatch_receipt";
+}
+function readOptionalString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value : null;
 }
 
 // src/domains/evidence/store.ts
 init_esm_shims();
-import { readdir as readdir2, readFile as readFile2 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { readdir, readFile } from "node:fs/promises";
+import { join as join15 } from "node:path";
 var EVIDENCE_FILES = [
   "overview.json",
   "transcript.md",
@@ -14101,16 +13443,17 @@ var EVIDENCE_FILES = [
   "audit-linked.jsonl",
   "receipt.json",
   "gate-decisions.json",
+  "trust-status.json",
   "protected-artifacts.json",
   "findings.json",
   "findings.md"
 ];
 function evidenceRoot(dataDir) {
-  return join18(dataDir, "evidence");
+  return join15(dataDir, "evidence");
 }
 function evidenceDirectory(dataDir, evidenceId) {
   assertSafeId(evidenceId, "evidence");
-  return join18(evidenceRoot(dataDir), evidenceId);
+  return join15(evidenceRoot(dataDir), evidenceId);
 }
 var EvidenceNotFoundError = class extends Error {
   constructor(evidenceId) {
@@ -14126,7 +13469,7 @@ function isMissingFile(error) {
 async function loadEvidenceOverview(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile2(join18(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new EvidenceNotFoundError(evidenceId);
     throw error;
@@ -14138,19 +13481,52 @@ async function inspectEvidence(dataDir, evidenceId) {
   const overview = await loadEvidenceOverview(dataDir, evidenceId);
   let findingsRaw;
   try {
-    findingsRaw = await readFile2(join18(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
+    findingsRaw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new Error(`evidence artifact ${evidenceId} is missing findings.json`);
     throw error;
   }
   const findingsParsed = parseJson(findingsRaw, `${evidenceId}/findings.json`);
   const findings = parseFindingsFile(findingsParsed, `${evidenceId}/findings.json`);
-  return { overview, findings };
+  return { overview, findings, trustStatus: await loadEvidenceTrustStatus(dataDir, evidenceId) };
+}
+async function loadEvidenceTrustStatus(dataDir, evidenceId) {
+  let raw;
+  try {
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "trust-status.json"), "utf8");
+  } catch (error) {
+    if (isMissingFile(error)) {
+      return { version: 1, evidenceId, projection: "historical_format", runs: [] };
+    }
+    throw error;
+  }
+  const source = `${evidenceId}/trust-status.json`;
+  const parsed = parseJson(raw, source);
+  if (!isRecord11(parsed)) throw new Error(`${source}: expected object`);
+  if (parsed.version !== 1) throw new Error(`${source}: expected version 1`);
+  if (readString(parsed, source, "evidenceId") !== evidenceId) {
+    throw new Error(`${source}.evidenceId: expected ${evidenceId}`);
+  }
+  if (parsed.projection !== "canonical") throw new Error(`${source}.projection: expected canonical`);
+  if (!Array.isArray(parsed.runs)) throw new Error(`${source}.runs: expected array`);
+  return {
+    version: 1,
+    evidenceId,
+    projection: "canonical",
+    runs: parsed.runs.map((entry, index) => {
+      const entrySource = `${source}.runs[${index}]`;
+      if (!isRecord11(entry)) throw new Error(`${entrySource}: expected object`);
+      return {
+        runId: readString(entry, entrySource, "runId"),
+        status: normalizeTrustStatus(entry.status)
+      };
+    })
+  };
 }
 async function loadEvidenceRunProvenance(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile2(join18(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") return [];
@@ -14169,14 +13545,14 @@ async function loadEvidenceRunProvenance(dataDir, evidenceId) {
 async function listEvidenceOverviews(dataDir) {
   let entries;
   try {
-    entries = await readdir2(evidenceRoot(dataDir));
+    entries = await readdir(evidenceRoot(dataDir));
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") return [];
     throw error;
   }
   const overviews = [];
-  for (const entry of entries.sort(compareStrings4)) {
+  for (const entry of entries.sort(compareCodepoints)) {
     try {
       overviews.push(await loadEvidenceOverview(dataDir, entry));
     } catch {
@@ -14313,26 +13689,10 @@ function parseJson(raw, source) {
 function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function compareStrings4(a, b) {
-  return a.localeCompare(b);
-}
 function findingsFile(evidenceId, findings) {
   return { version: 1, evidenceId, findings };
 }
 
-// src/domains/evidence/types.ts
-init_esm_shims();
-var EVIDENCE_VERSION = 1;
-var FAILURE_CAUSE_TAG_ORDER = [
-  "timeout",
-  "auth-failure",
-  "missing-dependency",
-  "build-failure",
-  "test-failure",
-  "blocked-tool"
-];
-var FAILURE_CAUSE_TAGS = new Set(FAILURE_CAUSE_TAG_ORDER);
-
 // src/domains/evidence/build.ts
 var MAX_TASK_CHARS = 500;
 var TRANSCRIPT_TEXT_MAX_CHARS = 500;
@@ -14376,7 +13736,15 @@ async function buildEvidence(options) {
   const auditLinks = await linkAuditRows(options.stateDir, source, runSources, sessionLinks);
   const toolEventRows = toolEvents(runSources, sessionLinks, auditLinks);
