@lannguyensi/harness 0.44.0 → 0.45.0

package/dist/policy-packs/builtin/solution-acceptance-runtime.d.ts

@@ -1,3 +1,4 @@
+import { type SignatureVerification } from "../../runtime/approval-signing.js";
 import type { PolicyPack } from "../../schema/index.js";
 export declare const PACK_NAME = "solution-acceptance";
 /**
@@ -37,7 +38,18 @@ export declare const DEFAULT_PUSH_BASH_RE: RegExp;
  * surface (mirrors `resolveProtectedBranches` in branch-protection-runtime).
  */
 export declare function resolveProtectedCompletionTools(pack: PolicyPack): string[];
-/** The verdict marker the producer writes. Keep field-for-field with grounding-mcp. */
+/**
+ * The verdict marker the producer writes. Keep field-for-field with
+ * grounding-mcp for the first 7 keys (golden-fixture-pinned below).
+ *
+ * `alg` / `signature` (harness/c7c3f606) are ADDITIVE and OPTIONAL: a
+ * legacy / not-yet-updated producer omits them entirely (parsed as
+ * `undefined`, never `null` — mirrors how `ApprovalMarker.reportContentHash`
+ * distinguishes "absent" from an explicit empty value), and such a verdict
+ * is REJECTED by `evaluateGate` (missing signature = forged/unsigned, fail
+ * closed) rather than silently accepted. See the module doc for the
+ * consumer-only / cross-repo-follow-up honesty.
+ */
 export interface Verdict {
     id: string;
     head: string;
@@ -46,7 +58,73 @@ export interface Verdict {
     blockers: string[];
     timestamp: string;
     source: string;
+    /** Signature algorithm tag; only `SIGNING_ALG` (`src/runtime/approval-signing.ts`) verifies. */
+    alg?: string;
+    /** HMAC-SHA256 hex signature over the canonical identifying tuple (see `verifyVerdictSignature`). */
+    signature?: string;
 }
+/**
+ * Marker-id namespace the verdict's HMAC signature is bound to (mirrors
+ * `BRANCH_PROTECTION_MARKER_PREFIX` in branch-protection-runtime.ts): a
+ * validly-signed verdict for one id can never be replayed as a validly-
+ * signed verdict — or a validly-signed understanding-gate / branch-
+ * protection marker — for a different id, because `markerId` is bound into
+ * the signed payload (`approval-signing.ts` `canonicalPayload`) and this
+ * prefix keeps the three id spaces disjoint even where the raw ids
+ * (task ids, session ids) could otherwise collide.
+ */
+export declare const VERDICT_MARKER_ID_PREFIX = "solution-verdict-";
+/** The HMAC markerId for verdict `id` (NOT a filesystem path — see `verdictPathFor` for that). */
+export declare function verdictMarkerId(id: string): string;
+/**
+ * Sign `verdict`, reusing `signMarker` (`src/runtime/approval-signing.ts`)
+ * unmodified — same crypto as the understanding-gate / branch-protection
+ * markers (harness/f9485cc7). Payload mapping mirrors the approval
+ * marker's shape (`approvedAt`/`approvedBy`/`reportContentHash`) onto the
+ * verdict's own fields:
+ *   - `approvedAt` <- `verdict.timestamp` (when the attestation was made)
+ *   - `approvedBy` <- `verdict.source` (what attests it, e.g. "preflight")
+ *   - `reportContentHash` <- `verdictContentHash(verdict)` (binds
+ *     head/ready/confidence/blockers, the fields signMarker's fixed shape
+ *     has no dedicated slot for)
+ *
+ * NOT wired to any production write path in harness (harness is a pure
+ * CONSUMER of this marker, see module doc) — exported as the pattern +
+ * exemplar a grounding-mcp-side producer change reuses, and used directly
+ * by this module's own tests to construct validly-signed fixtures.
+ *
+ * Load-bearing on the producer side: `signMarker` is called with
+ * `verdictMarkerId(verdict.id)`, while the consumer (`verifyVerdictSignature`
+ * below) verifies with `verdictMarkerId(id)` where `id` is the CALLER's id,
+ * not `verdict.id`. Those two only agree when a mirroring producer sets
+ * `verdict.id` to the EXACT id string the consumer looks the marker up by —
+ * byte-identical, no trimming or case normalization on either side — and the
+ * consumer additionally rejects outright when `verdict.id !== id` even if
+ * the signature itself still verifies (belt-and-braces, see `evaluateGate`).
+ */
+export declare function signVerdict(generatedDir: string, verdict: Verdict): Verdict;
+/**
+ * Verify `verdict`'s signature, reusing `verifyMarkerSignature` unmodified.
+ * Recomputes `verdictContentHash` from the (possibly tampered) verdict
+ * being checked — the SAME name-mapping `signVerdict` uses — so any
+ * post-signing edit to `head` / `ready` / `confidence` / `blockers` /
+ * `timestamp` / `source` fails verification, not just an edit to
+ * `signature` itself.
+ *
+ * `id` is the CALLER's id — the one `evaluateGate` is actually checking
+ * (`readVerdict`'s lookup key) — NOT `verdict.id` (a field read back out of
+ * the marker BODY, which is exactly the bytes an attacker controls when
+ * copying a validly-signed marker verbatim onto a different id's path).
+ * This mirrors the load-bearing invariant `approval-signing.ts`'s
+ * `signMarker` doc states explicitly: "verification always recomputes the
+ * HMAC using the id the caller is checking, NOT one read back out of the
+ * marker body." Trusting `verdict.id` here would let a byte-for-byte copy
+ * of one id's signed verdict pass verification under a DIFFERENT id's
+ * request, because the copy's `signature` and its own (also-copied)
