@research-engineering/agentic-proofkit 0.1.136
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ADOPTION.md +198 -0
- package/AGENTS.md +160 -0
- package/BACKLOG.md +217 -0
- package/CONTRIBUTING.md +70 -0
- package/LICENSE +21 -0
- package/NON_CLAIMS.md +45 -0
- package/README.md +50 -0
- package/SECURITY.md +52 -0
- package/dist/agentic-proofkit +36 -0
- package/dist/platform/darwin-arm64/agentic-proofkit +0 -0
- package/dist/platform/darwin-x64/agentic-proofkit +0 -0
- package/dist/platform/linux-arm64/agentic-proofkit +0 -0
- package/dist/platform/linux-x64/agentic-proofkit +0 -0
- package/docs/proofkit-contract-map.md +148 -0
- package/docs/release-process.md +228 -0
- package/docs/specs/proofkit-consumer-infra-retirement/overview.md +62 -0
- package/docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json +283 -0
- package/docs/specs/proofkit-package-boundary/overview.md +43 -0
- package/docs/specs/proofkit-package-boundary/requirements.v1.json +176 -0
- package/docs/specs/proofkit-receipt-authority/overview.md +35 -0
- package/docs/specs/proofkit-receipt-authority/requirements.v1.json +121 -0
- package/docs/specs/proofkit-spec-proof-core/overview.md +98 -0
- package/docs/specs/proofkit-spec-proof-core/requirements.v1.json +448 -0
- package/docs/specs/proofkit-supply-chain-quality/overview.md +95 -0
- package/docs/specs/proofkit-supply-chain-quality/requirements.v1.json +260 -0
- package/package.json +71 -0
- package/proofkit/cli-contract.v1.json +1601 -0
- package/proofkit/receipt-producer-policy.json +49 -0
- package/proofkit/requirement-bindings.json +1914 -0
- package/proofkit/witness-plan.json +1226 -0
|
@@ -0,0 +1,1914 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"bindingId": "proofkit.package-boundary.requirement-bindings",
|
|
4
|
+
"requirements": [
|
|
5
|
+
{
|
|
6
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-001",
|
|
7
|
+
"ownerId": "proofkit.package-boundary",
|
|
8
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
9
|
+
"claimLevel": "blocking",
|
|
10
|
+
"proofState": "witness_backed",
|
|
11
|
+
"nonClaims": [
|
|
12
|
+
"This requirement does not claim consumer adoption, registry publication, rollout approval, or production readiness."
|
|
13
|
+
]
|
|
14
|
+
},
|
|
15
|
+
{
|
|
16
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
17
|
+
"ownerId": "proofkit.package-boundary",
|
|
18
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
19
|
+
"claimLevel": "blocking",
|
|
20
|
+
"proofState": "witness_backed",
|
|
21
|
+
"nonClaims": [
|
|
22
|
+
"This requirement does not claim native witness execution, producer authentication, proof freshness, or merge approval."
|
|
23
|
+
]
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-003",
|
|
27
|
+
"ownerId": "proofkit.package-boundary",
|
|
28
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
29
|
+
"claimLevel": "blocking",
|
|
30
|
+
"proofState": "witness_backed",
|
|
31
|
+
"nonClaims": [
|
|
32
|
+
"This requirement does not claim registry publication, registry consumer installation, execution for non-native platform binaries, or rollout readiness."
|
|
33
|
+
]
|
|
34
|
+
},
|
|
35
|
+
{
|
|
36
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-004",
|
|
37
|
+
"ownerId": "proofkit.package-boundary",
|
|
38
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
39
|
+
"claimLevel": "blocking",
|
|
40
|
+
"proofState": "witness_backed",
|
|
41
|
+
"nonClaims": [
|
|
42
|
+
"This requirement does not authenticate GitHub Actions, compute proof freshness, approve merge, approve release, or make local advisory receipts merge-satisfying evidence."
|
|
43
|
+
]
|
|
44
|
+
},
|
|
45
|
+
{
|
|
46
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-005",
|
|
47
|
+
"ownerId": "proofkit.package-boundary",
|
|
48
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
49
|
+
"claimLevel": "blocking",
|
|
50
|
+
"proofState": "witness_backed",
|
|
51
|
+
"nonClaims": [
|
|
52
|
+
"This requirement does not claim semantic completeness, release approval, registry publication, consumer rollout, or production readiness."
|
|
53
|
+
]
|
|
54
|
+
},
|
|
55
|
+
{
|
|
56
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-006",
|
|
57
|
+
"ownerId": "proofkit.package-boundary",
|
|
58
|
+
"specPath": "docs/specs/proofkit-package-boundary/requirements.v1.json",
|
|
59
|
+
"claimLevel": "blocking",
|
|
60
|
+
"proofState": "witness_backed",
|
|
61
|
+
"nonClaims": [
|
|
62
|
+
"This requirement does not claim PyPI publication, PyPI registry install authority, a Python SDK contract, consumer rollout, or execution for non-native wheel platforms."
|
|
63
|
+
]
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"requirementId": "REQ-PROOFKIT-SPEC-001",
|
|
67
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
68
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
69
|
+
"claimLevel": "blocking",
|
|
70
|
+
"proofState": "witness_backed",
|
|
71
|
+
"nonClaims": [
|
|
72
|
+
"This requirement does not claim product requirement meaning, proof freshness, native witness execution, or overview prose authority."
|
|
73
|
+
]
|
|
74
|
+
},
|
|
75
|
+
{
|
|
76
|
+
"requirementId": "REQ-PROOFKIT-SPEC-002",
|
|
77
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
78
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
79
|
+
"claimLevel": "blocking",
|
|
80
|
+
"proofState": "witness_backed",
|
|
81
|
+
"nonClaims": [
|
|
82
|
+
"This requirement does not claim native witness pass evidence, proof freshness, receipt authenticity, or merge approval."
|
|
83
|
+
]
|
|
84
|
+
},
|
|
85
|
+
{
|
|
86
|
+
"requirementId": "REQ-PROOFKIT-SPEC-003",
|
|
87
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
88
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
89
|
+
"claimLevel": "blocking",
|
|
90
|
+
"proofState": "witness_backed",
|
|
91
|
+
"nonClaims": [
|
|
92
|
+
"This requirement does not claim command execution, CI scheduling authority, credential approval, or repository-specific command policy."
|
|
93
|
+
]
|
|
94
|
+
},
|
|
95
|
+
{
|
|
96
|
+
"requirementId": "REQ-PROOFKIT-SPEC-004",
|
|
97
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
98
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
99
|
+
"claimLevel": "blocking",
|
|
100
|
+
"proofState": "witness_backed",
|
|
101
|
+
"nonClaims": [
|
|
102
|
+
"This requirement does not claim changed-path completeness, command success, receipt authenticity, proof freshness, or approval to skip caller-owned gates."
|
|
103
|
+
]
|
|
104
|
+
},
|
|
105
|
+
{
|
|
106
|
+
"requirementId": "REQ-PROOFKIT-SPEC-005",
|
|
107
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
108
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
109
|
+
"claimLevel": "blocking",
|
|
110
|
+
"proofState": "witness_backed",
|
|
111
|
+
"nonClaims": [
|
|
112
|
+
"This requirement does not claim generated view authority, full graph context emission, proof freshness, or agent edit approval."
|
|
113
|
+
]
|
|
114
|
+
},
|
|
115
|
+
{
|
|
116
|
+
"requirementId": "REQ-PROOFKIT-SPEC-006",
|
|
117
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
118
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
119
|
+
"claimLevel": "blocking",
|
|
120
|
+
"proofState": "witness_backed",
|
|
121
|
+
"nonClaims": [
|
|
122
|
+
"This requirement does not claim repository scanning, native test execution, proof freshness, receipt authenticity, merge approval, or global coverage completeness outside the caller-provided universe."
|
|
123
|
+
]
|
|
124
|
+
},
|
|
125
|
+
{
|
|
126
|
+
"requirementId": "REQ-PROOFKIT-SPEC-007",
|
|
127
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
128
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
129
|
+
"claimLevel": "blocking",
|
|
130
|
+
"proofState": "witness_backed",
|
|
131
|
+
"nonClaims": [
|
|
132
|
+
"This requirement does not claim consumer repository input authenticity, producer trust, native witness execution, proof freshness, merge approval, or mutable source control outside caller-provided Proofkit inputs."
|
|
133
|
+
]
|
|
134
|
+
},
|
|
135
|
+
{
|
|
136
|
+
"requirementId": "REQ-PROOFKIT-SPEC-008",
|
|
137
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
138
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
139
|
+
"claimLevel": "blocking",
|
|
140
|
+
"proofState": "witness_backed",
|
|
141
|
+
"nonClaims": [
|
|
142
|
+
"This requirement does not claim repository scanning, requirement meaning, source freshness computation, rendered output authority, native witness execution, proof adequacy, merge approval, release approval, rollout approval, or production readiness."
|
|
143
|
+
]
|
|
144
|
+
},
|
|
145
|
+
{
|
|
146
|
+
"requirementId": "REQ-PROOFKIT-SPEC-009",
|
|
147
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
148
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
149
|
+
"claimLevel": "blocking",
|
|
150
|
+
"proofState": "witness_backed",
|
|
151
|
+
"nonClaims": [
|
|
152
|
+
"This requirement does not claim repository scanning, source freshness computation from files, requirement meaning, native witness execution, committed generated HTML, merge approval, release approval, rollout approval, or production readiness."
|
|
153
|
+
]
|
|
154
|
+
},
|
|
155
|
+
{
|
|
156
|
+
"requirementId": "REQ-PROOFKIT-SPEC-010",
|
|
157
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
158
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
159
|
+
"claimLevel": "blocking",
|
|
160
|
+
"proofState": "witness_backed",
|
|
161
|
+
"nonClaims": [
|
|
162
|
+
"This requirement does not claim changed-path completeness, generated-artifact verifier completeness, native witness execution, proof freshness, receipt authenticity, merge approval, release approval, rollout approval, or production readiness."
