@perkos/agent-sdk 0.7.1 → 0.8.0-rc.1

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,CAAC;AAC1C,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC1C,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAC5B,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;CAC9C;AAED,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,QAAQ,GACR,WAAW,GACX,WAAW,GACX,UAAU,GACV,SAAS,GACT,cAAc,GACd,kBAAkB,GAClB,UAAU,CAAC;AAEf,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC/C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,cAAc,GACd,kBAAkB,GAClB,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,YAAY,GACZ,YAAY,GACZ,uBAAuB,GACvB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,uBAAuB,GACvB,uBAAuB,GACvB,eAAe,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,YAAY,EAAE,uBAAuB,KAClC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACvE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;CACtC;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;CACtC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,CAAC;AAC1C,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAC1C,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAC5B,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CACtD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;CAC9C;AAED,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,QAAQ,GACR,WAAW,GACX,WAAW,GACX,UAAU,GACV,SAAS,GACT,cAAc,GACd,kBAAkB,GAClB,UAAU,CAAC;AAEf,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC/C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,cAAc,GACd,kBAAkB,GAClB,YAAY,GACZ,YAAY,GACZ,UAAU,GACV,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,YAAY,GACZ,YAAY,GACZ,uBAAuB,GACvB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,uBAAuB,GACvB,uBAAuB,GACvB,eAAe,GACf,qBAAqB,GACrB,mBAAmB,GACnB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,OAAO,GACP,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,YAAY,EAAE,uBAAuB,KAClC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1D,mBAAmB,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACpD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACvE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CACtD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;CAClD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;CAC5C;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;CACtC;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC;CACtC"}

package/docs/ARCHITECTURE.md

@@ -3,10 +3,25 @@
 ## Scope
 
 The SDK is a typed boundary between agent frameworks and the existing PerkOS contracts. The core
-package contains no LLM, HTTP-paywall, MCP server, wallet extension, or private-key store. Those
+browser entry point contains no LLM, HTTP-paywall, MCP server, wallet extension, or private-key store. Those
 systems integrate through explicit interfaces so that transaction policy remains reusable and
 auditable.
 
+The unreleased Node-only `nayori-mcp` binary is a separate stdio adapter built on the official
+MCP SDK. It exposes fixed-testnet public reads and offline commitments, not signing or payment
+tools. There is no private-key store or custody service in that adapter. See
+[Hermes MCP](HERMES_MCP.md) for role-specific tools and remaining integration gates.
+The optional [QA custody candidate](HERMES_CUSTODY.md) runs separately: operator permit,
+wallet-scoped lock, durable reservation/txid ledger and fixed testnet SDK backend. MCP delegates
+bounded requests over a filesystem Unix socket; it never receives a key. Distinct Linux identity
+and access-control verification are deployment gates, not claims established by a same-UID test.
+
+The provider-only evaluation opt-in connects MCP to the fixed public QA evaluator origin.
+It binds admission to the configured custody job and its confirmed submission, validates SDK
+commitments against on-chain state, then reuses the deterministic evaluation ID. Evaluator
+credentials, signing and byte verification stay outside MCP. x402 purchases remain a separate
+integration gate; evaluation admission does not add another payment.
+
 ## Flow
 
 ```text
@@ -163,5 +178,6 @@ available through explicit same-network overrides.
 
 - Durable replay-store and hosted HTTP adapters for the x402 Stacks facilitator.
 - Hosted MPP challenge consumption, settlement reconciliation and confirmed receipt delivery.
-- MCP tools with typed inputs, allowlists, and the same spending policy.
+- Deployment/isolation validation of the candidate wallet-enabled MCP delegation and durable operator-approved limits;
+  the read/prepare QA foundation already exists separately.
 - Optional framework-specific integrations and higher-confirmation settlement policies.

package/docs/EXISTING_AGENT.md

@@ -0,0 +1,123 @@
+# Connect your existing agent to Nayori
+
+Start here **after your agent is installed and working with your own LLM**. Keep that runtime,
+model and provider. Nayori adds Stacks identity, escrow and payment integration; it does not
+install your agent or configure its LLM. No PerkOS-LLM account or credentials are required.
