@orkestrel/study 0.0.1 → 0.0.3

package/dist/src/core/index.d.cts

@@ -84,8 +84,8 @@ export declare function computeStudyOutputStop(bytes: number, limit: number, out
 export declare function computeStudyScores(manifest: StudyManifest, rubric: StudyRubric, grading: StudyGrading): readonly StudyScore[];
 
 /**
- * Records an error that escaped admitted work as the failure of its ticket.
- * @param ticket - The admitted request whose work escaped
+ * Records an error thrown by admitted work as the failure of its ticket.
+ * @param ticket - The admitted request whose work threw
  * @param error - The caught value, read through `readStudyFailure`
  * @param role - The responsibility that replaces any role the reading carries; Default: the carried role, else the ticket's admitted role
  * @remarks
@@ -94,7 +94,7 @@ export declare function computeStudyScores(manifest: StudyManifest, rubric: Stud
  * so the parent's ownership is respected rather than inferred as local settlement. A refusal
  * thrown by the ticket's own settlement propagates.
  * @throws Thrown when the ticket's settlement refuses the failure.
- * @example Fail an escaped request
+ * @example Fail an admitted request
  * ```ts
  * import type { StudyTicket } from '@orkestrel/study'
  * import { failStudyTicket } from '@orkestrel/study'
@@ -112,6 +112,17 @@ export declare function failStudyTicket(ticket: StudyTicket, error: unknown, rol
  */
 export declare function failureToStudyError(failure: StudyFailure): StudyError;
 
+/**
+ * Checks whether a value is a gauge with a finite positive scale and a finite nonnegative overhead.
+ * @param value - The candidate gauge; additional members are admitted
+ * @returns True if the gauge readings are finite and within their bounds; false otherwise
+ * @example
+ * ```ts
+ * isStudyAgentGauge({ scale: 1, overhead: 0 }) // true
+ * ```
+ */
+export declare function isStudyAgentGauge(value: unknown): value is LedgerGauge;
+
 /**
  * Checks whether a namespace exposes the Agent capabilities the instrumentation invokes.
  * @remarks
@@ -147,6 +158,16 @@ export declare const isStudyCause: Guard<StudyCause>;
  */
 export declare function isStudyCriterion(value: unknown): value is StudyCriterion;
 
+/** Checks whether an owned daemon declaration pins an absolute executable and distinct models.
+ * @param value - The candidate declaration.
+ * @returns True if executable, version, environment, and model identities are valid; false otherwise.
+ * @example
+ * ```ts
+ * isStudyDaemon({ executable: 'ollama' }) // false
+ * ```
+ */
+export declare function isStudyDaemon(value: unknown): value is StudyDaemon;
+
 /**
  * Checks whether a study freezes a complete arm order for every repetition.
  * @param value - The candidate definition
@@ -170,14 +191,15 @@ export declare function isStudyDefinition(value: unknown): value is StudyDefinit
 export declare function isStudyDigest(value: unknown): value is string;
 
 /**
- * Narrows a caught value to an attributable study error.
+ * Narrows a caught value to a branded study error with valid failure attribution.
  * @remarks
- * Recognition combines the native `Error` base, a subclass prototype, the fixed name, a declared
- * study code, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is the error itself.
+ * Recognition combines the native `Error` base, a subclass prototype, a declared study code,
+ * valid optional failure members, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is
+ * the error itself. Subclasses can replace the name.
  * The global key is recognized across package, ESM, CommonJS and captured module copies; it is
- * not unforgeable provenance. A transparent proxy is refused because its forwarded descriptor
+ * not proof of origin. A transparent proxy is refused because its forwarded descriptor
  * stores the target, and an unbranded copy, an inherited brand, or a property-only lookalike
- * stays outside the type. Hostile property access returns false instead of throwing.
+ * stays outside the type. Throwing property access returns false instead of throwing.
  * @param value - The caught value
  * @returns True if the value is a study error; false otherwise
  * @example
@@ -300,6 +322,12 @@ export declare function isStudyProfile(value: unknown): value is StudyProfile;
  */
 export declare function isStudyProvider(value: unknown): value is StudyProvider;
 
+/** Checks whether a recording declaration bounds every serialized sidecar byte.
+ * @param value - The candidate declaration.
+ * @returns True if its byte allowance is a positive safe integer; false otherwise.
+ */
+export declare function isStudyRecord(value: unknown): value is StudyRecord;
+
 /** Checks whether a value names a measured request role. */
 export declare const isStudyRole: Guard<StudyRole>;
 
@@ -521,8 +549,8 @@ export declare const STUDY_CAUSES: readonly StudyCause[];
  * Keys the own self-identity every study error stamps on itself.
