@ottochain/sdk 2.2.5 → 2.4.0

package/dist/cjs/apps/contracts/index.js

@@ -7,7 +7,7 @@
  * @example
  * ```typescript
  * import {
- *   ContractState,
+ *   State,
  *   Contract,
  *   getContractDefinition,
  *   CONTRACTS_DEFINITIONS
@@ -20,10 +20,14 @@
  * @packageDocumentation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getEscrowDefinition = exports.getContractDefinition = exports.CONTRACTS_DEFINITIONS = exports.contractEscrowDef = exports.contractAgreementDef = exports.contractUniversalDef = exports.contractStateToJSON = exports.contractStateFromJSON = exports.ContractDefinition = exports.DisputeContractRequest = exports.RejectContractRequest = exports.CompleteContractRequest = exports.AcceptContractRequest = exports.ProposeContractRequest = exports.Contract = exports.ContractState = void 0;
-// Re-export generated protobuf types (source of truth)
+exports.CONTRACTS_DEFINITIONS = exports.contractEscrowDef = exports.contractAgreementDef = exports.contractUniversalDef = exports.contractStateToJSON = exports.contractStateFromJSON = exports.ContractState = exports.stateToJSON = exports.stateFromJSON = exports.ContractDefinition = exports.DisputeContractRequest = exports.RejectContractRequest = exports.CompleteContractRequest = exports.AcceptContractRequest = exports.ProposeContractRequest = exports.Contract = exports.State = void 0;
+exports.getContractDefinition = getContractDefinition;
+exports.getEscrowDefinition = getEscrowDefinition;
+// Re-export generated protobuf types (source of truth).
+// The nested lifecycle enum dropped its app prefix in the proto; under this
+// app-scoped entrypoint it is unambiguously State.
 var contract_js_1 = require("../../generated/ottochain/apps/contracts/v1/contract.js");
-Object.defineProperty(exports, "ContractState", { enumerable: true, get: function () { return contract_js_1.ContractState; } });
+Object.defineProperty(exports, "State", { enumerable: true, get: function () { return contract_js_1.State; } });
 Object.defineProperty(exports, "Contract", { enumerable: true, get: function () { return contract_js_1.Contract; } });
 Object.defineProperty(exports, "ProposeContractRequest", { enumerable: true, get: function () { return contract_js_1.ProposeContractRequest; } });
 Object.defineProperty(exports, "AcceptContractRequest", { enumerable: true, get: function () { return contract_js_1.AcceptContractRequest; } });
@@ -31,8 +35,13 @@ Object.defineProperty(exports, "CompleteContractRequest", { enumerable: true, ge
 Object.defineProperty(exports, "RejectContractRequest", { enumerable: true, get: function () { return contract_js_1.RejectContractRequest; } });
 Object.defineProperty(exports, "DisputeContractRequest", { enumerable: true, get: function () { return contract_js_1.DisputeContractRequest; } });
 Object.defineProperty(exports, "ContractDefinition", { enumerable: true, get: function () { return contract_js_1.ContractDefinition; } });
-Object.defineProperty(exports, "contractStateFromJSON", { enumerable: true, get: function () { return contract_js_1.contractStateFromJSON; } });
-Object.defineProperty(exports, "contractStateToJSON", { enumerable: true, get: function () { return contract_js_1.contractStateToJSON; } });
+Object.defineProperty(exports, "stateFromJSON", { enumerable: true, get: function () { return contract_js_1.stateFromJSON; } });
+Object.defineProperty(exports, "stateToJSON", { enumerable: true, get: function () { return contract_js_1.stateToJSON; } });
+// Deprecated app-prefixed alias (renamed to State); kept for compat.
