@nifrajs/testing 3.1.0 → 3.2.0

package/dist/index.d.ts

@@ -8,7 +8,10 @@
  *   const { client, cookies } = testSession<typeof app>(app)
  */
 export { AdversarialContractError, type AdversarialContractOptions, type AdversarialContractReport, type AdversarialContractResult, assertAdversarialContract, type ContractCaseContext, type ContractCaseKind, type ContractCoverageGap, type ContractCoverageGapCode, type ContractReplay, type ContractRuntime, type ContractTarget, type ContractTestApp, type ContractWitness, runAdversarialContract, } from "./adversarial.js";
+export { type CertifiableDeploymentAdapter, type CertifiableDescriptorAdapter, type CertifiableModelGateway, deploymentAdapterCertificationProfile, deploymentCertificationProfile, gatewayCertificationProfile, modelGatewayCertificationProfile, registryCertificationProfile, } from "./agent-certification.js";
+export { type AgentEvalCase, type AgentEvalComponentEvidence, type AgentEvalCompositionOptions, type AgentEvalCompositionReport, AgentEvalRegressionError, type AgentEvalReport, type AgentEvalSuite, type AgentEvalSuiteSpec, type AgentFailureMatrixCase, AgentFailureMatrixError, type AgentFailureMatrixKind, type AgentFailureMatrixReport, assertAgentEval, assertAgentEvalBaseline, assertAgentFailureMatrix, type BaselineComparison, type BaselineOptions, type CaseComparison, type CaseResult, type ComparisonCode, compareAgentEvalBaseline, defineAgentEvalSuite, parseRubricVerdict, type RubricShape, type RubricSpec, type RubricVerdict, runAgentEvalComposition, runAgentFailureMatrix, type ScoreTolerance, } from "./agent-eval.js";
 export { AdapterCertificationError, type AdapterCertificationProfile, type AdapterCertificationReport, assertAdapterCertification, type CertifiableCacheEntry, type CertifiableCacheStore, type CertifiableDomainEvent, type CertifiableEventDeliveryAdapter, type CertifiableEventRecord, type CertifiableJobStore, type CertifiableRuntimeAdapter, type CertifiableRuntimeServer, type CertifiableStorageAdapter, type CertificationCapabilityEvidence, type CertificationCheck, type CertificationCheckEvidence, cacheStoreCertificationProfile, certifyAdapter, defineCertificationProfile, eventDeliveryCertificationProfile, jobStoreCertificationProfile, runtimeAdapterCertificationProfile, storageAdapterCertificationProfile, verifyAdapterCertification, } from "./certification.js";
+export { type ContractLabHandler, type ContractLabRuntimeAdapter, type ContractLabServer, type ContractLabWitness, contractLabWitnesses, createReferenceContractLabHandler, runContractLab, runContractLabOverHttp, runContractLabThroughAdapter, } from "./contract-lab.js";
 export { type CookieJar, cookieJar } from "./cookies.js";
 export { createFailureLab, type FailureDirective, type FailureEvidence, FailureInjectedError, type FailureKind, type FailureLab, type FailureLabOptions, type FailureReplay, type FailureScenario, type FailureScenarioReport, runFailureScenario, } from "./failure-lab.js";
 export { defineFaultProfile, type FaultProfile, type FaultProfileFault, type FaultProfileFaultKind, type FaultProfileReport, type FaultProfileScenario, type FaultProfileScenarioReport, type RunFaultProfileOptions, referenceFaultProfile, runFaultProfile, } from "./fault-profile.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,8BAA8B,EAC9B,cAAc,EACd,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,qBAAqB,EACrB,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,6BAA6B,EAClC,sBAAsB,EACtB,KAAK,eAAe,EACpB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,cAAc,EACd,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,EACtC,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,sBAAsB,GACvB,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,qCAAqC,EACrC,8BAA8B,EAC9B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,8BAA8B,EAC9B,cAAc,EACd,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,oBAAoB,EACpB,iCAAiC,EACjC,cAAc,EACd,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,qBAAqB,EACrB,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,eAAe,EACf,KAAK,6BAA6B,EAClC,sBAAsB,EACtB,KAAK,eAAe,EACpB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,cAAc,EACd,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,0BAA0B,EAC1B,KAAK,iCAAiC,EACtC,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,sBAAsB,GACvB,MAAM,iBAAiB,CAAA"}

package/dist/index.js

@@ -8,7 +8,10 @@
  *   const { client, cookies } = testSession<typeof app>(app)
  */