   const protectedArtifactsRaw = protectedArtifactsFile(sessionLinks);
-  const findings = buildFindings(runSources, sessionLinks, auditLinks, protectedArtifactsRaw);
+  const validationEvidence = validationEvidenceByRun(sessionLinks.entries, runSources);
+  const trustStatusRaw = buildEvidenceTrustStatusFile({
+    evidenceId,
+    runSources,
+    gateDecisions: gateDecisions.decisions,
+    auditRows: auditLinks.rows,
+    validationEvidence
+  });
+  const findings = buildFindings(runSources, trustStatusRaw, sessionLinks, auditLinks, protectedArtifactsRaw);
   const tally = createRedactionTally();
   const redactedRunSources = runSources.map((item) => ({
     ...item,
@@ -14393,6 +13761,7 @@ async function buildEvidence(options) {
     readErrors: auditLinks.readErrors
   };
   const protectedArtifacts = redactSecretsDeep(protectedArtifactsRaw, tally);
+  const trustStatus = redactSecretsDeep(trustStatusRaw, tally);
   const overview = buildOverview(
     evidenceId,
     source,
@@ -14414,16 +13783,17 @@ async function buildEvidence(options) {
     redactedAuditLinks,
     redactedToolEvents,
     gateDecisions,
+    trustStatus,
     protectedArtifacts,
     transcript
   );
-  return { evidenceId, directory, overview: finalOverview, findings };
+  return { evidenceId, directory, overview: finalOverview, findings, trustStatus };
 }
 function buildOverview(evidenceId, source, runSources, findings, sessionLinks, auditLinks, toolEventRows, protectedArtifacts) {
   const envelopes = runSources.map((item) => item.envelope);
   const receipts = runSources.flatMap((item) => item.receipt === null ? [] : [item.receipt]);
   const toolStats = receipts.flatMap((receipt) => receipt.toolStats);
-  const runIds = envelopes.map((envelope) => envelope.id).sort(compareStrings5);
+  const runIds = envelopes.map((envelope) => envelope.id).sort(compareCodepoints);
   const sessionIds = uniqueStrings(
     envelopes.flatMap((envelope) => envelope.sessionId === null ? [] : [envelope.sessionId])
   );
@@ -14468,15 +13838,17 @@ function buildOverview(evidenceId, source, runSources, findings, sessionLinks, a
     files: [...EVIDENCE_FILES]
   };
 }
-function buildFindings(runSources, sessionLinks, auditLinks, protectedArtifacts) {
+function buildFindings(runSources, trustStatus, sessionLinks, auditLinks, protectedArtifacts) {
   const findings = [];
-  const validationRunIds = validationEvidenceRunIds(sessionLinks.entries, runSources, auditLinks.rows);
+  const trustByRun = new Map(trustStatus.runs.map((entry) => [entry.runId, entry.status]));
   for (const source of runSources) {
+    const status = trustByRun.get(source.envelope.id);
+    if (status === void 0) throw new Error(`canonical trust status missing for run ${source.envelope.id}`);
     if (source.receiptError !== null) {
       const tag = source.receiptIntegrityFailed ? "receipt-integrity" : "unknown";
       findings.push(finding(findings.length, "warn", tag, source.envelope.id, source.receiptError));
     }
-    if (isSuccessfulRun(source) && !validationRunIds.has(source.envelope.id)) {
+    if (isSuccessfulRun(source) && (status.validationGrounding.state === "absent" || status.validationGrounding.state === "unknown")) {
       findings.push(
         finding(
           findings.length,
@@ -14487,10 +13859,21 @@ function buildFindings(runSources, sessionLinks, auditLinks, protectedArtifacts)
         )
       );
     }
+    if (status.validationGrounding.state === "ungrounded") {
+      findings.push(
+        finding(
+          findings.length,
+          "warn",
+          "proxy-validation",
+          source.envelope.id,
+          "run claimed validation that was not grounded in an observed execution"
+        )
+      );
+    }
     if (source.envelope.cwd.trim().length === 0) {
       findings.push(finding(findings.length, "warn", "cwd-missing", source.envelope.id, "run ledger cwd is empty"));
     }
-    const receipt = source.receipt;
+    const receipt = authenticatedReceipt(source);
     const blocked = receipt?.toolStats.reduce((total, stat) => total + stat.blocked, 0) ?? 0;
     if (blocked > 0) {
       findings.push(
@@ -14509,12 +13892,11 @@ function buildFindings(runSources, sessionLinks, auditLinks, protectedArtifacts)
         )
       );
     }
-    const autonomyEnforcement = receipt?.autonomyEnforcement;
-    if (autonomyEnforcement?.dangerousBypass === true) {
-      const message = autonomyEnforcement.externalMode === "agent-managed" ? "run used external agent-managed governance; Clio safety blocks were not enforced" : "run executed with external permission bypass (CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS=1); Clio safety blocks were not enforced";
+    if (status.autonomyEnforcement.state === "bypassed") {
+      const message = status.autonomyEnforcement.authority.id === "agent-managed" ? "run used external agent-managed governance; Clio safety blocks were not enforced" : "run executed with external permission bypass (CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS=1); Clio safety blocks were not enforced";