+ * `verdict.id` field would always agree with each other regardless of which
+ * id actually asked.
+ */
+export declare function verifyVerdictSignature(generatedDir: string, id: string, verdict: Verdict): SignatureVerification;
 /** Env knob that overrides the verdict directory (mirrors the producer). */
 export declare const VERDICT_DIR_ENV = "SOLUTION_VERDICT_DIR";
 /**
@@ -104,16 +182,69 @@ export interface GateResult {
     allowed: boolean;
     reason: string;
     verdict: Verdict | null;
+    /**
+     * True when `allowed` is false SPECIFICALLY because a verdict file
+     * existed and parsed (the 7 producer keys), but carried a missing or
+     * invalid HMAC signature (harness/c7c3f606), or a body that identifies a
+     * different id than the one being checked (cross-id replay, see the
+     * `verdict.id !== id` check below) — a legacy/not-yet-signing producer, a
+     * marker planted through some write primitive the write-guard doesn't
+     * enumerate, or content tampered/copied post-signing. Distinct from
+     * `verdict === null` (no marker at all, `forged: false`), from a
+     * signing-key I/O failure (fail-closed but NOT classified as forged,
+     * mirroring `SignatureVerification`'s `kind: "key-unavailable"` — a
+     * broken key file must not read as an active forgery attempt in audit
+     * output), and from a verdict with NO `alg`/`signature` fields at all
+     * whose `timestamp` / `source` also reads blank (fail-closed but NOT
+     * classified as forged either — a legitimately malformed, never-signed
+     * marker, not evidence of an attack; see the `MISSING_*_REASON` carve-out
+     * below). That last carve-out is scoped tightly: a verdict that DOES carry
+     * `alg`/`signature` but still hits the same blank-field reason IS
+     * classified `forged: true` — a signed field reading blank only happens
+     * via post-signing tampering, so it does not get the "legitimately
+     * malformed" benefit of the doubt (review R2, closes an audit-fidelity
+     * gap where a forger could blank a real signed verdict's `timestamp` to
+     * suppress this tag while the block itself still held). `allowed` is
+     * always false when `forged` is true.
+     */
+    forged: boolean;
 }
 /**
- * Evaluate the gate for `id` at `currentHead`. Mirrors grounding-mcp
- * `evaluateGate` EXACTLY: allow iff `verdict.ready === true` AND
- * `verdict.head === currentHead`. `confidence` is INFORMATIONAL ONLY and
- * never gates — a `ready:true confidence:0` verdict at HEAD passes — so the
- * harness consumer stays byte-parity with the producer's `solution_gate`
- * (an operator running `solution_gate` and the harness gate must agree).
+ * Evaluate the gate for `id` at `currentHead`. First verifies the verdict's
+ * HMAC signature (harness/c7c3f606, fail-closed — see `verifyVerdictSignature`);
+ * a verdict that fails this is REJECTED before its `ready` / `head` fields
+ * are ever trusted, with a distinct forged/unsigned reason so an
+ * operator/auditor can tell that apart from the routine "not ready yet" or
+ * "no verdict" cases. Signature verification needs `generatedDir` (the
+ * harness `.generated/` dir holding the shared signing key, NOT the verdict
+ * dir) — `undefined` when it could not be resolved, which fails closed with
+ * its own distinct (non-forged) reason.
+ *
+ * `verifyVerdictSignature` is called with `id` — the CALLER's id, i.e. the
+ * one this function is asked to check — not `verdict.id`. A SECOND,
+ * belt-and-braces check below independently rejects `verdict.id !== id`:
+ * even though the signature check alone already closes the cross-id-replay
+ * hole (a byte-for-byte copy of a validly-signed verdict onto a different
+ * id's path fails signature verification, because the markerId the
+ * signature is bound to no longer matches `id`), the verdict body's `id`
+ * field itself is NOT part of the signed payload (only `timestamp` /
+ * `source` / the head-ready-confidence-blockers content hash are), so it
+ * can drift from the id that was actually verified without invalidating an
+ * otherwise-valid signature. This check makes that drift fail loudly too,
+ * rather than silently ignoring an inconsistency in the body of a verdict
+ * that otherwise passed.
+ *
+ * Once signed and identity-checked, mirrors grounding-mcp `evaluateGate`:
+ * allow iff `verdict.ready === true` AND `verdict.head === currentHead`.
+ * `confidence` is INFORMATIONAL ONLY and never gates — a `ready:true
+ * confidence:0` verdict at HEAD passes — so the harness consumer stays
+ * byte-parity with the producer's `solution_gate` for THAT decision.
+ * Signature verification itself is NOT (yet) mirrored on the producer side
+ * — see module doc, "HONEST RESIDUAL": grounding-mcp's own `solution_gate`
+ * does not enforce this signature, only this harness consumer does, until a
+ * matching producer release ships.
  */
-export declare function evaluateGate(verdict: Verdict | null, currentHead: string | null, id: string): GateResult;
+export declare function evaluateGate(verdict: Verdict | null, currentHead: string | null, id: string, generatedDir: string | undefined): GateResult;
 /**
  * Is `target` inside `dir` after resolution? Used for the path-tool arm
  * (Write/Edit/MultiEdit/NotebookEdit `file_path`) and for a Bash shell whose

