@ouro.bot/cli 0.1.0-alpha.816 → 0.1.0-alpha.817

package/deploy/unraid/sanctuary-unit16-run.sh

@@ -132,7 +132,6 @@ IMAGE_FACT=$PRIVATE_ROOT/image-digest
 CONTAINER_FACT=$PRIVATE_ROOT/container-digest
 PROCESS_BINDING_FACT=$PRIVATE_ROOT/process-binding-digest
 HEALTH_FACT=$PRIVATE_ROOT/postboot-health.json
-POLLER_FACT=$PRIVATE_ROOT/telegram-poller-count.json
 CONTAINER_INSPECT_FACT=$PRIVATE_ROOT/container-inspect.json
 
 start_broker() {
@@ -280,13 +279,6 @@ stop_exact_production_container() {
   test "$(/usr/bin/timeout -s KILL 20 /usr/bin/docker inspect --format '{{.State.Pid}}' "$EXPECTED_CONTAINER_ID")" = 0 || return 1
 }
 
-quiesce_production_telegram_poller() {
-  stop_exact_production_container
-  printf '%s\n' '{"activePollers":0,"productionContainerStopped":true}' >"$POLLER_FACT"
-  chmod 0444 "$POLLER_FACT"
-  chown 0:0 "$POLLER_FACT"
-}
-
 materialize_config() {
   OUTPUT=$1
   SNAPSHOT_PHASE=${2:-}
@@ -297,8 +289,9 @@ materialize_config() {
     EXTRA_MOUNT=$PRIVATE_ROOT/container-inventory.json
   fi
   if test -n "$EXTRA_MOUNT"; then
-    /usr/bin/timeout -s KILL 30 /usr/bin/docker run --rm --pull=never --network none \
+    /usr/bin/timeout -s KILL 90 /usr/bin/docker run --rm --pull=never --network none \
       --user 10001:10001 --read-only \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence,readonly" \
       --mount "type=bind,src=$EXTRA_MOUNT,dst=/run/ouro-acceptance/closed-inventory.json,readonly" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
@@ -306,16 +299,18 @@ materialize_config() {
       --entrypoint /opt/ouro/deploy/unraid/sanctuary-acceptance-adapter.sh \
       "$IMAGE_ID" materialize-config "$COMMAND" >"$OUTPUT"
   elif test -n "$SNAPSHOT_PHASE"; then
-    /usr/bin/timeout -s KILL 30 /usr/bin/docker run --rm --pull=never --network none \
+    /usr/bin/timeout -s KILL 90 /usr/bin/docker run --rm --pull=never --network none \
       --user 10001:10001 --read-only \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence,readonly" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
       --mount "type=bind,src=$BUNDLE_ROOT,dst=/home/ouro/AgentBundles/sanctuary.ouro,readonly" \
       --entrypoint /opt/ouro/deploy/unraid/sanctuary-acceptance-adapter.sh \
       "$IMAGE_ID" materialize-config "$COMMAND" "$SNAPSHOT_PHASE" >"$OUTPUT"
   else
-    /usr/bin/timeout -s KILL 30 /usr/bin/docker run --rm --pull=never --network none \
+    /usr/bin/timeout -s KILL 90 /usr/bin/docker run --rm --pull=never --network none \
       --user 10001:10001 --read-only \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence,readonly" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
       --mount "type=bind,src=$BUNDLE_ROOT,dst=/home/ouro/AgentBundles/sanctuary.ouro,readonly" \
@@ -362,11 +357,11 @@ materialize_config "$EXPECTED_CONFIG" "$SNAPSHOT_PHASE"
 cmp -s "$EXPECTED_CONFIG" "$CONFIG_PATH" || exit 1
 case "$COMMAND" in callback-inject) test -r /proc/self/fd/3 || exit 2 ;; esac
 prepare_live_facts
-if test "$COMMAND" = telegram-bootstrap; then quiesce_production_telegram_poller; fi
+if test "$COMMAND" = telegram-bootstrap; then stop_exact_production_container; fi
 if test "$COMMAND" = unraid-key-rotate; then stop_exact_production_container; fi
 
