@mikeargento/bitgraph-player 0.7.0 → 0.8.0

package/dist/__tests__/fuse-check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fuse-check.test.d.ts.map

package/dist/__tests__/fuse-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse-check.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/fuse-check.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/fuse-check.test.js

@@ -0,0 +1,152 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+/**
+ * `check` over fused recordings (profile bitgraph-fuse/1, working name).
+ * Fixtures are real proofs minted through the local enclave harness
+ * (real signatures, fake PCR0), read-only here; no ledger, no network.
+ */
+import { describe, it } from "node:test";
+import * as assert from "node:assert/strict";
+import { readFile, mkdtemp, writeFile, rm, mkdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { ingestBundle, ingestEntries } from "@mikeargento/bitgraph-audit";
+import { checkIngest, fusedFloor, renderCheckText, serializeCheckReport } from "../check.js";
+const FIX = fileURLToPath(new URL("../../../../src/__tests__/fuse-fixtures/", import.meta.url));
+const read = (name) => readFile(join(FIX, name)).then((b) => new Uint8Array(b));
+async function entries(spec) {
+    const out = [];
+    for (const [path, fixture] of Object.entries(spec)) {
+        const bytes = await read(fixture);
+        out.push({ path, open: () => bytes });
+    }
+    return out;
+}
+describe("fused recordings in check", () => {
+    it("fused bytes beside the proof: fused line TRUE, floor undetermined without anchors, statements carried", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "trailer.proof.json", "photo.bin": "fused-trailer.bin" })));
+        assert.equal(report.recordings.length, 1);
+        const rec = report.recordings[0];
+        const fused = rec.lines.find((l) => l.name === "fused");
+        assert.ok(fused, "a fused line exists");
+        assert.equal(fused.result, "TRUE", fused.detail);
+        assert.equal(rec.lines.find((l) => l.name === "file")?.result, "TRUE");
+        assert.equal(rec.lines.find((l) => l.name === "signature")?.result, "TRUE");
+        assert.ok(rec.fused);
+        assert.equal(rec.fused.category, "FUSED_DIRECT");
+        assert.equal(rec.fused.evidence, "fused-bytes");
+        assert.equal(rec.fused.placement, "trailer/1");
+        assert.equal(rec.fused.floor, null);
+        assert.match(rec.fused.floorDetail, /floor undetermined: no anchor precedes this slot in its epoch/);
+        assert.equal(rec.fused.statements.length, 2);
+        assert.match(rec.fused.statements[1], /at position \d+, and were committed no later than position \d+/);
+        assert.ok(rec.fused.span && BigInt(rec.fused.span.positions) >= 1n);
+        // The harness attests with a fake document, so the attestation line is FALSE
+        // here; that is the harness, not the fused check, and it is reported on its
+        // own line. The fused line above stands regardless.
+        assert.notEqual(rec.lines.find((l) => l.name === "attestation")?.result, "TRUE");
+        const text = renderCheckText(report);
+        assert.match(text, /fused floor floor undetermined/);
+        assert.match(text, /fused span  slot \d+ to commit \d+/);
+    });
+    it("the original beside the proof: rebuilt, fused line TRUE, the original is noted as such and not as unmatched", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "trailer.proof.json", "original.txt": "original.txt" })));
+        const rec = report.recordings[0];
+        const fused = rec.lines.find((l) => l.name === "fused");
+        assert.equal(fused.result, "TRUE", fused.detail);
+        assert.equal(rec.fused.category, "FUSED_FROM_ORIGIN");
+        assert.equal(rec.fused.evidence, "original");
+        // The committed bytes are not in hand, so the file line stays UNDETERMINED: the
+        // original receives the ceiling, the fused bytes the interval.