package/dist/policy-packs/builtin/solution-acceptance-runtime.js

@@ -34,17 +34,47 @@
 //      agent could otherwise hand-write a `ready:true` marker. The write-guard
 //      blocks the agent's enumerated write paths into the verdict dir.
 //
-// Anti-forgery honesty (operator decision, 2026-05-30): v1 closes the
+// Anti-forgery honesty (operator decision, 2026-05-30): v1 closed the
 // ENUMERATED-WRITE-PATH residual (the Bash/Edit/Write spellings below), NOT
 // arbitrary same-uid forgery. A `0500` chmod on the dir would be incoherent
 // here because the producer (grounding-mcp) and the agent share a uid, so it
-// would block the producer too. Content-authenticity against an unguarded
-// write primitive is closed by marker signing, a cross-repo follow-up that
-// already touches the producer. This module must NOT claim the residual is
-// fully closed.
+// would block the producer too.
+//
+// Content-authenticity (harness/c7c3f606): the verdict now carries an HMAC
+// signature, reusing the SAME `signMarker` / `verifyMarkerSignature`
+// primitive `src/runtime/approval-signing.ts` shipped for the
+// understanding-gate / branch-protection markers (harness/f9485cc7) — same
+// crypto, same operator-side key at `<generatedDir>/.approval-signing.key`,
+// same fail-closed contract (missing/invalid signature = NOT satisfied,
+// distinct `forged` reason, strict no-migration-window back-compat). See
+// `verifyVerdictSignature` / `signVerdict` below for the payload mapping.
+//
+// HONEST RESIDUAL — this is consumer-side only (pattern + exemplar). Unlike
+// the understanding-gate marker, harness does not write this one: the
+// producer is `@lannguyensi/grounding-mcp`, a SEPARATE package/repo (see
+// module doc above). No currently-released producer signs its output, so
+// until a matching grounding-mcp release ships (a tracked cross-repo
+// follow-up), EVERY verdict this consumer reads is "unsigned" and the
+// completion-gate denies it — the SAME strict, no-grace-period POLICY
+// f9485cc7 made (no unsigned marker satisfies the gate). The RECOVERY shape
+// differs, though: f9485cc7's producer and consumer live in this one repo,
+// so an operator hitting that denial has a local fix (`harness approve
+// understanding` / `harness approve branch-protection`, one command, this
+// release). Here the producer is a separate package on its own release
+// cadence, so there is NO operator-side command that resolves the denial —
+// re-running `solution_evaluate` today still yields an unsigned verdict.
+// Operators running this pack should expect the completion-gate to deny
+// universally until the grounding-mcp producer release ships; `harness
+// pause` remains the operator override in the interim.
+// Glob-every-segment / interpreter-runtime-path-construction spellings of
+// the write-guard's residual (see below) are UNCHANGED by this: signing
+// verifies content authenticity of whatever bytes land at the marker path,
+// it does not additionally restrict which write primitives can reach that
+// path (the write-guard already does that, separately, best-effort).
 import * as os from "node:os";
 import * as path from "node:path";
 import { readRegularFileRejectingSymlink } from "../../io/read-regular-file.js";
+import { sha256Hex, signMarker, verifyMarkerSignature, } from "../../runtime/approval-signing.js";
 export const PACK_NAME = "solution-acceptance";
 /**
  * agent-tasks MCP verbs that mark a completion boundary. The gate fires on
@@ -96,6 +126,99 @@ export function resolveProtectedCompletionTools(pack) {
     }
     return [...DEFAULT_PROTECTED_COMPLETION_TOOLS];
 }
+/**
+ * Marker-id namespace the verdict's HMAC signature is bound to (mirrors
+ * `BRANCH_PROTECTION_MARKER_PREFIX` in branch-protection-runtime.ts): a
+ * validly-signed verdict for one id can never be replayed as a validly-
+ * signed verdict — or a validly-signed understanding-gate / branch-
+ * protection marker — for a different id, because `markerId` is bound into
+ * the signed payload (`approval-signing.ts` `canonicalPayload`) and this
+ * prefix keeps the three id spaces disjoint even where the raw ids
+ * (task ids, session ids) could otherwise collide.
+ */
+export const VERDICT_MARKER_ID_PREFIX = "solution-verdict-";
+/** The HMAC markerId for verdict `id` (NOT a filesystem path — see `verdictPathFor` for that). */
+export function verdictMarkerId(id) {
+    return `${VERDICT_MARKER_ID_PREFIX}${id}`;
+}
+/**
+ * Canonical JSON of the verdict fields the signature must bind BEYOND
+ * `(markerId, timestamp, source)` — i.e. the fields `signMarker`'s fixed
+ * `{approvedAt, approvedBy, reportContentHash}` shape has no dedicated slot
+ * for. Reusing that slot for this hash (rather than forking the primitive
+ * to add more parameters, per task scope) means `head` / `ready` /
+ * `confidence` / `blockers` are ALL covered by the signature: mutating any
+ * one of them after signing changes this hash and invalidates the
+ * signature. Fixed key order makes this injective (same argument as
+ * `canonicalPayload` in approval-signing.ts).
+ */
+function verdictContentHash(v) {
+    return sha256Hex(JSON.stringify({ head: v.head, ready: v.ready, confidence: v.confidence, blockers: v.blockers }));
+}
+/**
+ * Sign `verdict`, reusing `signMarker` (`src/runtime/approval-signing.ts`)
+ * unmodified — same crypto as the understanding-gate / branch-protection
+ * markers (harness/f9485cc7). Payload mapping mirrors the approval
+ * marker's shape (`approvedAt`/`approvedBy`/`reportContentHash`) onto the
+ * verdict's own fields:
+ *   - `approvedAt` <- `verdict.timestamp` (when the attestation was made)
+ *   - `approvedBy` <- `verdict.source` (what attests it, e.g. "preflight")
+ *   - `reportContentHash` <- `verdictContentHash(verdict)` (binds
+ *     head/ready/confidence/blockers, the fields signMarker's fixed shape
+ *     has no dedicated slot for)
+ *
+ * NOT wired to any production write path in harness (harness is a pure
+ * CONSUMER of this marker, see module doc) — exported as the pattern +