|
|
163
|
+
]
|
|
164
|
+
},
|
|
165
|
+
{
|
|
166
|
+
"requirementId": "REQ-PROOFKIT-SPEC-011",
|
|
167
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
168
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
169
|
+
"claimLevel": "blocking",
|
|
170
|
+
"proofState": "witness_backed",
|
|
171
|
+
"nonClaims": [
|
|
172
|
+
"This requirement does not claim consumer file materialization, native witness execution, proof freshness, receipt authenticity, merge approval, release approval, rollout approval, or production readiness."
|
|
173
|
+
]
|
|
174
|
+
},
|
|
175
|
+
{
|
|
176
|
+
"requirementId": "REQ-PROOFKIT-SPEC-012",
|
|
177
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
178
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
179
|
+
"claimLevel": "blocking",
|
|
180
|
+
"proofState": "witness_backed",
|
|
181
|
+
"nonClaims": [
|
|
182
|
+
"This requirement does not claim extraction completeness, requirement meaning, file materialization, proof-binding adequacy, native witness execution, proof freshness, merge approval, release approval, rollout approval, or production readiness."
|
|
183
|
+
]
|
|
184
|
+
},
|
|
185
|
+
{
|
|
186
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
187
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
188
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
189
|
+
"claimLevel": "blocking",
|
|
190
|
+
"proofState": "witness_backed",
|
|
191
|
+
"nonClaims": [
|
|
192
|
+
"This requirement does not claim public SDK vocabulary, consumer policy ownership, merge approval, receipt freshness, producer authentication, native witness execution, or ownership of one-command local vocabularies."
|
|
193
|
+
]
|
|
194
|
+
},
|
|
195
|
+
{
|
|
196
|
+
"requirementId": "REQ-PROOFKIT-SPEC-014",
|
|
197
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
198
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
199
|
+
"claimLevel": "blocking",
|
|
200
|
+
"proofState": "witness_backed",
|
|
201
|
+
"nonClaims": [
|
|
202
|
+
"This requirement does not claim Markdown semantic extraction, generated artifact freshness, document deletion approval, merge approval, release approval, rollout approval, or production readiness."
|
|
203
|
+
]
|
|
204
|
+
},
|
|
205
|
+
{
|
|
206
|
+
"requirementId": "REQ-PROOFKIT-SPEC-015",
|
|
207
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
208
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
209
|
+
"claimLevel": "blocking",
|
|
210
|
+
"proofState": "witness_backed",
|
|
211
|
+
"nonClaims": [
|
|
212
|
+
"This requirement does not claim Markdown reading, claim extractor completeness, requirement source validity, semantic support between overview prose and cited requirements, merge approval, release approval, rollout approval, or production readiness."
|
|
213
|
+
]
|
|
214
|
+
},
|
|
215
|
+
{
|
|
216
|
+
"requirementId": "REQ-PROOFKIT-SPEC-016",
|
|
217
|
+
"ownerId": "proofkit.spec-proof-core",
|
|
218
|
+
"specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
|
|
219
|
+
"claimLevel": "blocking",
|
|
220
|
+
"proofState": "witness_backed",
|
|
221
|
+
"nonClaims": [
|
|
222
|
+
"This requirement does not claim git diff discovery, replacement semantic equivalence, native witness execution, receipt freshness, requirement deletion approval, merge approval, release approval, rollout approval, or production readiness."
|
|
223
|
+
]
|
|
224
|
+
},
|
|
225
|
+
{
|
|
226
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-001",
|
|
227
|
+
"ownerId": "proofkit.receipt-authority",
|
|
228
|
+
"specPath": "docs/specs/proofkit-receipt-authority/requirements.v1.json",
|
|
229
|
+
"claimLevel": "blocking",
|
|
230
|
+
"proofState": "witness_backed",
|
|
231
|
+
"nonClaims": [
|
|
232
|
+
"This requirement does not claim producer authentication, receipt freshness, native command execution, command result correctness, current-obligation matching, or merge approval."
|
|
233
|
+
]
|
|
234
|
+
},
|
|
235
|
+
{
|
|
236
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-002",
|
|
237
|
+
"ownerId": "proofkit.receipt-authority",
|
|
238
|
+
"specPath": "docs/specs/proofkit-receipt-authority/requirements.v1.json",
|
|
239
|
+
"claimLevel": "blocking",
|
|
240
|
+
"proofState": "witness_backed",
|
|
241
|
+
"nonClaims": [
|
|
242
|
+
"This requirement does not claim producer authentication, receipt freshness, command execution, command result correctness, CI log authority, or merge approval."
|
|
243
|
+
]
|
|
244
|
+
},
|
|
245
|
+
{
|
|
246
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-003",
|
|
247
|
+
"ownerId": "proofkit.receipt-authority",
|
|
248
|
+
"specPath": "docs/specs/proofkit-receipt-authority/requirements.v1.json",
|
|
249
|
+
"claimLevel": "blocking",
|
|
250
|
+
"proofState": "witness_backed",
|
|
251
|
+
"nonClaims": [
|
|
252
|
+
"This requirement does not claim producer authentication, receipt freshness, policy digest provenance, policy-diff discovery, migration exception approval, or merge approval."
|
|
253
|
+
]
|
|
254
|
+
},
|
|
255
|
+
{
|
|
256
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-004",
|
|
257
|
+
"ownerId": "proofkit.receipt-authority",
|
|
258
|
+
"specPath": "docs/specs/proofkit-receipt-authority/requirements.v1.json",
|
|
259
|
+
"claimLevel": "blocking",
|
|
260
|
+
"proofState": "witness_backed",
|
|
261
|
+
"nonClaims": [
|
|
262
|
+
"This requirement does not claim native witness execution, producer authentication, proof freshness, command result correctness, merge approval, release approval, or rollout approval."
|
|
263
|
+
]
|
|
264
|
+
},
|
|
265
|
+
{
|
|
266
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-001",
|
|
267
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
268
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
269
|
+
"claimLevel": "blocking",
|
|
270
|
+
"proofState": "witness_backed",
|
|
271
|
+
"nonClaims": [
|
|
272
|
+
"This requirement does not claim file deletion, parity authenticity, native witness execution, proof freshness, merge approval, release approval, or rollout approval."
|
|
273
|
+
]
|
|
274
|
+
},
|
|
275
|
+
{
|
|
276
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-002",
|
|
277
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
278
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
279
|
+
"claimLevel": "blocking",
|
|
280
|
+
"proofState": "witness_backed",
|
|
281
|
+
"nonClaims": [
|
|
282
|
+
"This requirement does not claim package resolution, manifest reads, lockfile reads, registry authentication, package-manager authority, native execution, proof freshness, merge approval, or rollout approval."
|
|
283
|
+
]
|
|
284
|
+
},
|
|
285
|
+
{
|
|
286
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-003",
|
|
287
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
288
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
289
|
+
"claimLevel": "blocking",
|
|
290
|
+
"proofState": "witness_backed",
|
|
291
|
+
"nonClaims": [
|
|
292
|
+
"This requirement does not claim script execution, lockfile generation, lockfile freshness, registry authentication, package-manager behavior, CI scheduling, merge approval, or rollout approval."
|
|
293
|
+
]
|
|
294
|
+
},
|
|
295
|
+
{
|
|
296
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-004",
|
|
297
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
298
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
299
|
+
"claimLevel": "blocking",
|
|
300
|
+
"proofState": "witness_backed",
|
|
301
|
+
"nonClaims": [
|
|
302
|
+
"This requirement does not claim repository scanning, tracked-file freshness, command execution, native proof coverage, CI readiness, merge approval, release approval, or rollout approval."
|
|
303
|
+
]
|
|
304
|
+
},
|
|
305
|
+
{
|
|
306
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-005",
|
|
307
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
308
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
309
|
+
"claimLevel": "blocking",
|
|
310
|
+
"proofState": "witness_backed",
|
|
311
|
+
"nonClaims": [
|
|
312
|
+
"This requirement does not claim scenario appropriateness, repository scanning, command execution, receipt authentication, proof freshness, merge approval, release approval, or rollout approval."
|
|
313
|
+
]
|
|
314
|
+
},
|
|
315
|
+
{
|
|
316
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-006",
|
|
317
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
318
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
319
|
+
"claimLevel": "blocking",
|
|
320
|
+
"proofState": "witness_backed",
|
|
321
|
+
"nonClaims": [
|
|
322
|
+
"This requirement does not claim parity authenticity, digest computation, native witness execution, proof freshness, semantic correctness, proof coverage adequacy, old-owner deletion approval, merge approval, release approval, or rollout approval."
|
|
323
|
+
]
|
|
324
|
+
},
|
|
325
|
+
{
|
|
326
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-007",
|
|
327
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
328
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
329
|
+
"claimLevel": "blocking",
|
|
330
|
+
"proofState": "witness_backed",
|
|
331
|
+
"nonClaims": [
|
|
332
|
+
"This requirement does not claim repository scanning, semantic boundary correctness, automatic requirement extraction, native witness execution, proof freshness, owner approval, merge approval, release approval, or rollout approval."
|
|
333
|
+
]
|
|
334
|
+
},
|
|
335
|
+
{
|
|
336
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-008",
|
|
337
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
338
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
339
|
+
"claimLevel": "blocking",
|
|
340
|
+
"proofState": "witness_backed",
|
|
341
|
+
"nonClaims": [
|
|
342
|
+
"This requirement does not claim repository scanning, semantic boundary correctness, automatic requirement extraction, native witness execution, receipt authenticity, proof freshness, owner approval, merge approval, release approval, rollout approval, or old proof-owner retirement approval."