+        assert.equal(rec.lines.find((l) => l.name === "file")?.result, "UNDETERMINED");
+        assert.ok(report.notes.some((n) => /original of a fused recording: original\.txt/.test(n)), report.notes.join(" | "));
+        assert.ok(!report.notes.some((n) => /matches no recording here: original\.txt/.test(n)), "the original is not called unmatched");
+    });
+    it("neither bytes present: fused line UNDETERMINED, never FALSE", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "trailer.proof.json" })));
+        const rec = report.recordings[0];
+        const fused = rec.lines.find((l) => l.name === "fused");
+        assert.equal(fused.result, "UNDETERMINED");
+        assert.match(fused.detail, /neither the fused bytes nor the original/);
+        assert.equal(rec.fused.category, "NO_EVIDENCE");
+        assert.equal(rec.fused.evidence, null);
+    });
+    it("a file committed under a different slot than its commitment names: fused line FALSE", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "wrong-slot.proof.json", "photo.bin": "fused-wrong-slot.bin" })));
+        const rec = report.recordings[0];
+        assert.equal(rec.lines.find((l) => l.name === "fused")?.result, "FALSE");
+        assert.equal(rec.fused.category, "INVALID_SLOT_COMMITMENT");
+        assert.equal(report.result, "FALSE");
+    });
+    it("an unregistered placement: UNDETERMINED with the placement named", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "unregistered.proof.json", "photo.bin": "fused-unregistered.bin" })));
+        const rec = report.recordings[0];
+        const fused = rec.lines.find((l) => l.name === "fused");
+        assert.equal(fused.result, "UNDETERMINED");
+        assert.match(fused.detail, /xmp\/9/);
+    });
+    it("an ordinary recording has no fused line and no fused block", async () => {
+        const report = await checkIngest(await ingestEntries(await entries({ "proof.json": "recorded.proof.json", "original.txt": "original.txt" })));
+        const rec = report.recordings[0];
+        assert.equal(rec.lines.find((l) => l.name === "fused"), undefined);
+        assert.equal(rec.fused, undefined);
+        assert.equal(rec.lines.find((l) => l.name === "file")?.result, "TRUE");
+    });
+    it("container/1 from the PNG alone and produced/1 from its own bytes", async () => {
+        const a = await checkIngest(await ingestEntries(await entries({ "proof.json": "container.proof.json", "image.png": "image.png" })));
+        assert.equal(a.recordings[0].fused.category, "FUSED_FROM_ORIGIN");
+        assert.equal(a.recordings[0].fused.placement, "container/1");
+        const b = await checkIngest(await ingestEntries(await entries({ "proof.json": "produced-origin.proof.json", "record.json": "produced-origin.json" })));
+        assert.equal(b.recordings[0].fused.category, "FUSED_DIRECT");
+        assert.equal(b.recordings[0].fused.placement, "produced/1");
+    });
+    it("disk and memory ingests of the same fused bundle give byte-identical reports", async () => {
+        const dir = await mkdtemp(join(tmpdir(), "bitgraph-fuse-check-"));
+        try {
+            await mkdir(dir, { recursive: true });
+            await writeFile(join(dir, "proof.json"), await read("trailer.proof.json"));
+            await writeFile(join(dir, "original.txt"), await read("original.txt"));
+            const fromDisk = await checkIngest(await ingestBundle(dir));
+            const fromMemory = await checkIngest(await ingestEntries(await entries({ "proof.json": "trailer.proof.json", "original.txt": "original.txt" })));
+            assert.equal(serializeCheckReport(fromDisk), serializeCheckReport(fromMemory));
+            assert.equal(fromDisk.recordings[0].fused.category, "FUSED_FROM_ORIGIN");
+        }
+        finally {
+            await rm(dir, { recursive: true, force: true });
+        }
+    });
+});
+describe("fusedFloor", () => {
+    const bound = (anchorProofHash, blockNumber, timestamp) => ({
+        kind: "not-before", anchorProofHash, blockNumber, blockHash: "0x" + "ab".repeat(32), timestamp,
+        evidence: "counter-order", weaker: true, basis: "block-hash-unpredictability", boundClass: "evidence", claim: "",
+    });
+    const anchor = (proofHash, counter) => ({ proofHash, chainId: "bitgraph:main", counter, metadataCorroboration: "absent" });
+    const segment = (lower) => ({ lowerBounds: lower });
+    it("picks the last verified anchor whose counter precedes the SLOT, not the commit", () => {
+        const anchors = new Map([["a1", anchor("a1", "10")], ["a2", anchor("a2", "40")], ["a3", anchor("a3", "45")]]);
+        const seg = segment([bound("a1", "100", 1000), bound("a2", "200", 2000), bound("a3", "300", 3000)]);
+        // slot 42, commit 50: a3 (counter 45) precedes the commit but not the slot.
