@osstack/protocol 0.20.0 → 0.22.0

package/dist/graph.d.ts

@@ -440,17 +440,17 @@ export declare const GraphResult: z.ZodEffects<z.ZodDiscriminatedUnion<"kind", [
     schemaVersion: z.ZodLiteral<1>;
     kind: z.ZodLiteral<"review">;
 }, "strict", z.ZodTypeAny, {
+    verdict: "changes_requested" | "accept";
     kind: "review";
     schemaVersion: 1;
     candidateRevision: string;
-    verdict: "accept" | "changes_requested";
     evidenceRefs: string[];
     evidenceDigest: string;
 }, {
+    verdict: "changes_requested" | "accept";
     kind: "review";
     schemaVersion: 1;
     candidateRevision: string;
-    verdict: "accept" | "changes_requested";
     evidenceRefs: string[];
     evidenceDigest: string;
 }>, z.ZodObject<{
@@ -525,10 +525,10 @@ export declare const GraphResult: z.ZodEffects<z.ZodDiscriminatedUnion<"kind", [
     artifactRefs: string[];
     artifactDigest: string;
 } | {
+    verdict: "changes_requested" | "accept";
     kind: "review";
     schemaVersion: 1;
     candidateRevision: string;
-    verdict: "accept" | "changes_requested";
     evidenceRefs: string[];
     evidenceDigest: string;
 } | {
@@ -697,13 +697,18 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -726,11 +731,6 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -740,13 +740,18 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -769,11 +774,6 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -783,13 +783,18 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }>, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -812,11 +817,6 @@ export declare const StartGraphRequest: z.ZodEffects<z.ZodObject<{
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -846,13 +846,13 @@ export declare const ResumeGraphRequest: z.ZodEffects<z.ZodObject<{
         outcome: z.ZodEnum<["applied", "not_applied", "unknown"]>;
         evidenceRefs: z.ZodArray<z.ZodString, "many">;
     }, "strict", z.ZodTypeAny, {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     }, {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     }>]>;
     schemaVersion: z.ZodLiteral<1>;
     scope: z.ZodObject<{
@@ -898,20 +898,20 @@ export declare const ResumeGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -926,20 +926,20 @@ export declare const ResumeGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -954,20 +954,20 @@ export declare const ResumeGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }>, {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -1031,13 +1031,13 @@ export declare const CancelGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1050,13 +1050,13 @@ export declare const CancelGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1069,13 +1069,13 @@ export declare const CancelGraphRequest: z.ZodEffects<z.ZodObject<{
         requestedAt?: string | undefined;
     } | undefined;
 }>, {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1233,13 +1233,18 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -1262,11 +1267,6 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -1276,13 +1276,18 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -1305,11 +1310,6 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -1337,13 +1337,13 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         outcome: z.ZodEnum<["applied", "not_applied", "unknown"]>;
         evidenceRefs: z.ZodArray<z.ZodString, "many">;
     }, "strict", z.ZodTypeAny, {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     }, {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     }>]>;
     schemaVersion: z.ZodLiteral<1>;
     scope: z.ZodObject<{
@@ -1389,20 +1389,20 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -1417,20 +1417,20 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -1492,13 +1492,13 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1511,13 +1511,13 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1530,13 +1530,18 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 }>]>, {
-    kind: "start";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    source: {
+        product: "osstack" | "osbot" | "ostag";
+        requestId: string;
+        parentRunId?: string | undefined;
+    };
+    kind: "start";
     schemaVersion: 1;
     spec: {
         input: {
@@ -1559,11 +1564,6 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         publication: "artifact_only";
     };
     inputArtifactRef: string;
-    source: {
-        product: "osstack" | "osbot" | "ostag";
-        requestId: string;
-        parentRunId?: string | undefined;
-    };
     idempotencyKey: string;
     metadata?: {
         trace?: {
@@ -1573,20 +1573,20 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 } | {
-    kind: "resume";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "resume";
     input: {
         value: GraphJsonValue;
         kind: "data";
     } | {
+        outcome: "unknown" | "applied" | "not_applied";
         kind: "reconciliation";
         evidenceRefs: string[];
-        outcome: "unknown" | "applied" | "not_applied";
     };
     schemaVersion: 1;
     idempotencyKey: string;
@@ -1601,13 +1601,13 @@ export declare const GraphRequest: z.ZodEffects<z.ZodDiscriminatedUnion<"kind",
         requestedAt?: string | undefined;
     } | undefined;
 } | {
-    kind: "cancel";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "cancel";
     schemaVersion: 1;
     idempotencyKey: string;
     graphRunId: string;
@@ -1869,13 +1869,13 @@ export declare const WorkerActionRequest: z.ZodEffects<z.ZodObject<{
         kind: "workspace_release";
         workspaceLeaseRef: string;
     };
-    kind: "worker_action";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "worker_action";
     schemaVersion: 1;
     nodeId: string;
     epoch: number;
@@ -1924,13 +1924,13 @@ export declare const WorkerActionRequest: z.ZodEffects<z.ZodObject<{
         kind: "workspace_release";
         workspaceLeaseRef: string;
     };
-    kind: "worker_action";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "worker_action";
     schemaVersion: 1;
     nodeId: string;
     epoch: number;
@@ -1979,13 +1979,13 @@ export declare const WorkerActionRequest: z.ZodEffects<z.ZodObject<{
         kind: "workspace_release";
         workspaceLeaseRef: string;
     };
-    kind: "worker_action";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "worker_action";
     schemaVersion: 1;
     nodeId: string;
     epoch: number;
@@ -2104,17 +2104,17 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             schemaVersion: z.ZodLiteral<1>;
             kind: z.ZodLiteral<"review">;
         }, "strict", z.ZodTypeAny, {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         }, {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         }>, z.ZodObject<{
@@ -2179,6 +2179,7 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             receiptRef: string;
         }>]>;
     }, "strict", z.ZodTypeAny, {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -2191,10 +2192,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -2218,8 +2219,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     }, {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -2232,10 +2233,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -2259,7 +2260,6 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     }>, z.ZodObject<{