       findings.push(finding(findings.length, "warn", "external-bypass", source.envelope.id, message));
-    } else if (autonomyEnforcement?.grade === "approximated") {
-      const mode = autonomyEnforcement.externalMode ? ` via ${autonomyEnforcement.externalMode}` : "";
+    } else if (status.autonomyEnforcement.state === "approximated") {
+      const mode = status.autonomyEnforcement.authority.id === "external-runtime" ? "" : ` via ${status.autonomyEnforcement.authority.id}`;
       findings.push(
         finding(
           findings.length,
@@ -14601,19 +13983,22 @@ function buildFindings(runSources, sessionLinks, auditLinks, protectedArtifacts)
   }
   return findings;
 }
-function validationEvidenceRunIds(entries, runSources, auditRows) {
-  const runIds = /* @__PURE__ */ new Set();
-  const sourceRunIds = new Set(runSources.map((source) => source.envelope.id));
+function validationEvidenceByRun(entries, runSources) {
+  const evidence = /* @__PURE__ */ new Map();
   const calls = /* @__PURE__ */ new Map();
   for (const linked of entries) {
     const runId = validationRunIdFor(linked, runSources);
     const entry = linked.entry;
     if (entry.kind === "bashExecution") {
-      if (runId !== null && isSuccessfulValidationBashExecution(entry)) runIds.add(runId);
+      if (runId !== null && isSuccessfulValidationBashExecution(entry)) {
+        addValidationEvidence(evidence, runId, { kind: "session_entry", id: entry.turnId });
+      }
       continue;
     }
     if (entry.kind === "protectedArtifact") {
-      if (runId !== null && isValidationProtectedArtifact(entry)) runIds.add(runId);
+      if (runId !== null && isValidationProtectedArtifact(entry)) {
+        addValidationEvidence(evidence, runId, { kind: "session_entry", id: entry.turnId });
+      }
       continue;
     }
     if (entry.kind !== "message") continue;
@@ -14626,16 +14011,16 @@ function validationEvidenceRunIds(entries, runSources, auditRows) {
     const result = extractSessionToolResult(entry, linked);
     if (result.id === null || !isSuccessfulSessionToolResult(result)) continue;
     const candidate = calls.get(result.id);
-    if (candidate?.runId !== null && candidate?.runId !== void 0) runIds.add(candidate.runId);
-  }
-  for (const linked of auditRows) {
-    if (linked.auditKind !== "completion_contract") continue;
-    if (linked.runId === null || !sourceRunIds.has(linked.runId)) continue;
-    if (readOptionalString2(linked.row.decision) !== "ok") continue;
-    if (readOptionalString2(linked.row.reason) !== "validation_evidence") continue;
-    runIds.add(linked.runId);
+    if (candidate?.runId !== null && candidate?.runId !== void 0) {
+      addValidationEvidence(evidence, candidate.runId, candidate.artifact);
+    }
   }
-  return runIds;
+  return evidence;
+}
+function addValidationEvidence(evidence, runId, reference) {
+  const current = evidence.get(runId) ?? [];
+  current.push(reference);
+  evidence.set(runId, current);
 }
 function validationRunIdFor(linked, runSources) {
   if (linked.link.runId !== null) return linked.link.runId;
@@ -14643,11 +14028,15 @@ function validationRunIdFor(linked, runSources) {
   return runSources[0]?.envelope.id ?? null;
 }
 function isSuccessfulRun(source) {
-  const outcome = source.receipt?.outcome ?? source.envelope.outcome ?? null;
+  const receipt = authenticatedReceipt(source);
+  const outcome = receipt?.outcome ?? source.envelope.outcome ?? null;
   if (outcome !== null) return outcome === "succeeded";
-  const exitCode = source.receipt?.exitCode ?? source.envelope.exitCode;
+  const exitCode = receipt?.exitCode ?? source.envelope.exitCode;
   return source.envelope.status === "completed" && exitCode === 0;
 }
+function authenticatedReceipt(source) {
+  return source.receipt !== null && source.receiptError === null && !source.receiptIntegrityFailed ? source.receipt : null;
+}
 function isSuccessfulValidationBashExecution(entry) {
   if (entry.cancelled || entry.exitCode !== 0) return false;
   return detectValidationCommand(entry.command).kind === "validation";
@@ -14662,7 +14051,8 @@ function validationToolCallCandidate(entry, linked, runSources) {
   if (validationToolCallSummary(call.tool, call.args) === null) return null;
   return {
     toolCallId: call.id,
-    runId: validationRunIdFor(linked, runSources)
+    runId: validationRunIdFor(linked, runSources),
+    artifact: { kind: "session_entry", id: entry.turnId }
   };
 }
 function validationToolCallSummary(toolName, args) {
@@ -14680,8 +14070,10 @@ function validationToolCallSummary(toolName, args) {
       const target = readOptionalString2(argRecord?.path) ?? "artifact";
       return `verify frontend ${target}`;
     }
-    if (check === null || !isVerificationScriptName(check)) return null;
-    return `npm run ${check}`;
+    if (check === null) return null;
+    if (isVerificationScriptName(check)) return `npm run ${check}`;