+        const floor = fusedFloor(seg, anchors, "42");
+        assert.equal(floor?.anchorProofHash, "a2");
+        assert.equal(floor?.blockNumber, "200");
+        assert.equal(floor?.evidence, "counter-order");
+    });
+    it("no anchor before the slot: null (UNDET), never a following anchor", () => {
+        const anchors = new Map([["a3", anchor("a3", "45")]]);
+        assert.equal(fusedFloor(segment([bound("a3", "300", 3000)]), anchors, "42"), null);
+        assert.equal(fusedFloor(undefined, anchors, "42"), null);
+        assert.equal(fusedFloor(segment([bound("a3", "300", 3000)]), anchors, undefined), null);
+    });
+    it("a slot off the anchored chain has no floor", () => {
+        const anchors = new Map([["a1", anchor("a1", "10")]]);
+        assert.equal(fusedFloor(segment([bound("a1", "100", 1000)]), anchors, "42", "global"), null);
+        assert.equal(fusedFloor(segment([bound("a1", "100", 1000)]), anchors, "42", "bitgraph:main")?.anchorProofHash, "a1");
+    });
+    it("only not-before bounds count; not-after bounds are never a ceiling", () => {
+        const anchors = new Map([["a9", anchor("a9", "5")]]);
+        const after = { ...bound("a9", "900", 9000), kind: "not-after" };
+        assert.equal(fusedFloor(segment([after]), anchors, "42"), null);
+    });
+});
+//# sourceMappingURL=fuse-check.test.js.map

package/dist/__tests__/fuse-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fuse-check.test.js","sourceRoot":"","sources":["../../src/__tests__/fuse-check.test.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE7F,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,0CAA0C,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAChG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAExF,KAAK,UAAU,OAAO,CAAC,IAA4B;IACjD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,uGAAuG,EAAE,KAAK,IAAI,EAAE;QACrH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/I,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAM,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5E,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,WAAW,EAAE,+DAA+D,CAAC,CAAC;QACtG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,gEAAgE,CAAC,CAAC;QAC1G,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,KAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,6EAA6E;QAC7E,4EAA4E;QAC5E,oDAAoD;QACpD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,KAAK,IAAI,EAAE;QAC3H,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7I,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,gFAAgF;QAChF,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtH,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7G,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,uBAAuB,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC;QACrJ,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,yBAAyB,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,CAAC;QACzJ,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9I,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACpI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,4BAA4B,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC;QACvJ,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;YACjJ,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,KAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,MAAM,KAAK,GAAG,CAAC,eAAuB,EAAE,WAAmB,EAAE,SAAiB,EAAgB,EAAE,CAAC,CAAC;QAChG,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS;QAC9F,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;KACjH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAgB,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAA8B,CAAA,CAAC;IACpL,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAmB,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAiC,CAAA,CAAC;IAEnH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACpG,4EAA4E;QAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAiB,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/check.d.ts

@@ -50,7 +50,8 @@
  * no run-local value; bundle-relative entry paths are bundle content and
  * are allowed. Same bundle bytes, same report bytes.
  */
-import type { AuditResult, IngestResult } from "@mikeargento/bitgraph-audit";
+import type { AnchorRecord, AuditResult, IngestResult, TemporalSegment } from "@mikeargento/bitgraph-audit";
+import type { FuseVerifyResult } from "@mikeargento/bitgraph-verify";
 import type { ThreeValued } from "./types.js";
 /**
  * Published BitGraph enclave PCR0 measurements, per PINS.md, oldest first.