+Never send Nayori your model API key, wallet private key or recovery material.
+
+Hermes is an example integration, not a requirement. A non-TypeScript runtime can use a
+controlled TypeScript sidecar or the documented HTTP surfaces; HTTP/MCP discovery alone does
+not implement the on-chain job lifecycle.
+
+## 1. Choose the integration and release
+
+| Path | Available boundary | Start with |
+| --- | --- | --- |
+| TypeScript SDK | Public npm 0.7.1: reads, transaction plans and operator-supplied signer interfaces | This guide and the [SDK README](../README.md) |
+| Local MCP for an existing Hermes | Unreleased QA candidate: fixed testnet contracts, bounded role tools and optional separate custody | [MCP setup](HERMES_MCP.md) |
+| Remote partner MCP | Invite-only OAuth API access; not the local Hermes custody bridge | [Partner guide](PARTNER_PILOT.md) |
+
+Install a reviewed, pinned public version in your agent's integration package:
+
+```sh
+npm install --save-exact @perkos/agent-sdk@0.7.1
+```
+
+The QA candidate shares a version label with a **different** npm artifact. Its Hermes tools,
+committed-evaluation walkthrough and fee integration require the reviewed QA source/tarball.
+Do not assume installing npm 0.7.1 installs those features. Record the source commit and artifact
+SHA-256; do not use an unpinned auto-downloading command in a financial agent.
+
+## 2. Prepare the wallet and signer under your control
+
+Follow [wallet and signer preparation](WALLET_SIGNER_SETUP.md) separately from SDK installation.
+If you already have a suitable signer, verify it rather than creating another wallet.
+Use a dedicated testnet identity, verify recovery, and authorize only a small STX gas budget.
+The agent requests bounded operations; its isolated signer checks and signs them. The LLM does
+not receive a private key. SDK installation creates neither a wallet nor an on-chain identity.
+
+## 3. Pin testnet and verify the deployment
+
+Select `network: "testnet"` explicitly. Match registry, escrow generation, token and evaluator
+to the intended QA deployment before any transaction. A network selection alone does not select
+the fee-candidate contracts. The public npm default and the [QA fee candidate](SERVICE_FEES.md)
+are distinct; do not copy a candidate override into production.
+
+This example reads a count and creates an **unsigned** plan only:
+
+```ts
+import { PerkOSClient } from "@perkos/agent-sdk";
+
+const nayori = new PerkOSClient({ network: "testnet" });
+console.log(await nayori.getAgentCount());
+
+// Obtain this public address from your verified testnet signer, not from an LLM.
+const operatorAddress = "YOUR_VERIFIED_TESTNET_ADDRESS";
+const plan = nayori.transactions.registerAgent({
+  name: "My Research Agent",
+  description: "Produces cited research for assigned jobs.",
+  wallet: operatorAddress,
+  endpoints: [],
+});
+console.log(plan.network, plan.contract, plan.functionName);
+```
+
+Replace the address placeholder before building the plan; it intentionally is not a usable
+wallet. `endpoints: []` is appropriate when the agent has no public service. Do not advertise
+an example URL, private host or local stdio process as an HTTPS MCP endpoint.
+
+## 4. Register and verify the agent
+
+1. Choose real public metadata. Check saved receipts/IDs before making another registration.
+2. Review the plan's network, registry, `register-agent` call and arguments in your signer.
+   Use the same operator address as transaction sender and metadata wallet in this walkthrough.
+   The contract records the sender as `creator`; a metadata wallet alone does not prove ownership.
+3. Explicitly authorize the registration and network fee using your controlled signer integration.
+   A plan does not sign or broadcast. `registerAgent()` on a signer-enabled client returns a
+   broadcast receipt, not confirmation. Preserve that receipt's txid durably.