+    if (isProjectVerifierCheckId(check)) return `verify ${check}`;
+    return null;
   }
   return null;
 }
@@ -14700,23 +14092,24 @@ function finding(index, severity, tag, runId, message) {
     message
   };
 }
-async function writeEvidenceFiles(directory, overview, runSources, findings, sessionLinks, auditLinks, toolEventRows, gateDecisions, protectedArtifacts, transcript) {
+async function writeEvidenceFiles(directory, overview, runSources, findings, sessionLinks, auditLinks, toolEventRows, gateDecisions, trustStatus, protectedArtifacts, transcript) {
   await mkdir(directory, { recursive: true });
-  await writeJson(join19(directory, "overview.json"), overview);
+  await writeJson(join16(directory, "overview.json"), overview);
   await writeFile(
-    join19(directory, "transcript.md"),
+    join16(directory, "transcript.md"),
     transcript ?? renderTranscript(overview, runSources, sessionLinks),
     "utf8"
   );
-  await writeJsonl(join19(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
-  await writeJsonl(join19(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
-  await writeJsonl(join19(directory, "tool-events.jsonl"), toolEventRows);
-  await writeJsonl(join19(directory, "audit-linked.jsonl"), auditLinks.rows);
-  await writeJson(join19(directory, "receipt.json"), receiptsFile(runSources));
-  await writeJson(join19(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson(join19(directory, "protected-artifacts.json"), protectedArtifacts);
-  await writeJson(join19(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile(join19(directory, "findings.md"), renderFindings(findings), "utf8");
+  await writeJsonl(join16(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
+  await writeJsonl(join16(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
+  await writeJsonl(join16(directory, "tool-events.jsonl"), toolEventRows);
+  await writeJsonl(join16(directory, "audit-linked.jsonl"), auditLinks.rows);
+  await writeJson(join16(directory, "receipt.json"), receiptsFile(runSources));
+  await writeJson(join16(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson(join16(directory, "trust-status.json"), trustStatus);
+  await writeJson(join16(directory, "protected-artifacts.json"), protectedArtifacts);
+  await writeJson(join16(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile(join16(directory, "findings.md"), renderFindings(findings), "utf8");
 }
 function rawTraceRows(runSources) {
   const rows = [];
@@ -14835,7 +14228,7 @@ function linkSessionEntry(entry, windows) {
   if (stamped !== null) {
     return { runId: stamped, kind: "entry-run-id", confidence: "exact", candidateRunIds: [stamped] };
   }
-  const candidates = windows.filter((window) => timestampInRunWindow(entry.timestamp, window)).map((window) => window.runId).sort(compareStrings5);
+  const candidates = windows.filter((window) => timestampInRunWindow(entry.timestamp, window)).map((window) => window.runId).sort(compareCodepoints);
   const only = candidates.length === 1 ? candidates[0] : void 0;
   if (only !== void 0) {
     return { runId: only, kind: "timestamp-window", confidence: "best-effort", candidateRunIds: candidates };
@@ -14867,7 +14260,7 @@ function attributionWindows(ledger, runSources, sessionIds) {
     if (windows.has(id) || !linkedSessions.has(sessionId)) continue;
     windows.set(id, { runId: id, startedAt, endedAt: readOptionalString2(row.endedAt) });
   }
-  return [...windows.values()].sort((left, right) => compareStrings5(left.runId, right.runId));
+  return [...windows.values()].sort((left, right) => compareCodepoints(left.runId, right.runId));
 }
 function evidenceRunLink(link) {
   return {
@@ -14884,11 +14277,11 @@ function timestampInRunWindow(timestamp, envelope) {
   return value >= start && value <= end;
 }
 function compareLinkedSessionEntries(a, b) {
-  const byTimestamp = compareStrings5(a.entry.timestamp, b.entry.timestamp);
+  const byTimestamp = compareCodepoints(a.entry.timestamp, b.entry.timestamp);
   if (byTimestamp !== 0) return byTimestamp;
-  const bySession = compareStrings5(a.sessionId, b.sessionId);
+  const bySession = compareCodepoints(a.sessionId, b.sessionId);
   if (bySession !== 0) return bySession;
-  return compareStrings5(a.entry.turnId, b.entry.turnId);
+  return compareCodepoints(a.entry.turnId, b.entry.turnId);
 }
 function sessionToolEvents(entries) {
   const calls = /* @__PURE__ */ new Map();
@@ -15002,9 +14395,9 @@ function extractSessionToolResult(entry, linked) {
   };
 }
 function compareSessionToolCalls(a, b) {
-  const byTimestamp = compareStrings5(a.timestamp, b.timestamp);
+  const byTimestamp = compareCodepoints(a.timestamp, b.timestamp);
   if (byTimestamp !== 0) return byTimestamp;
-  return compareStrings5(a.id, b.id);
+  return compareCodepoints(a.id, b.id);
 }
 async function linkAuditRows(stateDir, source, runSources, sessionLinks) {
   const auditRows = await readAuditRows(stateDir);
@@ -15089,7 +14482,7 @@ function bestEffortAuditLink(audit, source, runSources, sessionIds) {
