@odingard/guardian-sdk 0.0.0-stage → 0.2.0

package/dist-dts/contracts/approval.d.ts

@@ -0,0 +1,425 @@
+import { z } from "zod";
+/**
+ * Agent-written prose is carried only as a labelled, explicitly non-authoritative
+ * statement. It never participates in authority evaluation or approval binding
+ * beyond being shown verbatim (and safely rendered) to the human.
+ */
+export declare const AgentStatementSchema: z.ZodObject<{
+    source: z.ZodLiteral<"agent">;
+    authoritative: z.ZodLiteral<false>;
+    text: z.ZodString;
+}, z.core.$strict>;
+/**
+ * Guardian's own reason for asking the human. It is derived only from the
+ * server-held authority the deterministic kernel evaluated for the ASK decision
+ * and never contains agent input.
+ */
+export declare const ApprovalReasonSchema: z.ZodObject<{
+    source: z.ZodLiteral<"guardian">;
+    code: z.ZodLiteral<"APPROVAL_REQUIRED">;
+    authority: z.ZodObject<{
+        policy: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>;
+        evaluatedGrants: z.ZodArray<z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * Server-generated description of the exact canonical action a human is asked to
+ * decide. Every field is copied from server-held canonical action state; values
+ * the agent chose (parameters, purpose, initiating context, request identifier)
+ * remain agent assertions and must be presented with agent provenance.
+ */
+export declare const ApprovalPresentationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+    resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+    interface: z.ZodEnum<{
+        mcp: "mcp";
+        rest: "rest";
+        internal: "internal";
+    }>;
+    initiatingContext: z.ZodEnum<{
+        agent: "agent";
+        user: "user";
+        scheduled: "scheduled";
+        "external-event": "external-event";
+    }>;
+    materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+    valueCents: z.ZodOptional<z.ZodNumber>;
+    uses: z.ZodNumber;
+    agentStatement: z.ZodObject<{
+        source: z.ZodLiteral<"agent">;
+        authoritative: z.ZodLiteral<false>;
+        text: z.ZodString;
+    }, z.core.$strict>;
+    reason: z.ZodObject<{
+        source: z.ZodLiteral<"guardian">;
+        code: z.ZodLiteral<"APPROVAL_REQUIRED">;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    providedObligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            log: "log";
+            retain_receipt: "retain_receipt";
+            notify: "notify";
+            delay: "delay";
+            cooling_period: "cooling_period";
+            delete_after_use: "delete_after_use";
+            redact: "redact";
+            encrypt: "encrypt";
+            tokenize: "tokenize";
+            minimize: "minimize";
+            verify_counterparty: "verify_counterparty";
+            verify_resource: "verify_resource";
+            verify_effect: "verify_effect";
+            attest_runtime: "attest_runtime";
+            require_consent: "require_consent";
+            require_location: "require_location";
+            require_device: "require_device";
+            require_network: "require_network";
+            require_contract: "require_contract";
+            step_up: "step_up";
+            second_approver: "second_approver";
+            quorum: "quorum";
+            authenticate: "authenticate";
+        }>;
+        params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+    }, z.core.$strict>>>;
+    runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+        T0_UNKNOWN: "T0_UNKNOWN";
+        T1_IDENTIFIED: "T1_IDENTIFIED";
+        T2_VERIFIED: "T2_VERIFIED";
+        T3_ATTESTED: "T3_ATTESTED";
+        T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+    }>>;
+    enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+        G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+        G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+        G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+        G0_OBSERVED: "G0_OBSERVED";
+        G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+    }>>;
+    approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        schema: z.ZodLiteral<"guardian.multiparty.v1">;
+        structureId: z.ZodString;
+        members: z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"single">;
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"nOfM">;
+            n: z.ZodNumber;
+            members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unanimous">;
+            members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"roleQuorum">;
+            role: z.ZodString;
+            n: z.ZodNumber;
+            m: z.ZodNumber;
+        }, z.core.$strict>], "kind">;
+        specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        separationOfDuties: z.ZodOptional<z.ZodObject<{
+            mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            expiresAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>>>;
+        delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        }, z.core.$strict>>>;
+        emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        coolingPeriod: z.ZodOptional<z.ZodObject<{
+            seconds: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+    actionDigest: z.ZodString;