+var contract_js_2 = require("../../generated/ottochain/apps/contracts/v1/contract.js");
+Object.defineProperty(exports, "ContractState", { enumerable: true, get: function () { return contract_js_2.State; } });
+Object.defineProperty(exports, "contractStateFromJSON", { enumerable: true, get: function () { return contract_js_2.stateFromJSON; } });
+Object.defineProperty(exports, "contractStateToJSON", { enumerable: true, get: function () { return contract_js_2.stateToJSON; } });
 // ---------------------------------------------------------------------------
 // State Machine Definitions (generated from JSON at build time)
 // ---------------------------------------------------------------------------
@@ -53,9 +62,7 @@ exports.CONTRACTS_DEFINITIONS = {
 function getContractDefinition(type = "agreement") {
     return exports.CONTRACTS_DEFINITIONS[type];
 }
-exports.getContractDefinition = getContractDefinition;
 /** @deprecated Use getContractDefinition('escrow') */
 function getEscrowDefinition() {
     return index_js_1.contractEscrowDef;
 }
-exports.getEscrowDefinition = getEscrowDefinition;

package/dist/cjs/apps/contracts/state-machines/contract-agreement.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.contractAgreementDef = void 0;
 const fiber_app_js_1 = require("../../../schema/fiber-app.js");
+const guards_js_1 = require("../../../schema/guards.js");
 /**
  * Two-party agreement with mutual completion attestation and dispute resolution.
  */
@@ -36,7 +37,7 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
         },
     },
     createSchema: {
-        required: ["proposer", "counterparty"],
+        required: ["proposer", "counterparty", "arbitrator"],
         properties: {
             proposer: {
                 type: "address",
@@ -48,6 +49,11 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
                 description: "DAG address of the counterparty",
                 immutable: true,
             },
+            arbitrator: {
+                type: "address",
+                description: "DAG address of the arbitrator authorized to resolve a dispute",
+                immutable: true,
+            },
         },
     },
     stateSchema: {
@@ -55,6 +61,7 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             status: { type: "string" },
             proposer: { type: "address" },
             counterparty: { type: "address" },
+            arbitrator: { type: "address", immutable: true },
             completions: { type: "array" },
             acceptedAt: { type: "integer", nullable: true },
             rejectedAt: { type: "integer", nullable: true },
@@ -78,21 +85,66 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
         dispute: { properties: { reason: { type: "string" } } },
         resolve: {
             properties: {
-                judicialRuling: { type: "boolean", nullable: true },
-                proposerApproves: { type: "boolean", nullable: true },
-                counterpartyApproves: { type: "boolean", nullable: true },
                 resolution: { type: "string" },
                 rulingId: { type: "string", nullable: true },
             },
         },
     },
     states: {
-        PROPOSED: { id: "PROPOSED", isFinal: false, metadata: null },
-        ACTIVE: { id: "ACTIVE", isFinal: false, metadata: null },
-        COMPLETED: { id: "COMPLETED", isFinal: true, metadata: null },
-        DISPUTED: { id: "DISPUTED", isFinal: false, metadata: null },
-        REJECTED: { id: "REJECTED", isFinal: true, metadata: null },
-        CANCELLED: { id: "CANCELLED", isFinal: true, metadata: null },
+        PROPOSED: {
+            id: "PROPOSED",
+            isFinal: false,
+            metadata: {
+                label: "Proposed",
+                description: "Agreement proposed; awaiting the counterparty",
+                category: "initial",
+            },
+        },
+        ACTIVE: {
+            id: "ACTIVE",
+            isFinal: false,
+            metadata: {
+                label: "Active",
+                description: "Agreement accepted and in effect",
+                category: "active",
+            },
+        },
+        COMPLETED: {
+            id: "COMPLETED",
+            isFinal: true,
+            metadata: {
+                label: "Completed",
+                description: "Agreement completed and attested (terminal)",
+                category: "terminal",
+            },
+        },
+        DISPUTED: {
+            id: "DISPUTED",
+            isFinal: false,
+            metadata: {
+                label: "Disputed",
+                description: "A party has raised a dispute; awaiting resolution",
+                category: "pending",
+            },
+        },
+        REJECTED: {
+            id: "REJECTED",
+            isFinal: true,
+            metadata: {
+                label: "Rejected",
+                description: "Proposal rejected by the counterparty (terminal)",
+                category: "terminal",
+            },
+        },
+        CANCELLED: {
+            id: "CANCELLED",
+            isFinal: true,
+            metadata: {
+                label: "Cancelled",
+                description: "Agreement cancelled before completion (terminal)",
+                category: "terminal",
+            },
+        },
     },
     initialState: "PROPOSED",
     transitions: [
@@ -100,11 +152,11 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "PROPOSED",
             to: "ACTIVE",
             eventName: "accept",
-            guard: { "===": [{ var: "event.agent" }, { var: "state.counterparty" }] },
+            guard: (0, guards_js_1.signerIsParty)("state.counterparty"),