+ * exemplar a grounding-mcp-side producer change reuses, and used directly
+ * by this module's own tests to construct validly-signed fixtures.
+ *
+ * Load-bearing on the producer side: `signMarker` is called with
+ * `verdictMarkerId(verdict.id)`, while the consumer (`verifyVerdictSignature`
+ * below) verifies with `verdictMarkerId(id)` where `id` is the CALLER's id,
+ * not `verdict.id`. Those two only agree when a mirroring producer sets
+ * `verdict.id` to the EXACT id string the consumer looks the marker up by —
+ * byte-identical, no trimming or case normalization on either side — and the
+ * consumer additionally rejects outright when `verdict.id !== id` even if
+ * the signature itself still verifies (belt-and-braces, see `evaluateGate`).
+ */
+export function signVerdict(generatedDir, verdict) {
+    const signed = signMarker(generatedDir, verdictMarkerId(verdict.id), {
+        approvedAt: verdict.timestamp,
+        approvedBy: verdict.source,
+        reportContentHash: verdictContentHash(verdict),
+    });
+    return { ...verdict, alg: signed.alg, signature: signed.signature };
+}
+/**
+ * Verify `verdict`'s signature, reusing `verifyMarkerSignature` unmodified.
+ * Recomputes `verdictContentHash` from the (possibly tampered) verdict
+ * being checked — the SAME name-mapping `signVerdict` uses — so any
+ * post-signing edit to `head` / `ready` / `confidence` / `blockers` /
+ * `timestamp` / `source` fails verification, not just an edit to
+ * `signature` itself.
+ *
+ * `id` is the CALLER's id — the one `evaluateGate` is actually checking
+ * (`readVerdict`'s lookup key) — NOT `verdict.id` (a field read back out of
+ * the marker BODY, which is exactly the bytes an attacker controls when
+ * copying a validly-signed marker verbatim onto a different id's path).
+ * This mirrors the load-bearing invariant `approval-signing.ts`'s
+ * `signMarker` doc states explicitly: "verification always recomputes the
+ * HMAC using the id the caller is checking, NOT one read back out of the
+ * marker body." Trusting `verdict.id` here would let a byte-for-byte copy
+ * of one id's signed verdict pass verification under a DIFFERENT id's
+ * request, because the copy's `signature` and its own (also-copied)
+ * `verdict.id` field would always agree with each other regardless of which
+ * id actually asked.
+ */
+export function verifyVerdictSignature(generatedDir, id, verdict) {
+    return verifyMarkerSignature(generatedDir, verdictMarkerId(id), {
+        approvedAt: verdict.timestamp,
+        approvedBy: verdict.source,
+        reportContentHash: verdictContentHash(verdict),
+        alg: verdict.alg,
+        signature: verdict.signature,
+    });
+}
 /** Env knob that overrides the verdict directory (mirrors the producer). */
 export const VERDICT_DIR_ENV = "SOLUTION_VERDICT_DIR";
 /**
@@ -207,26 +330,133 @@ export function readVerdict(dir, id) {
             blockers: Array.isArray(parsed.blockers) ? parsed.blockers : [],
             timestamp: typeof parsed.timestamp === "string" ? parsed.timestamp : "",
             source: typeof parsed.source === "string" ? parsed.source : "",
+            // Optional (harness/c7c3f606): absent on a legacy/unsigned producer
+            // marker. `evaluateGate` treats that absence as forged/unsigned, not
+            // as a parse failure — the 7 fields above are still ALL a marker
+            // needs to parse successfully; signing is a separate, later gate.
+            alg: typeof parsed.alg === "string" ? parsed.alg : undefined,
+            signature: typeof parsed.signature === "string" ? parsed.signature : undefined,
         };
     }
     catch {
         return null;
     }
 }
+// `verifyMarkerSignature` (`src/runtime/approval-signing.ts`, NOT modified by
+// this module) returns these exact literal reason strings when `verdict`'s
+// `timestamp` / `source` map onto an empty `approvedAt` / `approvedBy`. That
+// check runs FIRST, before `verifyMarkerSignature` ever looks at `signature`
+// itself — so it fires identically whether the verdict carries NO signature
+// at all (a genuinely legacy/unsigned marker) OR carries a well-formed
+// `alg`/`signature` pair that no longer matches because the blank field was
+// introduced AFTER signing (a forger tampering a real signed verdict to
+// suppress the forged tag: blank `timestamp`, and the "missing approvedAt"
+// short-circuit means the tampered signature is never even compared).
+// `evaluateGate` below carves out ONLY the first case (no signature/alg
+// present at all — the same carve-out shape as `SignatureVerification`'s
+// `kind: "key-unavailable"`); a verdict that carries a signature/alg but
+// still hits this reason falls through to the generic `forged: true`
+// bucket, because "signed, yet a signed field reads blank" is post-signing
+// tampering by construction (harness/c7c3f606 review R2). Matched by exact
+// string since `verifyMarkerSignature` has no `kind` tag for this case; if
+// its wording ever changes, these two constants must move with it.
+const MISSING_APPROVED_AT_REASON = "missing approvedAt";
+const MISSING_APPROVED_BY_REASON = "missing approvedBy";
 /**
- * Evaluate the gate for `id` at `currentHead`. Mirrors grounding-mcp
- * `evaluateGate` EXACTLY: allow iff `verdict.ready === true` AND
- * `verdict.head === currentHead`. `confidence` is INFORMATIONAL ONLY and
- * never gates — a `ready:true confidence:0` verdict at HEAD passes — so the
- * harness consumer stays byte-parity with the producer's `solution_gate`
- * (an operator running `solution_gate` and the harness gate must agree).
+ * Evaluate the gate for `id` at `currentHead`. First verifies the verdict's
+ * HMAC signature (harness/c7c3f606, fail-closed — see `verifyVerdictSignature`);
+ * a verdict that fails this is REJECTED before its `ready` / `head` fields
+ * are ever trusted, with a distinct forged/unsigned reason so an
+ * operator/auditor can tell that apart from the routine "not ready yet" or
+ * "no verdict" cases. Signature verification needs `generatedDir` (the