 export { AdversarialContractError, assertAdversarialContract, runAdversarialContract, } from "./adversarial.js";
+export { deploymentAdapterCertificationProfile, deploymentCertificationProfile, gatewayCertificationProfile, modelGatewayCertificationProfile, registryCertificationProfile, } from "./agent-certification.js";
+export { AgentEvalRegressionError, AgentFailureMatrixError, assertAgentEval, assertAgentEvalBaseline, assertAgentFailureMatrix, compareAgentEvalBaseline, defineAgentEvalSuite, parseRubricVerdict, runAgentEvalComposition, runAgentFailureMatrix, } from "./agent-eval.js";
 export { AdapterCertificationError, assertAdapterCertification, cacheStoreCertificationProfile, certifyAdapter, defineCertificationProfile, eventDeliveryCertificationProfile, jobStoreCertificationProfile, runtimeAdapterCertificationProfile, storageAdapterCertificationProfile, verifyAdapterCertification, } from "./certification.js";
+export { contractLabWitnesses, createReferenceContractLabHandler, runContractLab, runContractLabOverHttp, runContractLabThroughAdapter, } from "./contract-lab.js";
 export { cookieJar } from "./cookies.js";
 export { createFailureLab, FailureInjectedError, runFailureScenario, } from "./failure-lab.js";
 export { defineFaultProfile, referenceFaultProfile, runFaultProfile, } from "./fault-profile.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,wBAAwB,EAIxB,yBAAyB,EAUzB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,yBAAyB,EAGzB,0BAA0B,EAa1B,8BAA8B,EAC9B,cAAc,EACd,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAkB,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EACL,gBAAgB,EAGhB,oBAAoB,EAOpB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAQlB,qBAAqB,EACrB,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAIL,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,qBAAqB,EAIrB,eAAe,EAEf,sBAAsB,EAEtB,mBAAmB,EAGnB,iBAAiB,EACjB,cAAc,EACd,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,OAAO,EAA2D,WAAW,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,0BAA0B,EAE1B,yBAAyB,EACzB,0BAA0B,EAE1B,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EAOb,sBAAsB,GACvB,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,wBAAwB,EAIxB,yBAAyB,EAUzB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAIL,qCAAqC,EACrC,8BAA8B,EAC9B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAKL,wBAAwB,EAKxB,uBAAuB,EAGvB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,EAMxB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAIlB,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,yBAAyB,EAGzB,0BAA0B,EAa1B,8BAA8B,EAC9B,cAAc,EACd,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAKL,oBAAoB,EACpB,iCAAiC,EACjC,cAAc,EACd,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAkB,SAAS,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EACL,gBAAgB,EAGhB,oBAAoB,EAOpB,kBAAkB,GACnB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAQlB,qBAAqB,EACrB,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAIL,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,qBAAqB,EAIrB,eAAe,EAEf,sBAAsB,EAEtB,mBAAmB,EAGnB,iBAAiB,EACjB,cAAc,EACd,OAAO,GACR,MAAM,eAAe,CAAA;AACtB,OAAO,EAA2D,WAAW,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,0BAA0B,EAE1B,yBAAyB,EACzB,0BAA0B,EAE1B,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EAOb,sBAAsB,GACvB,MAAM,iBAAiB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/testing",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "Contract-derived adversarial tests, runtime-matrix response conformance, and cookie-aware in-process sessions for Nifra apps.",
   "keywords": [
     "bun",
@@ -28,6 +28,11 @@
       "types": "./dist/certification.d.ts",
       "default": "./dist/certification.js"
     },
+    "./contract-lab": {
+      "bun": "./src/contract-lab.ts",
+      "types": "./dist/contract-lab.d.ts",
+      "default": "./dist/contract-lab.js"
+    },
     "./zod": {
       "bun": "./src/zod.ts",
       "types": "./dist/zod.d.ts",
@@ -44,11 +49,11 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@nifrajs/client": "3.1.0",
-    "@nifrajs/agent": "3.1.0",
-    "@nifrajs/core": "3.1.0",
-    "@nifrajs/mcp": "3.1.0",
-    "@nifrajs/mock": "3.1.0"
+    "@nifrajs/client": "3.2.0",
+    "@nifrajs/agent": "3.2.0",
+    "@nifrajs/core": "3.2.0",
+    "@nifrajs/mcp": "3.2.0",
+    "@nifrajs/mock": "3.2.0"
   },
   "peerDependencies": {
     "zod": ">=4.0.0"

package/src/agent-certification.ts

@@ -0,0 +1,296 @@
+/**
+ * Certification profile for capability-descriptor adapters.