 case "$COMMAND" in
-  telegram-bootstrap) TIME_LIMIT=900; NETWORK=host; INPUT=no; BUNDLE_MODE=readonly; BROKER=no ;;
+  telegram-bootstrap) TIME_LIMIT=900; NETWORK=none; INPUT=no; BUNDLE_MODE=readonly; BROKER=no ;;
   callback-inject) TIME_LIMIT=120; NETWORK=host; INPUT=yes; BUNDLE_MODE=rw; BROKER=no ;;
   unraid-key-rotate) TIME_LIMIT=600; NETWORK=host; INPUT=no; BUNDLE_MODE=readonly; BROKER=yes ;;
   evidence-snapshot) TIME_LIMIT=5700; NETWORK=host; INPUT=no; BUNDLE_MODE=readonly; BROKER=yes ;;
@@ -426,11 +421,12 @@ run_harness() {
   if test "$COMMAND" = telegram-bootstrap; then
     /usr/bin/timeout -s KILL "$TIME_LIMIT" /usr/bin/docker run --rm --pull=never --network "$NETWORK" \
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
-      --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli" \
+      --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
       --mount "type=bind,src=$BUNDLE_ROOT,dst=/home/ouro/AgentBundles/sanctuary.ouro$BUNDLE_SUFFIX" \
-      --mount "type=bind,src=$POLLER_FACT,dst=/run/ouro-acceptance/telegram-poller-count.json,readonly" \
+      --mount "type=bind,src=$SOCKET_ROOT,dst=/run/ouro-host-acceptance,readonly" \
       --mount "type=bind,src=$IMAGE_FACT,dst=/run/ouro-acceptance/image-digest,readonly" \
       --mount "type=bind,src=$CONTAINER_FACT,dst=/run/ouro-acceptance/container-digest,readonly" \
       --mount "type=bind,src=$PROCESS_BINDING_FACT,dst=/run/ouro-acceptance/process-binding-digest,readonly" \
@@ -442,6 +438,7 @@ run_harness() {
   elif test "$COMMAND" = callback-inject; then
     /usr/bin/timeout -s KILL "$TIME_LIMIT" /usr/bin/docker run --rm -i --pull=never --network "$NETWORK" \
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
@@ -457,6 +454,7 @@ run_harness() {
   elif test "$COMMAND" = evidence-snapshot; then
     /usr/bin/timeout -s KILL "$TIME_LIMIT" /usr/bin/docker run --rm --pull=never --network "$NETWORK" \
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
@@ -475,6 +473,7 @@ run_harness() {
     if test "$COMMAND" = reboot-request || test "$COMMAND" = reboot-resume; then ACCEPTANCE_MOUNT="--mount type=bind,src=$ACCEPTANCE_PIN_ROOT,dst=/home/ouro/AgentBundles/sanctuary.ouro/state/acceptance"; else ACCEPTANCE_MOUNT=; fi
     /usr/bin/timeout -s KILL "$TIME_LIMIT" /usr/bin/docker run --rm --pull=never --network "$NETWORK" \
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
@@ -492,6 +491,7 @@ run_harness() {
   else
     /usr/bin/timeout -s KILL "$TIME_LIMIT" /usr/bin/docker run --rm --pull=never --network "$NETWORK" \
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
+      --mount "type=bind,src=/run/ouro-authority,dst=/run/ouro-authority,readonly" \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
       --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.816",
+  "runtimeVersion": "0.1.0-alpha.817",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/tool-profiles.json

@@ -2,9 +2,9 @@
   "version": 2,
   "profiles": {
     "sanctuary-owner": {
-      "version": 8,
+      "version": 9,
       "contextScopes": ["household.status", "household.policy", "household.private"],
-      "toolNames": ["external_event_disposition", "query_active_work", "save_friend_note", "telegram_contact_manage", "query_cares", "care_manage", "await_condition", "resolve_await", "cancel_await", "list_recent_attachments", "materialize_attachment", "describe_image", "unraid_list_containers", "unraid_get_container_logs", "unraid_get_storage", "sanctuary_get_media_optimization", "sanctuary_search_media_catalog", "unraid_get_disks", "unraid_get_notifications", "unraid_get_system", "sanctuary_get_install_state", "unraid_check_services", "sanctuary_get_download_queue", "sanctuary_resume_download_queue", "unraid_restart_container", "steward_policy_manage", "send_message", "ponder", "rest", "settle", "speak", "shell", "shell_status", "shell_tail", "read_file", "write_file", "edit_file", "glob", "grep", "web_search", "search_facts", "consult_diary", "consult_notes", "get_friend_note", "session_summary", "query_session", "set_reasoning_effort", "restart_runtime", "revive_sense"],
+      "toolNames": ["external_event_disposition", "query_active_work", "save_friend_note", "telegram_contact_manage", "query_cares", "care_manage", "await_condition", "resolve_await", "cancel_await", "list_recent_attachments", "materialize_attachment", "describe_image", "unraid_list_containers", "unraid_get_container_logs", "unraid_get_storage", "sanctuary_get_media_optimization", "sanctuary_search_media_catalog", "unraid_get_disks", "unraid_get_notifications", "unraid_get_system", "sanctuary_get_install_state", "unraid_check_services", "sanctuary_get_download_queue", "sanctuary_resume_download_queue", "unraid_restart_container", "steward_policy_manage", "send_message", "ponder", "rest", "settle", "speak", "shell", "shell_status", "shell_tail", "read_file", "write_file", "edit_file", "glob", "grep", "web_search", "search_facts", "consult_diary", "consult_notes", "get_friend_note", "session_summary", "query_session", "set_reasoning_effort", "restart_runtime", "revive_sense", "sanctuary_host_execute"],
       "effectScopes": ["telegram.proactive", "telegram.request_return", "telegram.owner_event"]
     },
     "sanctuary-household": {