       linkKind: "ambiguous-timestamp-tool",
       confidence: "best-effort",
       reasons: ["audit timestamp and tool matched multiple runs in this session"],
-      candidateRunIds: candidates.map((item) => item.envelope.id).sort(compareStrings5)
+      candidateRunIds: candidates.map((item) => item.envelope.id).sort(compareCodepoints)
     };
   }
   if (source.kind === "session" && sessionIds.has(source.sessionId)) {
@@ -15156,12 +14549,12 @@ function auditToolEvents(rows) {
 function compareAuditLinkedRows(a, b) {
   const byTs = compareNullableStrings(a.ts, b.ts);
   if (byTs !== 0) return byTs;
-  const byKind = compareStrings5(a.auditKind, b.auditKind);
+  const byKind = compareCodepoints(a.auditKind, b.auditKind);
   if (byKind !== 0) return byKind;
   const aCorrelation = readOptionalString2(a.row.correlationId) ?? "";
   const bCorrelation = readOptionalString2(b.row.correlationId) ?? "";
-  if (aCorrelation !== bCorrelation) return compareStrings5(aCorrelation, bCorrelation);
-  return JSON.stringify(a.row).localeCompare(JSON.stringify(b.row));
+  if (aCorrelation !== bCorrelation) return compareCodepoints(aCorrelation, bCorrelation);
+  return compareCodepoints(JSON.stringify(a.row), JSON.stringify(b.row));
 }
 function receiptsFile(runSources) {
   return {
@@ -15198,7 +14591,7 @@ function protectedArtifactsFile(sessionLinks) {
   };
 }
 function compareProtectedArtifactEvents(left, right) {
-  return compareStrings5(left.timestamp, right.timestamp) || compareStrings5(left.sessionId, right.sessionId) || compareStrings5(left.turnId, right.turnId) || compareStrings5(left.artifact.path, right.artifact.path);
+  return compareCodepoints(left.timestamp, right.timestamp) || compareCodepoints(left.sessionId, right.sessionId) || compareCodepoints(left.turnId, right.turnId) || compareCodepoints(left.artifact.path, right.artifact.path);
 }
 function renderTranscript(overview, runSources, sessionLinks) {
   const lines = [
@@ -15259,7 +14652,7 @@ function renderSessionTranscriptEntry(linked) {
       const error = result.isError ? " error=true" : "";
       return [`${prefix} tool_result ${result.tool}${id}${error}: ${previewUnknown(result.result)}`];
     }
-    const text = collapseWhitespace2(extractTextFromPayload(entry.payload));
+    const text = collapseWhitespace(extractTextFromPayload(entry.payload));
     const rendered = text.length > 0 ? truncateText(text, TRANSCRIPT_TEXT_MAX_CHARS) : previewUnknown(entry.payload);
     return [`${prefix} ${entry.role}: ${rendered}`];
   }
@@ -15344,6 +14737,18 @@ function renderSessionTranscriptEntry(linked) {
     ];
   }
   if (entry.kind === "custom") return [`${prefix} custom:${entry.customType} ${previewUnknown(entry.data)}`];
+  if (entry.kind === "contextEviction") {
+    const pressure = entry.pressureBefore === null ? "" : ` pressure=${entry.pressureBefore.toFixed(3)}`;
+    return [
+      `${prefix} contextEviction policy=${entry.policyId} trigger=${entry.trigger} items=${entry.evicted.length} tokens=${entry.tokensBefore}->${entry.tokensAfter}${pressure}`,
+      ...entry.evicted.map(
+        (item) => `  evicted ref=${item.ref.entry} reason=${item.reason}${item.by === void 0 ? "" : ` by=${item.by}`} freed=${item.tokensFreed}`
+      )
+    ];
+  }
+  if (entry.kind === "contextRecall") {
+    return [`${prefix} contextRecall ref=${entry.ref.entry} trigger=${entry.trigger} tokens=${entry.tokensReadmitted}`];
+  }
   const _exhaustive = entry;
   return [`${prefix} ${String(_exhaustive)}`];
 }
@@ -15359,10 +14764,10 @@ function renderFindings(findings) {
 `;
 }
 async function readRunLedger(stateDir) {
-  const target = join19(stateDir, "runs.json");
+  const target = join16(stateDir, "runs.json");
   let raw;
   try {
-    raw = await readFile3(target, "utf8");
+    raw = await readFile2(target, "utf8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") throw new Error("run ledger not found");
@@ -15380,10 +14785,10 @@ function selectRunEnvelopes(ledger, source) {
   });
 }
 async function readReceipt(stateDir, envelope) {
-  const receiptPath = envelope.receiptPath ?? join19(stateDir, "receipts", `${envelope.id}.json`);
+  const receiptPath = envelope.receiptPath ?? join16(stateDir, "receipts", `${envelope.id}.json`);
   let raw;
   try {
-    raw = await readFile3(receiptPath, "utf8");
+    raw = await readFile2(receiptPath, "utf8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") {
@@ -15391,9 +14796,18 @@ async function readReceipt(stateDir, envelope) {
     }
     return { receipt: null, error: `receipt read error: ${err.message ?? String(err)}`, integrityFailed: false };
   }
-  const parsed = parseJson2(raw, receiptPath);
-  const receipt = parseRunReceipt(parsed, receiptPath);
-  const integrity = verifyReceiptIntegrity(receipt, envelope);
+  let receipt;
+  try {
+    const parsed = parseJson2(raw, receiptPath);
+    receipt = parseRunReceipt(parsed, receiptPath);
+  } catch (error) {
+    return {
+      receipt: null,
+      error: `receipt invalid: ${error instanceof Error ? error.message : String(error)}`,