         state: z.ZodLiteral<"intent">;
     }, "strict", z.ZodTypeAny, {
@@ -2333,6 +2333,7 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             actionId?: string | undefined;
         }>]>;
     }, "strict", z.ZodTypeAny, {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2352,8 +2353,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     }, {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2373,7 +2374,6 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     }>, z.ZodObject<{
         state: z.ZodLiteral<"unknown">;
         error: z.ZodUnion<[z.ZodObject<{
@@ -2460,6 +2460,7 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
         }>]>;
         reconciliationRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2488,9 +2489,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     }, {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2519,7 +2520,6 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     }>, z.ZodObject<{
         state: z.ZodLiteral<"cancel_pending">;
@@ -2607,6 +2607,7 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
         }>]>;
         executionRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2635,9 +2636,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     }, {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2666,7 +2667,6 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     }>, z.ZodObject<{
         state: z.ZodLiteral<"reconciliation_required">;
@@ -2754,6 +2754,7 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
         }>]>;
         reconciliationRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2782,9 +2783,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     }, {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2813,17 +2814,16 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     }>, z.ZodObject<{
         state: z.ZodLiteral<"cancelled">;
         receiptRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        receiptRef: string;
         state: "cancelled";
-    }, {
         receiptRef: string;
+    }, {
         state: "cancelled";
+        receiptRef: string;
     }>]>;
     metadata: z.ZodOptional<z.ZodObject<{
         trace: z.ZodOptional<z.ZodObject<{
@@ -2851,10 +2851,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
         requestedAt?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
-    kind: "worker_action_response";
-    schemaVersion: 1;
-    requestId: string;
     outcome: {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -2867,10 +2865,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -2894,13 +2892,13 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     } | {
         state: "intent";
     } | {
         state: "running";
         executionRef: string;
     } | {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2920,8 +2918,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     } | {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2950,9 +2948,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     } | {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -2981,9 +2979,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     } | {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3012,12 +3010,14 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     } | {
-        receiptRef: string;
         state: "cancelled";
+        receiptRef: string;
     };
+    kind: "worker_action_response";
+    schemaVersion: 1;
+    requestId: string;
     generation: number;
     effect: {
         scope: {
@@ -3042,10 +3042,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
         requestedAt?: string | undefined;
     } | undefined;
 }, {
-    kind: "worker_action_response";
-    schemaVersion: 1;
-    requestId: string;
     outcome: {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -3058,10 +3056,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -3085,13 +3083,13 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     } | {
         state: "intent";
     } | {
         state: "running";
         executionRef: string;
     } | {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3111,8 +3109,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     } | {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3141,9 +3139,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     } | {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3172,9 +3170,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     } | {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3203,12 +3201,14 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     } | {
-        receiptRef: string;
         state: "cancelled";
+        receiptRef: string;
     };
+    kind: "worker_action_response";
+    schemaVersion: 1;
+    requestId: string;
     generation: number;
     effect: {
         scope: {
@@ -3383,10 +3383,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
     schemaVersion: 1;
     requestId: string;
 }>]>, {
-    kind: "worker_action_response";
-    schemaVersion: 1;
-    requestId: string;
     outcome: {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -3399,10 +3397,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -3426,13 +3424,13 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     } | {
         state: "intent";
     } | {
         state: "running";
         executionRef: string;
     } | {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3452,8 +3450,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     } | {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3482,9 +3480,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     } | {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3513,9 +3511,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     } | {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3544,12 +3542,14 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     } | {
-        receiptRef: string;
         state: "cancelled";
+        receiptRef: string;
     };
+    kind: "worker_action_response";
+    schemaVersion: 1;
+    requestId: string;
     generation: number;
     effect: {
         scope: {
@@ -3606,10 +3606,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
     schemaVersion: 1;
     requestId: string;
 }, {
-    kind: "worker_action_response";
-    schemaVersion: 1;
-    requestId: string;
     outcome: {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -3622,10 +3620,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -3649,13 +3647,13 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     } | {
         state: "intent";
     } | {
         state: "running";
         executionRef: string;
     } | {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3675,8 +3673,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     } | {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3705,9 +3703,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     } | {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3736,9 +3734,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     } | {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3767,12 +3765,14 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     } | {