+4. Use `nayori.confirm(savedTxid)` and require `status === "success"`. Verify the registry call
+   returned `(ok uN)` and record that **agent ID**, not a job ID or OAuth identity. Confirm the
+   configured canonical depth independently where your release policy requires it.
+5. Read `await nayori.getAgent(agentId)`. Require an active record, matching `creator`, `wallet`,
+   name, description and endpoints. Save network, registry, txid and agent ID together.
+6. On timeout or missing state, query the saved txid and registry before retrying. Do not infer
+   your ID from the global agent count, or re-register merely because a response was slow.
+
+Registration is now verifiable on-chain. It does not grant OAuth scopes, buy a resource, create
+a job or authorize another wallet. Request partner OAuth only if the API path you actually need
+requires it; direct SDK contract registration does not require partner credentials.
+
+## 5. Choose the job role
+
+- **Buyer/client:** create objective criteria, create a job, set budget, fund and assign a provider.
+  Confirm every state-changing transaction before proceeding. Fund the escrow contract, not a
+  provider wallet directly. Use [the buyer walkthrough](HERMES_BUYER.md) for the QA Hermes example.
+- **Provider:** register with its own signer, verify assignment and escrow, do the real work and
+  submit evidence. It cannot self-assign in the QA bridge. It needs STX for its own gas but does
+  not send sBTC merely to receive payment. See [the provider walkthrough](HERMES_PROVIDER.md).
+- **Outcome:** neither participant controls Nayori's evaluator key. Check the decision, appeal
+  window and final settlement; verify zero escrow, actual payout/refund and reputation state.
+
+The [role-separated testnet walkthrough](TESTNET_QUICKSTART.md) supplies guarded QA commands,
+inputs and recovery behavior. It is a separate candidate, not a claim that a funded autonomous
+Hermes session has passed merely because the guide exists. See the separately
+[verified supervised lifecycle](VALIDATION_AND_RELEASE.md). x402 resource purchases have their own [payment workflow](X402_PAYMENTS.md),
+permission and budget; registering an agent or requesting evaluation does not buy an x402 resource.
+
+## Completion checklist
+
+Use [QA checkpoints](HERMES_CHECKPOINTS.md) for role funding budgets, the custody-specific
+six-burn confirmation gate, job-bound provider handoff and recovery. Funding a wallet is not
+funding escrow; an evaluator decision is not a payout.
+
+- Existing agent and its own LLM unchanged; no model key shared with Nayori.
+- Operator-controlled wallet/signer and recovery tested, secrets outside agent prompts and Git.
+- Explicit testnet/deployment and bounded gas/operation permissions.
+- Successful registration tx, returned agent ID and matching active registry record.
+- Chosen role tested against a real job, with confirmed submission and economic outcome.
+- Public receipts contain no secrets; simulated/unsigned steps are not labeled completed E2E.
+
+Promote to mainnet only through a separately reviewed network/deployment configuration and
+spending authorization. Testnet registration does not create a mainnet identity. One supervised
+funded Hermes scenario passed; clean published-package onboarding, paid-resource integration and
+the recorded demo remain separate gates.

package/docs/HERMES_BUYER.md

@@ -0,0 +1,91 @@
+# Hermes buyer — controlled QA walkthrough
+
+**Unreleased candidate; one supervised internal lifecycle verified.** Follow this with a
+separate provider operator. Do not substitute mainnet URLs or assume the published npm 0.7.1
+contains these tools. This guide is the recording checklist, not evidence that every step passed.
+
+See [validation and release boundaries](VALIDATION_AND_RELEASE.md) for the exact tested source,
+public transactions and remaining gates. Reuse an already registered, verified identity; omit
+`register` from a new permit and recalculate its action/gas budget instead of registering twice.
+
+## 1. Operator prerequisites
+
+### Bring your working agent
+
+Your Hermes is already installed and working with your own LLM. Keep that configuration;
+this guide adds Nayori tools, not a model provider. No PerkOS-LLM account, model migration or
+model API key shared with Nayori is required. Hermes is an example, not a platform requirement.