+      integrityFailed: true
+    };
+  }
+  const integrity = inspectRunReceiptTrustStatus(receipt, envelope).integrity;
   if (!integrity.ok) {
     return { receipt, error: `receipt integrity: ${integrity.reason}`, integrityFailed: true };
   }
@@ -15582,15 +14996,15 @@ function extractTextFromPayload(payload) {
 }
 function previewUnknown(value) {
   if (value === void 0) return "";
-  if (typeof value === "string") return truncateText(collapseWhitespace2(value), TOOL_PREVIEW_MAX_CHARS);
+  if (typeof value === "string") return truncateText(collapseWhitespace(value), TOOL_PREVIEW_MAX_CHARS);
   try {
     const text = JSON.stringify(value);
-    return text === void 0 ? "" : truncateText(collapseWhitespace2(text), TOOL_PREVIEW_MAX_CHARS);
+    return text === void 0 ? "" : truncateText(collapseWhitespace(text), TOOL_PREVIEW_MAX_CHARS);
   } catch {
-    return truncateText(collapseWhitespace2(String(value)), TOOL_PREVIEW_MAX_CHARS);
+    return truncateText(collapseWhitespace(String(value)), TOOL_PREVIEW_MAX_CHARS);
   }
 }
-function collapseWhitespace2(text) {
+function collapseWhitespace(text) {
   return text.replace(/\s+/g, " ").trim();
 }
 async function writeJson(path2, value) {
@@ -15609,34 +15023,31 @@ function durationMs(startedAt, endedAt) {
 }
 function earliest(values) {
   if (values.length === 0) return null;
-  return [...values].sort(compareStrings5)[0] ?? null;
+  return [...values].sort(compareCodepoints)[0] ?? null;
 }
 function latest(values) {
   if (values.length === 0) return null;
-  return [...values].sort(compareStrings5).at(-1) ?? null;
+  return [...values].sort(compareCodepoints).at(-1) ?? null;
 }
 function uniqueStrings(values) {
-  return [...new Set(values)].sort(compareStrings5);
+  return [...new Set(values)].sort(compareCodepoints);
 }
 function uniqueTags(values) {
-  return [...new Set(values)].sort(compareStrings5);
-}
-function compareStrings5(a, b) {
-  return a.localeCompare(b);
+  return [...new Set(values)].sort(compareCodepoints);
 }
 function compareNullableStrings(a, b) {
   if (a === b) return 0;
   if (a === null) return 1;
   if (b === null) return -1;
-  return compareStrings5(a, b);
+  return compareCodepoints(a, b);
 }
 function compareRuns(a, b) {
-  const byStart = compareStrings5(a.startedAt, b.startedAt);
+  const byStart = compareCodepoints(a.startedAt, b.startedAt);
   if (byStart !== 0) return byStart;
-  return compareStrings5(a.id, b.id);
+  return compareCodepoints(a.id, b.id);
 }
 function compareToolStats(a, b) {
-  return compareStrings5(a.tool, b.tool);
+  return compareCodepoints(a.tool, b.tool);
 }
 function compareEvidenceToolEvents(a, b) {
   const byTimestamp = compareNullableStrings(a.timestamp ?? null, b.timestamp ?? null);
@@ -15645,7 +15056,7 @@ function compareEvidenceToolEvents(a, b) {
   if (byRun !== 0) return byRun;
   const bySession = compareNullableStrings(a.sessionId, b.sessionId);
   if (bySession !== 0) return bySession;
-  const byTool = compareStrings5(a.tool, b.tool);
+  const byTool = compareCodepoints(a.tool, b.tool);
   if (byTool !== 0) return byTool;
   return compareNullableStrings(a.toolCallId ?? null, b.toolCallId ?? null);
 }
@@ -15661,8 +15072,8 @@ function sanitizeEvidenceId(value) {
 
 // src/domains/evidence/eval.ts
 init_esm_shims();
-import { mkdir as mkdir2, readdir as readdir3, readFile as readFile4, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join20 } from "node:path";
+import { mkdir as mkdir2, readdir as readdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
+import { join as join17 } from "node:path";
 
 // src/domains/eval/index.ts
 init_esm_shims();
@@ -15712,12 +15123,13 @@ var EVAL_EVIDENCE_FILES = [
   "audit-linked.jsonl",
   "receipt.json",
   "gate-decisions.json",
+  "trust-status.json",
   "protected-artifacts.json",
   "eval-result.json",
   "findings.json",
   "findings.md"
 ];
-var PREVIEW_MAX_CHARS2 = 240;
+var PREVIEW_MAX_CHARS = 240;
 async function buildEvalEvidence(options) {
   if (options.evalId !== void 0 && options.artifact !== void 0) {
     throw new Error("build eval evidence accepts either evalId or artifact, not both");
@@ -15740,8 +15152,23 @@ async function buildEvalEvidence(options) {
       options.stateDir
     ).map((entry) => entry.artifact)
   };
-  await writeEvalEvidenceFiles(directory, artifact, overview, findings, toolEventRows, linkedRuns, gateDecisions);
-  return { evidenceId, directory, overview, findings };
+  const trustStatus = buildEvidenceTrustStatusFile({
+    evidenceId,
+    runSources: linkedRuns.runSources,
+    gateDecisions: gateDecisions.decisions,
+    auditRows: linkedRuns.auditRows
+  });
+  await writeEvalEvidenceFiles(
+    directory,
+    artifact,
+    overview,
+    findings,
+    toolEventRows,
+    linkedRuns,
+    gateDecisions,
+    trustStatus
+  );
+  return { evidenceId, directory, overview, findings, trustStatus };
 }
 function evalEvidenceId(evalId) {
   return `eval-${sanitizeEvidenceId2(evalId)}`;