             effect: {
                 merge: [
                     { var: "state" },
-                    { status: "ACTIVE", acceptedAt: { var: "$timestamp" } },
+                    { status: "ACTIVE", acceptedAt: { var: "$ordinal" } },
                 ],
             },
             dependencies: [],
@@ -113,13 +165,13 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "PROPOSED",
             to: "REJECTED",
             eventName: "reject",
-            guard: { "===": [{ var: "event.agent" }, { var: "state.counterparty" }] },
+            guard: (0, guards_js_1.signerIsParty)("state.counterparty"),
             effect: {
                 merge: [
                     { var: "state" },
                     {
                         status: "REJECTED",
-                        rejectedAt: { var: "$timestamp" },
+                        rejectedAt: { var: "$ordinal" },
                         rejectReason: { var: "event.reason" },
                     },
                 ],
@@ -130,11 +182,11 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "PROPOSED",
             to: "CANCELLED",
             eventName: "cancel",
-            guard: { "===": [{ var: "event.agent" }, { var: "state.proposer" }] },
+            guard: (0, guards_js_1.signerIsParty)("state.proposer"),
             effect: {
                 merge: [
                     { var: "state" },
-                    { status: "CANCELLED", cancelledAt: { var: "$timestamp" } },
+                    { status: "CANCELLED", cancelledAt: { var: "$ordinal" } },
                 ],
             },
             dependencies: [],
@@ -145,14 +197,7 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             eventName: "submit_completion",
             guard: {
                 and: [
-                    {
-                        or: [
-                            { "===": [{ var: "event.agent" }, { var: "state.proposer" }] },
-                            {
-                                "===": [{ var: "event.agent" }, { var: "state.counterparty" }],
-                            },
-                        ],
-                    },
+                    (0, guards_js_1.signerIsAnyParty)(["state.proposer", "state.counterparty"]),
                     {
                         "!": [
                             {
@@ -176,7 +221,7 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
                                     {
                                         agent: { var: "event.agent" },
                                         proof: { var: "event.proof" },
-                                        submittedAt: { var: "$timestamp" },
+                                        submittedAt: { var: "$ordinal" },
                                     },
                                 ],
                             ],
@@ -190,11 +235,11 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "ACTIVE",
             to: "COMPLETED",
             eventName: "finalize",
-            guard: { ">=": [{ size: { var: "state.completions" } }, 2] },
+            guard: { ">=": [{ length: [{ var: "state.completions" }] }, 2] },
             effect: {
                 merge: [
                     { var: "state" },
-                    { status: "COMPLETED", completedAt: { var: "$timestamp" } },
+                    { status: "COMPLETED", completedAt: { var: "$ordinal" } },
                 ],
             },
             dependencies: [],
@@ -203,18 +248,13 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "ACTIVE",
             to: "DISPUTED",
             eventName: "dispute",
-            guard: {
-                or: [
-                    { "===": [{ var: "event.agent" }, { var: "state.proposer" }] },
-                    { "===": [{ var: "event.agent" }, { var: "state.counterparty" }] },
-                ],
-            },
+            guard: (0, guards_js_1.signerIsAnyParty)(["state.proposer", "state.counterparty"]),
             effect: {
                 merge: [
                     { var: "state" },
                     {
                         status: "DISPUTED",
-                        disputedAt: { var: "$timestamp" },
+                        disputedAt: { var: "$ordinal" },
                         disputeReason: { var: "event.reason" },
                         disputedBy: { var: "event.agent" },
                     },
@@ -226,13 +266,14 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "DISPUTED",
             to: "COMPLETED",
             eventName: "resolve",
+            // authority gate — an ARBITER/SLASHER attestation check layers on additively when the identity registry lands (see docs/design/app-hardening-identity-integration.md §4.2)
             guard: {
                 or: [
-                    { var: "event.judicialRuling" },
+                    (0, guards_js_1.signerIsParty)("state.arbitrator"),
                     {
                         and: [
-                            { "===": [{ var: "event.proposerApproves" }, true] },
-                            { "===": [{ var: "event.counterpartyApproves" }, true] },
+                            (0, guards_js_1.signerIsParty)("state.proposer"),
+                            (0, guards_js_1.signerIsParty)("state.counterparty"),
                         ],
                     },
                 ],
@@ -242,9 +283,16 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
                     { var: "state" },
                     {
                         status: "COMPLETED",
-                        resolvedAt: { var: "$timestamp" },
+                        resolvedAt: { var: "$ordinal" },
                         resolution: { var: "event.resolution" },