+ *
+ * An adapter that projects a tool, MCP tool, extension, model, or deployment target into a
+ * {@link CapabilityDescriptor} is certified structurally: its output must parse cleanly, carry a real
+ * schema digest, be free of any content-bearing field, compose into a deterministic snapshot, and
+ * surface a schema change on a stable identity as drift rather than a silent overwrite. The profile
+ * is dependency-free test evidence - an adapter package uses it only in CI, and the resulting matrix
+ * is portable JSON that names capabilities, never payloads.
+ */
+
+import {
+  AgentDeployment,
+  type AgentDeploymentAdapter,
+  createDeploymentAuthority,
+  type ModelGateway,
+  parseDeploymentCapabilityReport,
+  parseModelGatewayError,
+  parseModelGatewayResult,
+  runModelGateway,
+  structuredOutputParser,
+} from "@nifrajs/agent"
+import {
+  type CapabilityDescriptor,
+  composeRegistrySnapshot,
+  parseCapabilityDescriptor,
+  RegistryError,
+} from "@nifrajs/agent/registry"
+import { type AdapterCertificationProfile, defineCertificationProfile } from "./certification.ts"
+
+/**
+ * The test-only surface a descriptor adapter exposes for certification. `describe` yields the
+ * adapter's representative descriptor; `describeDrift` yields a descriptor with the SAME identity
+ * (kind and name) but a DIFFERENT schema digest, so the drift check can prove the adapter's identity
+ * is stable across a schema change instead of colliding into it.
+ */
+export interface CertifiableDescriptorAdapter {
+  describe(): CapabilityDescriptor | Promise<CapabilityDescriptor>
+  describeDrift(): CapabilityDescriptor | Promise<CapabilityDescriptor>
+}
+
+const ALLOWED_KEYS: ReadonlySet<string> = new Set([
+  "descriptorVersion",
+  "kind",
+  "name",
+  "version",
+  "schemaDigest",
+  "requiredCapabilities",
+  "approval",
+  "retry",
+  "idempotency",
+  "isolation",
+])
+
+const SCHEMA_DIGEST = /^[0-9a-f]{64}$/
+
+/**
+ * Build the descriptor-adapter certification profile. Every check runs against a fresh adapter, so a
+ * failure never leaks into the next capability's evidence.