|
|
343
|
+
]
|
|
344
|
+
},
|
|
345
|
+
{
|
|
346
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-009",
|
|
347
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
348
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
349
|
+
"claimLevel": "blocking",
|
|
350
|
+
"proofState": "witness_backed",
|
|
351
|
+
"nonClaims": [
|
|
352
|
+
"This requirement does not claim repository scanning, manifest freshness, workspace glob expansion, package-manager authority, dependency version policy, script policy, native command execution, lockfile freshness, CI scheduling, merge approval, release approval, rollout approval, or production readiness."
|
|
353
|
+
]
|
|
354
|
+
},
|
|
355
|
+
{
|
|
356
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-010",
|
|
357
|
+
"ownerId": "proofkit.consumer-infra-retirement",
|
|
358
|
+
"specPath": "docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json",
|
|
359
|
+
"claimLevel": "blocking",
|
|
360
|
+
"proofState": "witness_backed",
|
|
361
|
+
"nonClaims": [
|
|
362
|
+
"This requirement does not claim registry metadata authenticity, package publication, package access-control, package-manager execution, native smoke execution, rollback execution, release-authority producer trust, proof freshness, merge approval, release approval, rollout approval, or production readiness."
|
|
363
|
+
]
|
|
364
|
+
},
|
|
365
|
+
{
|
|
366
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-001",
|
|
367
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
368
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
369
|
+
"claimLevel": "blocking",
|
|
370
|
+
"proofState": "witness_backed",
|
|
371
|
+
"nonClaims": [
|
|
372
|
+
"This requirement does not claim public-source provenance, release approval, registry identity, consumer adoption, or rollout readiness."
|
|
373
|
+
]
|
|
374
|
+
},
|
|
375
|
+
{
|
|
376
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-002",
|
|
377
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
378
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
379
|
+
"claimLevel": "blocking",
|
|
380
|
+
"proofState": "witness_backed",
|
|
381
|
+
"nonClaims": [
|
|
382
|
+
"This requirement does not claim vulnerability absence, exploitability assessment, license approval, consumer deployment safety, or public-source provenance."
|
|
383
|
+
]
|
|
384
|
+
},
|
|
385
|
+
{
|
|
386
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-003",
|
|
387
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
388
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
389
|
+
"claimLevel": "blocking",
|
|
390
|
+
"proofState": "witness_backed",
|
|
391
|
+
"nonClaims": [
|
|
392
|
+
"This requirement does not claim exhaustive input-space proof, CLI fuzzing, filesystem fuzzing, server lifecycle fuzzing, or release readiness."
|
|
393
|
+
]
|
|
394
|
+
},
|
|
395
|
+
{
|
|
396
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-004",
|
|
397
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
398
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
399
|
+
"claimLevel": "blocking",
|
|
400
|
+
"proofState": "witness_backed",
|
|
401
|
+
"nonClaims": [
|
|
402
|
+
"This requirement does not claim exhaustive command semantic completeness beyond the declared route inventory or byte-for-byte stability for diagnostics outside the public CLI ABI."
|
|
403
|
+
]
|
|
404
|
+
},
|
|
405
|
+
{
|
|
406
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-005",
|
|
407
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
408
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
409
|
+
"claimLevel": "blocking",
|
|
410
|
+
"proofState": "witness_backed",
|
|
411
|
+
"nonClaims": [
|
|
412
|
+
"This requirement does not claim provider-run success, CodeQL vulnerability absence, or replacement of go test, go vet, staticcheck, or govulncheck."
|
|
413
|
+
]
|
|
414
|
+
},
|
|
415
|
+
{
|
|
416
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-006",
|
|
417
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
418
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
419
|
+
"claimLevel": "blocking",
|
|
420
|
+
"proofState": "witness_backed",
|
|
421
|
+
"nonClaims": [
|
|
422
|
+
"This requirement does not claim provider-run success, vulnerability absence, exploitability assessment, reachable-code proof, license approval, or merge approval."
|
|
423
|
+
]
|
|
424
|
+
},
|
|
425
|
+
{
|
|
426
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-007",
|
|
427
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
428
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
429
|
+
"claimLevel": "blocking",
|
|
430
|
+
"proofState": "witness_backed",
|
|
431
|
+
"nonClaims": [
|
|
432
|
+
"This requirement does not claim provider-run success, branch-protection enforcement, required-review enforcement, provider settings completeness, merge approval, or release approval."
|
|
433
|
+
]
|
|
434
|
+
},
|
|
435
|
+
{
|
|
436
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-008",
|
|
437
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
438
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
439
|
+
"claimLevel": "blocking",
|
|
440
|
+
"proofState": "witness_backed",
|
|
441
|
+
"nonClaims": [
|
|
442
|
+
"This requirement does not claim workflow runtime success, external action safety, branch protection, or release approval."
|
|
443
|
+
]
|
|
444
|
+
},
|
|
445
|
+
{
|
|
446
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-009",
|
|
447
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
448
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
449
|
+
"claimLevel": "blocking",
|
|
450
|
+
"proofState": "witness_backed",
|
|
451
|
+
"nonClaims": [
|
|
452
|
+
"This requirement does not claim current performance maximum, CI wall-clock budget enforcement, or regression absence without benchmark evidence."
|
|
453
|
+
]
|
|
454
|
+
},
|
|
455
|
+
{
|
|
456
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-010",
|
|
457
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
458
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
459
|
+
"claimLevel": "blocking",
|
|
460
|
+
"proofState": "witness_backed",
|
|
461
|
+
"nonClaims": [
|
|
462
|
+
"This requirement does not claim line coverage, dead-code absence, exhaustive semantic completeness for every test, native witness execution, receipt freshness, or merge satisfaction."
|
|
463
|
+
]
|
|
464
|
+
},
|
|
465
|
+
{
|
|
466
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-011",
|
|
467
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
468
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
469
|
+
"claimLevel": "blocking",
|
|
470
|
+
"proofState": "witness_backed",
|
|
471
|
+
"nonClaims": [
|
|
472
|
+
"This requirement does not claim provider-run success, Windows support, performance budget enforcement, or release approval."
|
|
473
|
+
]
|
|
474
|
+
},
|
|
475
|
+
{
|
|
476
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-012",
|
|
477
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
478
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
479
|
+
"claimLevel": "blocking",
|
|
480
|
+
"proofState": "witness_backed",
|
|
481
|
+
"nonClaims": [
|
|
482
|
+
"This requirement does not claim provider-run success, registry publication, GitHub Release creation, consumer adoption, rollout approval, or release approval."
|
|
483
|
+
]
|
|
484
|
+
},
|
|
485
|
+
{
|
|
486
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-013",
|
|
487
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
488
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
489
|
+
"claimLevel": "blocking",
|
|
490
|
+
"proofState": "witness_backed",
|
|
491
|
+
"nonClaims": [
|
|
492
|
+
"This requirement does not claim full GitHub Actions interpretation, provider-run success, branch-protection enforcement, required-check enforcement, external action safety, registry publication, release approval, or rollout approval."
|
|
493
|
+
]
|
|
494
|
+
},
|
|
495
|
+
{
|
|
496
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-014",
|
|
497
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
498
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
499
|
+
"claimLevel": "blocking",
|
|
500
|
+
"proofState": "witness_backed",
|
|
501
|
+
"nonClaims": [
|
|
502
|
+
"This requirement does not claim public SDK stability, registry publication, package installation, consumer dependency policy, rollout approval, merge approval, provider provenance, proof freshness, or native witness execution."
|
|
503
|
+
]
|
|
504
|
+
},
|
|
505
|
+
{
|
|
506
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-015",
|
|
507
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
508
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
509
|
+
"claimLevel": "blocking",
|
|
510
|
+
"proofState": "witness_backed",
|
|
511
|
+
"nonClaims": [
|
|
512
|
+
"This requirement does not claim registry publication, provider authentication, GitHub artifact attestation, release approval, rollout approval, production readiness, or consumer adoption."
|
|
513
|
+
]
|
|
514
|
+
},
|
|
515
|
+
{
|
|
516
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
517
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
518
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
519
|
+
"claimLevel": "blocking",
|
|
520
|
+
"proofState": "witness_backed",
|
|
521
|
+
"nonClaims": [
|
|
522
|
+
"This requirement does not claim Windows support, execution of non-native platform binaries, registry publication, artifact attestation, public SDK stability, consumer rollout, or release approval."
|
|
523
|
+
]
|
|
524
|
+
},
|
|
525
|
+
{
|
|
526
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-017",
|
|
527
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
528
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
529
|
+
"claimLevel": "blocking",
|
|
530
|
+
"proofState": "witness_backed",
|
|
531
|
+
"nonClaims": [
|
|
532
|
+
"This requirement does not claim repository-wide secret scanning, file traversal, credential validity detection, merge approval, release approval, rollout approval, or replacement of dedicated provider secret-scanning tools."
|
|
533
|
+
]
|
|
534
|
+
},
|
|
535
|
+
{
|
|
536
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
537
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
538
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
539
|
+
"claimLevel": "blocking",
|
|
540
|
+
"proofState": "witness_backed",
|
|
541
|
+
"nonClaims": [
|
|
542
|
+
"This requirement does not claim provider UI configuration, provider-side OIDC acceptance, registry publication, artifact attestation, GitHub Release publication, release approval, rollout approval, or production readiness."