+ * harness `.generated/` dir holding the shared signing key, NOT the verdict
+ * dir) — `undefined` when it could not be resolved, which fails closed with
+ * its own distinct (non-forged) reason.
+ *
+ * `verifyVerdictSignature` is called with `id` — the CALLER's id, i.e. the
+ * one this function is asked to check — not `verdict.id`. A SECOND,
+ * belt-and-braces check below independently rejects `verdict.id !== id`:
+ * even though the signature check alone already closes the cross-id-replay
+ * hole (a byte-for-byte copy of a validly-signed verdict onto a different
+ * id's path fails signature verification, because the markerId the
+ * signature is bound to no longer matches `id`), the verdict body's `id`
+ * field itself is NOT part of the signed payload (only `timestamp` /
+ * `source` / the head-ready-confidence-blockers content hash are), so it
+ * can drift from the id that was actually verified without invalidating an
+ * otherwise-valid signature. This check makes that drift fail loudly too,
+ * rather than silently ignoring an inconsistency in the body of a verdict
+ * that otherwise passed.
+ *
+ * Once signed and identity-checked, mirrors grounding-mcp `evaluateGate`:
+ * allow iff `verdict.ready === true` AND `verdict.head === currentHead`.
+ * `confidence` is INFORMATIONAL ONLY and never gates — a `ready:true
+ * confidence:0` verdict at HEAD passes — so the harness consumer stays
+ * byte-parity with the producer's `solution_gate` for THAT decision.
+ * Signature verification itself is NOT (yet) mirrored on the producer side
+ * — see module doc, "HONEST RESIDUAL": grounding-mcp's own `solution_gate`
+ * does not enforce this signature, only this harness consumer does, until a
+ * matching producer release ships.
  */
-export function evaluateGate(verdict, currentHead, id) {
+export function evaluateGate(verdict, currentHead, id, generatedDir) {
     if (!verdict) {
         return {
             allowed: false,
             reason: `no solution-acceptance verdict recorded for "${id}" (run mcp__grounding-mcp__solution_evaluate first)`,
             verdict: null,
+            forged: false,
+        };
+    }
+    if (generatedDir === undefined) {
+        return {
+            allowed: false,
+            reason: `cannot resolve harness.generated/ to verify the solution-acceptance verdict signature for "${id}"; treating as unapproved`,
+            verdict,
+            forged: false,
+        };
+    }
+    const verification = verifyVerdictSignature(generatedDir, id, verdict);
+    if (!verification.ok) {
+        if (verification.kind === "key-unavailable") {
+            return {
+                allowed: false,
+                reason: `solution-acceptance verdict for "${id}" could not be verified: ${verification.reason}; treating as unapproved`,
+                verdict,
+                forged: false,
+            };
+        }
+        if ((verification.reason === MISSING_APPROVED_AT_REASON ||
+            verification.reason === MISSING_APPROVED_BY_REASON) &&
+            verdict.signature === undefined &&
+            verdict.alg === undefined) {
+            // Scoped (harness/c7c3f606 review R2 MED): the carve-out applies ONLY
+            // to a verdict that carries NO signature/alg fields at all. A verdict
+            // that DOES carry them but still hits this reason is not "legitimately
+            // malformed" — it is a signature computed over content that now reads
+            // blank, which only happens via post-signing tampering (the blank
+            // field falls through to the generic forged:true branch below instead).
+            return {
+                allowed: false,
+                reason: `solution-acceptance verdict for "${id}" is missing a required field (${verification.reason}); ` +
+                    `treating as unsigned, not forged (a legitimately malformed marker, re-run solution_evaluate)`,
+                verdict,
+                forged: false,
+            };
+        }
+        return {
+            allowed: false,
+            reason: `forged/unsigned solution-acceptance verdict rejected for "${id}": ${verification.reason} ` +
+                `(a producer that does not yet sign verdicts, or a marker written through an unguarded path)`,
+            verdict,
+            forged: true,
+        };
+    }
+    if (verdict.id !== id) {
+        return {
+            allowed: false,
+            reason: `forged/unsigned solution-acceptance verdict rejected for "${id}": verdict body identifies itself ` +
+                `as "${verdict.id}" (cross-id replay of a validly-signed verdict, or a corrupted marker)`,
+            verdict,
+            forged: true,
         };
     }
     if (!verdict.ready) {
@@ -235,6 +465,7 @@ export function evaluateGate(verdict, currentHead, id) {
             allowed: false,
             reason: `solution-acceptance verdict for "${id}" is not ready${why} (fix, then re-run solution_evaluate)`,
             verdict,
+            forged: false,
         };
     }
     if (!currentHead) {
@@ -242,6 +473,7 @@ export function evaluateGate(verdict, currentHead, id) {
             allowed: false,
             reason: `cannot resolve the current git HEAD to confirm the verdict for "${id}" is at HEAD`,
             verdict,
+            forged: false,
         };
     }
     if (verdict.head !== currentHead) {
@@ -249,12 +481,14 @@ export function evaluateGate(verdict, currentHead, id) {
             allowed: false,
             reason: `stale solution-acceptance verdict for "${id}": recorded at ${verdict.head.slice(0, 7)}, current HEAD ${currentHead.slice(0, 7)} (re-run solution_evaluate after the rework)`,
             verdict,
+            forged: false,
         };
     }
     return {
         allowed: true,
         reason: `solution-acceptance verdict for "${id}" is ready at HEAD ${currentHead.slice(0, 7)} (confidence ${Math.round(verdict.confidence * 100)}%)`,
         verdict,
+        forged: false,
     };
 }
 // ── Write-guard target detection ──