@@ -65,7 +66,7 @@ export declare const KNOWN_ENCLAVE_MEASUREMENTS: ReadonlyArray<{
 }>;
 /** One checked property, three-valued, with a plain-language reason. */
 export interface CheckLine {
-    name: "file" | "signature" | "attestation" | "enclave" | "witness" | "contradiction" | "domain";
+    name: "file" | "signature" | "attestation" | "enclave" | "witness" | "contradiction" | "domain" | "fused";
     result: ThreeValued;
     detail: string;
 }
@@ -85,6 +86,38 @@ export interface CheckBounds {
     notAfter?: CheckBound;
     detail: string;
 }
+/**
+ * The wall-clock floor of a fused artifact: the last verified anchored
+ * block preceding its SLOT counter in the same epoch chain. Counter-order
+ * evidence by construction (no hash path reaches a slot record), reported
+ * with the same "genuine block" assumption as every other bound.
+ */
+export interface CheckFloor {
+    blockNumber?: string;
+    blockHash: string;
+    /** Unix seconds from the verified block header. */
+    timestamp: number;
+    anchorProofHash: string;
+    evidence: "counter-order";
+}
+/** What the bundle establishes about a recording marked fused (profile bitgraph-fuse/1, working name). */
+export interface CheckFused {
+    category: FuseVerifyResult["category"] | "NO_EVIDENCE";
+    placement: string | null;
+    originDigestB64: string | null;
+    /** Which bytes in the bundle the commitment check ran against. */
+    evidence: "fused-bytes" | "original" | null;
+    /** The bounded statements, carrying the floor clause when a floor exists. */
+    statements: string[];
+    floor: CheckFloor | null;
+    floorDetail: string;
+    /** The causal span [N, M]. */
+    span: {
+        slotCounter: string;
+        commitCounter: string;
+        positions: string;
+    } | null;
+}
 /** A non-anchor recording in the bundle. */
 export interface CheckRecording {
     proofHash: string;
@@ -100,6 +133,8 @@ export interface CheckRecording {
     /** Kleene all over `lines`. */
     result: ThreeValued;
     bounds: CheckBounds;
+    /** Present exactly when the proof's signed attribution marks it fused. */
+    fused?: CheckFused;
 }
 /** An Ethereum anchor recording in the bundle. */
 export interface CheckAnchor {
@@ -184,6 +219,14 @@ export interface CheckOptions {
      * embedders may supply additional candidates.
      */
     sigEvidence?: ReadonlyMap<string, Uint8Array>;
+    /**
+     * Fuse evidence by proofHash: the verifyFuse result over the fused bytes
+     * (preferred) or the original, whichever the bundle holds. checkIngest
+     * collects this from the bundle; embedders may supply it.
+     */
+    fuseEvidence?: ReadonlyMap<string, FuseVerifyResult>;
+    /** Content hashes (hex) of files that served as the original of a fused recording; not "unmatched". */
+    fuseOriginHexes?: ReadonlySet<string>;
 }
 /**
  * Check an already-ingested bundle: runs the audit's pure tail (no
@@ -193,6 +236,14 @@ export interface CheckOptions {
 export declare function checkIngest(ingest: IngestResult, options?: CheckOptions): Promise<CheckReport>;
 /** The pure report builder over an AuditResult. */
 export declare function buildCheckReport(audit: AuditResult, options?: CheckOptions): CheckReport;
+/**
+ * The fused floor: among the segment's verified not-before anchors, those
+ * whose commit counter precedes the SLOT counter, tightest last (largest
+ * block number, else latest timestamp). Null when no verified anchor
+ * precedes the slot in its epoch chain.