+Start with [existing-agent onboarding](EXISTING_AGENT.md) and the separate
+[operator wallet/signer checklist](WALLET_SIGNER_SETUP.md). Keep model credentials out of
+prompts, MCP arguments and recordings. Your agent's model is separate from Nayori's evaluator.
+
+- Create and back up a dedicated Stacks testnet wallet **outside Nayori and outside Hermes**.
+  Use your own Stacks.js signer or the reviewed isolated custody pilot. Wallet creation,
+  key recovery and funding remain operator responsibilities, not SDK tools.
+- Verify the restored key derives the expected address before funding. Never display keys,
+  recovery material, environment contents or authorization headers in a recording.
+- Keep the buyer key only inside its signer boundary. Hermes must not share that UID,
+  key mount, writable policy, Docker socket, sudo or access to the provider's socket.
+- Install the exact reviewed QA tarball as described in [MCP setup](HERMES_MCP.md).
+  Record source SHA and artifact SHA-256. Do not use unpinned `npx` or confuse candidate
+  version 0.7.1 with the different publicly distributed 0.7.1 artifact.
+
+## 2. Configure and verify permissions
+
+Create the public profile with `role: client` and four distinct, verified buyer/provider/
+evaluator/treasury addresses. Follow [custody permissions](HERMES_CUSTODY.md) for a short-lived
+permit, private journal and socket. Start with signing disabled and no funded key loaded.
+
+The pilot allows at most one job per permit: up to 1000 atomic sBTC units or 100000 micro-STX,
+5000 micro-STX gas reserved per action and no more than 35000 total per permit. Limits are
+caps, not a live network fee quote. The buyer's six actions normally require a 30000 cap.
+Accept the included 200 bps evaluation-earned fee and net refund after evaluated rejection.
+
+Configure Hermes using the exact paths in MCP setup. Verify `nayori_context` reports
+testnet, your wallet and the fixed v6/v5 contracts. With custody, verify
+`nayori_custody_status` reports the intended permit and zero unexpected operations. A context
+response does not prove wallet ownership or successful registration.
+
+## 3. Execute one real job
+
+After operator review, isolation tests, backup and explicit low-value testnet funding:
+
+1. Enable testnet signing in the **signer service**, not in Hermes's environment.
+2. Ask Hermes to call `nayori_execute` with `{"action":"register"}`. Confirm the saved txid
+   and agent ID. Do not repeat registration under a new permit because a response is slow.
+3. Define a real small task and objective acceptance criteria in the operator permit.
+   `nayori_prepare_job` previews the commitment; it does not create or authorize a job.
+4. Execute `create`, then query custody status until its returned job ID is confirmed.
+5. Execute `set-budget`, `fund`, then `assign`, confirming each before the next. In the
+   custody pilot confirmation includes six subsequent burn blocks, not six Stacks blocks.
+6. Give the confirmed public job ID to the provider operator. The buyer assigns the provider;
+   the provider cannot self-assign. The provider verifies escrow before doing work.
+7. Track `nayori_get_job`. The provider delivers and, if explicitly enabled, requests public
+   QA evaluation. Buyer and provider do not possess the evaluator key.
+8. Read the actual on-chain decision and appeal deadline. For an unappealed decision, call
+   buyer `finalize` only after the deadline. The pilot blocks appealed jobs for human handling.
+9. Independently inspect transaction events, terminal state, zero escrow, exact provider/
+   treasury payouts and reputation. For approved gross 1000 sBTC units, expect 980 provider
+   and 20 treasury under the configured 200 bps policy. A decision alone is not payment.
+
+## 4. Failure and recovery
+
+Follow [QA checkpoints](HERMES_CHECKPOINTS.md) for the exact confirmation condition:
+`currentBurn >= transactionBurn + 6`. Explorer success may arrive before custody confirmation.
+Wallet funding, escrow funding and final payout are separate checkpoints.
+
+Query custody/evaluation status before retrying. Preserve the same permit, journal, job and
+txid. A reserved operation without saved txid may already have signed: stop and investigate.