+ */
+export function registryCertificationProfile(): AdapterCertificationProfile<CertifiableDescriptorAdapter> {
+  return defineCertificationProfile<CertifiableDescriptorAdapter>({
+    id: "capability-descriptor",
+    version: 1,
+    capabilities: ["content-free", "schema-digest", "snapshot-determinism", "drift-detection"],
+    checks: [
+      {
+        id: "content-free",
+        capability: "content-free",
+        async run(adapter) {
+          const descriptor = await adapter.describe()
+          const parsed = parseCapabilityDescriptor(descriptor)
+          for (const key of Object.keys(parsed)) {
+            if (!ALLOWED_KEYS.has(key)) throw new Error("DescriptorExtraField")
+          }
+          if (parsed.descriptorVersion !== 1) throw new Error("DescriptorVersion")
+        },
+      },
+      {
+        id: "schema-digest",
+        capability: "schema-digest",
+        async run(adapter) {
+          const descriptor = await adapter.describe()
+          if (!SCHEMA_DIGEST.test(descriptor.schemaDigest))
+            throw new Error("DescriptorSchemaDigest")
+          if (descriptor.version.length === 0) throw new Error("DescriptorVersionMissing")
+        },
+      },
+      {
+        id: "snapshot-determinism",
+        capability: "snapshot-determinism",
+        async run(adapter) {
+          const descriptor = await adapter.describe()
+          const first = await composeRegistrySnapshot([descriptor])
+          const second = await composeRegistrySnapshot([descriptor])
+          if (first.digest !== second.digest) throw new Error("SnapshotNonDeterministic")
+          if (first.descriptors.length !== 1) throw new Error("SnapshotDescriptorCount")
+        },
+      },
+      {
+        id: "identity-drift",
+        capability: "drift-detection",
+        async run(adapter) {
+          const descriptor = await adapter.describe()
+          const drift = await adapter.describeDrift()
+          if (descriptor.kind !== drift.kind || descriptor.name !== drift.name)
+            throw new Error("DriftIdentityMismatch")
+          if (descriptor.schemaDigest === drift.schemaDigest)
+            throw new Error("DriftDigestUnchanged")
+          let code: string | undefined
+          try {
+            await composeRegistrySnapshot([descriptor, drift])
+          } catch (error) {
+            if (error instanceof RegistryError) code = error.code
+          }
+          if (code !== "schema_drift") throw new Error("DriftNotDetected")
+        },
+      },
+    ],
+  })
+}
+
+class NamedCertificationFailure extends Error {
+  constructor(name: string) {
+    super(name)
+    this.name = name
+  }
+}
+
+export interface CertifiableModelGateway extends ModelGateway {}
+
+/** Certification for provider-neutral gateways. It never emits request or response content. */
+export function gatewayCertificationProfile(): AdapterCertificationProfile<CertifiableModelGateway> {
+  return defineCertificationProfile<CertifiableModelGateway>({
+    id: "model-gateway",
+    version: 1,
+    capabilities: ["parse-boundary", "error-taxonomy", "fallback-policy", "evidence-firewall"],
+    checks: [
+      {
+        id: "parse-boundary",
+        capability: "parse-boundary",
+        async run(adapter) {
+          const result = await runModelGateway(
+            adapter,
+            { input: { probe: true }, parser: structuredOutputParser((value) => value) },
+            { routes: ["cert-route"], retryableCodes: [], budget: { maxAttempts: 1 } },
+          )
+          if (!result.ok || result.evidence.some((item) => Object.hasOwn(item, "input")))
+            throw new NamedCertificationFailure("GatewayParseBoundary")
+        },
+      },
+      {
+        id: "error-taxonomy",
+        capability: "error-taxonomy",
+        run() {
+          for (const code of [
+            "malformed_output",
+            "refusal",
+            "timeout",
+            "rate_limit",
+            "unavailable",
+            "policy_denied",
+            "cancelled",
+            "internal",
+          ] as const) {
+            if (parseModelGatewayError({ code }).code !== code)
+              throw new NamedCertificationFailure("GatewayErrorTaxonomy")
+          }
+        },
+      },
+      {
+        id: "fallback-policy",
+        capability: "fallback-policy",
+        async run(adapter) {
+          const result = await runModelGateway(
+            adapter,
+            { input: { probe: true } },
+            {
+              routes: ["cert-route", "cert-fallback"],