-                        rulingId: { var: "event.rulingId" },
+                        // rulingId is recorded only on the arbitrator-resolved path
+                        rulingId: {
+                            if: [
+                                (0, guards_js_1.signerIsParty)("state.arbitrator"),
+                                { var: "event.rulingId" },
+                                null,
+                            ],
+                        },
                     },
                 ],
             },
@@ -254,16 +302,11 @@ exports.contractAgreementDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "ACTIVE",
             to: "CANCELLED",
             eventName: "cancel",
-            guard: {
-                or: [
-                    { "===": [{ var: "event.agent" }, { var: "state.proposer" }] },
-                    { "===": [{ var: "event.agent" }, { var: "state.counterparty" }] },
-                ],
-            },
+            guard: (0, guards_js_1.signerIsAnyParty)(["state.proposer", "state.counterparty"]),
             effect: {
                 merge: [
                     { var: "state" },
-                    { status: "CANCELLED", cancelledAt: { var: "$timestamp" } },
+                    { status: "CANCELLED", cancelledAt: { var: "$ordinal" } },
                 ],
             },
             dependencies: [],

package/dist/cjs/apps/contracts/state-machines/contract-escrow.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.contractEscrowDef = void 0;
 const fiber_app_js_1 = require("../../../schema/fiber-app.js");
+const guards_js_1 = require("../../../schema/guards.js");
 /**
  * Asset custody with conditional release, dispute resolution, and split payments.
  */
@@ -41,7 +42,7 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
         },
     },
     createSchema: {
-        required: ["depositor", "beneficiary", "requiredAmount"],
+        required: ["depositor", "beneficiary", "requiredAmount", "arbiter"],
         properties: {
             depositor: {
                 type: "address",
@@ -51,6 +52,11 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
                 type: "address",
                 description: "DAG address of the beneficiary",
             },
+            arbiter: {
+                type: "address",
+                description: "DAG address of the arbiter authorized to rule on a dispute",
+                immutable: true,
+            },
             requiredAmount: {
                 type: "number",
                 minimum: 0,
@@ -77,6 +83,7 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
         properties: {
             depositor: { type: "address" },
             beneficiary: { type: "address" },
+            arbiter: { type: "address", immutable: true },
             requiredAmount: { type: "number" },
             balance: { type: "number" },
             fundedAt: { type: "integer", nullable: true },
@@ -111,27 +118,86 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
         dispute: {},
         ruling: {
             properties: {
-                judicialRuling: { type: "boolean" },
                 splits: { type: "array" },
                 rulingId: { type: "string" },
             },
         },
-        refund: {
-            properties: {
-                mutualConsent: { type: "boolean", nullable: true },
-            },
-        },
+        refund: {},
         cancel: {},
     },
     states: {
-        CREATED: { id: "CREATED", isFinal: false, metadata: null },
-        FUNDED: { id: "FUNDED", isFinal: false, metadata: null },
-        ACTIVE: { id: "ACTIVE", isFinal: false, metadata: null },
-        RELEASING: { id: "RELEASING", isFinal: false, metadata: null },
-        DISPUTED: { id: "DISPUTED", isFinal: false, metadata: null },
-        RELEASED: { id: "RELEASED", isFinal: true, metadata: null },
-        REFUNDED: { id: "REFUNDED", isFinal: true, metadata: null },
-        SPLIT: { id: "SPLIT", isFinal: true, metadata: null },
+        CREATED: {
+            id: "CREATED",
+            isFinal: false,
+            metadata: {
+                label: "Created",
+                description: "Escrow created; awaiting funding",
+                category: "initial",
+            },
+        },
+        FUNDED: {
+            id: "FUNDED",
+            isFinal: false,
+            metadata: {
+                label: "Funded",
+                description: "Funds deposited into escrow",
+                category: "active",
+            },
+        },
+        ACTIVE: {
+            id: "ACTIVE",
+            isFinal: false,
+            metadata: {
+                label: "Active",
+                description: "Escrow in effect while work is performed",
+                category: "active",
+            },
+        },
+        RELEASING: {
+            id: "RELEASING",
+            isFinal: false,
+            metadata: {
+                label: "Releasing",
+                description: "Release approved; payout in progress",
+                category: "pending",
+            },
+        },
+        DISPUTED: {
+            id: "DISPUTED",
+            isFinal: false,
+            metadata: {
+                label: "Disputed",
+                description: "A party disputed the escrow; awaiting arbitration",
+                category: "pending",
+            },
+        },
+        RELEASED: {
+            id: "RELEASED",
+            isFinal: true,
+            metadata: {
+                label: "Released",
+                description: "Funds released to the beneficiary (terminal)",
+                category: "terminal",
+            },
+        },
+        REFUNDED: {
+            id: "REFUNDED",