  * @remarks
  * The global symbol registry lets every package, ESM, CommonJS and captured copy read the same
- * key. The registry makes the key discoverable; it is a recognition mechanism, not an
- * unforgeable provenance marker.
+ * key. The registry makes the key discoverable; it recognizes the contract without proving
+ * its origin.
  */
 export declare const STUDY_ERROR_BRAND: unique symbol;
 
@@ -743,6 +771,32 @@ export declare interface StudyCriterion {
     readonly assertion: JSONValue;
 }
 
+/** Pins an executable and the model population an execution owns until cleanup.
+ * @remarks
+ * Study owns this declaration independently of Ollama's server API. The executable is an absolute
+ * canonical path; digest is its SHA-256 and version is the exact expected version reply. The
+ * provider URL must be a dedicated loopback origin outside port 11434. Environment entries are
+ * explicit non-secret overrides, merged by case-folded name; the host owns OLLAMA_HOST. Models
+ * have distinct names and SHA-256 digests equal to the provider's model and judge pins; shared
+ * pins require one entry. Execution
+ * verifies identity before use, unloads this population before each trial, and stops and joins
+ * on every ending. Offline replay never creates this daemon.
+ */
+export declare interface StudyDaemon {
+    readonly executable: string;
+    readonly digest: string;
+    readonly version: string;
+    /** Holds explicit overrides with distinct case-folded names and no NUL characters. */
+    readonly environment?: Readonly<Record<string, string>> | undefined;
+    readonly models: readonly StudyDaemonModel[];
+}
+
+/** Pins one model the declared daemon verifies and unloads before each trial. */
+export declare interface StudyDaemonModel {
+    readonly name: string;
+    readonly digest: string;
+}
+
 /** Bounds each independent operation with a fresh failure owner and deadline. */
 export declare class StudyDeadline implements StudyDeadlineInterface {
     #private;
@@ -922,6 +976,8 @@ export declare interface StudyManifest {
     readonly bounds: StudyBounds;
     readonly qualification: string | undefined;
     readonly host: Readonly<Record<string, string>>;
+    /** Copies the profile's recording declaration before any trial starts. */
+    readonly record?: StudyRecord | undefined;
 }
 
 /** Admits request ceilings across every enclosing scope before dispatch. */
@@ -989,6 +1045,8 @@ export declare interface StudyProfile {
     readonly qualification: string | undefined;
     /** Holds driver-owned JSON; the driver owns its interpretation and Study only validates and owns the object. */
     readonly settings: Readonly<Record<string, JSONValue>> | undefined;
+    /** Requires one bounded exchange sidecar for every trial when present. */
+    readonly record?: StudyRecord | undefined;
 }
 
 /** Holds caller-selected provider artifacts and model identities. */
@@ -1004,11 +1062,24 @@ export declare interface StudyProvider {
         /** Pins the judge model; declared together with its name or both absent. */
         readonly judge: string | undefined;
     };
+    /** Declares an execution-owned daemon at this provider's dedicated URL. */
+    readonly daemon?: StudyDaemon;
 }
 
 /** Names the evidence a study can establish. */
 export declare type StudyPurpose = 'mechanism' | 'quality' | 'capacity';
 
+/** Bounds the serialized exchange sidecar retained for each scheduled trial.
+ * @remarks
+ * Bytes is a positive safe integer counting all UTF-8 JSONL bytes, including declarations,
+ * base64 expansion, terminal records, and LF separators. Recording is independent of passive
+ * observation. Sidecars have their own trial allowance and also consume series custody capacity;
+ * they do not consume the goal evidence allowance or the model's request quota.
+ */
+export declare interface StudyRecord {
+    readonly bytes: number;
+}
+
 /** Settles an admitted request once and propagates operational failure to its owner. */
 export declare class StudyRequest implements StudyTicket {
     #private;
@@ -1039,7 +1110,7 @@ export declare interface StudyRequestOptions {
 }
 
 /** Names a request's measured responsibility. */
-export declare type StudyRole = 'agent' | 'judge' | 'summary' | 'metadata' | 'tool';
+export declare type StudyRole = 'agent' | 'judge' | 'summary' | 'metadata' | 'maintenance' | 'tool';
 
 /** Holds the model context and generation allowance as separate measurements. */
 export declare interface StudyRoom {
@@ -1308,7 +1379,7 @@ export declare function validateStudyAgentUsage(usage: ProviderResult['usage'],
  * @param rubric - The independently held grading declaration
  * @param profile - The execution bounds and model room
  * @returns Nothing when every cross-input invariant holds
- * @throws StudyError - Thrown when any input or cross-reference is invalid
+ * @throws StudyError - Thrown when any input or cross-reference is invalid, or a quality study has no capacity qualification
  * @example
  * ```ts
  * validateStudyInputs(definition, scenarios, rubric, profile)

package/dist/src/core/index.d.ts

@@ -84,8 +84,8 @@ export declare function computeStudyOutputStop(bytes: number, limit: number, out
 export declare function computeStudyScores(manifest: StudyManifest, rubric: StudyRubric, grading: StudyGrading): readonly StudyScore[];
 
 /**
- * Records an error that escaped admitted work as the failure of its ticket.