+ */
+export declare const ANCHORED_CHAIN = "bitgraph:main";
+export declare function fusedFloor(segment: TemporalSegment | undefined, anchorByHash: ReadonlyMap<string, AnchorRecord> | undefined, slotCounter: string | undefined, chainId?: string): CheckFloor | null;
 export declare function renderCheckText(report: CheckReport): string;
 /** Deterministic JSON bytes for the report: two-space indent, one trailing newline. */
 export declare function serializeCheckReport(report: CheckReport): string;

package/dist/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAEV,WAAW,EAEX,YAAY,EAKb,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBrG,CAAC;AAMF,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,GAAG,QAAQ,CAAC;IAChG,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,YAAY,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,qCAAqC,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACjG,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC/C,uEAAuE;IACvE,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1G;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAC/C;AAwBD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAepG;AAED,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CA4ExF;AAylBD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CA0C3D;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,YAAY,EAIZ,eAAe,EAChB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAS9C;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBrG,CAAC;AAMF,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC1G,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,YAAY,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,qCAAqC,GAAG,eAAe,GAAG,eAAe,GAAG,YAAY,CAAC;IACjG,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED,0GAA0G;AAC1G,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC;IACvD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,EAAE,aAAa,GAAG,UAAU,GAAG,IAAI,CAAC;IAC5C,6EAA6E;IAC7E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAChF;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,+BAA+B;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IAC/C,uEAAuE;IACvE,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,gFAAgF;IAChF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD;;;;OAIG;IACH,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1G;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C;;;;OAIG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACrD,uGAAuG;IACvG,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC;AAwBD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAmBpG;AA8CD,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CA8ExF;AAmID;;;;;GAKG;AACH,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAE9C,wBAAgB,UAAU,CACxB,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,SAAS,EAC3D,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,GAAE,MAAuB,GAC/B,UAAU,GAAG,IAAI,CAyBnB;AAgjBD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CA+C3D;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE"}

package/dist/check.js

@@ -1,5 +1,6 @@
 // Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
-import { auditIngest, AUDIT_VERSION, streamMatchedArtifacts } from "@mikeargento/bitgraph-audit";
+import { auditIngest, AUDIT_VERSION, streamMatchedArtifacts, streamArtifactsByHash } from "@mikeargento/bitgraph-audit";
+import { readFuseAttribution, verifyFuse, base64ToBytes, bytesToHex, resetEpochLinkState } from "@mikeargento/bitgraph-verify";
 import { SIG_EVIDENCE_MAX_BYTES } from "./types.js";
 import { kleeneAll } from "./logic.js";
 import { PLAYER_VERSION } from "./verdict.js";
@@ -74,8 +75,61 @@ export async function checkIngest(ingest, options) {
         opts = { ...opts, sigEvidence: collected };
     }
     const audit = await auditIngest(ingest, { startedAt: "" });
+    if (opts?.fuseEvidence === undefined) {
+        const collected = await collectFuseEvidence(ingest);
+        opts = { ...opts, fuseEvidence: collected.evidence, fuseOriginHexes: collected.originHexes };
+    }
     return buildCheckReport(audit, opts);
 }
+/**
+ * For every proof marked fused, find the bytes the check can run against:
+ * the committed (fused) bytes if the bundle holds them, else the original
+ * named by the signed origin digest. Runs after the audit pass and resets
+ * the verify library's epoch-link state around its own verifications.
+ */
+async function collectFuseEvidence(ingest) {
+    const evidence = new Map();
+    const originHexes = new Set();
+    const wanted = [];
+    const hexes = new Set();
+    for (const proof of ingest.proofs) {
+        const marker = readFuseAttribution(proof.proof);
+        if (marker === null)
+            continue;
+        const artifactBytes = base64ToBytes(proof.proof.artifact.digestB64);
+        const artifactHex = artifactBytes !== null ? bytesToHex(artifactBytes) : null;
+        const originHex = marker.originDigest !== undefined ? bytesToHex(marker.originDigest) : null;