-        receiptRef: string;
         state: "cancelled";
+        receiptRef: string;
     };
+    kind: "worker_action_response";
+    schemaVersion: 1;
+    requestId: string;
     generation: number;
     effect: {
         scope: {
@@ -3829,10 +3829,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
     schemaVersion: 1;
     requestId: string;
 }>, {
-    kind: "worker_action_response";
-    schemaVersion: 1;
-    requestId: string;
     outcome: {
+        state: "confirmed";
         result: {
             kind: "implementation_complete";
             schemaVersion: 1;
@@ -3845,10 +3843,10 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             artifactRefs: string[];
             artifactDigest: string;
         } | {
+            verdict: "changes_requested" | "accept";
             kind: "review";
             schemaVersion: 1;
             candidateRevision: string;
-            verdict: "accept" | "changes_requested";
             evidenceRefs: string[];
             evidenceDigest: string;
         } | {
@@ -3872,13 +3870,13 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             workspaceLeaseRef: string;
             receiptRef: string;
         };
-        state: "confirmed";
     } | {
         state: "intent";
     } | {
         state: "running";
         executionRef: string;
     } | {
+        state: "failed";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3898,8 +3896,8 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "failed";
     } | {
+        state: "unknown";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3928,9 +3926,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "unknown";
         reconciliationRef: string;
     } | {
+        state: "cancel_pending";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3959,9 +3957,9 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "cancel_pending";
         executionRef: string;
     } | {
+        state: "reconciliation_required";
         error: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -3990,12 +3988,14 @@ export declare const WorkerActionResponse: z.ZodEffects<z.ZodEffects<z.ZodDiscri
             epoch?: number | undefined;
             actionId?: string | undefined;
         };
-        state: "reconciliation_required";
         reconciliationRef: string;
     } | {
-        receiptRef: string;
         state: "cancelled";
+        receiptRef: string;
     };
+    kind: "worker_action_response";
+    schemaVersion: 1;
+    requestId: string;
     generation: number;
     effect: {
         scope: {
@@ -4310,6 +4310,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
     specHash: z.ZodString;
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
+    admissionBinding: z.ZodOptional<z.ZodObject<{
+        requestInputDigest: z.ZodString;
+        hostInputDigest: z.ZodString;
+        contractDigest: z.ZodString;
+        policyDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }>>;
     publication: z.ZodLiteral<"artifact_only">;
     phase: z.ZodString;
     budget: z.ZodObject<{
@@ -4404,22 +4420,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         }>;
         requestRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }>>;
     error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -4531,19 +4547,24 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    candidate: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -4561,11 +4582,6 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    candidate: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
-    };
     resultRef: string;
     delivery: "available";
     error?: {
@@ -4596,14 +4612,20 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    } | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -4620,19 +4642,24 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    candidate: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -4650,11 +4677,6 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    candidate: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
-    };
     resultRef: string;
     delivery: "available";
     error?: {
@@ -4685,14 +4707,20 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    } | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -4738,6 +4766,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
     specHash: z.ZodString;
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
+    admissionBinding: z.ZodOptional<z.ZodObject<{
+        requestInputDigest: z.ZodString;
+        hostInputDigest: z.ZodString;
+        contractDigest: z.ZodString;
+        policyDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }>>;
     publication: z.ZodLiteral<"artifact_only">;
     phase: z.ZodString;
     budget: z.ZodObject<{
@@ -4847,22 +4891,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         }>;
         requestRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }>>;
     error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -4959,19 +5003,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -4990,6 +5034,11 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         accountingBlocked: boolean;
     };
     delivery: "delivery_unknown";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5018,20 +5067,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5048,19 +5098,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5079,6 +5129,11 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         accountingBlocked: boolean;
     };
     delivery: "delivery_unknown";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5107,20 +5162,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5166,6 +5222,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
     specHash: z.ZodString;
     createdAt: z.ZodNumber;
     updatedAt: z.ZodNumber;
+    admissionBinding: z.ZodOptional<z.ZodObject<{
+        requestInputDigest: z.ZodString;
+        hostInputDigest: z.ZodString;
+        contractDigest: z.ZodString;
+        policyDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }, {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    }>>;
     publication: z.ZodLiteral<"artifact_only">;
     phase: z.ZodString;
     budget: z.ZodObject<{
@@ -5275,22 +5347,22 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         }>;
         requestRef: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }, {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     }>>;
     error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -5387,19 +5459,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5417,7 +5489,12 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    delivery: "pending" | "delivery_unknown";
+    delivery: "delivery_unknown" | "pending";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5446,20 +5523,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5476,19 +5554,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5506,7 +5584,12 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    delivery: "pending" | "delivery_unknown";