@@ -15756,7 +15183,7 @@ function evalOverview(evidenceId, artifact, findings, toolEventRows, linkedRuns,
     evidenceId,
     source: { kind: "eval", evalId: artifact.evalId },
     generatedAt: artifact.endedAt,
-    runIds: envelopes.length > 0 ? uniqueStrings2(envelopes.map((envelope) => envelope.id)) : artifact.results.map((result) => result.runId).sort(compareStrings6),
+    runIds: envelopes.length > 0 ? uniqueStrings2(envelopes.map((envelope) => envelope.id)) : artifact.results.map((result) => result.runId).sort(compareCodepoints),
     sessionId: uniqueStrings2(envelopes.flatMap((envelope) => envelope.sessionId === null ? [] : [envelope.sessionId]))[0] ?? null,
     statuses: envelopes.length > 0 ? uniqueStrings2(envelopes.map((envelope) => envelope.status)) : uniqueStrings2(artifact.results.map((result) => result.pass ? "passed" : "failed")),
     startedAt: artifact.startedAt,
@@ -15843,7 +15270,7 @@ function evalToolEvents(artifact) {
   }
   return events.sort(compareEvidenceToolEvents2);
 }
-async function writeEvalEvidenceFiles(directory, artifact, overview, findings, toolEventRows, linkedRuns, gateDecisions) {
+async function writeEvalEvidenceFiles(directory, artifact, overview, findings, toolEventRows, linkedRuns, gateDecisions, trustStatus) {
   const emptyProtected = { version: EVIDENCE_VERSION, artifacts: [], events: [] };
   const receiptsFile2 = {
     version: EVIDENCE_VERSION,
@@ -15851,18 +15278,19 @@ async function writeEvalEvidenceFiles(directory, artifact, overview, findings, t
   };
   const redactedArtifact = redactArtifactForStorage(artifact);
   await mkdir2(directory, { recursive: true });
-  await writeJson2(join20(directory, "overview.json"), overview);
-  await writeFile2(join20(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
-  await writeJsonl2(join20(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
-  await writeJsonl2(join20(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
-  await writeJsonl2(join20(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
-  await writeJsonl2(join20(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
-  await writeJson2(join20(directory, "receipt.json"), receiptsFile2);
-  await writeJson2(join20(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson2(join20(directory, "protected-artifacts.json"), emptyProtected);
-  await writeJson2(join20(directory, "eval-result.json"), redactedArtifact);
-  await writeJson2(join20(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile2(join20(directory, "findings.md"), renderFindings2(findings), "utf8");
+  await writeJson2(join17(directory, "overview.json"), overview);
+  await writeFile2(join17(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
+  await writeJsonl2(join17(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
+  await writeJsonl2(join17(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
+  await writeJsonl2(join17(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
+  await writeJsonl2(join17(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
+  await writeJson2(join17(directory, "receipt.json"), receiptsFile2);
+  await writeJson2(join17(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson2(join17(directory, "trust-status.json"), trustStatus);
+  await writeJson2(join17(directory, "protected-artifacts.json"), emptyProtected);
+  await writeJson2(join17(directory, "eval-result.json"), redactedArtifact);
+  await writeJson2(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile2(join17(directory, "findings.md"), renderFindings2(findings), "utf8");
 }
 function rawEvalTraceRows(artifact) {
   return artifact.results.map((result) => ({
@@ -15971,22 +15399,22 @@ async function writeJsonl2(path2, rows) {
 }
 function commandPreview(command) {
   const text = command.stderr.length > 0 ? command.stderr : command.stdout;
-  return truncateText2(text, PREVIEW_MAX_CHARS2);
+  return truncateText2(text, PREVIEW_MAX_CHARS);
 }
 function truncateText2(value, maxChars) {
   if (value.length <= maxChars) return value;
   return `${value.slice(0, Math.max(0, maxChars - 1))}\u2026`;
 }
 function uniqueStrings2(values) {
-  return [...new Set(values)].sort(compareStrings6);
+  return [...new Set(values)].sort(compareCodepoints);
 }
 function uniqueTags2(values) {
-  return [...new Set(values)].sort(compareStrings6);
+  return [...new Set(values)].sort(compareCodepoints);
 }
 function compareEvidenceToolEvents2(a, b) {
   const byRun = compareNullableStrings2(a.runId, b.runId);
   if (byRun !== 0) return byRun;
-  const byTool = compareStrings6(a.tool, b.tool);
+  const byTool = compareCodepoints(a.tool, b.tool);
   if (byTool !== 0) return byTool;
   const byArgs = compareNullableStrings2(a.argsPreview ?? null, b.argsPreview ?? null);
   if (byArgs !== 0) return byArgs;
@@ -16013,7 +15441,7 @@ async function linkEvalRuns(stateDir, artifact) {
 }
 async function readRunLedger2(stateDir) {
   try {
-    const raw = await readFile4(join20(stateDir, "runs.json"), "utf8");