- * @param ticket - The admitted request whose work escaped
+ * Records an error thrown by admitted work as the failure of its ticket.
+ * @param ticket - The admitted request whose work threw
  * @param error - The caught value, read through `readStudyFailure`
  * @param role - The responsibility that replaces any role the reading carries; Default: the carried role, else the ticket's admitted role
  * @remarks
@@ -94,7 +94,7 @@ export declare function computeStudyScores(manifest: StudyManifest, rubric: Stud
  * so the parent's ownership is respected rather than inferred as local settlement. A refusal
  * thrown by the ticket's own settlement propagates.
  * @throws Thrown when the ticket's settlement refuses the failure.
- * @example Fail an escaped request
+ * @example Fail an admitted request
  * ```ts
  * import type { StudyTicket } from '@orkestrel/study'
  * import { failStudyTicket } from '@orkestrel/study'
@@ -112,6 +112,17 @@ export declare function failStudyTicket(ticket: StudyTicket, error: unknown, rol
  */
 export declare function failureToStudyError(failure: StudyFailure): StudyError;
 
+/**
+ * Checks whether a value is a gauge with a finite positive scale and a finite nonnegative overhead.
+ * @param value - The candidate gauge; additional members are admitted
+ * @returns True if the gauge readings are finite and within their bounds; false otherwise
+ * @example
+ * ```ts
+ * isStudyAgentGauge({ scale: 1, overhead: 0 }) // true
+ * ```
+ */
+export declare function isStudyAgentGauge(value: unknown): value is LedgerGauge;
+
 /**
  * Checks whether a namespace exposes the Agent capabilities the instrumentation invokes.
  * @remarks
@@ -147,6 +158,16 @@ export declare const isStudyCause: Guard<StudyCause>;
  */
 export declare function isStudyCriterion(value: unknown): value is StudyCriterion;
 
+/** Checks whether an owned daemon declaration pins an absolute executable and distinct models.
+ * @param value - The candidate declaration.
+ * @returns True if executable, version, environment, and model identities are valid; false otherwise.
+ * @example
+ * ```ts
+ * isStudyDaemon({ executable: 'ollama' }) // false
+ * ```
+ */
+export declare function isStudyDaemon(value: unknown): value is StudyDaemon;
+
 /**
  * Checks whether a study freezes a complete arm order for every repetition.
  * @param value - The candidate definition
@@ -170,14 +191,15 @@ export declare function isStudyDefinition(value: unknown): value is StudyDefinit
 export declare function isStudyDigest(value: unknown): value is string;
 
 /**
- * Narrows a caught value to an attributable study error.
+ * Narrows a caught value to a branded study error with valid failure attribution.
  * @remarks
- * Recognition combines the native `Error` base, a subclass prototype, the fixed name, a declared
- * study code, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is the error itself.
+ * Recognition combines the native `Error` base, a subclass prototype, a declared study code,
+ * valid optional failure members, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is
+ * the error itself. Subclasses can replace the name.
  * The global key is recognized across package, ESM, CommonJS and captured module copies; it is
- * not unforgeable provenance. A transparent proxy is refused because its forwarded descriptor
+ * not proof of origin. A transparent proxy is refused because its forwarded descriptor
  * stores the target, and an unbranded copy, an inherited brand, or a property-only lookalike
- * stays outside the type. Hostile property access returns false instead of throwing.
+ * stays outside the type. Throwing property access returns false instead of throwing.
  * @param value - The caught value
  * @returns True if the value is a study error; false otherwise
  * @example
@@ -300,6 +322,12 @@ export declare function isStudyProfile(value: unknown): value is StudyProfile;
  */
 export declare function isStudyProvider(value: unknown): value is StudyProvider;
 
+/** Checks whether a recording declaration bounds every serialized sidecar byte.
+ * @param value - The candidate declaration.
+ * @returns True if its byte allowance is a positive safe integer; false otherwise.
+ */
+export declare function isStudyRecord(value: unknown): value is StudyRecord;
+
 /** Checks whether a value names a measured request role. */
 export declare const isStudyRole: Guard<StudyRole>;
 
@@ -521,8 +549,8 @@ export declare const STUDY_CAUSES: readonly StudyCause[];
  * Keys the own self-identity every study error stamps on itself.