+              retryableCodes: ["rate_limit", "unavailable"],
+              allowFallback: true,
+              budget: { maxAttempts: 2 },
+            },
+          )
+          if (result.evidence.some((item) => item.kind === "fallback")) return
+          if (!result.ok) throw new NamedCertificationFailure("GatewayFallback")
+        },
+      },
+      {
+        id: "evidence-firewall",
+        capability: "evidence-firewall",
+        async run(adapter) {
+          const raw = await adapter.complete({
+            routeId: "cert-route",
+            input: { probe: true },
+            signal: new AbortController().signal,
+            envelope: { attempt: 1, attemptsRemaining: 0 },
+          })
+          if (parseModelGatewayResult(raw).ok === false && isRecordWithKey(raw, "evidence"))
+            throw new NamedCertificationFailure("GatewayEvidenceFirewall")
+          const result = await runModelGateway(
+            adapter,
+            { input: { prompt: "transient" } },
+            { routes: ["cert-route"], retryableCodes: [], budget: { maxAttempts: 1 } },
+          )
+          const evidence = JSON.stringify(result.evidence).toLowerCase()
+          if (/prompt|message|response|credential|secret|diagnostic|stack|content/.test(evidence))
+            throw new NamedCertificationFailure("GatewayEvidenceFirewall")
+        },
+      },
+    ],
+  })
+}
+
+function isRecordWithKey(value: unknown, key: string): boolean {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    !Array.isArray(value) &&
+    Object.hasOwn(value, key)
+  )
+}
+
+export const modelGatewayCertificationProfile = gatewayCertificationProfile
+
+export interface CertifiableDeploymentAdapter extends AgentDeploymentAdapter {
+  /** Required only when the adapter claims real OS hostile-code isolation. */
+  readonly verifyHostileCodeIsolation?: () => boolean | PromiseLike<boolean>
+}
+
+/** Certification for lifecycle cleanup, capability truthfulness, authority, and isolation claims. */
+export function deploymentCertificationProfile(): AdapterCertificationProfile<CertifiableDeploymentAdapter> {
+  return defineCertificationProfile<CertifiableDeploymentAdapter>({
+    id: "deployment-adapter",
+    version: 1,
+    capabilities: ["capability-truthfulness", "lifecycle", "cleanup", "isolation-claims"],
+    checks: [
+      {
+        id: "capability-truthfulness",
+        capability: "capability-truthfulness",
+        async run(adapter) {
+          const report = parseDeploymentCapabilityReport(await adapter.capabilityReport())
+          if (report.adapterId !== adapter.id)
+            throw new NamedCertificationFailure("DeploymentCapability")
+        },
+      },
+      {
+        id: "lifecycle",
+        capability: "lifecycle",
+        async run(adapter) {
+          const deployment = new AgentDeployment(
+            adapter,
+            createDeploymentAuthority({ workspaceMaxBytes: 1024 * 1024 }),
+          )
+          await deployment.prepare({ deploymentId: "cert-deployment" })
+          await deployment.start()
+          const inspection = await deployment.inspect()
+          if (inspection.state !== "running")
+            throw new NamedCertificationFailure("DeploymentLifecycle")
+          await deployment.cancel()
+          await deployment.dispose()
+        },
+      },
+      {
+        id: "cleanup",
+        capability: "cleanup",
+        async run(adapter) {
+          const deployment = new AgentDeployment(
+            adapter,
+            createDeploymentAuthority({ workspaceMaxBytes: 1024 * 1024 }),
+          )
+          await deployment.prepare({ deploymentId: "cert-cleanup" })
+          await deployment.dispose()
+          if (deployment.lifecycleState !== "disposed")
+            throw new NamedCertificationFailure("DeploymentCleanup")
+        },
+      },
+      {
+        id: "isolation-claims",
+        capability: "isolation-claims",
+        async run(adapter) {
+          const report = parseDeploymentCapabilityReport(await adapter.capabilityReport())
+          if (report.capabilities.hostileCodeIsolation === "os") {
+            if (
+              adapter.verifyHostileCodeIsolation === undefined ||
+              !(await adapter.verifyHostileCodeIsolation())
+            )
+              throw new NamedCertificationFailure("DeploymentIsolationClaim")
+          }
+        },
+      },
+    ],
+  })
+}
+
+export const deploymentAdapterCertificationProfile = deploymentCertificationProfile