+    delivery: "delivery_unknown" | "pending";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5535,20 +5618,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5565,19 +5649,24 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    candidate: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5595,11 +5684,6 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    candidate: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
-    };
     resultRef: string;
     delivery: "available";
     error?: {
@@ -5630,14 +5714,20 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    } | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5654,19 +5744,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5685,6 +5775,11 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         accountingBlocked: boolean;
     };
     delivery: "delivery_unknown";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5713,20 +5808,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5743,19 +5839,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5773,7 +5869,12 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    delivery: "pending" | "delivery_unknown";
+    delivery: "delivery_unknown" | "pending";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5802,20 +5903,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5832,19 +5934,24 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    candidate: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5862,11 +5969,6 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    candidate: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
-    };
     resultRef: string;
     delivery: "available";
     error?: {
@@ -5897,14 +5999,20 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    } | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -5921,19 +6029,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -5952,6 +6060,11 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         accountingBlocked: boolean;
     };
     delivery: "delivery_unknown";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -5980,20 +6093,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -6010,19 +6124,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -6040,7 +6154,12 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    delivery: "pending" | "delivery_unknown";
+    delivery: "delivery_unknown" | "pending";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -6069,20 +6188,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -6099,19 +6219,24 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    candidate: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -6129,11 +6254,6 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    candidate: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
-    };
     resultRef: string;
     delivery: "available";
     error?: {
@@ -6164,14 +6284,20 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
+    } | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -6188,19 +6314,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -6219,6 +6345,11 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         accountingBlocked: boolean;
     };
     delivery: "delivery_unknown";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -6247,20 +6378,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -6277,19 +6409,19 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         principalId: string;
         workspaceId: string;
     };
-    schemaVersion: 1;
-    publication: "artifact_only";
-    evidenceRefs: string[];
+    revision: number;
     source: {
         product: "osstack" | "osbot" | "ostag";
         requestId: string;
         parentRunId?: string | undefined;
     };
+    schemaVersion: 1;
+    publication: "artifact_only";
+    evidenceRefs: string[];
     graphRunId: string;
     specHash: string;
     generation: number;
     inputDigest: string;
-    revision: number;
     createdAt: number;
     updatedAt: number;
     budget: {
@@ -6307,7 +6439,12 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         chargedTokens: string;
         accountingBlocked: boolean;
     };
-    delivery: "pending" | "delivery_unknown";
+    delivery: "delivery_unknown" | "pending";
+    candidate?: {
+        candidateRevision: string;
+        artifactRefs: string[];
+        artifactDigest: string;
+    } | undefined;
     error?: {
         code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
         message: string;
@@ -6336,20 +6473,21 @@ export declare const GraphDelegationStatus: z.ZodEffects<z.ZodEffects<z.ZodDiscr
         epoch?: number | undefined;
         actionId?: string | undefined;
     } | undefined;
-    candidate?: {
-        candidateRevision: string;
-        artifactRefs: string[];
-        artifactDigest: string;
+    admissionBinding?: {
+        requestInputDigest: string;
+        hostInputDigest: string;
+        contractDigest: string;
+        policyDigest: string;
     } | undefined;
     resultRef?: string | undefined;
     authorization?: {
-        kind: "needs_authorization";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "needs_authorization";
         requestRef: string;
     } | undefined;
     interrupt?: {
@@ -6384,39 +6522,39 @@ export declare const GraphDeliveryUnknown: z.ZodEffects<z.ZodObject<{
     graphRunId: z.ZodOptional<z.ZodString>;
     nextAction: z.ZodLiteral<"retry_same_request">;
 }, "strict", z.ZodTypeAny, {
-    kind: "delivery_unknown";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "delivery_unknown";
     schemaVersion: 1;
     nextAction: "retry_same_request";
     idempotencyKey: string;
     inputDigest: string;
     graphRunId?: string | undefined;
 }, {
-    kind: "delivery_unknown";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "delivery_unknown";
     schemaVersion: 1;
     nextAction: "retry_same_request";
     idempotencyKey: string;
     inputDigest: string;
     graphRunId?: string | undefined;
 }>, {
-    kind: "delivery_unknown";
     scope: {
         schemaVersion: 1;
         tenantId: string;
         principalId: string;
         workspaceId: string;
     };
+    kind: "delivery_unknown";
     schemaVersion: 1;
     nextAction: "retry_same_request";
     idempotencyKey: string;
@@ -6740,17 +6878,17 @@ export declare const GraphProtocol: z.ZodObject<{
         schemaVersion: z.ZodLiteral<1>;
         kind: z.ZodLiteral<"review">;
     }, "strict", z.ZodTypeAny, {
+        verdict: "changes_requested" | "accept";
         kind: "review";
         schemaVersion: 1;
         candidateRevision: string;
-        verdict: "accept" | "changes_requested";
         evidenceRefs: string[];
         evidenceDigest: string;
     }, {
+        verdict: "changes_requested" | "accept";
         kind: "review";
         schemaVersion: 1;
         candidateRevision: string;
-        verdict: "accept" | "changes_requested";
         evidenceRefs: string[];
         evidenceDigest: string;
     }>, z.ZodObject<{
@@ -6825,10 +6963,10 @@ export declare const GraphProtocol: z.ZodObject<{
         artifactRefs: string[];
         artifactDigest: string;
     } | {
+        verdict: "changes_requested" | "accept";
         kind: "review";
         schemaVersion: 1;