+    expiresAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const ApprovalBindingSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    actionDigest: z.ZodString;
+    actionDecisionRecordDigest: z.ZodString;
+    askDecisionDigest: z.ZodString;
+    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+    policy: z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+        version: z.ZodNumber;
+    }, z.core.$strict>;
+    evaluatedGrants: z.ZodArray<z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+        version: z.ZodNumber;
+    }, z.core.$strict>>;
+    presentationDigest: z.ZodString;
+    requestedAtEpochMs: z.ZodNumber;
+    expiresAtEpochMs: z.ZodNumber;
+    eligiblePrincipalIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+    requiredFactor: z.ZodOptional<z.ZodEnum<{
+        tap: "tap";
+        passkey: "passkey";
+        biometric: "biometric";
+        "second-device": "second-device";
+        "multi-approver": "multi-approver";
+    }>>;
+    requiredApprovals: z.ZodOptional<z.ZodNumber>;
+    scopeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    structures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        schema: z.ZodLiteral<"guardian.multiparty.v1">;
+        structureId: z.ZodString;
+        members: z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"single">;
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"nOfM">;
+            n: z.ZodNumber;
+            members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"unanimous">;
+            members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"roleQuorum">;
+            role: z.ZodString;
+            n: z.ZodNumber;
+            m: z.ZodNumber;
+        }, z.core.$strict>], "kind">;
+        specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        separationOfDuties: z.ZodOptional<z.ZodObject<{
+            mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            expiresAtEpochMs: z.ZodNumber;
+        }, z.core.$strict>>>;
+        delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        }, z.core.$strict>>>;
+        emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        coolingPeriod: z.ZodOptional<z.ZodObject<{
+            seconds: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export declare const ApprovalStateSchema: z.ZodEnum<{
+    revoked: "revoked";
+    pending: "pending";
+    expired: "expired";
+    approved: "approved";
+    denied: "denied";
+    superseded: "superseded";
+    consumed: "consumed";
+}>;
+export declare const ApprovalRecordSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    binding: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        actionDigest: z.ZodString;
+        actionDecisionRecordDigest: z.ZodString;
+        askDecisionDigest: z.ZodString;
+        adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        policy: z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>;
+        evaluatedGrants: z.ZodArray<z.ZodObject<{
+            id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+            version: z.ZodNumber;
+        }, z.core.$strict>>;
+        presentationDigest: z.ZodString;
+        requestedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        eligiblePrincipalIds: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+        requiredFactor: z.ZodOptional<z.ZodEnum<{
+            tap: "tap";
+            passkey: "passkey";
+            biometric: "biometric";
+            "second-device": "second-device";
+            "multi-approver": "multi-approver";
+        }>>;
+        requiredApprovals: z.ZodOptional<z.ZodNumber>;
+        scopeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+        structures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+    state: z.ZodEnum<{
+        revoked: "revoked";
+        pending: "pending";
+        expired: "expired";
+        approved: "approved";
+        denied: "denied";
+        superseded: "superseded";
+        consumed: "consumed";
+    }>;
+    version: z.ZodNumber;
+    updatedAtEpochMs: z.ZodNumber;
+    decidedByPrincipalId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+    endorsements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        factor: z.ZodEnum<{
+            tap: "tap";
+            passkey: "passkey";
+            biometric: "biometric";
+            "second-device": "second-device";
+        }>;
+        atEpochMs: z.ZodNumber;
+    }, z.core.$strict>>>;
+    structureApprovals: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        decision: z.ZodEnum<{
+            veto: "veto";
+            approve: "approve";
+            deny: "deny";
+        }>;
+        atEpochMs: z.ZodNumber;
+        via: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+        emergency: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>>;
+    cooling: z.ZodOptional<z.ZodObject<{
+        startedAtEpochMs: z.ZodNumber;
+        endsAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Human-facing REST body for an explicit approve or deny decision. */
+export declare const ApprovalDecisionRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    decision: z.ZodEnum<{
+        veto: "veto";
+        approve: "approve";
+        deny: "deny";
+    }>;
+    expectedVersion: z.ZodNumber;
+    presentationDigest: z.ZodString;
+    via: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+    emergency: z.ZodOptional<z.ZodLiteral<true>>;