|
|
543
|
+
]
|
|
544
|
+
},
|
|
545
|
+
{
|
|
546
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-019",
|
|
547
|
+
"ownerId": "proofkit.supply-chain-quality",
|
|
548
|
+
"specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
|
|
549
|
+
"claimLevel": "blocking",
|
|
550
|
+
"proofState": "witness_backed",
|
|
551
|
+
"nonClaims": [
|
|
552
|
+
"This requirement does not claim registry publication, every command's runtime behavior, execution of non-native platform binaries, provider-side install freshness, consumer dependency admission, release approval, rollout approval, or production readiness."
|
|
553
|
+
]
|
|
554
|
+
}
|
|
555
|
+
],
|
|
556
|
+
"bindings": [
|
|
557
|
+
{
|
|
558
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-001",
|
|
559
|
+
"scenarioId": "proofkit.package-boundary.root-export-and-deep-import-denial",
|
|
560
|
+
"witnessId": "proofkit.package-artifact.boundary",
|
|
561
|
+
"witnessKind": "contract",
|
|
562
|
+
"witnessPath": "internal/tools/packageverify/main.go",
|
|
563
|
+
"commandIds": [
|
|
564
|
+
"proofkit.go-test",
|
|
565
|
+
"proofkit.package-artifact"
|
|
566
|
+
],
|
|
567
|
+
"environmentClasses": [
|
|
568
|
+
"local-go"
|
|
569
|
+
]
|
|
570
|
+
},
|
|
571
|
+
{
|
|
572
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
573
|
+
"scenarioId": "proofkit.package-boundary.cli-deterministic-report-boundary",
|
|
574
|
+
"witnessId": "proofkit.cli.boundary",
|
|
575
|
+
"witnessKind": "contract",
|
|
576
|
+
"witnessPath": "internal/app/cli_contract_test.go",
|
|
577
|
+
"commandIds": [
|
|
578
|
+
"proofkit.go-test"
|
|
579
|
+
],
|
|
580
|
+
"environmentClasses": [
|
|
581
|
+
"local-go"
|
|
582
|
+
]
|
|
583
|
+
},
|
|
584
|
+
{
|
|
585
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
586
|
+
"scenarioId": "proofkit.package-boundary.readiness-closeout-overclaim-grammar",
|
|
587
|
+
"witnessId": "proofkit.readiness-closeout.overclaim-grammar",
|
|
588
|
+
"witnessKind": "contract",
|
|
589
|
+
"witnessPath": "internal/command/readinesscloseout/readinesscloseout_test.go",
|
|
590
|
+
"commandIds": [
|
|
591
|
+
"proofkit.go-test"
|
|
592
|
+
],
|
|
593
|
+
"environmentClasses": [
|
|
594
|
+
"local-go"
|
|
595
|
+
]
|
|
596
|
+
},
|
|
597
|
+
{
|
|
598
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
599
|
+
"scenarioId": "proofkit.package-boundary.text-policy-explicit-inventory",
|
|
600
|
+
"witnessId": "proofkit.text-policy.explicit-inventory",
|
|
601
|
+
"witnessKind": "contract",
|
|
602
|
+
"witnessPath": "internal/command/textpolicy/textpolicy_test.go",
|
|
603
|
+
"commandIds": [
|
|
604
|
+
"proofkit.go-test"
|
|
605
|
+
],
|
|
606
|
+
"environmentClasses": [
|
|
607
|
+
"local-go"
|
|
608
|
+
]
|
|
609
|
+
},
|
|
610
|
+
{
|
|
611
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
612
|
+
"scenarioId": "proofkit.package-boundary.json-report-cli-adapter-source-generator",
|
|
613
|
+
"witnessId": "proofkit.json-report-cli-adapter-source.generator-boundary",
|
|
614
|
+
"witnessKind": "contract",
|
|
615
|
+
"witnessPath": "internal/command/jsonreportcliadaptersource/json_report_cli_adapter_source_test.go",
|
|
616
|
+
"commandIds": [
|
|
617
|
+
"proofkit.go-test"
|
|
618
|
+
],
|
|
619
|
+
"environmentClasses": [
|
|
620
|
+
"local-go"
|
|
621
|
+
]
|
|
622
|
+
},
|
|
623
|
+
{
|
|
624
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
625
|
+
"scenarioId": "proofkit.package-boundary.explicit-scanner-scope-class",
|
|
626
|
+
"witnessId": "proofkit.cli.explicit-scanner-scope-class",
|
|
627
|
+
"witnessKind": "contract",
|
|
628
|
+
"witnessPath": "internal/app/cli_contract_test.go",
|
|
629
|
+
"commandIds": [
|
|
630
|
+
"proofkit.go-test"
|
|
631
|
+
],
|
|
632
|
+
"environmentClasses": [
|
|
633
|
+
"local-go"
|
|
634
|
+
]
|
|
635
|
+
},
|
|
636
|
+
{
|
|
637
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-002",
|
|
638
|
+
"scenarioId": "proofkit.package-boundary.explicit-scanner-agent-route",
|
|
639
|
+
"witnessId": "proofkit.agent-route.explicit-scanner-route",
|
|
640
|
+
"witnessKind": "contract",
|
|
641
|
+
"witnessPath": "internal/command/agentroute/agentroute_test.go",
|
|
642
|
+
"commandIds": [
|
|
643
|
+
"proofkit.go-test"
|
|
644
|
+
],
|
|
645
|
+
"environmentClasses": [
|
|
646
|
+
"local-go"
|
|
647
|
+
]
|
|
648
|
+
},
|
|
649
|
+
{
|
|
650
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-003",
|
|
651
|
+
"scenarioId": "proofkit.package-boundary.outside-consumer-artifact",
|
|
652
|
+
"witnessId": "proofkit.package-artifact.outside-consumer",
|
|
653
|
+
"witnessKind": "contract",
|
|
654
|
+
"witnessPath": "internal/tools/packageverify/main.go",
|
|
655
|
+
"commandIds": [
|
|
656
|
+
"proofkit.package-artifact"
|
|
657
|
+
],
|
|
658
|
+
"environmentClasses": [
|
|
659
|
+
"local-go"
|
|
660
|
+
]
|
|
661
|
+
},
|
|
662
|
+
{
|
|
663
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-004",
|
|
664
|
+
"scenarioId": "proofkit.package-boundary.ci-receipt-anchor",
|
|
665
|
+
"witnessId": "proofkit.ci.receipt-anchor",
|
|
666
|
+
"witnessKind": "contract",
|
|
667
|
+
"witnessPath": ".github/workflows/ci.yml",
|
|
668
|
+
"commandIds": [
|
|
669
|
+
"proofkit.ci-receipt-anchor",
|
|
670
|
+
"proofkit.package-gate"
|
|
671
|
+
],
|
|
672
|
+
"environmentClasses": [
|
|
673
|
+
"local-go"
|
|
674
|
+
]
|
|
675
|
+
},
|
|
676
|
+
{
|
|
677
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-005",
|
|
678
|
+
"scenarioId": "proofkit.package-boundary.go-format-static-vet-and-vulnerability-clean",
|
|
679
|
+
"witnessId": "proofkit.go.quality-gate",
|
|
680
|
+
"witnessKind": "contract",
|
|
681
|
+
"witnessPath": "package.json",
|
|
682
|
+
"commandIds": [
|
|
683
|
+
"proofkit.go-fmt",
|
|
684
|
+
"proofkit.go-staticcheck",
|
|
685
|
+
"proofkit.go-vet",
|
|
686
|
+
"proofkit.go-vulncheck"
|
|
687
|
+
],
|
|
688
|
+
"environmentClasses": [
|
|
689
|
+
"local-go"
|
|
690
|
+
]
|
|
691
|
+
},
|
|
692
|
+
{
|
|
693
|
+
"requirementId": "REQ-PROOFKIT-PACKAGE-006",
|
|
694
|
+
"scenarioId": "proofkit.package-boundary.python-wheel-candidate",
|
|
695
|
+
"witnessId": "proofkit.python-package.boundary",
|
|
696
|
+
"witnessKind": "contract",
|
|
697
|
+
"witnessPath": "internal/tools/pythonpackage",
|
|
698
|
+
"commandIds": [
|
|
699
|
+
"proofkit.python-package",
|
|
700
|
+
"proofkit.python-verify"
|
|
701
|
+
],
|
|
702
|
+
"environmentClasses": [
|
|
703
|
+
"local-python"
|
|
704
|
+
]
|
|
705
|
+
},
|
|
706
|
+
{
|
|
707
|
+
"requirementId": "REQ-PROOFKIT-SPEC-001",
|
|
708
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-source-admission",
|
|
709
|
+
"witnessId": "proofkit.requirement-source-admission.boundary",
|
|
710
|
+
"witnessKind": "contract",
|
|
711
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
712
|
+
"commandIds": [
|
|
713
|
+
"proofkit.go-test"
|
|
714
|
+
],
|
|
715
|
+
"environmentClasses": [
|
|
716
|
+
"local-go"
|
|
717
|
+
]
|
|
718
|
+
},
|
|
719
|
+
{
|
|
720
|
+
"requirementId": "REQ-PROOFKIT-SPEC-002",
|
|
721
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-proof-binding-reporting",
|
|
722
|
+
"witnessId": "proofkit.requirement-proof-binding.boundary",
|
|
723
|
+
"witnessKind": "contract",
|
|
724
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
725
|
+