         candidateRevision: string;
-        verdict: "accept" | "changes_requested";
         evidenceRefs: string[];
         evidenceDigest: string;
     } | {
@@ -6996,13 +7134,18 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
-        kind: "start";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        source: {
+            product: "osstack" | "osbot" | "ostag";
+            requestId: string;
+            parentRunId?: string | undefined;
+        };
+        kind: "start";
         schemaVersion: 1;
         spec: {
             input: {
@@ -7025,11 +7168,6 @@ export declare const GraphProtocol: z.ZodObject<{
             publication: "artifact_only";
         };
         inputArtifactRef: string;
-        source: {
-            product: "osstack" | "osbot" | "ostag";
-            requestId: string;
-            parentRunId?: string | undefined;
-        };
         idempotencyKey: string;
         metadata?: {
             trace?: {
@@ -7039,13 +7177,18 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     }, {
-        kind: "start";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        source: {
+            product: "osstack" | "osbot" | "ostag";
+            requestId: string;
+            parentRunId?: string | undefined;
+        };
+        kind: "start";
         schemaVersion: 1;
         spec: {
             input: {
@@ -7068,11 +7211,6 @@ export declare const GraphProtocol: z.ZodObject<{
             publication: "artifact_only";
         };
         inputArtifactRef: string;
-        source: {
-            product: "osstack" | "osbot" | "ostag";
-            requestId: string;
-            parentRunId?: string | undefined;
-        };
         idempotencyKey: string;
         metadata?: {
             trace?: {
@@ -7100,13 +7238,13 @@ export declare const GraphProtocol: z.ZodObject<{
             outcome: z.ZodEnum<["applied", "not_applied", "unknown"]>;
             evidenceRefs: z.ZodArray<z.ZodString, "many">;
         }, "strict", z.ZodTypeAny, {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         }, {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         }>]>;
         schemaVersion: z.ZodLiteral<1>;
         scope: z.ZodObject<{
@@ -7152,20 +7290,20 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
-        kind: "resume";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "resume";
         input: {
             value: GraphJsonValue;
             kind: "data";
         } | {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         };
         schemaVersion: 1;
         idempotencyKey: string;
@@ -7180,20 +7318,20 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     }, {
-        kind: "resume";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "resume";
         input: {
             value: GraphJsonValue;
             kind: "data";
         } | {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         };
         schemaVersion: 1;
         idempotencyKey: string;
@@ -7255,13 +7393,13 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
-        kind: "cancel";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "cancel";
         schemaVersion: 1;
         idempotencyKey: string;
         graphRunId: string;
@@ -7274,13 +7412,13 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     }, {
-        kind: "cancel";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "cancel";
         schemaVersion: 1;
         idempotencyKey: string;
         graphRunId: string;
@@ -7293,13 +7431,18 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     }>]>, {
-        kind: "start";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        source: {
+            product: "osstack" | "osbot" | "ostag";
+            requestId: string;
+            parentRunId?: string | undefined;
+        };
+        kind: "start";
         schemaVersion: 1;
         spec: {
             input: {
@@ -7322,11 +7465,6 @@ export declare const GraphProtocol: z.ZodObject<{
             publication: "artifact_only";
         };
         inputArtifactRef: string;
-        source: {
-            product: "osstack" | "osbot" | "ostag";
-            requestId: string;
-            parentRunId?: string | undefined;
-        };
         idempotencyKey: string;
         metadata?: {
             trace?: {
@@ -7336,20 +7474,20 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     } | {
-        kind: "resume";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "resume";
         input: {
             value: GraphJsonValue;
             kind: "data";
         } | {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         };
         schemaVersion: 1;
         idempotencyKey: string;
@@ -7364,13 +7502,13 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     } | {
-        kind: "cancel";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "cancel";
         schemaVersion: 1;
         idempotencyKey: string;
         graphRunId: string;
@@ -7628,13 +7766,13 @@ export declare const GraphProtocol: z.ZodObject<{
             kind: "workspace_release";
             workspaceLeaseRef: string;
         };
-        kind: "worker_action";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "worker_action";
         schemaVersion: 1;
         nodeId: string;
         epoch: number;
@@ -7683,13 +7821,13 @@ export declare const GraphProtocol: z.ZodObject<{
             kind: "workspace_release";
             workspaceLeaseRef: string;
         };
-        kind: "worker_action";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "worker_action";
         schemaVersion: 1;
         nodeId: string;
         epoch: number;
@@ -7738,13 +7876,13 @@ export declare const GraphProtocol: z.ZodObject<{
             kind: "workspace_release";
             workspaceLeaseRef: string;
         };
-        kind: "worker_action";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "worker_action";
         schemaVersion: 1;
         nodeId: string;
         epoch: number;
@@ -7862,17 +8000,17 @@ export declare const GraphProtocol: z.ZodObject<{
                 schemaVersion: z.ZodLiteral<1>;
                 kind: z.ZodLiteral<"review">;
             }, "strict", z.ZodTypeAny, {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             }, {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             }>, z.ZodObject<{
@@ -7937,6 +8075,7 @@ export declare const GraphProtocol: z.ZodObject<{
                 receiptRef: string;
             }>]>;
         }, "strict", z.ZodTypeAny, {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -7949,10 +8088,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -7976,8 +8115,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         }, {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -7990,10 +8129,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -8017,7 +8156,6 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         }>, z.ZodObject<{
             state: z.ZodLiteral<"intent">;
         }, "strict", z.ZodTypeAny, {
@@ -8091,6 +8229,7 @@ export declare const GraphProtocol: z.ZodObject<{
                 actionId?: string | undefined;
             }>]>;