package/dist/policy-packs/builtin/solution-acceptance-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"solution-acceptance-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/solution-acceptance-runtime.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,4EAA4E;AAC5E,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,2DAA2D;AAC3D,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,gEAAgE;AAChE,EAAE;AACF,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,gBAAgB;AAEhB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAGhF,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,qBAAqB;CACb,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,yFAAyF,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAgB;IAC9D,MAAM,GAAG,GAAI,IAAI,CAAC,MAAkC,CAAC,4BAA4B,CAAC,CAAC;IACnF,IACE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClB,GAAG,CAAC,MAAM,GAAG,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACvD,CAAC;QACD,OAAO,GAAe,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,kCAAkC,CAAC,CAAC;AACjD,CAAC;AAeD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAwB,EAAE,CAAC,OAAO;IAElC,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,MAAM,IAAI,GACR,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,EAAU;IACjD,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,aAAa;IAC5B,CAAC;IACD,qEAAqE;IACrE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,IAAI,GAAG,+BAA+B,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAqB,CAAC;QAC5D,IACE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,EACjC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC/D,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACvE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAuB,EACvB,WAA0B,EAC1B,EAAU;IAEV,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gDAAgD,EAAE,qDAAqD;YAC/G,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,oCAAoC,EAAE,iBAAiB,GAAG,uCAAuC;YACzG,OAAO;SACR,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mEAAmE,EAAE,cAAc;YAC3F,OAAO;SACR,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,0CAA0C,EAAE,kBAAkB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,kBAAkB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,8CAA8C;YACrL,OAAO;SACR,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,oCAAoC,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;QACnJ,OAAO;KACR,CAAC;AACJ,CAAC;AAED,qCAAqC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,GAAW,EAAE,GAAY;IACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,GAAW;IACnE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,4DAA4D;IAC5D,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,6EAA6E;IAC7E,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,mEAAmE;IACnE,mCAAmC;IACnC,EAAE;IACF,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,6DAA6D;IAC7D,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,gEAAgE;IAChE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"solution-acceptance-runtime.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/solution-acceptance-runtime.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,4EAA4E;AAC5E,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,2DAA2D;AAC3D,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,gEAAgE;AAChE,EAAE;AACF,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,2EAA2E;AAC3E,qEAAqE;AACrE,8DAA8D;AAC9D,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,uDAAuD;AACvD,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,qEAAqE;AAErE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EACL,SAAS,EACT,UAAU,EACV,qBAAqB,GAEtB,MAAM,mCAAmC,CAAC;AAG3C,MAAM,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,qBAAqB;CACb,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,yFAAyF,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAgB;IAC9D,MAAM,GAAG,GAAI,IAAI,CAAC,MAAkC,CAAC,4BAA4B,CAAC,CAAC;IACnF,IACE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClB,GAAG,CAAC,MAAM,GAAG,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACvD,CAAC;QACD,OAAO,GAAe,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,GAAG,kCAAkC,CAAC,CAAC;AACjD,CAAC;AA8BD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAE5D,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,GAAG,wBAAwB,GAAG,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,CAA8D;IACxF,OAAO,SAAS,CACd,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CACjG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,OAAgB;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;QACnE,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC,OAAO,CAAC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,EAAU,EACV,OAAgB;IAEhB,OAAO,qBAAqB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE;QAC9D,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,iBAAiB,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC9C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAwB,EAAE,CAAC,OAAO;IAElC,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,MAAM,IAAI,GACR,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,EAAU;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,EAAU;IACjD,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,aAAa;IAC5B,CAAC;IACD,qEAAqE;IACrE,wEAAwE;IACxE,uDAAuD;IACvD,MAAM,IAAI,GAAG,+BAA+B,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAqB,CAAC;QAC5D,IACE,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,EACjC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACzE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAC/D,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACvE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YAC9D,oEAAoE;YACpE,qEAAqE;YACrE,iEAAiE;YACjE,kEAAkE;YAClE,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC5D,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC/E,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAkCD,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,uEAAuE;AACvE,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,mEAAmE;AACnE,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AACxD,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAuB,EACvB,WAA0B,EAC1B,EAAU,EACV,YAAgC;IAEhC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,gDAAgD,EAAE,qDAAqD;YAC/G,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,8FAA8F,EAAE,2BAA2B;YACnI,OAAO;YACP,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,YAAY,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,YAAY,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,oCAAoC,EAAE,4BAA4B,YAAY,CAAC,MAAM,0BAA0B;gBACvH,OAAO;gBACP,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QACD,IACE,CAAC,YAAY,CAAC,MAAM,KAAK,0BAA0B;YACjD,YAAY,CAAC,MAAM,KAAK,0BAA0B,CAAC;YACrD,OAAO,CAAC,SAAS,KAAK,SAAS;YAC/B,OAAO,CAAC,GAAG,KAAK,SAAS,EACzB,CAAC;YACD,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,kEAAkE;YAClE,wEAAwE;YACxE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EACJ,oCAAoC,EAAE,kCAAkC,YAAY,CAAC,MAAM,KAAK;oBAChG,8FAA8F;gBAChG,OAAO;gBACP,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EACJ,6DAA6D,EAAE,MAAM,YAAY,CAAC,MAAM,GAAG;gBAC3F,6FAA6F;YAC/F,OAAO;YACP,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EACJ,6DAA6D,EAAE,oCAAoC;gBACnG,OAAO,OAAO,CAAC,EAAE,wEAAwE;YAC3F,OAAO;YACP,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,oCAAoC,EAAE,iBAAiB,GAAG,uCAAuC;YACzG,OAAO;YACP,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mEAAmE,EAAE,cAAc;YAC3F,OAAO;YACP,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,0CAA0C,EAAE,kBAAkB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,kBAAkB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,8CAA8C;YACrL,OAAO;YACP,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,oCAAoC,EAAE,sBAAsB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI;QACnJ,OAAO;QACP,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,qCAAqC;AAErC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,GAAW,EAAE,GAAY;IACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,GAAW;IACnE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,4DAA4D;IAC5D,IACE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,6EAA6E;IAC7E,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;IACvE,oEAAoE;IACpE,sEAAsE;IACtE,oEAAoE;IACpE,mEAAmE;IACnE,mCAAmC;IACnC,EAAE;IACF,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,6DAA6D;IAC7D,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,gEAAgE;IAChE,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/policy-packs/builtin/solution-acceptance.js