"commandIds": [
|
|
726
|
+
"proofkit.go-test"
|
|
727
|
+
],
|
|
728
|
+
"environmentClasses": [
|
|
729
|
+
"local-go"
|
|
730
|
+
]
|
|
731
|
+
},
|
|
732
|
+
{
|
|
733
|
+
"requirementId": "REQ-PROOFKIT-SPEC-002",
|
|
734
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-proof-source-set-resolver-projection",
|
|
735
|
+
"witnessId": "proofkit.requirement-proof-source-set.resolver-projection",
|
|
736
|
+
"witnessKind": "contract",
|
|
737
|
+
"witnessPath": "internal/command/requirementproofsourceset/requirementproofsourceset_test.go",
|
|
738
|
+
"commandIds": [
|
|
739
|
+
"proofkit.go-test"
|
|
740
|
+
],
|
|
741
|
+
"environmentClasses": [
|
|
742
|
+
"local-go"
|
|
743
|
+
]
|
|
744
|
+
},
|
|
745
|
+
{
|
|
746
|
+
"requirementId": "REQ-PROOFKIT-SPEC-002",
|
|
747
|
+
"scenarioId": "proofkit.spec-proof-core.compact-proof-contract-typed-projections",
|
|
748
|
+
"witnessId": "proofkit.compact-proof-contract.typed-projections",
|
|
749
|
+
"witnessKind": "contract",
|
|
750
|
+
"witnessPath": "internal/kernel/compactproofcontract/compactproofcontract_test.go",
|
|
751
|
+
"commandIds": [
|
|
752
|
+
"proofkit.go-test"
|
|
753
|
+
],
|
|
754
|
+
"environmentClasses": [
|
|
755
|
+
"local-go"
|
|
756
|
+
]
|
|
757
|
+
},
|
|
758
|
+
{
|
|
759
|
+
"requirementId": "REQ-PROOFKIT-SPEC-003",
|
|
760
|
+
"scenarioId": "proofkit.spec-proof-core.witness-planning-boundary",
|
|
761
|
+
"witnessId": "proofkit.witness-planning.boundary",
|
|
762
|
+
"witnessKind": "contract",
|
|
763
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
764
|
+
"commandIds": [
|
|
765
|
+
"proofkit.go-test"
|
|
766
|
+
],
|
|
767
|
+
"environmentClasses": [
|
|
768
|
+
"local-go"
|
|
769
|
+
]
|
|
770
|
+
},
|
|
771
|
+
{
|
|
772
|
+
"requirementId": "REQ-PROOFKIT-SPEC-004",
|
|
773
|
+
"scenarioId": "proofkit.spec-proof-core.selective-planning-and-evidence",
|
|
774
|
+
"witnessId": "proofkit.selective-proof.boundary",
|
|
775
|
+
"witnessKind": "contract",
|
|
776
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
777
|
+
"commandIds": [
|
|
778
|
+
"proofkit.go-test"
|
|
779
|
+
],
|
|
780
|
+
"environmentClasses": [
|
|
781
|
+
"local-go"
|
|
782
|
+
]
|
|
783
|
+
},
|
|
784
|
+
{
|
|
785
|
+
"requirementId": "REQ-PROOFKIT-SPEC-005",
|
|
786
|
+
"scenarioId": "proofkit.spec-proof-core.rendered-view-and-agent-envelope-non-authority",
|
|
787
|
+
"witnessId": "proofkit.rendered-proof-view.boundary",
|
|
788
|
+
"witnessKind": "contract",
|
|
789
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
790
|
+
"commandIds": [
|
|
791
|
+
"proofkit.go-test"
|
|
792
|
+
],
|
|
793
|
+
"environmentClasses": [
|
|
794
|
+
"local-go"
|
|
795
|
+
]
|
|
796
|
+
},
|
|
797
|
+
{
|
|
798
|
+
"requirementId": "REQ-PROOFKIT-SPEC-005",
|
|
799
|
+
"scenarioId": "proofkit.spec-proof-core.agent-route-envelope-non-authority",
|
|
800
|
+
"witnessId": "proofkit.agent-route-envelope.boundary",
|
|
801
|
+
"witnessKind": "contract",
|
|
802
|
+
"witnessPath": "internal/command/agentroute/agentroute_test.go",
|
|
803
|
+
"commandIds": [
|
|
804
|
+
"proofkit.go-test"
|
|
805
|
+
],
|
|
806
|
+
"environmentClasses": [
|
|
807
|
+
"local-go"
|
|
808
|
+
]
|
|
809
|
+
},
|
|
810
|
+
{
|
|
811
|
+
"requirementId": "REQ-PROOFKIT-SPEC-006",
|
|
812
|
+
"scenarioId": "proofkit.spec-proof-core.test-inventory-normalized-output",
|
|
813
|
+
"witnessId": "proofkit.test-inventory.normalized-output",
|
|
814
|
+
"witnessKind": "contract",
|
|
815
|
+
"witnessPath": "internal/command/testevidenceinventory/testevidenceinventory_test.go",
|
|
816
|
+
"commandIds": [
|
|
817
|
+
"proofkit.go-test"
|
|
818
|
+
],
|
|
819
|
+
"environmentClasses": [
|
|
820
|
+
"local-go"
|
|
821
|
+
]
|
|
822
|
+
},
|
|
823
|
+
{
|
|
824
|
+
"requirementId": "REQ-PROOFKIT-SPEC-006",
|
|
825
|
+
"scenarioId": "proofkit.spec-proof-core.proof-binding-derived-test-inventory",
|
|
826
|
+
"witnessId": "proofkit.test-inventory.proof-binding-derived-projection",
|
|
827
|
+
"witnessKind": "contract",
|
|
828
|
+
"witnessPath": "internal/command/proofbindingtestinventory/proofbindingtestinventory_test.go",
|
|
829
|
+
"commandIds": [
|
|
830
|
+
"proofkit.go-test"
|
|
831
|
+
],
|
|
832
|
+
"environmentClasses": [
|
|
833
|
+
"local-go"
|
|
834
|
+
]
|
|
835
|
+
},
|
|
836
|
+
{
|
|
837
|
+
"requirementId": "REQ-PROOFKIT-SPEC-006",
|
|
838
|
+
"scenarioId": "proofkit.spec-proof-core.test-inventory-and-coverage-view",
|
|
839
|
+
"witnessId": "proofkit.test-inventory-and-coverage-view.boundary",
|
|
840
|
+
"witnessKind": "contract",
|
|
841
|
+
"witnessPath": "internal/command/requirementcoverageview/requirementcoverageview_test.go",
|
|
842
|
+
"commandIds": [
|
|
843
|
+
"proofkit.go-test"
|
|
844
|
+
],
|
|
845
|
+
"environmentClasses": [
|
|
846
|
+
"local-go"
|
|
847
|
+
]
|
|
848
|
+
},
|
|
849
|
+
{
|
|
850
|
+
"requirementId": "REQ-PROOFKIT-SPEC-006",
|
|
851
|
+
"scenarioId": "proofkit.spec-proof-core.coverage-input-compose",
|
|
852
|
+
"witnessId": "proofkit.coverage-input-compose.boundary",
|
|
853
|
+
"witnessKind": "contract",
|
|
854
|
+
"witnessPath": "internal/command/requirementcoverageinput/requirementcoverageinput_test.go",
|
|
855
|
+
"commandIds": [
|
|
856
|
+
"proofkit.go-test"
|
|
857
|
+
],
|
|
858
|
+
"environmentClasses": [
|
|
859
|
+
"local-go"
|
|
860
|
+
]
|
|
861
|
+
},
|
|
862
|
+
{
|
|
863
|
+
"requirementId": "REQ-PROOFKIT-SPEC-007",
|
|
864
|
+
"scenarioId": "proofkit.spec-proof-core.canonical-input-admission",
|
|
865
|
+
"witnessId": "proofkit.admission.decode-typed-json-canonical-record",
|
|
866
|
+
"witnessKind": "contract",
|
|
867
|
+
"witnessPath": "internal/kernel/admission/json_test.go",
|
|
868
|
+
"commandIds": [
|
|
869
|
+
"proofkit.go-test"
|
|
870
|
+
],
|
|
871
|
+
"environmentClasses": [
|
|
872
|
+
"local-go"
|
|
873
|
+
]
|
|
874
|
+
},
|
|
875
|
+
{
|
|
876
|
+
"requirementId": "REQ-PROOFKIT-SPEC-008",
|
|
877
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-spec-tree-admission",
|
|
878
|
+
"witnessId": "proofkit.requirement-spec-tree.topology-and-source-ref-falsifier",
|
|
879
|
+
"witnessKind": "contract",
|
|
880
|
+
"witnessPath": "internal/command/requirementspectree/requirementspectree_test.go",
|
|
881
|
+
"commandIds": [
|
|
882
|
+
"proofkit.go-test"
|
|
883
|
+
],
|
|
884
|
+
"environmentClasses": [
|
|
885
|
+
"local-go"
|
|
886
|
+
]
|
|
887
|
+
},
|
|
888
|
+
{
|
|
889
|
+
"requirementId": "REQ-PROOFKIT-SPEC-009",
|
|
890
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-spec-tree-view-rendering",
|
|
891
|
+
"witnessId": "proofkit.requirement-spec-tree-view.rendering-falsifier",
|
|
892
|
+
"witnessKind": "contract",
|
|
893
|
+
"witnessPath": "internal/command/requirementspectree/requirementspectree_test.go",
|
|
894
|
+
"commandIds": [
|
|
895
|
+
"proofkit.go-test"
|
|
896
|
+
],
|
|
897
|
+
"environmentClasses": [
|
|
898
|
+
"local-go"
|
|
899
|
+
]
|
|
900
|
+
},
|
|
901
|
+
{
|
|
902
|
+
"requirementId": "REQ-PROOFKIT-SPEC-009",
|
|
903
|
+
"scenarioId": "proofkit.spec-proof-core.browserdoc-safe-fragments",
|
|
904
|
+
"witnessId": "proofkit.browserdoc.safe-fragment-and-download-falsifier",
|
|
905
|
+
"witnessKind": "contract",
|
|
906
|
+
"witnessPath": "internal/kernel/browserdoc/browserdoc_test.go",
|
|
907
|
+