         }, "strict", z.ZodTypeAny, {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8110,8 +8249,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         }, {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8131,7 +8270,6 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         }>, z.ZodObject<{
             state: z.ZodLiteral<"unknown">;
             error: z.ZodUnion<[z.ZodObject<{
@@ -8218,6 +8356,7 @@ export declare const GraphProtocol: z.ZodObject<{
             }>]>;
             reconciliationRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8246,9 +8385,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         }, {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8277,7 +8416,6 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         }>, z.ZodObject<{
             state: z.ZodLiteral<"cancel_pending">;
@@ -8365,6 +8503,7 @@ export declare const GraphProtocol: z.ZodObject<{
             }>]>;
             executionRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8393,9 +8532,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         }, {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8424,7 +8563,6 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         }>, z.ZodObject<{
             state: z.ZodLiteral<"reconciliation_required">;
@@ -8512,6 +8650,7 @@ export declare const GraphProtocol: z.ZodObject<{
             }>]>;
             reconciliationRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8540,9 +8679,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         }, {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8571,17 +8710,16 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         }>, z.ZodObject<{
             state: z.ZodLiteral<"cancelled">;
             receiptRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
-            receiptRef: string;
             state: "cancelled";
-        }, {
             receiptRef: string;
+        }, {
             state: "cancelled";
+            receiptRef: string;
         }>]>;
         metadata: z.ZodOptional<z.ZodObject<{
             trace: z.ZodOptional<z.ZodObject<{
@@ -8609,10 +8747,8 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         }>>;
     }, "strict", z.ZodTypeAny, {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -8625,10 +8761,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -8652,13 +8788,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8678,8 +8814,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8708,9 +8844,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8739,9 +8875,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8770,12 +8906,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -8800,10 +8938,8 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     }, {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -8816,10 +8952,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -8843,13 +8979,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8869,8 +9005,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8899,9 +9035,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8930,9 +9066,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -8961,12 +9097,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -9141,10 +9279,8 @@ export declare const GraphProtocol: z.ZodObject<{
         schemaVersion: 1;
         requestId: string;
     }>]>, {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -9157,10 +9293,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -9184,13 +9320,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9210,8 +9346,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9240,9 +9376,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9271,9 +9407,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9302,12 +9438,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -9364,10 +9502,8 @@ export declare const GraphProtocol: z.ZodObject<{
         schemaVersion: 1;
         requestId: string;
     }, {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -9380,10 +9516,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -9407,13 +9543,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9433,8 +9569,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9463,9 +9599,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9494,9 +9630,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9525,12 +9661,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -9587,10 +9725,8 @@ export declare const GraphProtocol: z.ZodObject<{
         schemaVersion: 1;
         requestId: string;
     }>, {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -9603,10 +9739,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -9630,13 +9766,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9656,8 +9792,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9686,9 +9822,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9717,9 +9853,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -9748,12 +9884,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -9946,6 +10084,22 @@ export declare const GraphProtocol: z.ZodObject<{
         specHash: z.ZodString;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
+        admissionBinding: z.ZodOptional<z.ZodObject<{
+            requestInputDigest: z.ZodString;
+            hostInputDigest: z.ZodString;
+            contractDigest: z.ZodString;
+            policyDigest: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }>>;
         publication: z.ZodLiteral<"artifact_only">;
         phase: z.ZodString;
         budget: z.ZodObject<{
@@ -10040,22 +10194,22 @@ export declare const GraphProtocol: z.ZodObject<{
             }>;
             requestRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }>>;
         error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -10167,19 +10321,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -10197,11 +10356,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -10232,14 +10386,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -10256,19 +10416,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -10286,11 +10451,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -10321,14 +10481,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -10374,6 +10540,22 @@ export declare const GraphProtocol: z.ZodObject<{
         specHash: z.ZodString;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
+        admissionBinding: z.ZodOptional<z.ZodObject<{
+            requestInputDigest: z.ZodString;
+            hostInputDigest: z.ZodString;
+            contractDigest: z.ZodString;
+            policyDigest: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }>>;
         publication: z.ZodLiteral<"artifact_only">;
         phase: z.ZodString;
         budget: z.ZodObject<{
@@ -10483,22 +10665,22 @@ export declare const GraphProtocol: z.ZodObject<{
             }>;
             requestRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }>>;