+    const raw = await readFile3(join17(stateDir, "runs.json"), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed.filter(isRecord13) : [];
   } catch {
@@ -16024,9 +15452,9 @@ function evalRunMatches(artifact, envelope) {
   return artifact.results.some((result) => result.runId === envelope.id);
 }
 async function readReceiptForRun(stateDir, envelope) {
-  const path2 = envelope.receiptPath ?? join20(stateDir, "receipts", `${envelope.id}.json`);
+  const path2 = envelope.receiptPath ?? join17(stateDir, "receipts", `${envelope.id}.json`);
   try {
-    const parsed = JSON.parse(await readFile4(path2, "utf8"));
+    const parsed = JSON.parse(await readFile3(path2, "utf8"));
     return isRecord13(parsed) ? parsed : null;
   } catch {
     return null;
@@ -16038,7 +15466,7 @@ async function countSessionEntries(stateDir, sessionIds) {
     const path2 = await findSessionLedgerPath(stateDir, sessionId);
     if (path2 === null) continue;
     try {
-      const raw = await readFile4(path2, "utf8");
+      const raw = await readFile3(path2, "utf8");
       count += raw.split("\n").filter((line) => line.trim().length > 0).filter((line) => {
         try {
           const parsed = JSON.parse(line);
@@ -16053,17 +15481,17 @@ async function countSessionEntries(stateDir, sessionIds) {
   return count;
 }
 async function findSessionLedgerPath(stateDir, sessionId) {
-  const root = join20(stateDir, "sessions");
+  const root = join17(stateDir, "sessions");
   let cwdHashes;
   try {
-    cwdHashes = await readdir3(root);
+    cwdHashes = await readdir2(root);
   } catch {
     return null;
   }
-  for (const cwdHash2 of cwdHashes) {
-    const path2 = join20(root, cwdHash2, sessionId, "current.jsonl");
+  for (const cwdHash of cwdHashes) {
+    const path2 = join17(root, cwdHash, sessionId, "current.jsonl");
     try {
-      await readFile4(path2, "utf8");
+      await readFile3(path2, "utf8");
       return path2;
     } catch {
     }
@@ -16071,16 +15499,16 @@ async function findSessionLedgerPath(stateDir, sessionId) {
   return null;
 }
 async function linkedEvalAuditRows(stateDir, runIds, artifact) {
-  const root = join20(stateDir, "audit");
+  const root = join17(stateDir, "audit");
   let files;
   try {
-    files = await readdir3(root);
+    files = await readdir2(root);
   } catch {
     return [];
   }
   const rows = [];
-  for (const file of files.filter((name) => name.endsWith(".jsonl")).sort(compareStrings6)) {
-    const raw = await readFile4(join20(root, file), "utf8").catch(() => "");
+  for (const file of files.filter((name) => name.endsWith(".jsonl")).sort(compareCodepoints)) {
+    const raw = await readFile3(join17(root, file), "utf8").catch(() => "");
     const lines = raw.split("\n");
     for (let index = 0; index < lines.length; index += 1) {
       const line = lines[index];
@@ -16144,27 +15572,24 @@ function timestampInEvalWindow(timestamp, artifact) {
   return Number.isFinite(value) && Number.isFinite(start) && Number.isFinite(end) && value >= start && value <= end;
 }
 function compareRunEnvelopes(a, b) {
-  return compareStrings6(a.startedAt, b.startedAt) || compareStrings6(a.id, b.id);
+  return compareCodepoints(a.startedAt, b.startedAt) || compareCodepoints(a.id, b.id);
 }
 function compareAuditRows(a, b) {
-  return compareNullableStrings2(a.ts, b.ts) || compareNullableStrings2(a.runId, b.runId) || JSON.stringify(a.row).localeCompare(JSON.stringify(b.row));
+  return compareNullableStrings2(a.ts, b.ts) || compareNullableStrings2(a.runId, b.runId) || compareCodepoints(JSON.stringify(a.row), JSON.stringify(b.row));
 }
 function compareToolStats2(a, b) {
-  return compareStrings6(a.tool, b.tool);
+  return compareCodepoints(a.tool, b.tool);
 }
 function compareNullableStrings2(a, b) {
   if (a === b) return 0;
   if (a === null) return -1;
   if (b === null) return 1;
-  return compareStrings6(a, b);
+  return compareCodepoints(a, b);
 }
 function sanitizeEvidenceId2(value) {
   const sanitized = value.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return sanitized.length === 0 ? "unknown" : sanitized;
 }
-function compareStrings6(a, b) {
-  return a.localeCompare(b);
-}
 function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -16380,26 +15805,19 @@ export {
   createWriteBoundaryEnforcer,
   DispatchDomainModule,
   createDispatchDomainModule,
-  collectSessionEntries,
-  filterEntriesToActivePath,
-  readAuditRows,
-  parseSessionEntries,
-  listSessionLedgerRefs,
-  protectedArtifactEntryFromArtifact,
-  protectedArtifactStateFromSessionEntries,
-  ledgerUsageCalls,
-  SessionDomainModule,
   extractRunProvenance,
   provenanceTranscriptLines,
   provenanceCompactSuffix,
+  adaptRunReceiptTrustStatus,
+  inspectRunReceiptTrustStatus,
+  FAILURE_CAUSE_TAGS,
   evidenceDirectory,
   EvidenceNotFoundError,
   inspectEvidence,
   loadEvidenceRunProvenance,
   listEvidenceOverviews,
-  FAILURE_CAUSE_TAGS,
   buildEvidence,
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-SRDMMSEP.js.map
+//# sourceMappingURL=chunk-QM3F2GKX.js.map