+        wanted.push({ proof, artifactHex, originHex });
+        if (artifactHex !== null)
+            hexes.add(artifactHex);
+        if (originHex !== null)
+            hexes.add(originHex);
+    }
+    if (wanted.length === 0)
+        return { evidence, originHexes };
+    const bytesByHex = new Map();
+    for await (const artifact of streamArtifactsByHash(ingest, hexes)) {
+        if (!bytesByHex.has(artifact.sha256Hex))
+            bytesByHex.set(artifact.sha256Hex, artifact.bytes);
+    }
+    resetEpochLinkState();
+    try {
+        for (const w of wanted) {
+            const direct = w.artifactHex !== null ? bytesByHex.get(w.artifactHex) : undefined;
+            const original = w.originHex !== null ? bytesByHex.get(w.originHex) : undefined;
+            if (original !== undefined && w.originHex !== null)
+                originHexes.add(w.originHex);
+            const bytes = direct ?? original;
+            if (bytes === undefined)
+                continue;
+            evidence.set(w.proof.proofHash, await verifyFuse({ proof: w.proof.proof, bytes }));
+        }
+    }
+    finally {
+        resetEpochLinkState();
+    }
+    return { evidence, originHexes };
+}
 /** The pure report builder over an AuditResult. */
 export function buildCheckReport(audit, options) {
     const webCrypto = options?.webCryptoAvailable ?? true;
@@ -110,13 +164,13 @@ export function buildCheckReport(audit, options) {
             anchors.push(buildAnchor(proof, anchor, witnessOutcomesByAnchor.get(proof.proofHash) ?? []));
         }
         else {
-            recordings.push(buildRecording(proof, attestationByHash.get(proof.proofHash), segmentByHash.get(proof.proofHash), artifactPathByProof.get(proof.proofHash), webCrypto, options?.from, options?.sigEvidence));
+            recordings.push(buildRecording(proof, attestationByHash.get(proof.proofHash), segmentByHash.get(proof.proofHash), artifactPathByProof.get(proof.proofHash), webCrypto, options?.from, options?.sigEvidence, options?.fuseEvidence, anchorByHash));
         }
     }
     sortByPosition(recordings);
     sortByPosition(anchors);
     const contradictions = collectContradictions(audit);
-    const notes = collectNotes(audit, recordings, anchors);
+    const notes = collectNotes(audit, recordings, anchors, options?.fuseOriginHexes);
     const notChecked = collectNotChecked(anchors.length > 0, options?.from?.domain);
     const allLines = [
         ...recordings.map((r) => r.result),
@@ -164,7 +218,7 @@ function sortByPosition(items) {
 // ---------------------------------------------------------------------------
 // Recordings
 // ---------------------------------------------------------------------------
-function buildRecording(proof, attestation, segment, filePath, webCrypto, from, sigEvidence) {
+function buildRecording(proof, attestation, segment, filePath, webCrypto, from, sigEvidence, fuseEvidence, anchorByHash) {
     const lines = [];
     const v = proof.verification;
     const digestB64 = proof.proof.artifact.digestB64;
@@ -224,6 +278,18 @@ function buildRecording(proof, attestation, segment, filePath, webCrypto, from,
         const verified = v !== undefined && v.status !== "failed";
         lines.push(domainLine(proof, verified, from, sigEvidence ?? EMPTY_EVIDENCE));
     }
+    // fused: the proof's signed attribution marks a fused artifact (profile
+    // bitgraph-fuse/1). The commitment check runs over the fused bytes, or
+    // over the original by reconstruction; its floor is the last verified
+    // anchor preceding the SLOT, not the commit.
+    const marker = readFuseAttribution(proof.proof);
+    let fused;
+    if (marker !== null) {
+        const floor = fusedFloor(segment, anchorByHash, proof.slotCounter, proof.chainId);
+        const built = fusedLine(marker.placement, marker.originDigest !== undefined ? proof.proof.attribution?.message ?? null : null, fuseEvidence?.get(proof.proofHash), floor, proof);
+        lines.push(built.line);
+        fused = built.fused;
+    }
     const result = kleeneAll(lines.map((l) => l.result));
     return {
         proofHash: proof.proofHash,
@@ -237,8 +303,107 @@ function buildRecording(proof, attestation, segment, filePath, webCrypto, from,
         lines,
         result,
         bounds: boundsFor(segment),
+        ...(fused !== undefined ? { fused } : {}),
+    };
+}
+/**
+ * The fused floor: among the segment's verified not-before anchors, those
+ * whose commit counter precedes the SLOT counter, tightest last (largest
+ * block number, else latest timestamp). Null when no verified anchor
+ * precedes the slot in its epoch chain.
+ */
+export const ANCHORED_CHAIN = "bitgraph:main";
+export function fusedFloor(segment, anchorByHash, slotCounter, chainId = ANCHORED_CHAIN) {
+    // Anchors exist only on the anchored chain and the anchor index carries no
+    // chain segment, so a slot on any other chain compares to nothing.
