@research-engineering/agentic-proofkit 0.1.136
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ADOPTION.md +198 -0
- package/AGENTS.md +160 -0
- package/BACKLOG.md +217 -0
- package/CONTRIBUTING.md +70 -0
- package/LICENSE +21 -0
- package/NON_CLAIMS.md +45 -0
- package/README.md +50 -0
- package/SECURITY.md +52 -0
- package/dist/agentic-proofkit +36 -0
- package/dist/platform/darwin-arm64/agentic-proofkit +0 -0
- package/dist/platform/darwin-x64/agentic-proofkit +0 -0
- package/dist/platform/linux-arm64/agentic-proofkit +0 -0
- package/dist/platform/linux-x64/agentic-proofkit +0 -0
- package/docs/proofkit-contract-map.md +148 -0
- package/docs/release-process.md +228 -0
- package/docs/specs/proofkit-consumer-infra-retirement/overview.md +62 -0
- package/docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json +283 -0
- package/docs/specs/proofkit-package-boundary/overview.md +43 -0
- package/docs/specs/proofkit-package-boundary/requirements.v1.json +176 -0
- package/docs/specs/proofkit-receipt-authority/overview.md +35 -0
- package/docs/specs/proofkit-receipt-authority/requirements.v1.json +121 -0
- package/docs/specs/proofkit-spec-proof-core/overview.md +98 -0
- package/docs/specs/proofkit-spec-proof-core/requirements.v1.json +448 -0
- package/docs/specs/proofkit-supply-chain-quality/overview.md +95 -0
- package/docs/specs/proofkit-supply-chain-quality/requirements.v1.json +260 -0
- package/package.json +71 -0
- package/proofkit/cli-contract.v1.json +1601 -0
- package/proofkit/receipt-producer-policy.json +49 -0
- package/proofkit/requirement-bindings.json +1914 -0
- package/proofkit/witness-plan.json +1226 -0
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"policyId": "proofkit.receipt-producer-policy",
|
|
4
|
+
"receiptKinds": [
|
|
5
|
+
"proofkit.package-gate"
|
|
6
|
+
],
|
|
7
|
+
"environmentClasses": [
|
|
8
|
+
"local-go"
|
|
9
|
+
],
|
|
10
|
+
"producers": [
|
|
11
|
+
{
|
|
12
|
+
"producerId": "github.actions.package",
|
|
13
|
+
"owner": "proofkit.package-boundary",
|
|
14
|
+
"admissionLevel": "advisory",
|
|
15
|
+
"receiptKinds": [
|
|
16
|
+
"proofkit.package-gate"
|
|
17
|
+
],
|
|
18
|
+
"environmentClasses": [
|
|
19
|
+
"local-go"
|
|
20
|
+
],
|
|
21
|
+
"evidenceRefs": [
|
|
22
|
+
".github/workflows/ci.yml"
|
|
23
|
+
],
|
|
24
|
+
"nonClaim": "GitHub Actions package receipts are advisory until a separate CI-owned producer admission wrapper authenticates protected-run provenance."
|
|
25
|
+
},
|
|
26
|
+
{
|
|
27
|
+
"producerId": "local.developer",
|
|
28
|
+
"owner": "proofkit.package-boundary",
|
|
29
|
+
"admissionLevel": "advisory",
|
|
30
|
+
"receiptKinds": [
|
|
31
|
+
"proofkit.package-gate"
|
|
32
|
+
],
|
|
33
|
+
"environmentClasses": [
|
|
34
|
+
"local-go"
|
|
35
|
+
],
|
|
36
|
+
"evidenceRefs": [
|
|
37
|
+
"AGENTS.md"
|
|
38
|
+
],
|
|
39
|
+
"nonClaim": "Local developer receipts are advisory and do not satisfy merge obligations."
|
|
40
|
+
}
|
|
41
|
+
],
|
|
42
|
+
"receipts": [],
|
|
43
|
+
"nonClaims": [
|
|
44
|
+
"Receipt producer policy does not admit merge-satisfying GitHub Actions receipts by environment variable alone.",
|
|
45
|
+
"Receipt producer policy does not approve package release or consumer rollout.",
|
|
46
|
+
"Receipt producer policy does not authenticate protected-ref or workflow state by itself.",
|
|
47
|
+
"Receipt producer policy does not compute receipt freshness."
|
|
48
|
+
]
|
|
49
|
+
}
|