+    factor: z.ZodOptional<z.ZodEnum<{
+        tap: "tap";
+        passkey: "passkey";
+        biometric: "biometric";
+        "second-device": "second-device";
+    }>>;
+}, z.core.$strict>;
+/** Human-facing REST body for revoking a pending or approved decision. */
+export declare const ApprovalRevocationRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>;
+/** The exact values a human must echo back to decide; protects against stale tabs. */
+export declare const ApprovalChallengeSchema: z.ZodObject<{
+    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+    version: z.ZodNumber;
+    presentationDigest: z.ZodString;
+    expiresAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const ApprovalReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    approvalId: z.core.$ZodBranded<z.ZodString, "ApprovalId", "out">;
+    state: z.ZodEnum<{
+        revoked: "revoked";
+        pending: "pending";
+        expired: "expired";
+        approved: "approved";
+        denied: "denied";
+        superseded: "superseded";
+        consumed: "consumed";
+    }>;
+    version: z.ZodNumber;
+    updatedAtEpochMs: z.ZodNumber;
+    approvalDigest: z.ZodString;
+}, z.core.$strict>;
+export declare function approvalPresentationDigest(presentation: z.infer<typeof ApprovalPresentationSchema>): string;
+export declare function approvalBindingDigest(binding: z.infer<typeof ApprovalBindingSchema>): string;
+export declare function approvalRecordDigest(record: z.infer<typeof ApprovalRecordSchema>): string;
+export type AgentStatement = z.infer<typeof AgentStatementSchema>;
+export type ApprovalReason = z.infer<typeof ApprovalReasonSchema>;
+export type ApprovalPresentation = z.infer<typeof ApprovalPresentationSchema>;
+export type ApprovalBinding = z.infer<typeof ApprovalBindingSchema>;
+export type ApprovalState = z.infer<typeof ApprovalStateSchema>;
+export type ApprovalRecord = z.infer<typeof ApprovalRecordSchema>;
+export type ApprovalDecisionRequest = z.infer<typeof ApprovalDecisionRequestSchema>;
+export type ApprovalRevocationRequest = z.infer<typeof ApprovalRevocationRequestSchema>;
+export type ApprovalChallenge = z.infer<typeof ApprovalChallengeSchema>;
+export type ApprovalReceipt = z.infer<typeof ApprovalReceiptSchema>;

package/dist-dts/contracts/assurance.d.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+/**
+ * WO-026: guardian.assurance.v1 — enforcement assurance level contract
+ * (GUA-AUTHORITY-OS-001 §26–27).
+ *
+ * The assurance level states how strongly Guardian can enforce a decision
+ * for one action, computed deterministically from recorded surface
+ * evidence. It is honest by construction: G0/G1 describe mediation that
+ * does not physically prevent bypass, and the level never rises on
+ * evidence that was not recorded.
+ *
+ * The ladder (§26), precedence strongest-evidence G4 > G3 > G2 > G1 > G0:
+ *
+ *   G4 COUNTERPARTY_INTERLOCKED — the destination/provider itself
+ *      requires valid Guardian authority proof (recorded tool-server
+ *      catalog bound on the connection).
+ *   G3 RUNTIME_CONTAINED        — execution is constrained inside a
+ *      Guardian-controlled or Guardian-recognized environment (recorded
+ *      attestation marks the execution environment recognized).
+ *   G2 CREDENTIAL_MEDIATED      — the underlying reusable credential is
+ *      Guardian-mediated (a bound connection record backed the action).
+ *   G1 POLICY_MEDIATED          — the agent voluntarily called Guardian;
+ *      alternate execution may exist.
+ *   G0 OBSERVED                 — Guardian saw the action but could not
+ *      prevent bypass.
+ */
+export declare const ASSURANCE_CONTRACT_SCHEMA = "guardian.assurance.v1";
+/** Ordered enforcement-assurance ladder (lowest → highest). */
+export declare const EnforcementAssuranceLevelSchema: z.ZodEnum<{
+    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+    G0_OBSERVED: "G0_OBSERVED";
+    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+}>;
+export type EnforcementAssuranceLevel = z.infer<typeof EnforcementAssuranceLevelSchema>;
+export declare const ENFORCEMENT_ASSURANCE_RANK: Record<EnforcementAssuranceLevel, number>;
+/** Human-readable level names for display surfaces (§27). */
+export declare const ENFORCEMENT_ASSURANCE_LABEL: Record<EnforcementAssuranceLevel, string>;
+/**
+ * Recorded surface evidence the gateway derived for one action. Absent or
+ * false entries never raise the level.
+ */
+export declare const EnforcementAssuranceFactsSchema: z.ZodObject<{
+    voluntaryCall: z.ZodBoolean;
+    guardianMediatedCredential: z.ZodOptional<z.ZodBoolean>;
+    guardianContainedEnvironment: z.ZodOptional<z.ZodBoolean>;
+    counterpartyRequiresAuthorityProof: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type EnforcementAssuranceFacts = z.infer<typeof EnforcementAssuranceFactsSchema>;
+export interface EnforcementAssuranceComputation {
+    level: EnforcementAssuranceLevel;
+    /** The recorded evidence names the level was computed from. */
+    evidence: readonly string[];
+}
+/**
+ * Pure, deterministic level computation over recorded evidence. Strongest
+ * evidence wins; missing evidence never raises the level.
+ */
+export declare function computeEnforcementAssurance(facts: EnforcementAssuranceFacts | null | undefined): EnforcementAssuranceComputation;