  * @remarks
  * The global symbol registry lets every package, ESM, CommonJS and captured copy read the same
- * key. The registry makes the key discoverable; it is a recognition mechanism, not an
- * unforgeable provenance marker.
+ * key. The registry makes the key discoverable; it recognizes the contract without proving
+ * its origin.
  */
 export declare const STUDY_ERROR_BRAND: unique symbol;
 
@@ -743,6 +771,32 @@ export declare interface StudyCriterion {
     readonly assertion: JSONValue;
 }
 
+/** Pins an executable and the model population an execution owns until cleanup.
+ * @remarks
+ * Study owns this declaration independently of Ollama's server API. The executable is an absolute
+ * canonical path; digest is its SHA-256 and version is the exact expected version reply. The
+ * provider URL must be a dedicated loopback origin outside port 11434. Environment entries are
+ * explicit non-secret overrides, merged by case-folded name; the host owns OLLAMA_HOST. Models
+ * have distinct names and SHA-256 digests equal to the provider's model and judge pins; shared
+ * pins require one entry. Execution
+ * verifies identity before use, unloads this population before each trial, and stops and joins
+ * on every ending. Offline replay never creates this daemon.
+ */
+export declare interface StudyDaemon {
+    readonly executable: string;
+    readonly digest: string;
+    readonly version: string;
+    /** Holds explicit overrides with distinct case-folded names and no NUL characters. */
+    readonly environment?: Readonly<Record<string, string>> | undefined;
+    readonly models: readonly StudyDaemonModel[];
+}
+
+/** Pins one model the declared daemon verifies and unloads before each trial. */
+export declare interface StudyDaemonModel {
+    readonly name: string;
+    readonly digest: string;
+}
+
 /** Bounds each independent operation with a fresh failure owner and deadline. */
 export declare class StudyDeadline implements StudyDeadlineInterface {
     #private;
@@ -922,6 +976,8 @@ export declare interface StudyManifest {
     readonly bounds: StudyBounds;
     readonly qualification: string | undefined;
     readonly host: Readonly<Record<string, string>>;
+    /** Copies the profile's recording declaration before any trial starts. */
+    readonly record?: StudyRecord | undefined;
 }
 
 /** Admits request ceilings across every enclosing scope before dispatch. */
@@ -989,6 +1045,8 @@ export declare interface StudyProfile {
     readonly qualification: string | undefined;
     /** Holds driver-owned JSON; the driver owns its interpretation and Study only validates and owns the object. */
     readonly settings: Readonly<Record<string, JSONValue>> | undefined;
+    /** Requires one bounded exchange sidecar for every trial when present. */
+    readonly record?: StudyRecord | undefined;
 }
 
 /** Holds caller-selected provider artifacts and model identities. */
@@ -1004,11 +1062,24 @@ export declare interface StudyProvider {
         /** Pins the judge model; declared together with its name or both absent. */
         readonly judge: string | undefined;
     };
+    /** Declares an execution-owned daemon at this provider's dedicated URL. */
+    readonly daemon?: StudyDaemon;
 }
 
 /** Names the evidence a study can establish. */
 export declare type StudyPurpose = 'mechanism' | 'quality' | 'capacity';
 
+/** Bounds the serialized exchange sidecar retained for each scheduled trial.
+ * @remarks
+ * Bytes is a positive safe integer counting all UTF-8 JSONL bytes, including declarations,
+ * base64 expansion, terminal records, and LF separators. Recording is independent of passive
+ * observation. Sidecars have their own trial allowance and also consume series custody capacity;
+ * they do not consume the goal evidence allowance or the model's request quota.