+    if (chainId !== ANCHORED_CHAIN)
+        return null;
+    if (segment === undefined || anchorByHash === undefined || slotCounter === undefined || !/^[0-9]+$/.test(slotCounter))
+        return null;
+    const slot = BigInt(slotCounter);
+    let best;
+    for (const b of segment.lowerBounds) {
+        if (b.kind !== "not-before")
+            continue;
+        const anchor = anchorByHash.get(b.anchorProofHash);
+        if (anchor === undefined || anchor.counter === undefined || !/^[0-9]+$/.test(anchor.counter))
+            continue;
+        if (BigInt(anchor.counter) >= slot)
+            continue;
+        if (best === undefined) {
+            best = b;
+            continue;
+        }
+        const bn = b.blockNumber !== undefined ? BigInt(b.blockNumber) : BigInt(b.timestamp);
+        const bb = best.blockNumber !== undefined ? BigInt(best.blockNumber) : BigInt(best.timestamp);
+        if (bn > bb)
+            best = b;
+    }
+    if (best === undefined)
+        return null;
+    return {
+        ...(best.blockNumber !== undefined ? { blockNumber: best.blockNumber } : {}),
+        blockHash: best.blockHash,
+        timestamp: best.timestamp,
+        anchorProofHash: best.anchorProofHash,
+        evidence: "counter-order",
     };
 }
+const FLOOR_UNDETERMINED = "floor undetermined: no anchor precedes this slot in its epoch";
+function floorClause(floor) {
+    const block = floor.blockNumber !== undefined ? `#${floor.blockNumber}` : floor.blockHash;
+    return `anchored block ${block} (${new Date(floor.timestamp * 1000).toISOString()})`;
+}
+function fusedLine(placement, originMessage, ev, floor, proof) {
+    const slot = proof.slotCounter ?? "?";
+    const where = placement !== null ? ` (placement ${placement})` : " (placement undeclared)";
+    const floorDetail = floor !== null
+        ? `assembled after ${floorClause(floor)}, the last verified anchor preceding slot ${slot} in this epoch`
+        : proof.chainId !== ANCHORED_CHAIN
+            ? `floor undetermined: the slot is on chain "${proof.chainId}", not the anchored chain`
+            : FLOOR_UNDETERMINED;
+    const span = ev?.span !== undefined && ev.span !== null
+        ? { slotCounter: ev.span.slotCounter, commitCounter: ev.span.commitCounter, positions: ev.span.positions }
+        : proof.slotCounter !== undefined && proof.counter !== undefined
+            ? { slotCounter: proof.slotCounter, commitCounter: proof.counter, positions: (BigInt(proof.counter) - BigInt(proof.slotCounter)).toString() }
+            : null;
+    const statements = (ev?.statements ?? []).map((s) => floor !== null ? s.replace(`at position ${slot},`, `at position ${slot}, which followed ${floorClause(floor)},`) : s);
+    const base = (category, evidence) => ({
+        category,
+        placement: ev?.placement ?? placement,
+        originDigestB64: ev?.originDigestB64 ?? originMessage,
+        evidence,
+        statements,
+        floor,
+        floorDetail,
+        span,
+    });
+    if (ev === undefined) {
+        return {
+            line: { name: "fused", result: "UNDETERMINED", detail: `marked fused${where}, but neither the fused bytes nor ${originMessage !== null ? "the original" : "an original"} is in this bundle, so the commitment to slot ${slot} cannot be checked` },
+            fused: base("NO_EVIDENCE", null),
+        };
+    }
+    const evidence = ev.category === "FUSED_FROM_ORIGIN" || (ev.fileDigestB64 !== ev.artifactDigestB64 && ev.category !== "NO_MATCH") ? "original" : "fused-bytes";
+    switch (ev.category) {
+        case "FUSED_DIRECT":
+            return { line: { name: "fused", result: "TRUE", detail: `the fused bytes carry the commitment to slot ${slot}${where}` }, fused: base(ev.category, "fused-bytes") };
+        case "FUSED_FROM_ORIGIN":