         error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -10595,19 +10777,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -10626,6 +10808,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -10654,20 +10841,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -10684,19 +10872,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -10715,6 +10903,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -10743,20 +10936,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -10802,6 +10996,22 @@ export declare const GraphProtocol: z.ZodObject<{
         specHash: z.ZodString;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
+        admissionBinding: z.ZodOptional<z.ZodObject<{
+            requestInputDigest: z.ZodString;
+            hostInputDigest: z.ZodString;
+            contractDigest: z.ZodString;
+            policyDigest: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }, {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        }>>;
         publication: z.ZodLiteral<"artifact_only">;
         phase: z.ZodString;
         budget: z.ZodObject<{
@@ -10911,22 +11121,22 @@ export declare const GraphProtocol: z.ZodObject<{
             }>;
             requestRef: z.ZodString;
         }, "strict", z.ZodTypeAny, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }, {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         }>>;
         error: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
@@ -11023,19 +11233,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11053,7 +11263,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11082,20 +11297,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11112,19 +11328,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11142,7 +11358,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11171,20 +11392,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11201,19 +11423,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11231,11 +11458,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -11266,14 +11488,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11290,19 +11518,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11321,6 +11549,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11349,20 +11582,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11379,19 +11613,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11409,7 +11643,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11438,20 +11677,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11468,19 +11708,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11498,11 +11743,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -11533,14 +11773,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11557,19 +11803,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11588,6 +11834,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11616,20 +11867,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11646,19 +11898,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11676,7 +11928,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11705,20 +11962,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11735,19 +11993,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11765,11 +12028,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -11800,14 +12058,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11824,19 +12088,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11855,6 +12119,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11883,20 +12152,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -11913,19 +12183,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -11943,7 +12213,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -11972,20 +12247,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -12018,39 +12294,39 @@ export declare const GraphProtocol: z.ZodObject<{
         graphRunId: z.ZodOptional<z.ZodString>;
         nextAction: z.ZodLiteral<"retry_same_request">;
     }, "strict", z.ZodTypeAny, {
-        kind: "delivery_unknown";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "delivery_unknown";
         schemaVersion: 1;
         nextAction: "retry_same_request";
         idempotencyKey: string;
         inputDigest: string;
         graphRunId?: string | undefined;
     }, {
-        kind: "delivery_unknown";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "delivery_unknown";
         schemaVersion: 1;
         nextAction: "retry_same_request";
         idempotencyKey: string;
         inputDigest: string;
         graphRunId?: string | undefined;
     }>, {
-        kind: "delivery_unknown";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "delivery_unknown";
         schemaVersion: 1;
         nextAction: "retry_same_request";
         idempotencyKey: string;
@@ -12104,10 +12380,10 @@ export declare const GraphProtocol: z.ZodObject<{
         artifactRefs: string[];
         artifactDigest: string;
     } | {
+        verdict: "changes_requested" | "accept";
         kind: "review";
         schemaVersion: 1;
         candidateRevision: string;
-        verdict: "accept" | "changes_requested";
         evidenceRefs: string[];
         evidenceDigest: string;
     } | {
@@ -12161,17 +12437,22 @@ export declare const GraphProtocol: z.ZodObject<{
         deadlineSeconds: number;
         tokenReservationLimit: number;
     };
-    runState: "queued" | "cancelled" | "running" | "ready" | "failed" | "waiting_input" | "cancel_pending" | "reconciliation_required";
+    runState: "queued" | "cancelled" | "running" | "failed" | "ready" | "waiting_input" | "cancel_pending" | "reconciliation_required";
     nodeState: "cancelled" | "running" | "failed" | "waiting_input" | "pending" | "succeeded" | "skipped";
     actionState: "unknown" | "cancelled" | "running" | "failed" | "cancel_pending" | "reconciliation_required" | "intent" | "confirmed";
     request: {
-        kind: "start";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        source: {
+            product: "osstack" | "osbot" | "ostag";
+            requestId: string;
+            parentRunId?: string | undefined;
+        };
+        kind: "start";
         schemaVersion: 1;
         spec: {
             input: {
@@ -12194,11 +12475,6 @@ export declare const GraphProtocol: z.ZodObject<{
             publication: "artifact_only";
         };
         inputArtifactRef: string;
-        source: {
-            product: "osstack" | "osbot" | "ostag";
-            requestId: string;
-            parentRunId?: string | undefined;
-        };
         idempotencyKey: string;
         metadata?: {
             trace?: {
@@ -12208,20 +12484,20 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     } | {
-        kind: "resume";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "resume";
         input: {
             value: GraphJsonValue;
             kind: "data";
         } | {
+            outcome: "unknown" | "applied" | "not_applied";
             kind: "reconciliation";
             evidenceRefs: string[];
-            outcome: "unknown" | "applied" | "not_applied";
         };
         schemaVersion: 1;
         idempotencyKey: string;
@@ -12236,13 +12512,13 @@ export declare const GraphProtocol: z.ZodObject<{
             requestedAt?: string | undefined;
         } | undefined;
     } | {
-        kind: "cancel";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "cancel";
         schemaVersion: 1;
         idempotencyKey: string;
         graphRunId: string;