+Do not delete locks/journals, change nonce, increase gas or authorize a duplicate payment to
+make an error disappear. Recovery requires operator review of chain, nonce, mempool and events.
+
+## 5. Separate paid-resource and recording gates
+
+The current MCP does **not** purchase x402 resources. The [x402 paying flow](X402_PAYMENTS.md)
+needs its own permission, budget and successful walkthrough before a video claims that
+capability. Evaluation admission does not add a second x402 fee to this job.
+
+Record installation, public profile, tool discovery, actual registration/job/funding/assignment,
+provider handoff, decision and settlement. Label edited waiting periods. Keep private setup off
+screen. Keep the video and internal receipts outside the repository. Our controlled wallets are
+`internal-team-operated-not-m2-adoption`, not external grant adoption.

package/docs/HERMES_CHECKPOINTS.md

@@ -0,0 +1,88 @@
+# Hermes QA checkpoints and confirmation handling
+
+This is an **unreleased QA candidate**, not a completed funded autonomous E2E certification.
+One supervised internal sBTC lifecycle is verified in [validation and release boundaries](VALIDATION_AND_RELEASE.md).
+Use your existing agent and LLM. Keep the wallet and policy signer under your control, outside
+the model process. Follow [existing-agent onboarding](EXISTING_AGENT.md), then the
+[buyer](HERMES_BUYER.md) or [provider](HERMES_PROVIDER.md) manual.
+
+## Fund wallets before enabling execution
+
+Wallet funding is not agent registration and is not escrow funding. Derive and verify each
+public address from its own signer, test recovery and inspect balances on the intended network.
+Do not fund example addresses or send money to a provider as a substitute for `fund-job`.
+
+For the bounded sBTC QA walkthrough:
+
+| Role | Initial wallet budget | What it authorizes |
+| --- | --- | --- |
+| Buyer | 1000 **atomic sBTC units** plus 30000 micro-STX | One escrow budget and six actions at 5000 micro-STX gas each |
+| Provider | 10000 micro-STX | Registration and submission at 5000 micro-STX each |
+| Evaluator / appeal authority | Separately operated | Neither participant receives these keys or spending permissions |
+
+These are pilot caps, not a live fee estimate or guaranteed inclusion price. Funding transfers
+also cost gas to their sender and are outside those recipient budgets. The provider needs no
+sBTC deposit to receive an approved payout. Verify the canonical token principal, not just its
+ticker. The candidate accepts STX or sBTC escrow; direct USDCx resource payments are separate.
+
+## Track these checkpoints independently
+
+| Checkpoint | Required evidence | Does not prove |
+| --- | --- | --- |
+| Wallet ready | Correct network/address, recovery and asset/gas balances | Registration or escrow |
+| Tools ready | Real discovery, role context and bounded signer status | A chain transaction |
+| Signed / broadcast | Durable intent and saved txid | Canonical success or confirmation depth |
+| Registered | Successful registry call, returned agent ID and matching active record | A created or funded job |
+| Job funded | Confirmed job ID, criteria commitment, assigned provider, exact asset and escrow | Delivered work |
+| Work submitted | Confirmed evidence commitment and retrievable matching bytes | Evaluator approval |
+| Decision pending | On-chain decision and explanation hashes, appeal deadline | Payment or final reputation |
+| Settled | Terminal state, zero escrow, exact transfer events and reputation state | External adoption by itself |
+
+## Six-burn confirmation gate
+
+The QA custody pilot keeps an operation `signed` until its transaction is canonical, anchored
+and successful **and six subsequent Bitcoin burn blocks have arrived**. For a transaction in
+burn block `B`, the condition is `currentBurn >= B + 6`. This is not six Stacks blocks, not six
+seconds and not an estimate of wall-clock completion. A success shown by an explorer may precede
+the custodian's `confirmed` state. The SDK's general confirmation tracker and this custody gate
+are different policies; do not assume all SDK methods apply this depth automatically.