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.816</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.817</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>
@@ -24,4 +24,5 @@
   <Config Name="Runtime state" Target="/home/ouro/.ouro-cli" Default="/mnt/user/appdata/ouro-butler/runtime/.ouro-cli" Mode="rw" Description="Machine-scoped runtime" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/ouro-butler/runtime/.ouro-cli</Config>
   <Config Name="Agent bundle" Target="/home/ouro/AgentBundles/sanctuary.ouro" Default="/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro" Mode="rw" Description="Sanctuary bundle" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro</Config>
   <Config Name="Privileged event spool" Target="/run/ouro-events" Default="/boot/config/custom/ouro-events/spool" Mode="ro" Description="Root-owned detector envelopes, read-only inside the Butler" Type="Path" Display="always" Required="true" Mask="false">/boot/config/custom/ouro-events/spool</Config>
+  <Config Name="Root authority socket" Target="/run/ouro-authority" Default="/run/ouro-authority" Mode="ro" Description="Root-owned gateway socket and public issuer pins only" Type="Path" Display="always" Required="true" Mask="false">/run/ouro-authority</Config>
 </Container>

package/dist/heart/core.js

@@ -176,7 +176,8 @@ async function getProviderRuntime(facing = "human", owner) {
         console.error(`\n[fatal] ${msg}\n`);
         throw new Error(msg);
     }
-    return runtime;
+    // The shared tool loop supplies approval continuation to every provider adapter.
+    return { ...runtime, capabilities: new Set([...runtime.capabilities, "approval-continuation"]) };
 }
 /**
  * Clear cached provider construction inputs so the next access re-reads them