"commandIds": [
|
|
908
|
+
"proofkit.go-test"
|
|
909
|
+
],
|
|
910
|
+
"environmentClasses": [
|
|
911
|
+
"local-go"
|
|
912
|
+
]
|
|
913
|
+
},
|
|
914
|
+
{
|
|
915
|
+
"requirementId": "REQ-PROOFKIT-SPEC-009",
|
|
916
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-spec-tree-view-cli-output",
|
|
917
|
+
"witnessId": "proofkit.requirement-spec-tree-view.cli-output-path-falsifier",
|
|
918
|
+
"witnessKind": "contract",
|
|
919
|
+
"witnessPath": "internal/app/cli_abi_test.go",
|
|
920
|
+
"commandIds": [
|
|
921
|
+
"proofkit.go-test"
|
|
922
|
+
],
|
|
923
|
+
"environmentClasses": [
|
|
924
|
+
"local-go"
|
|
925
|
+
]
|
|
926
|
+
},
|
|
927
|
+
{
|
|
928
|
+
"requirementId": "REQ-PROOFKIT-SPEC-009",
|
|
929
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-browser-spec-tree-route",
|
|
930
|
+
"witnessId": "proofkit.requirement-browser-server.spec-tree-route-falsifier",
|
|
931
|
+
"witnessKind": "contract",
|
|
932
|
+
"witnessPath": "internal/command/requirementbrowser/server_test.go",
|
|
933
|
+
"commandIds": [
|
|
934
|
+
"proofkit.go-test"
|
|
935
|
+
],
|
|
936
|
+
"environmentClasses": [
|
|
937
|
+
"local-go"
|
|
938
|
+
]
|
|
939
|
+
},
|
|
940
|
+
{
|
|
941
|
+
"requirementId": "REQ-PROOFKIT-SPEC-010",
|
|
942
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-impact-input-compose",
|
|
943
|
+
"witnessId": "proofkit.requirement-impact-input-compose.direct-impact-input",
|
|
944
|
+
"witnessKind": "contract",
|
|
945
|
+
"witnessPath": "internal/command/requirementimpactinput/requirementimpactinput_test.go",
|
|
946
|
+
"commandIds": [
|
|
947
|
+
"proofkit.go-test"
|
|
948
|
+
],
|
|
949
|
+
"environmentClasses": [
|
|
950
|
+
"local-go"
|
|
951
|
+
]
|
|
952
|
+
},
|
|
953
|
+
{
|
|
954
|
+
"requirementId": "REQ-PROOFKIT-SPEC-011",
|
|
955
|
+
"scenarioId": "proofkit.spec-proof-core.adoption-contract-envelope-admission",
|
|
956
|
+
"witnessId": "proofkit.adoption-contract-envelope.aggregate-root-and-parity",
|
|
957
|
+
"witnessKind": "contract",
|
|
958
|
+
"witnessPath": "internal/command/adoptioncontract/adoptioncontract_test.go",
|
|
959
|
+
"commandIds": [
|
|
960
|
+
"proofkit.go-test"
|
|
961
|
+
],
|
|
962
|
+
"environmentClasses": [
|
|
963
|
+
"local-go"
|
|
964
|
+
]
|
|
965
|
+
},
|
|
966
|
+
{
|
|
967
|
+
"requirementId": "REQ-PROOFKIT-SPEC-011",
|
|
968
|
+
"scenarioId": "proofkit.spec-proof-core.adoption-contract-envelope-cli-abi",
|
|
969
|
+
"witnessId": "proofkit.adoption-contract-envelope.public-cli-abi",
|
|
970
|
+
"witnessKind": "contract",
|
|
971
|
+
"witnessPath": "internal/app/cli_abi_test.go",
|
|
972
|
+
"commandIds": [
|
|
973
|
+
"proofkit.go-test"
|
|
974
|
+
],
|
|
975
|
+
"environmentClasses": [
|
|
976
|
+
"local-go"
|
|
977
|
+
]
|
|
978
|
+
},
|
|
979
|
+
{
|
|
980
|
+
"requirementId": "REQ-PROOFKIT-SPEC-012",
|
|
981
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-authoring-plan-candidate-only",
|
|
982
|
+
"witnessId": "proofkit.requirement-authoring-plan.semantic-falsifier",
|
|
983
|
+
"witnessKind": "contract",
|
|
984
|
+
"witnessPath": "internal/command/requirementauthoringplan/requirement_authoring_plan_test.go",
|
|
985
|
+
"commandIds": [
|
|
986
|
+
"proofkit.go-test"
|
|
987
|
+
],
|
|
988
|
+
"environmentClasses": [
|
|
989
|
+
"local-go"
|
|
990
|
+
]
|
|
991
|
+
},
|
|
992
|
+
{
|
|
993
|
+
"requirementId": "REQ-PROOFKIT-SPEC-012",
|
|
994
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-authoring-plan-cli-abi",
|
|
995
|
+
"witnessId": "proofkit.requirement-authoring-plan.public-cli-abi",
|
|
996
|
+
"witnessKind": "contract",
|
|
997
|
+
"witnessPath": "internal/app/cli_abi_test.go",
|
|
998
|
+
"commandIds": [
|
|
999
|
+
"proofkit.go-test"
|
|
1000
|
+
],
|
|
1001
|
+
"environmentClasses": [
|
|
1002
|
+
"local-go"
|
|
1003
|
+
]
|
|
1004
|
+
},
|
|
1005
|
+
{
|
|
1006
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1007
|
+
"scenarioId": "proofkit.spec-proof-core.private-proof-vocabulary-owner",
|
|
1008
|
+
"witnessId": "proofkit.proofvocab.private-owner",
|
|
1009
|
+
"witnessKind": "contract",
|
|
1010
|
+
"witnessPath": "internal/kernel/proofvocab/proofvocab_test.go",
|
|
1011
|
+
"commandIds": [
|
|
1012
|
+
"proofkit.go-test"
|
|
1013
|
+
],
|
|
1014
|
+
"environmentClasses": [
|
|
1015
|
+
"local-go"
|
|
1016
|
+
]
|
|
1017
|
+
},
|
|
1018
|
+
{
|
|
1019
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1020
|
+
"scenarioId": "proofkit.spec-proof-core.receipt-status-vocabulary-admission",
|
|
1021
|
+
"witnessId": "proofkit.receipt-status-vocabulary.command-admission",
|
|
1022
|
+
"witnessKind": "contract",
|
|
1023
|
+
"witnessPath": "internal/command/proofreceiptadmission/proofreceiptadmission_test.go",
|
|
1024
|
+
"commandIds": [
|
|
1025
|
+
"proofkit.go-test"
|
|
1026
|
+
],
|
|
1027
|
+
"environmentClasses": [
|
|
1028
|
+
"local-go"
|
|
1029
|
+
]
|
|
1030
|
+
},
|
|
1031
|
+
{
|
|
1032
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1033
|
+
"scenarioId": "proofkit.spec-proof-core.receipt-producer-status-vocabulary-admission",
|
|
1034
|
+
"witnessId": "proofkit.receipt-producer-status-vocabulary.command-admission",
|
|
1035
|
+
"witnessKind": "contract",
|
|
1036
|
+
"witnessPath": "internal/command/receiptproduceradmission/receiptproduceradmission_test.go",
|
|
1037
|
+
"commandIds": [
|
|
1038
|
+
"proofkit.go-test"
|
|
1039
|
+
],
|
|
1040
|
+
"environmentClasses": [
|
|
1041
|
+
"local-go"
|
|
1042
|
+
]
|
|
1043
|
+
},
|
|
1044
|
+
{
|
|
1045
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1046
|
+
"scenarioId": "proofkit.spec-proof-core.producer-policy-status-vocabulary-admission",
|
|
1047
|
+
"witnessId": "proofkit.producer-policy-status-vocabulary.command-admission",
|
|
1048
|
+
"witnessKind": "contract",
|
|
1049
|
+
"witnessPath": "internal/command/producerpolicyselfproof/producerpolicyselfproof_test.go",
|
|
1050
|
+
"commandIds": [
|
|
1051
|
+
"proofkit.go-test"
|
|
1052
|
+
],
|
|
1053
|
+
"environmentClasses": [
|
|
1054
|
+
"local-go"
|
|
1055
|
+
]
|
|
1056
|
+
},
|
|
1057
|
+
{
|
|
1058
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1059
|
+
"scenarioId": "proofkit.spec-proof-core.receipt-trust-status-vocabulary-admission",
|
|
1060
|
+
"witnessId": "proofkit.receipt-trust-status-vocabulary.command-admission",
|
|
1061
|
+
"witnessKind": "contract",
|
|
1062
|
+
"witnessPath": "internal/command/receipttrustclass/receipt_trust_class_test.go",
|
|
1063
|
+
"commandIds": [
|
|
1064
|
+
"proofkit.go-test"
|
|
1065
|
+
],
|
|
1066
|
+
"environmentClasses": [
|
|
1067
|
+
"local-go"
|
|
1068
|
+
]
|
|
1069
|
+
},
|
|
1070
|
+
{
|
|
1071
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1072
|
+
"scenarioId": "proofkit.spec-proof-core.obligation-vocabulary-admission",
|
|
1073
|
+
"witnessId": "proofkit.obligation-vocabulary.command-admission",
|
|
1074
|
+
"witnessKind": "contract",
|
|
1075
|
+
"witnessPath": "internal/command/obligationdecision/obligationdecision_test.go",
|
|
1076
|
+
"commandIds": [
|
|
1077
|
+
"proofkit.go-test"
|
|
1078
|
+
],
|
|
1079
|
+
"environmentClasses": [
|
|
1080
|
+
"local-go"
|
|
1081
|
+
]
|
|
1082
|
+
},
|
|
1083
|
+
{
|
|
1084
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1085
|
+
"scenarioId": "proofkit.spec-proof-core.selective-edge-vocabulary-admission",