+
+Call `nayori_custody_status` to reconcile the existing journal. Do not call `nayori_execute`
+again to force confirmation, change the nonce, delete state, replace the permit, or increase the
+gas budget. A reserved operation without a txid, an abort, unavailable RPC or uncertain broadcast
+requires operator investigation. Keep the same journal and saved txid; there is no automatic
+fee bump or automatic rebroadcast. Six burn blocks reduce, but do not eliminate, reorg risk.
+
+## Role handoff and outcome
+
+The buyer completes registration, creation, budget, funding and assignment one action at a time.
+Issue the provider's permit only after independently verifying the real job ID, identities,
+criteria, expiry, token and exact funded escrow. Never use a synthetic job ID in a funded permit.
+The provider's pilot permit is job-bound; it then registers and submits with its own signer.
+
+If the identity is already registered, verify the active record and reuse it; omit registration
+from the permit and recalculate the cap. The verified repeat cycle used five buyer actions
+(25000 micro-STX) and one provider submission (5000 micro-STX), excluding incoming funding and
+the evaluator's own gas. These do not replace the first-registration budgets above.
+
+Preserve the submitted evidence bytes. An evaluator decision does not move escrow. Wait through
+the job's actual appeal deadline and respect any appeal; do not replace the chain deadline with
+a timer in your agent. Approved gross 1000 atomic sBTC under the QA 200 bps policy settles as
+980 to the provider and 20 to the job-pinned treasury. Verify events rather than calculating
+an expected amount and reporting it as paid. Production contract generations may differ.
+
+## Isolation, evidence and video
+
+Restrict the signer's outbound transport to the approved testnet RPC. Keep the model process
+away from key files, writable permits/journals, the Docker socket and privileged shell access.
+An operator-owned restricted relay is one deployment option, not an SDK-managed custody service.
+RPC reachability is not authorization; the signer still validates every operation and budget.
+
+Save public network, source/artifact hashes, permit hash, agent/job IDs, txids, block heights and
+verification results. Keep secrets, private host paths and internal logs out of published docs
+and recordings. Label shortened waiting periods in the video. Team-operated testnet participants
+are internal QA, not independent mainnet adoption.
+
+The local Hermes MCP does not purchase x402 resources. [x402](X402_PAYMENTS.md) needs a separate
+permission, budget, confirmed payment and delivered-resource receipt; evaluation admission does
+not create a second payment. Record that gate separately from the escrow workflow.

package/docs/HERMES_CUSTODY.md

@@ -0,0 +1,164 @@
+# Hermes custody — bounded QA execution candidate
+
+**Unreleased; deployed only for the controlled QA pilot. Do not enable funded wallets before your Linux isolation gate.**
+This candidate adds `nayori-custody`, a separate Node service, and optional delegation from
+`nayori-mcp`. It is not in published npm 0.7.1. No mainnet mode exists.
+
+[One supervised internal lifecycle](VALIDATION_AND_RELEASE.md) passed with isolated signers.
+That historical evidence does not authorize your deployment, wallet or spending limits.
+
+## Trust boundary
+
+Hermes/MCP → filesystem Unix socket → operator permit + durable ledger → SDK plan → testnet signer.
+
+The service uses the real SDK builders and validation, not an LLM-generated raw transaction.
+The model can request an action; it cannot choose network, contract, wallet, recipient, amount,
+fee, private-key path, shell command, RPC endpoint, or signer module. The service never executes
+job text as instructions. MCP has no private key and does not sign locally.
+
+The **deployment**, not the presence of a socket, establishes isolation:
+
+- Linux only for the custody CLI; signer and Hermes must use **different non-root UIDs**.
+- Use a dedicated wallet and one immutable permit/ledger per participant for this pilot. Do not
+  reuse the wallet outside the custodian, or run another custodian with another state directory.
+- Signer-owned private directories: `0700`; permit, journal and key files: `0600`, single link,
+  regular files, no symlinks. Use canonical absolute paths. No `.env` in Hermes or key in arguments.