+ */
+export declare interface StudyRecord {
+    readonly bytes: number;
+}
+
 /** Settles an admitted request once and propagates operational failure to its owner. */
 export declare class StudyRequest implements StudyTicket {
     #private;
@@ -1039,7 +1110,7 @@ export declare interface StudyRequestOptions {
 }
 
 /** Names a request's measured responsibility. */
-export declare type StudyRole = 'agent' | 'judge' | 'summary' | 'metadata' | 'tool';
+export declare type StudyRole = 'agent' | 'judge' | 'summary' | 'metadata' | 'maintenance' | 'tool';
 
 /** Holds the model context and generation allowance as separate measurements. */
 export declare interface StudyRoom {
@@ -1308,7 +1379,7 @@ export declare function validateStudyAgentUsage(usage: ProviderResult['usage'],
  * @param rubric - The independently held grading declaration
  * @param profile - The execution bounds and model room
  * @returns Nothing when every cross-input invariant holds
- * @throws StudyError - Thrown when any input or cross-reference is invalid
+ * @throws StudyError - Thrown when any input or cross-reference is invalid, or a quality study has no capacity qualification
  * @example
  * ```ts
  * validateStudyInputs(definition, scenarios, rubric, profile)

package/dist/src/core/index.js

@@ -1,4 +1,4 @@
-import { attempt, canonicalStringify, cloneJSONValue, holds, isArray, isError, isFiniteNumber, isJSONValue, isNonEmptyString, isObject, isRecord, literalOf } from "@orkestrel/contract";
+import { INTRINSICS, attempt, canonicalStringify, cloneJSONValue, holds, isArray, isError, isFiniteNumber, isJSONValue, isNonEmptyString, isNumber, isObject, isRecord, literalOf } from "@orkestrel/contract";
 import { MAX_TIMEOUT_MS, Timeout } from "@orkestrel/timeout";
 import { Budget, isBudgetError } from "@orkestrel/budget";
 import { Abort, linkSignal } from "@orkestrel/abort";
@@ -7,8 +7,8 @@ import { Abort, linkSignal } from "@orkestrel/abort";
 * Keys the own self-identity every study error stamps on itself.
 * @remarks
 * The global symbol registry lets every package, ESM, CommonJS and captured copy read the same
-* key. The registry makes the key discoverable; it is a recognition mechanism, not an
-* unforgeable provenance marker.
+* key. The registry makes the key discoverable; it recognizes the contract without proving
+* its origin.
 */
 var STUDY_ERROR_BRAND = Symbol.for("@orkestrel/study.error");
 /** Caps a declared trial population before schedule allocation. */
@@ -23,6 +23,7 @@ var STUDY_ROLES = Object.freeze([
 	"judge",
 	"summary",
 	"metadata",
+	"maintenance",
 	"tool"
 ]);
 /** Lists every ceiling a run can stop at in report order. */
@@ -66,16 +67,18 @@ function omitStudyAbsent(value) {
 * ```
 */
 function normalizeStudyProfile(profile) {
-	const { provider, qualification, settings, room, ...required } = profile;
+	const { provider, qualification, settings, record, room, ...required } = profile;
 	return {
 		...required,
 		room: omitStudyAbsent(room),
 		...provider === void 0 ? {} : { provider: {
 			...omitStudyAbsent(provider),
-			digest: omitStudyAbsent(provider.digest)
+			digest: omitStudyAbsent(provider.digest),
+			...provider.daemon === void 0 ? {} : { daemon: omitStudyAbsent(provider.daemon) }
 		} },
 		...qualification === void 0 ? {} : { qualification },
-		...settings === void 0 ? {} : { settings }
+		...settings === void 0 ? {} : { settings },
+		...record === void 0 ? {} : { record }
 	};
 }
 /**
@@ -149,7 +152,7 @@ function buildStudySchedule(definition, scenarios) {
 * @param rubric - The independently held grading declaration
 * @param profile - The execution bounds and model room
 * @returns Nothing when every cross-input invariant holds
-* @throws StudyError - Thrown when any input or cross-reference is invalid
+* @throws StudyError - Thrown when any input or cross-reference is invalid, or a quality study has no capacity qualification
 * @example
 * ```ts
 * validateStudyInputs(definition, scenarios, rubric, profile)
@@ -166,6 +169,7 @@ function validateStudyInputs(definition, scenarios, rubric, profile) {
 	}
 	const covered = new Set(rubric.criteria.map((criterion) => canonicalStringify([criterion.scenario, criterion.goal]) ?? ""));
 	for (const scenario of scenarios) for (const goal of scenario.goals) if (!covered.has(canonicalStringify([scenario.id, goal.id]) ?? "")) throw new StudyError("CONFIG", "Every declared goal needs a criterion");
+	if (definition.purpose === "quality" && profile.qualification === void 0) throw new StudyError("CONFIG", "Quality studies require a capacity qualification");
 }
 /**
 * Computes arm intervals over the complete declared criterion horizon.