|
|
1086
|
+
"witnessId": "proofkit.selective-edge-vocabulary.command-admission",
|
|
1087
|
+
"witnessKind": "contract",
|
|
1088
|
+
"witnessPath": "internal/command/selectivegateplan/selectivegateplan_test.go",
|
|
1089
|
+
"commandIds": [
|
|
1090
|
+
"proofkit.go-test"
|
|
1091
|
+
],
|
|
1092
|
+
"environmentClasses": [
|
|
1093
|
+
"local-go"
|
|
1094
|
+
]
|
|
1095
|
+
},
|
|
1096
|
+
{
|
|
1097
|
+
"requirementId": "REQ-PROOFKIT-SPEC-013",
|
|
1098
|
+
"scenarioId": "proofkit.spec-proof-core.selective-evidence-edge-vocabulary-admission",
|
|
1099
|
+
"witnessId": "proofkit.selective-evidence-edge-vocabulary.command-admission",
|
|
1100
|
+
"witnessKind": "contract",
|
|
1101
|
+
"witnessPath": "internal/command/selectivegateevidence/selectivegateevidence_test.go",
|
|
1102
|
+
"commandIds": [
|
|
1103
|
+
"proofkit.go-test"
|
|
1104
|
+
],
|
|
1105
|
+
"environmentClasses": [
|
|
1106
|
+
"local-go"
|
|
1107
|
+
]
|
|
1108
|
+
},
|
|
1109
|
+
{
|
|
1110
|
+
"requirementId": "REQ-PROOFKIT-SPEC-014",
|
|
1111
|
+
"scenarioId": "proofkit.spec-proof-core.document-lifecycle-authority-classification",
|
|
1112
|
+
"witnessId": "proofkit.document-lifecycle-boundary.authority-classification",
|
|
1113
|
+
"witnessKind": "contract",
|
|
1114
|
+
"witnessPath": "internal/command/documentlifecycle/documentlifecycle_test.go",
|
|
1115
|
+
"commandIds": [
|
|
1116
|
+
"proofkit.go-test"
|
|
1117
|
+
],
|
|
1118
|
+
"environmentClasses": [
|
|
1119
|
+
"local-go"
|
|
1120
|
+
]
|
|
1121
|
+
},
|
|
1122
|
+
{
|
|
1123
|
+
"requirementId": "REQ-PROOFKIT-SPEC-015",
|
|
1124
|
+
"scenarioId": "proofkit.spec-proof-core.spec-overview-claim-boundary",
|
|
1125
|
+
"witnessId": "proofkit.spec-overview-claims.citation-boundary",
|
|
1126
|
+
"witnessKind": "contract",
|
|
1127
|
+
"witnessPath": "internal/command/specoverviewclaims/specoverviewclaims_test.go",
|
|
1128
|
+
"commandIds": [
|
|
1129
|
+
"proofkit.go-test"
|
|
1130
|
+
],
|
|
1131
|
+
"environmentClasses": [
|
|
1132
|
+
"local-go"
|
|
1133
|
+
]
|
|
1134
|
+
},
|
|
1135
|
+
{
|
|
1136
|
+
"requirementId": "REQ-PROOFKIT-SPEC-016",
|
|
1137
|
+
"scenarioId": "proofkit.spec-proof-core.requirement-source-transition-contract",
|
|
1138
|
+
"witnessId": "proofkit.requirement-source-transition.contract-boundary",
|
|
1139
|
+
"witnessKind": "contract",
|
|
1140
|
+
"witnessPath": "internal/command/requirementsourcetransition/requirementsourcetransition_test.go",
|
|
1141
|
+
"commandIds": [
|
|
1142
|
+
"proofkit.go-test"
|
|
1143
|
+
],
|
|
1144
|
+
"environmentClasses": [
|
|
1145
|
+
"local-go"
|
|
1146
|
+
]
|
|
1147
|
+
},
|
|
1148
|
+
{
|
|
1149
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-001",
|
|
1150
|
+
"scenarioId": "proofkit.receipt-authority.proof-receipt-admission",
|
|
1151
|
+
"witnessId": "proofkit.proof-receipt-admission.boundary",
|
|
1152
|
+
"witnessKind": "contract",
|
|
1153
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1154
|
+
"commandIds": [
|
|
1155
|
+
"proofkit.go-test"
|
|
1156
|
+
],
|
|
1157
|
+
"environmentClasses": [
|
|
1158
|
+
"local-go"
|
|
1159
|
+
]
|
|
1160
|
+
},
|
|
1161
|
+
{
|
|
1162
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-002",
|
|
1163
|
+
"scenarioId": "proofkit.receipt-authority.receipt-producer-admission",
|
|
1164
|
+
"witnessId": "proofkit.receipt-producer-admission.boundary",
|
|
1165
|
+
"witnessKind": "contract",
|
|
1166
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1167
|
+
"commandIds": [
|
|
1168
|
+
"proofkit.go-test"
|
|
1169
|
+
],
|
|
1170
|
+
"environmentClasses": [
|
|
1171
|
+
"local-go"
|
|
1172
|
+
]
|
|
1173
|
+
},
|
|
1174
|
+
{
|
|
1175
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-003",
|
|
1176
|
+
"scenarioId": "proofkit.receipt-authority.producer-policy-self-proof",
|
|
1177
|
+
"witnessId": "proofkit.producer-policy-self-proof.boundary",
|
|
1178
|
+
"witnessKind": "contract",
|
|
1179
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1180
|
+
"commandIds": [
|
|
1181
|
+
"proofkit.go-test"
|
|
1182
|
+
],
|
|
1183
|
+
"environmentClasses": [
|
|
1184
|
+
"local-go"
|
|
1185
|
+
]
|
|
1186
|
+
},
|
|
1187
|
+
{
|
|
1188
|
+
"requirementId": "REQ-PROOFKIT-RECEIPT-004",
|
|
1189
|
+
"scenarioId": "proofkit.receipt-authority.spec-proof-bundle-linkage",
|
|
1190
|
+
"witnessId": "proofkit.spec-proof-bundle-admission.boundary",
|
|
1191
|
+
"witnessKind": "contract",
|
|
1192
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1193
|
+
"commandIds": [
|
|
1194
|
+
"proofkit.go-test"
|
|
1195
|
+
],
|
|
1196
|
+
"environmentClasses": [
|
|
1197
|
+
"local-go"
|
|
1198
|
+
]
|
|
1199
|
+
},
|
|
1200
|
+
{
|
|
1201
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-001",
|
|
1202
|
+
"scenarioId": "proofkit.consumer-infra-retirement.migration-plan-retirement-gates",
|
|
1203
|
+
"witnessId": "proofkit.migration-plan.boundary",
|
|
1204
|
+
"witnessKind": "contract",
|
|
1205
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1206
|
+
"commandIds": [
|
|
1207
|
+
"proofkit.go-test"
|
|
1208
|
+
],
|
|
1209
|
+
"environmentClasses": [
|
|
1210
|
+
"local-go"
|
|
1211
|
+
]
|
|
1212
|
+
},
|
|
1213
|
+
{
|
|
1214
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-002",
|
|
1215
|
+
"scenarioId": "proofkit.consumer-infra-retirement.package-runtime-dependency-admission",
|
|
1216
|
+
"witnessId": "proofkit.package-runtime-dependency-admission.boundary",
|
|
1217
|
+
"witnessKind": "contract",
|
|
1218
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1219
|
+
"commandIds": [
|
|
1220
|
+
"proofkit.go-test"
|
|
1221
|
+
],
|
|
1222
|
+
"environmentClasses": [
|
|
1223
|
+
"local-go"
|
|
1224
|
+
]
|
|
1225
|
+
},
|
|
1226
|
+
{
|
|
1227
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-003",
|
|
1228
|
+
"scenarioId": "proofkit.consumer-infra-retirement.workspace-registry-admission",
|
|
1229
|
+
"witnessId": "proofkit.workspace-registry-admission.boundary",
|
|
1230
|
+
"witnessKind": "contract",
|
|
1231
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1232
|
+
"commandIds": [
|
|
1233
|
+
"proofkit.go-test"
|
|
1234
|
+
],
|
|
1235
|
+
"environmentClasses": [
|
|
1236
|
+
"local-go"
|
|
1237
|
+
]
|
|
1238
|
+
},
|
|
1239
|
+
{
|
|
1240
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-004",
|
|
1241
|
+
"scenarioId": "proofkit.consumer-infra-retirement.repo-profile-admission",
|
|
1242
|
+
"witnessId": "proofkit.repo-profile-admission.boundary",
|
|
1243
|
+
"witnessKind": "contract",
|
|
1244
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1245
|
+
"commandIds": [
|
|
1246
|
+
"proofkit.go-test"
|
|
1247
|
+
],
|
|
1248
|
+
"environmentClasses": [
|
|
1249
|
+
"local-go"
|
|
1250
|
+
]
|
|
1251
|
+
},
|
|
1252
|
+
{
|
|
1253
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-005",
|
|
1254
|
+
"scenarioId": "proofkit.consumer-infra-retirement.adoption-workflow-routing",
|
|
1255
|
+
"witnessId": "proofkit.adoption-workflow-plan.boundary",
|
|
1256
|
+
"witnessKind": "contract",
|
|
1257
|
+
"witnessPath": "internal/command/adoptionworkflow/adoptionworkflow_test.go",
|
|
1258
|
+
"commandIds": [
|
|
1259
|
+
"proofkit.go-test"
|
|
1260
|
+
],
|
|
1261
|
+
"environmentClasses": [
|
|
1262
|
+
"local-go"