@@ -113,6 +113,21 @@ function buildHooks(runtime, tools, opts = {}) {
 }
 function buildInstructions(pack, tools, runtime) {
     const description = pack.description?.trim() ?? "";
+    const isOpencode = runtime === "opencode";
+    // HIGH-F1 (batch18 fix-round, task f34eb233): unlike the sibling
+    // packs, this file previously had NO runtime-conditional text at all
+    // — "## Effect" unconditionally claimed the hooks below "are wired
+    // into the harness-managed settings", which is false under
+    // `--runtime opencode`: opencode has no declarative hook/event field
+    // and `harness apply --runtime opencode` never projects `hooks[]`
+    // into the generated opencode artefact (see runtime.ts's header).
+    // Mirrors post-merge-gate.ts's "## Runtime" UNSUPPORTED marker.
+    const runtimeUnsupportedNote = isOpencode
+        ? " (UNSUPPORTED — opencode has no declarative hook/event wiring; this pack's hooks are not projected into any opencode artefact)"
+        : "";
+    const wiringSentence = isOpencode
+        ? "This pack's hooks are **not wired** under `--runtime opencode`: opencode has no declarative hook/event field (only a JS/TS plugin API), and `harness apply --runtime opencode` never projects `hooks[]` into the generated opencode artefact. The mechanics below describe the Claude Code / Codex behavior this pack implements; none of it fires today under opencode."
+        : "Two `PreToolUse` hooks (both blocking: hard) are wired into the\nharness-managed settings:";
     return `# Policy Pack: ${PACK_NAME}
 