@@ -416,15 +420,46 @@ function isStudyProvider(value) {
 			"url",
 			"model",
 			"digest"
-		], ["judge"]) || ![
+		], ["judge", "daemon"]) || ![
 			"entry",
 			"url",
 			"model"
 		].every((key) => isNonEmptyString(value[key])) || typeof value.url !== "string" || !isRecord(value.digest) || !matchesStudyKeys(value.digest, ["model"], ["judge"]) || !isStudyDigest(value.digest.model) || value.judge === void 0 !== (value.digest.judge === void 0) || value.judge !== void 0 && (!isNonEmptyString(value.judge) || !isStudyDigest(value.digest.judge))) return false;
 		const url = new URL(value.url);
+		if (value.daemon !== void 0) {
+			if (!isStudyDaemon(value.daemon) || !/^http:\/\/127\.0\.0\.1:[0-9]+\/?$/.test(value.url) || Number(url.port) <= 0 || Number(url.port) === 11434) return false;
+			const daemon = value.daemon;
+			const digest = value.digest;
+			if (!daemon.models.every((model) => model.name === value.model && model.digest === digest.model || value.judge !== void 0 && model.name === value.judge && model.digest === digest.judge) || !daemon.models.some((model) => model.name === value.model && model.digest === digest.model) || value.judge !== void 0 && !daemon.models.some((model) => model.name === value.judge && model.digest === digest.judge)) return false;
+		}
 		return ["http:", "https:"].includes(url.protocol) && url.username === "" && url.password === "" && url.search === "" && url.hash === "" && url.pathname === "/";
 	});
 }
+/** Checks whether an owned daemon declaration pins an absolute executable and distinct models.
+* @param value - The candidate declaration.
+* @returns True if executable, version, environment, and model identities are valid; false otherwise.
+* @example
+* ```ts
+* isStudyDaemon({ executable: 'ollama' }) // false
+* ```
+*/
+function isStudyDaemon(value) {
+	return holds(() => {
+		if (!isRecord(value) || !matchesStudyKeys(value, [
+			"executable",
+			"digest",
+			"version",
+			"models"
+		], ["environment"]) || typeof value.executable !== "string" || !/^(?:[A-Za-z]:[\\/]|\/(?!\/)|\\\\[^\\]+\\[^\\]+\\)/.test(value.executable) || value.executable.includes("\0") || value.executable.split(/[\\/]/).some((part) => part === "." || part === "..") || !isStudyDigest(value.digest) || !isNonEmptyString(value.version) || value.version.trim().length === 0 || value.version.includes("\0") || !isArray(value.models) || value.models.length === 0 || !value.models.every((model) => isRecord(model) && matchesStudyKeys(model, ["name", "digest"]) && isNonEmptyString(model.name) && model.name.trim().length > 0 && !model.name.includes("\0") && isStudyDigest(model.digest))) return false;
+		if (new Set(value.models.map((model) => isRecord(model) ? model.name : void 0)).size !== value.models.length) return false;
+		if (value.environment !== void 0) {
+			if (!isRecord(value.environment) || !matchesStudyKeys(value.environment, [], Object.keys(value.environment))) return false;
+			const entries = Object.entries(value.environment);
+			if (new Set(entries.map(([name]) => name.toLowerCase())).size !== entries.length || entries.some(([name, entry]) => name.length === 0 || /[=\0]/.test(name) || typeof entry !== "string" || entry.includes("\0"))) return false;
+		}
+		return true;
+	});
+}
 /**
 * Checks whether a profile carries finite bounds and an optional explicit provider.
 * @param value - The candidate profile
@@ -446,10 +481,18 @@ function isStudyProfile(value) {
 		], [
 			"provider",
 			"qualification",
-			"settings"
-		]) && isStudyName(value.name) && isNonEmptyString(value.agent) && isArray(value.roots) && isJSONValue(value.roots) && value.roots.length > 0 && value.roots.every((root) => typeof root === "string" && root.trim().length > 0) && new Set(value.roots).size === value.roots.length && isNonEmptyString(value.subject) && isStudyBounds(value.bounds) && isStudyRoom(value.room) && (value.provider === void 0 || isStudyProvider(value.provider)) && (value.qualification === void 0 || isNonEmptyString(value.qualification)) && (value.settings === void 0 || isRecord(value.settings) && isJSONValue(value.settings));
+			"settings",
+			"record"
+		]) && isStudyName(value.name) && isNonEmptyString(value.agent) && isArray(value.roots) && isJSONValue(value.roots) && value.roots.length > 0 && value.roots.every((root) => typeof root === "string" && root.trim().length > 0) && new Set(value.roots).size === value.roots.length && isNonEmptyString(value.subject) && isStudyBounds(value.bounds) && isStudyRoom(value.room) && (value.provider === void 0 || isStudyProvider(value.provider)) && (value.record === void 0 || isStudyRecord(value.record)) && (value.qualification === void 0 || isNonEmptyString(value.qualification)) && (value.settings === void 0 || isRecord(value.settings) && isJSONValue(value.settings));
 	});
 }
+/** Checks whether a recording declaration bounds every serialized sidecar byte.
+* @param value - The candidate declaration.
+* @returns True if its byte allowance is a positive safe integer; false otherwise.