package/dist/heart/daemon/container-spec-auditor-main.js

@@ -71,15 +71,15 @@ function runContainerSpecAuditorCli(args, deps = {}) {
     const readFile = deps.readFile ?? ((filePath) => fs.readFileSync(filePath));
     const readText = (filePath) => decodeUtf8(readFile(filePath));
     const write = deps.write ?? ((text) => process.stdout.write(text));
-    const staged = parseModeArguments(args, ["--template", "--runtime-policy", "--expected-image"]);
-    const persistent = parseModeArguments(args, ["--persistent-template", "--runtime-policy", "--expected-image-reference"]);
-    const effective = parseModeArguments(args, ["--inspect", "--image-inspect", "--expected-image", "--expected-image-reference", "--expected-icon"]);
+    const staged = parseModeArguments(args, ["--template", "--runtime-policy", "--expected-image", "--mount-contract"]);
+    const persistent = parseModeArguments(args, ["--persistent-template", "--runtime-policy", "--expected-image-reference", "--mount-contract"]);
+    const effective = parseModeArguments(args, ["--inspect", "--image-inspect", "--expected-image", "--expected-image-reference", "--expected-icon", "--mount-contract"]);
     const sourceCandidate = parseModeArguments(args, ["--inspect", "--image-inspect", "--expected-image", "--mount-contract"]);
     const sourceContract = sourceCandidate?.["--mount-contract"];
     const sourceEffective = sourceContract === "legacy-alpha742" ? sourceCandidate : null;
     const selectedEffective = effective ?? sourceEffective;
     if (!staged && !persistent && !selectedEffective) {
-        write(JSON.stringify({ ok: false, error: "usage: staged --template <path> --runtime-policy <path> --expected-image <id>; persistent --persistent-template <path> --runtime-policy <path> --expected-image-reference <tag>; effective --inspect <path> --image-inspect <path> --expected-image <id> --expected-image-reference <tag> --expected-icon <url>; source compatibility effective --inspect <path> --image-inspect <path> --expected-image <id> --mount-contract legacy-alpha742" }) + "\n");
+        write(JSON.stringify({ ok: false, error: "usage: all modes require --mount-contract canonical-pre-gateway|canonical-gateway; staged --template <path> --runtime-policy <path> --expected-image <id>; persistent --persistent-template <path> --runtime-policy <path> --expected-image-reference <tag>; effective --inspect <path> --image-inspect <path> --expected-image <id> --expected-image-reference <tag> --expected-icon <url>; source compatibility effective --inspect <path> --image-inspect <path> --expected-image <id> --mount-contract legacy-alpha742" }) + "\n");
         (0, runtime_1.emitNervesEvent)({
             level: "error",
             component: "daemon",
@@ -129,7 +129,7 @@ function runContainerSpecAuditorCli(args, deps = {}) {
             expectedEnvironment,
             expectedImageReference: selectedEffective["--expected-image-reference"],
             expectedIcon: selectedEffective["--expected-icon"],
-            mountContract: sourceContract === "legacy-alpha742" ? sourceContract : "canonical",
+            mountContract: selectedEffective["--mount-contract"],
         });
         if (imageInspect.Id !== selectedEffective["--expected-image"]) {
             result.ok = false;
@@ -139,6 +139,7 @@ function runContainerSpecAuditorCli(args, deps = {}) {
         return result.ok ? 0 : 1;
     }
     const templateArguments = persistent ?? staged;
+    const mountContract = templateArguments["--mount-contract"];
     const templatePath = persistent ? templateArguments["--persistent-template"] : templateArguments["--template"];
     let templateXml;
     let runtimePolicyText;
@@ -158,8 +159,8 @@ function runContainerSpecAuditorCli(args, deps = {}) {
         return 2;
     }
     const result = persistent
-        ? (0, container_spec_auditor_1.auditSanctuaryPersistentTemplate)({ templateXml, runtimePolicyText, expectedImageReference: persistent["--expected-image-reference"] })
-        : (0, container_spec_auditor_1.auditSanctuaryStagedFiles)({ templateXml, runtimePolicyText, expectedImage: staged["--expected-image"] });
+        ? (0, container_spec_auditor_1.auditSanctuaryPersistentTemplate)({ templateXml, runtimePolicyText, expectedImageReference: persistent["--expected-image-reference"], mountContract })
+        : (0, container_spec_auditor_1.auditSanctuaryStagedFiles)({ templateXml, runtimePolicyText, expectedImage: staged["--expected-image"], mountContract });
     write(JSON.stringify(result) + "\n");
     return result.ok ? 0 : 1;
 }