+            return { line: { name: "fused", result: "TRUE", detail: `the original rebuilds the committed fused bytes${where}; they carry the commitment to slot ${slot}` }, fused: base(ev.category, "original") };
+        case "INVALID_SLOT_COMMITMENT":
+            return { line: { name: "fused", result: "FALSE", detail: `the fused bytes do not carry the commitment to this proof's slot ${slot}: ${ev.reason ?? ""}` }, fused: base(ev.category, evidence) };
+        case "INVALID_ORIGIN_ATTRIBUTION":
+            return { line: { name: "fused", result: "FALSE", detail: `the declared origin contradicts the origin inside the fused bytes: ${ev.reason ?? ""}` }, fused: base(ev.category, evidence) };
+        case "RECONSTRUCTION_MISMATCH":
+            return { line: { name: "fused", result: "FALSE", detail: `the file matching the declared origin does not rebuild the committed fused bytes: ${ev.reason ?? ""}` }, fused: base(ev.category, "original") };
+        case "UNDETERMINED_PLACEMENT":
+            return { line: { name: "fused", result: "UNDETERMINED", detail: `${ev.reason ?? "the placement is not registered"}; this verifier cannot check the commitment` }, fused: base(ev.category, evidence) };
+        case "INVALID_UNDERLYING_PROOF":
+            return { line: { name: "fused", result: "UNDETERMINED", detail: "not checked: the proof itself does not verify (see the signature line)" }, fused: base(ev.category, evidence) };
+        default:
+            return { line: { name: "fused", result: "UNDETERMINED", detail: `the commitment could not be checked: ${ev.reason ?? ev.category}` }, fused: base(ev.category, evidence) };
+    }
+}
 function attestationLine(record, webCrypto) {
     if (record === undefined || !record.documentPresent) {
         return {
@@ -564,7 +729,7 @@ function collectContradictions(audit) {
     }
     return out;
 }
-function collectNotes(audit, recordings, anchors) {
+function collectNotes(audit, recordings, anchors, fuseOriginHexes) {
     const notes = [];
     // Excerpt gaps, said once, plainly.
     let missingPositions = 0n;
@@ -587,7 +752,11 @@ function collectNotes(audit, recordings, anchors) {
     }
     // Files that match no recording: the human hint for an edited file or a
     // wrong drop, without claiming which.
-    const unmatched = audit.ingest.artifacts.filter((a) => a.matchedProofHashes.length === 0);
+    const originals = audit.ingest.artifacts.filter((a) => a.matchedProofHashes.length === 0 && fuseOriginHexes?.has(a.sha256Hex) === true);
+    if (originals.length > 0) {
+        notes.push(`${originals.length} file${originals.length === 1 ? "" : "s"} in this bundle ${originals.length === 1 ? "is" : "are"} the original of a fused recording: ${originals.slice(0, 5).map((a) => a.paths[0] ?? "(unnamed)").join(", ")}${originals.length > 5 ? ", …" : ""}. The original itself receives only the ceiling (it existed no later than the commit); the fused bytes receive the interval`);
+    }
+    const unmatched = audit.ingest.artifacts.filter((a) => a.matchedProofHashes.length === 0 && fuseOriginHexes?.has(a.sha256Hex) !== true);
     if (unmatched.length > 0 && recordings.length > 0) {
         const listed = unmatched
             .slice(0, 5)
@@ -683,6 +852,13 @@ export function renderCheckText(report) {
         for (const line of rec.lines)
             out.push(`  ${mark(line.result)}  ${pad(line.name, 12)} ${line.detail}`);
         out.push(`  bounds      ${rec.bounds.detail}`);
+        if (rec.fused !== undefined) {
+            out.push(`  fused floor ${rec.fused.floorDetail}`);
+            if (rec.fused.span !== null)
+                out.push(`  fused span  slot ${rec.fused.span.slotCounter} to commit ${rec.fused.span.commitCounter} (${rec.fused.span.positions} positions)`);
+            for (const s of rec.fused.statements)
+                out.push(`  statement   ${s}`);
+        }
         out.push("");
     });
     report.anchors.forEach((a, i) => {