@@ -12303,13 +12579,13 @@ export declare const GraphProtocol: z.ZodObject<{
             kind: "workspace_release";
             workspaceLeaseRef: string;
         };
-        kind: "worker_action";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "worker_action";
         schemaVersion: 1;
         nodeId: string;
         epoch: number;
@@ -12327,10 +12603,8 @@ export declare const GraphProtocol: z.ZodObject<{
         } | undefined;
     };
     workerActionResponse: {
-        kind: "worker_action_response";
-        schemaVersion: 1;
-        requestId: string;
         outcome: {
+            state: "confirmed";
             result: {
                 kind: "implementation_complete";
                 schemaVersion: 1;
@@ -12343,10 +12617,10 @@ export declare const GraphProtocol: z.ZodObject<{
                 artifactRefs: string[];
                 artifactDigest: string;
             } | {
+                verdict: "changes_requested" | "accept";
                 kind: "review";
                 schemaVersion: 1;
                 candidateRevision: string;
-                verdict: "accept" | "changes_requested";
                 evidenceRefs: string[];
                 evidenceDigest: string;
             } | {
@@ -12370,13 +12644,13 @@ export declare const GraphProtocol: z.ZodObject<{
                 workspaceLeaseRef: string;
                 receiptRef: string;
             };
-            state: "confirmed";
         } | {
             state: "intent";
         } | {
             state: "running";
             executionRef: string;
         } | {
+            state: "failed";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -12396,8 +12670,8 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "failed";
         } | {
+            state: "unknown";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -12426,9 +12700,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "unknown";
             reconciliationRef: string;
         } | {
+            state: "cancel_pending";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -12457,9 +12731,9 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "cancel_pending";
             executionRef: string;
         } | {
+            state: "reconciliation_required";
             error: {
                 code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
                 message: string;
@@ -12488,12 +12762,14 @@ export declare const GraphProtocol: z.ZodObject<{
                 epoch?: number | undefined;
                 actionId?: string | undefined;
             };
-            state: "reconciliation_required";
             reconciliationRef: string;
         } | {
-            receiptRef: string;
             state: "cancelled";
+            receiptRef: string;
         };
+        kind: "worker_action_response";
+        schemaVersion: 1;
+        requestId: string;
         generation: number;
         effect: {
             scope: {
@@ -12580,19 +12856,24 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        candidate: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -12610,11 +12891,6 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        candidate: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
-        };
         resultRef: string;
         delivery: "available";
         error?: {
@@ -12645,14 +12921,20 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
+        } | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -12669,19 +12951,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -12700,6 +12982,11 @@ export declare const GraphProtocol: z.ZodObject<{
             accountingBlocked: boolean;
         };
         delivery: "delivery_unknown";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -12728,20 +13015,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -12758,19 +13046,19 @@ export declare const GraphProtocol: z.ZodObject<{
             principalId: string;
             workspaceId: string;
         };
-        schemaVersion: 1;
-        publication: "artifact_only";
-        evidenceRefs: string[];
+        revision: number;
         source: {
             product: "osstack" | "osbot" | "ostag";
             requestId: string;
             parentRunId?: string | undefined;
         };
+        schemaVersion: 1;
+        publication: "artifact_only";
+        evidenceRefs: string[];
         graphRunId: string;
         specHash: string;
         generation: number;
         inputDigest: string;
-        revision: number;
         createdAt: number;
         updatedAt: number;
         budget: {
@@ -12788,7 +13076,12 @@ export declare const GraphProtocol: z.ZodObject<{
             chargedTokens: string;
             accountingBlocked: boolean;
         };
-        delivery: "pending" | "delivery_unknown";
+        delivery: "delivery_unknown" | "pending";
+        candidate?: {
+            candidateRevision: string;
+            artifactRefs: string[];
+            artifactDigest: string;
+        } | undefined;
         error?: {
             code: "OUTPUT_CONTRACT_INVALID" | "INTERNAL_ERROR";
             message: string;
@@ -12817,20 +13110,21 @@ export declare const GraphProtocol: z.ZodObject<{
             epoch?: number | undefined;
             actionId?: string | undefined;
         } | undefined;
-        candidate?: {
-            candidateRevision: string;
-            artifactRefs: string[];
-            artifactDigest: string;
+        admissionBinding?: {
+            requestInputDigest: string;
+            hostInputDigest: string;
+            contractDigest: string;
+            policyDigest: string;
         } | undefined;
         resultRef?: string | undefined;
         authorization?: {
-            kind: "needs_authorization";
             scope: {
                 schemaVersion: 1;
                 tenantId: string;
                 principalId: string;
                 workspaceId: string;
             };
+            kind: "needs_authorization";
             requestRef: string;
         } | undefined;
         interrupt?: {
@@ -12840,13 +13134,13 @@ export declare const GraphProtocol: z.ZodObject<{
         } | undefined;
     };
     deliveryUnknown: {
-        kind: "delivery_unknown";
         scope: {
             schemaVersion: 1;
             tenantId: string;
             principalId: string;
             workspaceId: string;
         };
+        kind: "delivery_unknown";
         schemaVersion: 1;
         nextAction: "retry_same_request";
         idempotencyKey: string;
@@ -12854,7 +13148,7 @@ export declare const GraphProtocol: z.ZodObject<{
         graphRunId?: string | undefined;
     };
 }, {
-    runState: "queued" | "cancelled" | "running" | "ready" | "failed" | "waiting_input" | "cancel_pending" | "reconciliation_required";
+    runState: "queued" | "cancelled" | "running" | "failed" | "ready" | "waiting_input" | "cancel_pending" | "reconciliation_required";
     nodeState: "cancelled" | "running" | "failed" | "waiting_input" | "pending" | "succeeded" | "skipped";
     actionState: "unknown" | "cancelled" | "running" | "failed" | "cancel_pending" | "reconciliation_required" | "intent" | "confirmed";
     scope?: unknown;