package/dist/heart/daemon/container-spec-auditor.js

@@ -9,12 +9,16 @@ const EXPECTED_BINDS = [
     "/mnt/user/appdata/ouro-butler/runtime/.ouro-cli:/home/ouro/.ouro-cli:rw",
     "/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro:/home/ouro/AgentBundles/sanctuary.ouro:rw",
     "/boot/config/custom/ouro-events/spool:/run/ouro-events:ro",
+    "/run/ouro-authority:/run/ouro-authority:ro",
 ];
 const EXPECTED_MOUNTS = [
     ["/mnt/user/appdata/ouro-butler/runtime/.ouro-cli", "/home/ouro/.ouro-cli", true, "rprivate"],
     ["/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro", "/home/ouro/AgentBundles/sanctuary.ouro", true, "rprivate"],
     ["/boot/config/custom/ouro-events/spool", "/run/ouro-events", false, "rprivate"],
+    ["/run/ouro-authority", "/run/ouro-authority", false, "rprivate"],
 ];
+const PRE_GATEWAY_BINDS = EXPECTED_BINDS.slice(0, 3);
+const PRE_GATEWAY_MOUNTS = EXPECTED_MOUNTS.slice(0, 3);
 const LEGACY_ALPHA742_IMAGE = "sha256:681449ad47a2621705cd339b481e6339236b31dc65e195b1cf5025d0f2191d7d";
 const LEGACY_ALPHA742_MOUNTS = EXPECTED_MOUNTS.slice(0, 2);
 const EXPECTED_EXTRA_PARAMS = "--restart=unless-stopped --user=10001:10001";
@@ -51,14 +55,14 @@ function auditSanctuaryContainerSpec(value, options) {
     else {
         if (!EXACT_IMAGE.test(options.expectedImage))
             violations.push("expected image must be an exact local Docker image ID");
-        const mountContract = options.mountContract ?? "canonical";
-        if (mountContract !== "canonical" && mountContract !== "legacy-alpha742")
+        const mountContract = options.mountContract;
+        if (mountContract !== "canonical-pre-gateway" && mountContract !== "canonical-gateway" && mountContract !== "legacy-alpha742")
             violations.push("unsupported mount contract");
         if (mountContract === "legacy-alpha742" && options.expectedImage !== LEGACY_ALPHA742_IMAGE)
             violations.push("legacy mount exception requires the pinned alpha.742 image ID");
-        const expectedMounts = mountContract === "legacy-alpha742" ? LEGACY_ALPHA742_MOUNTS : EXPECTED_MOUNTS;
-        const expectedArgs = mountContract === "canonical" ? PACKAGE_DAEMON_ARGS : LEGACY_DAEMON_ARGS;
-        const expectedEntrypoint = mountContract === "canonical" ? PACKAGE_ENTRYPOINT : LEGACY_ENTRYPOINT;
+        const expectedMounts = mountContract === "legacy-alpha742" ? LEGACY_ALPHA742_MOUNTS : mountContract === "canonical-pre-gateway" ? PRE_GATEWAY_MOUNTS : EXPECTED_MOUNTS;
+        const expectedArgs = mountContract !== "legacy-alpha742" ? PACKAGE_DAEMON_ARGS : LEGACY_DAEMON_ARGS;
+        const expectedEntrypoint = mountContract !== "legacy-alpha742" ? PACKAGE_ENTRYPOINT : LEGACY_ENTRYPOINT;
         if (root.Image !== options.expectedImage)
             violations.push("image does not match the reviewed exact local Docker image ID");
         if (root.Path !== "node")
@@ -103,9 +107,9 @@ function auditSanctuaryContainerSpec(value, options) {
             violations.push("container must not publish all exposed ports");
         if (!isEmptyRecord(network?.Ports))
             violations.push("effective network ports must be empty");
-        if (mountContract === "canonical" && root.Name !== `/${EXPECTED_NAME}`)
+        if (mountContract !== "legacy-alpha742" && root.Name !== `/${EXPECTED_NAME}`)
             violations.push("container name must be /ouro-butler");
-        if (mountContract === "canonical") {
+        if (mountContract !== "legacy-alpha742") {
             if (!options.expectedImageReference || !VERSION_REFERENCE.test(options.expectedImageReference))
                 violations.push("expected image reference must be the canonical package-version tag");
             if (config.Image !== options.expectedImageReference)
@@ -162,6 +166,9 @@ function singleTextChild(document, name) {
 }
 function auditTemplate(input, expectedRepository, repositoryIsValid, repositoryViolation) {
     const violations = [];
+    if (input.mountContract !== "canonical-pre-gateway" && input.mountContract !== "canonical-gateway")
+        violations.push("unsupported template mount contract");
+    const expectedBinds = input.mountContract === "canonical-pre-gateway" ? PRE_GATEWAY_BINDS : EXPECTED_BINDS;
     const template = parseDockerManTemplateXml(input.templateXml);
     if (!template)
         violations.push("canonical DockerMan XML structure is invalid");
@@ -181,8 +188,8 @@ function auditTemplate(input, expectedRepository, repositoryIsValid, repositoryV
         const { Type: type, Target: target, Mode: mode } = entry.attributes;
         return entry.form === "text" && type === "Path" && target && mode ? `${entry.text}:${target}:${mode}` : "invalid";
     });
-    if (configEntries.length !== EXPECTED_BINDS.length
-        || JSON.stringify([...pathConfigs].sort()) !== JSON.stringify([...EXPECTED_BINDS].sort())) {
+    if (configEntries.length !== expectedBinds.length
+        || JSON.stringify([...pathConfigs].sort()) !== JSON.stringify([...expectedBinds].sort())) {
         violations.push("template Config entries must equal the canonical path binds");
     }
     const postArgs = directChildren(template, "PostArgs");