+- IPC directory: signer-owned `0710`, trusted connector group; socket `0660`. Its ancestors
+  must let Hermes traverse **only the IPC path**, not the private data directory. Set the signer
+  primary group to this connector group so the socket inherits it. Do not give group write access
+  to the IPC directory. Unrelated users must not belong to the connector group.
+- Hermes must have no sudo, Docker socket, host root, `CAP_SYS_PTRACE`, shared key mount, signer
+  UID, writable signer source/dependencies, or access to signer process memory. Disable core dumps.
+  Restrict signer egress to the testnet RPC; keep permit/state/code inaccessible to Hermes.
+- `--hermes-uid` rejects root/same UID, but **does not attest a running Hermes process or enforce
+  container mounts/capabilities**. Verify those operational controls before loading any funded key.
+
+Linux pathname socket permissions govern access; these semantics are not portable to every OS.
+See [Linux unix(7)](https://man7.org/linux/man-pages/man7/unix.7.html) and
+[Node IPC documentation](https://nodejs.org/docs/latest-v22.x/api/net.html#ipc-support).
+Same-UID macOS protocol tests are **not** an isolation proof or an external security review.
+
+## Operator permit
+
+Only the operator writes this JSON, outside Git. All fields below are required; placeholders
+intentionally fail validation. Addresses must be distinct, valid testnet principals. `expiresAt`
+is UTC wall-clock authorization expiry; `expiredAt` is the job's **Stacks block** expiry.
+
+```json
+{
+  "version": 1,
+  "id": "qa-buyer-001",
+  "profile": {
+    "network": "testnet",
+    "role": "client",
+    "client": "BUYER_TESTNET_ADDRESS",
+    "provider": "PROVIDER_TESTNET_ADDRESS",
+    "evaluator": "VERIFIED_QA_EVALUATOR_ADDRESS",
+    "treasury": "VERIFIED_QA_TREASURY_ADDRESS"
+  },
+  "asset": "sbtc",
+  "amount": "1000",
+  "gasBudget": "30000",
+  "expiresAt": "2099-01-01T00:00:00.000Z",
+  "expiredAt": "REPLACE_WITH_FUTURE_STACKS_HEIGHT",
+  "jobId": null,
+  "description": "Compute 7 + 5 and explain the result",
+  "acceptanceCriteria": [
+    { "id": "sum", "requirement": "Return 12", "verification": "Check arithmetic" }
+  ],
+  "agentName": "QA buyer",
+  "actions": ["register", "create", "set-budget", "fund", "assign", "finalize"],
+  "evidenceOrigins": ["https://evaluator.qa.nayori.ai"],
+  "serviceFeeConsent": "200bps-net-after-evaluation"
+}
+```
+
+Replace the illustrative expiry with a short operator-approved window. Maximum escrow is
+1000 sBTC units or 100000 micro-STX. Gas is **5000 micro-STX per action**, cumulatively reserved,
+maximum 35000 per permit; failed/ambiguous operations do not replenish it. No gas bump or
+sponsorship is attempted. Service consent accepts the existing **included 2% evaluation-earned
+fee and net refund after evaluated rejection**, not a second x402 charge. Funds stay in escrow
+until the contract settles them.
+
+For the provider use a separate wallet/state/socket, role `provider`, the confirmed `jobId`, and
+actions `["register", "submit"]`. Client/evaluator/treasury, criteria, budget and job expiry must
+match the buyer's job. A provider never gets create/fund/assign/finalize authorization here.
+
+## Start and connect
+
+Install the exact reviewed QA tarball on each side. Record its SHA-256 and source commit.
+First start with **signing disabled**, without a funded key:
+
+```sh
+nayori-custody --permit /private/permit.json --state /private/state \
+  --socket /ipc/nayori.sock --key-file /private/wallet-key \
+  --hermes-uid 2002
+```
+
+Paths/UID are illustrative, not commands to provision the production server. The permit and
+state directories must already satisfy permissions. Startup prints only the permit hash and
+enabled flag to stderr. The key is read lazily **after** live checks and durable reservation.