+            isFinal: true,
+            metadata: {
+                label: "Refunded",
+                description: "Funds refunded to the depositor (terminal)",
+                category: "terminal",
+            },
+        },
+        SPLIT: {
+            id: "SPLIT",
+            isFinal: true,
+            metadata: {
+                label: "Split",
+                description: "Funds split between parties per arbitration (terminal)",
+                category: "terminal",
+            },
+        },
     },
     initialState: "CREATED",
     transitions: [
@@ -141,14 +207,14 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             eventName: "deposit",
             guard: {
                 and: [
-                    { "===": [{ var: "event.agent" }, { var: "state.depositor" }] },
+                    (0, guards_js_1.signerIsParty)("state.depositor"),
                     { ">=": [{ var: "event.amount" }, { var: "state.requiredAmount" }] },
                 ],
             },
             effect: {
                 merge: [
                     { var: "state" },
-                    { balance: { var: "event.amount" }, fundedAt: { var: "$timestamp" } },
+                    { balance: { var: "event.amount" }, fundedAt: { var: "$ordinal" } },
                 ],
             },
             dependencies: [],
@@ -159,12 +225,12 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             eventName: "activate",
             guard: {
                 or: [
-                    { "===": [{ var: "event.agent" }, { var: "state.beneficiary" }] },
+                    (0, guards_js_1.signerIsParty)("state.beneficiary"),
                     { var: "state.autoActivate" },
                 ],
             },
             effect: {
-                merge: [{ var: "state" }, { activatedAt: { var: "$timestamp" } }],
+                merge: [{ var: "state" }, { activatedAt: { var: "$ordinal" } }],
             },
             dependencies: [],
         },
@@ -172,7 +238,7 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "ACTIVE",
             to: "RELEASING",
             eventName: "request_release",
-            guard: { "===": [{ var: "event.agent" }, { var: "state.beneficiary" }] },
+            guard: (0, guards_js_1.signerIsParty)("state.beneficiary"),
             effect: {
                 merge: [
                     { var: "state" },
@@ -181,10 +247,10 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
                             requestedBy: { var: "event.agent" },
                             amount: { var: "event.amount" },
                             reason: { var: "event.reason" },
-                            requestedAt: { var: "$timestamp" },
+                            requestedAt: { var: "$ordinal" },
                         },
                         releaseDeadline: {
-                            "+": [{ var: "$timestamp" }, { var: "state.releaseWindowMs" }],
+                            "+": [{ var: "$ordinal" }, { var: "state.releaseWindowMs" }],
                         },
                     },
                 ],
@@ -197,15 +263,15 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             eventName: "approve_release",
             guard: {
                 or: [
-                    { "===": [{ var: "event.agent" }, { var: "state.depositor" }] },
-                    { ">=": [{ var: "$timestamp" }, { var: "state.releaseDeadline" }] },
+                    (0, guards_js_1.signerIsParty)("state.depositor"),
+                    { ">=": [{ var: "$ordinal" }, { var: "state.releaseDeadline" }] },
                 ],
             },
             effect: {
                 merge: [
                     { var: "state" },
                     {
-                        releasedAt: { var: "$timestamp" },
+                        releasedAt: { var: "$ordinal" },
                         releasedTo: { var: "state.beneficiary" },
                     },
                 ],
@@ -218,24 +284,37 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             eventName: "dispute",
             guard: {
                 and: [
-                    { "===": [{ var: "event.agent" }, { var: "state.depositor" }] },
-                    { "<": [{ var: "$timestamp" }, { var: "state.releaseDeadline" }] },
+                    (0, guards_js_1.signerIsParty)("state.depositor"),
+                    { "<": [{ var: "$ordinal" }, { var: "state.releaseDeadline" }] },
                 ],
             },
             effect: {
-                merge: [{ var: "state" }, { disputedAt: { var: "$timestamp" } }],
-            },
-            spawns: {
-                sm: "Judiciary",
-                initialData: {
-                    caseType: "escrow_dispute",
-                    plaintiff: { var: "state.depositor" },
-                    defendant: { var: "state.beneficiary" },
-                    claim: {
-                        escrowId: { var: "fiberId" },
-                        amount: { var: "state.balance" },
+                merge: [
+                    { var: "state" },
+                    { disputedAt: { var: "$ordinal" } },
+                    {
+                        // A3 fix: transition-level `spawns` is dropped by the chain. No Judiciary state machine is
+                        // defined to inline under `_spawn`, and escrow already resolves disputes via its own pinned
+                        // `arbiter` (the `ruling` transition) — the spawned Judiciary was fire-and-forget (never read
+                        // by escrow). So the dispute case is surfaced to the judiciary subsystem as an `_emit`
+                        // notification instead of a child fiber.