+*/
+function isStudyRecord(value) {
+	return holds(() => isRecord(value) && matchesStudyKeys(value, ["bytes"]) && typeof value.bytes === "number" && Number.isSafeInteger(value.bytes) && value.bytes > 0);
+}
 /**
 * Checks whether a byte identity is a lowercase SHA-256 digest.
 * @param value - The candidate identity
@@ -630,8 +673,10 @@ var StudyError = class extends Error {
 	*/
 	constructor(code, message, failure) {
 		super(message);
-		Object.defineProperty(this, STUDY_ERROR_BRAND, {
+		INTRINSICS.define(this, STUDY_ERROR_BRAND, {
 			value: this,
+			enumerable: false,
+			writable: false,
 			configurable: true
 		});
 		this.name = "StudyError";
@@ -640,14 +685,15 @@ var StudyError = class extends Error {
 	}
 };
 /**
-* Narrows a caught value to an attributable study error.
+* Narrows a caught value to a branded study error with valid failure attribution.
 * @remarks
-* Recognition combines the native `Error` base, a subclass prototype, the fixed name, a declared
-* study code, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is the error itself.
+* Recognition combines the native `Error` base, a subclass prototype, a declared study code,
+* valid optional failure members, and an own {@link STUDY_ERROR_BRAND} descriptor whose value is
+* the error itself. Subclasses can replace the name.
 * The global key is recognized across package, ESM, CommonJS and captured module copies; it is
-* not unforgeable provenance. A transparent proxy is refused because its forwarded descriptor
+* not proof of origin. A transparent proxy is refused because its forwarded descriptor
 * stores the target, and an unbranded copy, an inherited brand, or a property-only lookalike
-* stays outside the type. Hostile property access returns false instead of throwing.
+* stays outside the type. Throwing property access returns false instead of throwing.
 * @param value - The caught value
 * @returns True if the value is a study error; false otherwise
 * @example
@@ -656,7 +702,28 @@ var StudyError = class extends Error {
 * ```
 */
 function isStudyError(value) {
-	return isError(value) && holds(() => Object.getPrototypeOf(value) !== Error.prototype && value.name === "StudyError" && Object.getOwnPropertyDescriptor(value, STUDY_ERROR_BRAND)?.value === value && "code" in value && isStudyErrorCode(value.code));
+	return holds(() => {
+		if (!(value instanceof INTRINSICS.error) || INTRINSICS.prototype(value) === INTRINSICS.error.prototype) return false;
+		const brand = INTRINSICS.describe(value, STUDY_ERROR_BRAND)?.value;
+		const code = INTRINSICS.reflect.read(value, "code");
+		const failure = INTRINSICS.reflect.read(value, "failure");
+		const stack = INTRINSICS.reflect.read(value, "stack");
+		if (brand !== value || !isStudyErrorCode(code) || typeof INTRINSICS.reflect.read(value, "name") !== "string" || typeof INTRINSICS.reflect.read(value, "message") !== "string" || stack !== void 0 && typeof stack !== "string") return false;
+		if (failure === void 0) return true;
+		if (!isObject(failure)) return false;
+		const cause = INTRINSICS.reflect.read(failure, "cause");
+		const message = INTRINSICS.reflect.read(failure, "message");
+		const role = INTRINSICS.reflect.read(failure, "role");
+		const stop = INTRINSICS.reflect.read(failure, "stop");
+		if (!isStudyCause(cause) || typeof message !== "string" || role !== void 0 && !isStudyRole(role)) return false;
+		if (stop === void 0) return true;
+		if (!isObject(stop)) return false;
+		const layer = INTRINSICS.reflect.read(stop, "layer");
+		const id = INTRINSICS.reflect.read(stop, "id");
+		const max = INTRINSICS.reflect.read(stop, "max");
+		const consumed = INTRINSICS.reflect.read(stop, "consumed");
+		return isStudyLayer(layer) && typeof id === "string" && (max === void 0 || isNumber(max)) && (consumed === void 0 || isNumber(consumed));
+	});
 }
 //#endregion
 //#region src/core/parsers.ts
@@ -920,8 +987,8 @@ function computeStudyOutputStop(bytes, limit, outputs) {
 	};
 }
 /**
-* Records an error that escaped admitted work as the failure of its ticket.
-* @param ticket - The admitted request whose work escaped
+* Records an error thrown by admitted work as the failure of its ticket.
+* @param ticket - The admitted request whose work threw
 * @param error - The caught value, read through `readStudyFailure`
 * @param role - The responsibility that replaces any role the reading carries; Default: the carried role, else the ticket's admitted role
 * @remarks
@@ -930,7 +997,7 @@ function computeStudyOutputStop(bytes, limit, outputs) {
 * so the parent's ownership is respected rather than inferred as local settlement. A refusal
 * thrown by the ticket's own settlement propagates.