+After human review and the isolation gate, the operator may explicitly append
+`--enable-testnet-signing`. Never give Hermes permission to modify service arguments.
+
+Add to the existing [MCP configuration](HERMES_MCP.md):
+
+```yaml
+      - --custody-socket
+      - /ipc/nayori.sock
+      - --permit-hash
+      - OPERATOR_RECORDED_64_HEX_SHA256
+```
+
+Two optional tools appear:
+
+| Tool | Purpose |
+|---|---|
+| `nayori_custody_status` | Reconcile saved txids; show permit, budget, job ID and operations |
+| `nayori_execute` | Request one allowed action, e.g. `{"action":"create"}` |
+
+Submit additionally requires the exact evidence manifest schema from `nayori_prepare_submission`.
+No `evidence` argument is accepted for other actions. Evidence origins, manifest hash/schema,
+MIME and byte declarations are checked, but the signer **does not fetch or verify content bytes**.
+The evaluator still must validate those bytes and judge the actual work.
+
+Recommended sequence: buyer register → create → status/confirmed job ID → set-budget → fund →
+assign; provider register → submit. Request each new action only after the previous one confirms.
+Provider MCP can separately opt into [public QA evaluation admission](HERMES_MCP.md#optional-provider-evaluation-admission)
+after a confirmed submission. No LLM API credential, internal evaluator bearer or x402 purchase
+is added to custody. After an on-chain decision
+and the appeal deadline, the buyer can finalize. Appealed jobs are blocked for human resolution;
+this pilot does not expose appeal, refund, review-timeout or administrative actions.
+
+## Recovery and accounting
+
+- One wallet-scoped lock prevents parallel custodian processes using the same state directory.
+- Append-only journal: reservation → locally derived txid → canonical confirmation. Each write
+  and parent directory entry is fsynced before the next side effect. Gas is never reset on restart.
+- Exact duplicate requests return the existing state. Changed evidence for an already attempted
+  submit is rejected. Signing/broadcast timeouts, aborted transactions, partial journal writes and
+  unknown outcomes block additional spending. Errors never claim that no signature was made.
+- Reconciliation requires the saved txid, canonical anchored success, expected contract result,
+  and **six subsequent burn blocks**. Create binds its returned job ID for subsequent actions.
+  Six confirmations reduce reorg risk; they do not eliminate it. Public RPC is a trust dependency.
+- A crash leaves a lock. **Never delete/replace a ledger, approve a new permit for the same wallet,
+  or remove a lock blindly to retry.** Stop all signer processes; inspect chain nonce, saved txid,
+  mempool and events. Preserve evidence and obtain explicit operator recovery authorization.
+  This candidate intentionally has no automatic “unlock/retry payment” command.
+- Nonce must be idle; another wallet user or pending transaction blocks signing. Postconditions
+  are deny-mode; sBTC is pinned to the canonical QA token and v6/v5 contracts.
+- Finalization confirmation is not the full E2E acceptance report: independently verify exact
+  provider/treasury transfers, zero escrow, outcome and reputation before declaring success.
+- Ordinary JavaScript strings cannot guarantee private-key memory erasure. This is a constrained
+  software custodian, not an HSM, MPC wallet, audited production signer, or disaster-recovery system.
+
+## Release gates still required
+
+1. Review/merge QA source and validate package integrity.
+2. Deploy from the authorized workstation to QA; provision distinct Linux identities and prove
+   Hermes cannot read/modify key, permit, journal, code or another role's socket.
+3. Crash/restart and concurrency tests across those OS identities, first with unfunded fixtures.
+4. Explicitly approved low-value testnet buyer/provider run using **actual Hermes**, including
+   evaluator admission, exact payout events and recovery. Internal actors are not M2 adoption.
+5. Complete the x402 onboarding walkthrough, release version/npm distribution, two operator
+   manuals and developer video. Production/mainnet remain unchanged until separately approved.