+                        _emit: [
+                            {
+                                name: "dispute_opened",
+                                data: {
+                                    caseType: "escrow_dispute",
+                                    plaintiff: { var: "state.depositor" },
+                                    defendant: { var: "state.beneficiary" },
+                                    claim: {
+                                        escrowId: { var: "machineId" },
+                                        amount: { var: "state.balance" },
+                                    },
+                                },
+                                destination: "Judiciary",
+                            },
+                        ],
                     },
-                },
+                ],
             },
             dependencies: [],
         },
@@ -243,7 +322,29 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "DISPUTED",
             to: "SPLIT",
             eventName: "ruling",
-            guard: { var: "event.judicialRuling" },
+            // authority gate — an ARBITER/SLASHER attestation check layers on additively when the identity registry lands (see docs/design/app-hardening-identity-integration.md §4.2)
+            guard: {
+                and: [
+                    (0, guards_js_1.signerIsParty)("state.arbiter"),
+                    {
+                        "===": [
+                            {
+                                reduce: [
+                                    { var: "event.splits" },
+                                    {
+                                        "+": [
+                                            { var: "accumulator" },
+                                            { var: "current.amount" },
+                                        ],
+                                    },
+                                    0,
+                                ],
+                            },
+                            { var: "state.balance" },
+                        ],
+                    },
+                ],
+            },
             effect: {
                 merge: [
                     { var: "state" },
@@ -259,14 +360,20 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "ACTIVE",
             to: "REFUNDED",
             eventName: "refund",
+            // authority gate — an ARBITER/SLASHER attestation check layers on additively when the identity registry lands (see docs/design/app-hardening-identity-integration.md §4.2)
             guard: {
                 or: [
-                    { var: "event.mutualConsent" },
-                    { ">=": [{ var: "$timestamp" }, { var: "state.expiresAt" }] },
+                    {
+                        and: [
+                            (0, guards_js_1.signerIsParty)("state.depositor"),
+                            (0, guards_js_1.signerIsParty)("state.beneficiary"),
+                        ],
+                    },
+                    { ">=": [{ var: "$ordinal" }, { var: "state.expiresAt" }] },
                 ],
             },
             effect: {
-                merge: [{ var: "state" }, { refundedAt: { var: "$timestamp" } }],
+                merge: [{ var: "state" }, { refundedAt: { var: "$ordinal" } }],
             },
             dependencies: [],
         },
@@ -274,9 +381,9 @@ exports.contractEscrowDef = (0, fiber_app_js_1.defineFiberApp)({
             from: "CREATED",
             to: "REFUNDED",
             eventName: "cancel",
-            guard: { "===": [{ var: "event.agent" }, { var: "state.depositor" }] },
+            guard: (0, guards_js_1.signerIsParty)("state.depositor"),
             effect: {
-                merge: [{ var: "state" }, { refundedAt: { var: "$timestamp" } }],
+                merge: [{ var: "state" }, { refundedAt: { var: "$ordinal" } }],
             },
             dependencies: [],
         },