 * @throws Thrown when the ticket's settlement refuses the failure.
-* @example Fail an escaped request
+* @example Fail an admitted request
 * ```ts
 * import type { StudyTicket } from '@orkestrel/study'
 * import { failStudyTicket } from '@orkestrel/study'
@@ -1876,6 +1943,22 @@ function buildStudyAgentDispatch(dispatch) {
 //#endregion
 //#region src/core/agents/validators.ts
 /**
+* Checks whether a value is a gauge with a finite positive scale and a finite nonnegative overhead.
+* @param value - The candidate gauge; additional members are admitted
+* @returns True if the gauge readings are finite and within their bounds; false otherwise
+* @example
+* ```ts
+* isStudyAgentGauge({ scale: 1, overhead: 0 }) // true
+* ```
+*/
+function isStudyAgentGauge(value) {
+	return holds(() => {
+		if (!isObject(value) || !("scale" in value) || !("overhead" in value)) return false;
+		const { scale, overhead } = value;
+		return isFiniteNumber(scale) && scale > 0 && isFiniteNumber(overhead) && overhead >= 0;
+	});
+}
+/**
 * Checks whether a namespace exposes the Agent capabilities the instrumentation invokes.
 * @remarks
 * The guard reads only `estimateRequest`, `measureRequest`, and `isAgentError`, so a namespace
@@ -1995,6 +2078,6 @@ var StudyAgentJudge = class {
 	}
 };
 //#endregion
-export { STUDY_CAUSES, STUDY_ERROR_BRAND, STUDY_GOALS, STUDY_LAYERS, STUDY_NAME, STUDY_ROLES, STUDY_TRIALS, StudyAgentJudge, StudyAgentObserver, StudyControl, StudyDeadline, StudyError, StudyMeter, StudyRequest, StudyScope, StudySeries, buildStudyAgentDispatch, buildStudyAgentParts, buildStudySchedule, computeStudyAdmittedStop, computeStudyOutputStop, computeStudyScores, failStudyTicket, failureToStudyError, isStudyAgentRuntime, isStudyBounds, isStudyCause, isStudyCriterion, isStudyDefinition, isStudyDigest, isStudyError, isStudyErrorCode, isStudyGoal, isStudyGrading, isStudyJudgment, isStudyLabeling, isStudyLayer, isStudyLimit, isStudyName, isStudyProduct, isStudyProfile, isStudyProvider, isStudyRole, isStudyRoom, isStudyRubric, isStudyScenario, isStudyStop, isStudyTimestamp, isStudyUsage, matchesStudyKeys, normalizeStudyProfile, omitStudyAbsent, parseStudyDefinition, parseStudyGrading, parseStudyLabeling, parseStudyProfile, parseStudyReading, parseStudyRubric, parseStudyScenario, projectStudyAgentRequest, readStudyFailure, studyStopToJSON, translateStudyAgentError, translateStudyAgentStop, validateStudyAgentUsage, validateStudyInputs };
+export { STUDY_CAUSES, STUDY_ERROR_BRAND, STUDY_GOALS, STUDY_LAYERS, STUDY_NAME, STUDY_ROLES, STUDY_TRIALS, StudyAgentJudge, StudyAgentObserver, StudyControl, StudyDeadline, StudyError, StudyMeter, StudyRequest, StudyScope, StudySeries, buildStudyAgentDispatch, buildStudyAgentParts, buildStudySchedule, computeStudyAdmittedStop, computeStudyOutputStop, computeStudyScores, failStudyTicket, failureToStudyError, isStudyAgentGauge, isStudyAgentRuntime, isStudyBounds, isStudyCause, isStudyCriterion, isStudyDaemon, isStudyDefinition, isStudyDigest, isStudyError, isStudyErrorCode, isStudyGoal, isStudyGrading, isStudyJudgment, isStudyLabeling, isStudyLayer, isStudyLimit, isStudyName, isStudyProduct, isStudyProfile, isStudyProvider, isStudyRecord, isStudyRole, isStudyRoom, isStudyRubric, isStudyScenario, isStudyStop, isStudyTimestamp, isStudyUsage, matchesStudyKeys, normalizeStudyProfile, omitStudyAbsent, parseStudyDefinition, parseStudyGrading, parseStudyLabeling, parseStudyProfile, parseStudyReading, parseStudyRubric, parseStudyScenario, projectStudyAgentRequest, readStudyFailure, studyStopToJSON, translateStudyAgentError, translateStudyAgentStop, validateStudyAgentUsage, validateStudyInputs };
 
 //# sourceMappingURL=index.js.map