 > Operator audit copy. This pack makes task completion EARNED from a real
@@ -122,7 +137,7 @@ function buildInstructions(pack, tools, runtime) {
 
 ## Runtime
 
-${runtime}
+${runtime}${runtimeUnsupportedNote}
 
 ## Producer (required)
 
@@ -138,8 +153,7 @@ deadlock; \`harness validate\` / \`harness doctor\` warn about this.
 
 ## Effect
 
-Two \`PreToolUse\` hooks (both blocking: hard) are wired into the
-harness-managed settings:
+${wiringSentence}
 
 1. \`completion-gate\` (\`${COMPLETION_BLOCKER_COMMAND}\`): denies the
    completion verbs unless a READY verdict exists at the CURRENT git HEAD.

package/dist/policy-packs/builtin/solution-acceptance.js.map

@@ -1 +1 @@
-{"version":3,"file":"solution-acceptance.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/solution-acceptance.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,6DAA6D;AAC7D,EAAE;AACF,+CAA+C;AAC/C,EAAE;AACF,6EAA6E;AAC7E,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,EAAE;AACF,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,sDAAsD;AACtD,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,mBAAmB;AAEnB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,SAAS,EACT,+BAA+B,EAC/B,eAAe,GAChB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,mEAAmE;IACnE,kEAAkE;IAClE,wEAAwE;IACxE,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,qEAAqE;IACrE,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,0BAA0B,GAAG,uCAAuC,CAAC;AAC3E,MAAM,0BAA0B,GAAG,kDAAkD,CAAC;AAEtF,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD,SAAS,2BAA2B,CAClC,OAAe,EACf,UAA8B;IAE9B,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,GAAG,wBAAwB,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,uBAAuB,GAAG,wCAAwC,CAAC;AACzE,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAElD;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,OAAgB,EAAE,KAAwB;IACjE,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,QAAQ,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,KAAwB,EACxB,OAA2B,EAAE;IAE7B,MAAM,eAAe,GACnB,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CACnC,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5D,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,kBAAkB;YAC3C,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC;YACtC,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EACT,4LAA4L;SAC/L;QACD;YACE,IAAI,EAAE,GAAG,gBAAgB,cAAc;YACvC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EACT,2QAA2Q;SAC9Q;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAgB,EAChB,KAAwB,EACxB,OAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,OAAO,kBAAkB,SAAS;;;;;;;;;EASlC,OAAO;;;;;;;;;;;;;;;;;;;4BAmBmB,0BAA0B;;kBAEpC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;wBAKjC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ChD,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;CACrB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe,EAClC,OAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;SACjD;KACF,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"solution-acceptance.js","sourceRoot":"","sources":["../../../src/policy-packs/builtin/solution-acceptance.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,6DAA6D;AAC7D,EAAE;AACF,+CAA+C;AAC/C,EAAE;AACF,6EAA6E;AAC7E,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,4DAA4D;AAC5D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,EAAE;AACF,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,sDAAsD;AACtD,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,mBAAmB;AAEnB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAgB,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,SAAS,EACT,+BAA+B,EAC/B,eAAe,GAChB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,mEAAmE;IACnE,kEAAkE;IAClE,wEAAwE;IACxE,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,qEAAqE;IACrE,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,gBAAgB,GAAG,eAAe,SAAS,EAAE,CAAC;AAEpD,MAAM,0BAA0B,GAAG,uCAAuC,CAAC;AAC3E,MAAM,0BAA0B,GAAG,kDAAkD,CAAC;AAEtF,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEjD,SAAS,2BAA2B,CAClC,OAAe,EACf,UAA8B;IAE9B,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,GAAG,wBAAwB,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,uBAAuB,GAAG,wCAAwC,CAAC;AACzE,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAElD;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,OAAgB,EAAE,KAAwB;IACjE,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,QAAQ,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,KAAwB,EACxB,OAA2B,EAAE;IAE7B,MAAM,eAAe,GACnB,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CACnC,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5D,OAAO;QACL;YACE,IAAI,EAAE,GAAG,gBAAgB,kBAAkB;YAC3C,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC;YACtC,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EACT,4LAA4L;SAC/L;QACD;YACE,IAAI,EAAE,GAAG,gBAAgB,cAAc;YACvC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAI;YACf,WAAW,EACT,2QAA2Q;SAC9Q;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAgB,EAChB,KAAwB,EACxB,OAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,KAAK,UAAU,CAAC;IAC1C,iEAAiE;IACjE,qEAAqE;IACrE,mEAAmE;IACnE,2DAA2D;IAC3D,qEAAqE;IACrE,kEAAkE;IAClE,kEAAkE;IAClE,gEAAgE;IAChE,MAAM,sBAAsB,GAAG,UAAU;QACvC,CAAC,CAAC,gIAAgI;QAClI,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC,0WAA0W;QAC5W,CAAC,CAAC,4FAA4F,CAAC;IACjG,OAAO,kBAAkB,SAAS;;;;;;;;;EASlC,OAAO,GAAG,sBAAsB;;;;;;;;;;;;;;;;EAgBhC,cAAc;;4BAEY,0BAA0B;;kBAEpC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;wBAKjC,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0ChD,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;;YAEtD,SAAS;eACN,OAAO;CACrB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAgB,EAChB,UAAmB,eAAe,EAClC,OAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAA2B;QACpC;YACE,YAAY,EAAE,gBAAgB,SAAS,kBAAkB;YACzD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;SACjD;KACF,CAAC;IACF,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC"}

package/dist/policy-packs/builtin/understanding-before-execution/active-claim.d.ts

@@ -0,0 +1,25 @@
+export declare const ACTIVE_CLAIM_FILENAME = "active-claim";
+export declare function activeClaimPathFor(generatedDir: string): string;
+/**
+ * Hook-side: write the active claim file. Atomic. Called from the
+ * track-active-claim PostToolUse hook on `task_start`. The body is
+ * just the taskId (no JSON) so an operator running
+ * `cat ~/.claude/harness.generated/active-claim` sees the id directly.
+ */
+export declare function writeActiveClaim(generatedDir: string, taskId: string): string;
+/**
+ * Operator-side: read the active claim file. Returns the taskId or
+ * null when the file is absent / unreadable / empty. `harness approve
+ * understanding` calls this when --task is absent, then passes the
+ * resolved id to writeTaskApprovalMarker.
+ *
+ * Defense-in-depth: if the on-disk content fails the same
+ * path-traversal / newline check that gates writes, the read returns
+ * null instead of surfacing a poisoned id. The write side guards
+ * against a malformed taskId reaching the file in the first place,
+ * but a stale file authored before this guard (or hand-edited)
+ * shouldn't escalate into a forged task-marker write downstream.
+ */
+export declare function readActiveClaim(generatedDir: string): string | null;
+/** Hook-side: remove the active claim file. Idempotent. */
+export declare function clearActiveClaim(generatedDir: string): void;