|
|
1263
|
+
]
|
|
1264
|
+
},
|
|
1265
|
+
{
|
|
1266
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-006",
|
|
1267
|
+
"scenarioId": "proofkit.consumer-infra-retirement.migration-parity-admission",
|
|
1268
|
+
"witnessId": "proofkit.migration-parity-admission.boundary",
|
|
1269
|
+
"witnessKind": "contract",
|
|
1270
|
+
"witnessPath": "internal/app/self_hosting_semantics_test.go",
|
|
1271
|
+
"commandIds": [
|
|
1272
|
+
"proofkit.go-test"
|
|
1273
|
+
],
|
|
1274
|
+
"environmentClasses": [
|
|
1275
|
+
"local-go"
|
|
1276
|
+
]
|
|
1277
|
+
},
|
|
1278
|
+
{
|
|
1279
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-007",
|
|
1280
|
+
"scenarioId": "proofkit.consumer-infra-retirement.candidate-boundary-guidance",
|
|
1281
|
+
"witnessId": "proofkit.gradual-adoption-guidance.candidate-boundary-admission",
|
|
1282
|
+
"witnessKind": "contract",
|
|
1283
|
+
"witnessPath": "internal/command/gradualadoption/guidance_test.go",
|
|
1284
|
+
"commandIds": [
|
|
1285
|
+
"proofkit.go-test"
|
|
1286
|
+
],
|
|
1287
|
+
"environmentClasses": [
|
|
1288
|
+
"local-go"
|
|
1289
|
+
]
|
|
1290
|
+
},
|
|
1291
|
+
{
|
|
1292
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-007",
|
|
1293
|
+
"scenarioId": "proofkit.consumer-infra-retirement.candidate-boundary-cli-enforcement",
|
|
1294
|
+
"witnessId": "proofkit.gradual-adoption-guidance.cli-candidate-boundary-enforcement",
|
|
1295
|
+
"witnessKind": "contract",
|
|
1296
|
+
"witnessPath": "internal/app/app_test.go",
|
|
1297
|
+
"commandIds": [
|
|
1298
|
+
"proofkit.go-test"
|
|
1299
|
+
],
|
|
1300
|
+
"environmentClasses": [
|
|
1301
|
+
"local-go"
|
|
1302
|
+
]
|
|
1303
|
+
},
|
|
1304
|
+
{
|
|
1305
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-008",
|
|
1306
|
+
"scenarioId": "proofkit.consumer-infra-retirement.adoption-doctor-enforcement",
|
|
1307
|
+
"witnessId": "proofkit.adoption-doctor.enforcement-and-envelope",
|
|
1308
|
+
"witnessKind": "contract",
|
|
1309
|
+
"witnessPath": "internal/command/adoptiondoctor/adoptiondoctor_test.go",
|
|
1310
|
+
"commandIds": [
|
|
1311
|
+
"proofkit.go-test"
|
|
1312
|
+
],
|
|
1313
|
+
"environmentClasses": [
|
|
1314
|
+
"local-go"
|
|
1315
|
+
]
|
|
1316
|
+
},
|
|
1317
|
+
{
|
|
1318
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-009",
|
|
1319
|
+
"scenarioId": "proofkit.consumer-infra-retirement.workspace-manifest-facts",
|
|
1320
|
+
"witnessId": "proofkit.workspace-manifest-facts.boundary",
|
|
1321
|
+
"witnessKind": "contract",
|
|
1322
|
+
"witnessPath": "internal/command/workspacemanifestfacts/workspace_manifest_facts_test.go",
|
|
1323
|
+
"commandIds": [
|
|
1324
|
+
"proofkit.go-test"
|
|
1325
|
+
],
|
|
1326
|
+
"environmentClasses": [
|
|
1327
|
+
"local-go"
|
|
1328
|
+
]
|
|
1329
|
+
},
|
|
1330
|
+
{
|
|
1331
|
+
"requirementId": "REQ-PROOFKIT-RETIRE-010",
|
|
1332
|
+
"scenarioId": "proofkit.consumer-infra-retirement.registry-consumer-proof-input-compose",
|
|
1333
|
+
"witnessId": "proofkit.registry-consumer-proof-input-compose.boundary",
|
|
1334
|
+
"witnessKind": "contract",
|
|
1335
|
+
"witnessPath": "internal/command/registryconsumerinputcompose/registry_consumer_input_compose_test.go",
|
|
1336
|
+
"commandIds": [
|
|
1337
|
+
"proofkit.go-test"
|
|
1338
|
+
],
|
|
1339
|
+
"environmentClasses": [
|
|
1340
|
+
"local-go"
|
|
1341
|
+
]
|
|
1342
|
+
},
|
|
1343
|
+
{
|
|
1344
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-008",
|
|
1345
|
+
"scenarioId": "proofkit.supply-chain-quality.actionlint-local-gate",
|
|
1346
|
+
"witnessId": "proofkit.actionlint.local-gate",
|
|
1347
|
+
"witnessKind": "contract",
|
|
1348
|
+
"witnessPath": "package.json",
|
|
1349
|
+
"commandIds": [
|
|
1350
|
+
"proofkit.actionlint"
|
|
1351
|
+
],
|
|
1352
|
+
"environmentClasses": [
|
|
1353
|
+
"local-go"
|
|
1354
|
+
]
|
|
1355
|
+
},
|
|
1356
|
+
{
|
|
1357
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-009",
|
|
1358
|
+
"scenarioId": "proofkit.supply-chain-quality.benchmark-entrypoints",
|
|
1359
|
+
"witnessId": "proofkit.kernel.benchmark-entrypoints",
|
|
1360
|
+
"witnessKind": "contract",
|
|
1361
|
+
"witnessPath": "internal/kernel/admission/json_fuzz_test.go",
|
|
1362
|
+
"commandIds": [
|
|
1363
|
+
"proofkit.go-bench",
|
|
1364
|
+
"proofkit.go-test"
|
|
1365
|
+
],
|
|
1366
|
+
"environmentClasses": [
|
|
1367
|
+
"local-go"
|
|
1368
|
+
]
|
|
1369
|
+
},
|
|
1370
|
+
{
|
|
1371
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-004",
|
|
1372
|
+
"scenarioId": "proofkit.supply-chain-quality.cli-abi-golden",
|
|
1373
|
+
"witnessId": "proofkit.cli-abi.golden-corpus",
|
|
1374
|
+
"witnessKind": "contract",
|
|
1375
|
+
"witnessPath": "internal/app/cli_abi_test.go",
|
|
1376
|
+
"commandIds": [
|
|
1377
|
+
"proofkit.go-test"
|
|
1378
|
+
],
|
|
1379
|
+
"environmentClasses": [
|
|
1380
|
+
"local-go"
|
|
1381
|
+
]
|
|
1382
|
+
},
|
|
1383
|
+
{
|
|
1384
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-004",
|
|
1385
|
+
"scenarioId": "proofkit.supply-chain-quality.cli-contract-topology",
|
|
1386
|
+
"witnessId": "proofkit.cli-contract.descriptor-parity",
|
|
1387
|
+
"witnessKind": "contract",
|
|
1388
|
+
"witnessPath": "internal/app/cli_contract_test.go",
|
|
1389
|
+
"commandIds": [
|
|
1390
|
+
"proofkit.go-test"
|
|
1391
|
+
],
|
|
1392
|
+
"environmentClasses": [
|
|
1393
|
+
"local-go"
|
|
1394
|
+
]
|
|
1395
|
+
},
|
|
1396
|
+
{
|
|
1397
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-005",
|
|
1398
|
+
"scenarioId": "proofkit.supply-chain-quality.codeql-workflow",
|
|
1399
|
+
"witnessId": "proofkit.codeql.workflow-source",
|
|
1400
|
+
"witnessKind": "technical",
|
|
1401
|
+
"witnessPath": ".github/workflows/codeql.yml",
|
|
1402
|
+
"commandIds": [
|
|
1403
|
+
"proofkit.actionlint"
|
|
1404
|
+
],
|
|
1405
|
+
"environmentClasses": [
|
|
1406
|
+
"local-go"
|
|
1407
|
+
]
|
|
1408
|
+
},
|
|
1409
|
+
{
|
|
1410
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-010",
|
|
1411
|
+
"scenarioId": "proofkit.supply-chain-quality.coverage-metrics",
|
|
1412
|
+
"witnessId": "proofkit.coverage-metrics.linkage-report",
|
|
1413
|
+
"witnessKind": "contract",
|
|
1414
|
+
"witnessPath": "internal/tools/coveragemetrics/main.go",
|
|
1415
|
+
"commandIds": [
|
|
1416
|
+
"proofkit.coverage-metrics"
|
|
1417
|
+
],
|
|
1418
|
+
"environmentClasses": [
|
|
1419
|
+
"local-go"
|
|
1420
|
+
]
|
|
1421
|
+
},
|
|
1422
|
+
{
|
|
1423
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-010",
|
|
1424
|
+
"scenarioId": "proofkit.supply-chain-quality.command-descriptor-route-ownership",
|
|
1425
|
+
"witnessId": "proofkit.command-coverage.descriptor-owner-routes",
|
|
1426
|
+
"witnessKind": "contract",
|
|
1427
|
+
"witnessPath": "internal/app/command_coverage_test.go",
|
|
1428
|
+
"commandIds": [
|
|
1429
|
+
"proofkit.go-test"
|
|
1430
|
+
],
|
|
1431
|
+
"environmentClasses": [
|
|
1432
|
+
"local-go"
|
|
1433
|
+
]
|
|
1434
|
+
},
|
|
1435
|
+
{
|
|
1436
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-011",
|
|
1437
|
+
"scenarioId": "proofkit.supply-chain-quality.proof-class-ci-split",
|
|
1438
|
+
"witnessId": "proofkit.ci.proof-class-split",
|
|
1439
|
+
"witnessKind": "technical",
|
|
1440
|
+
"witnessPath": ".github/workflows/ci.yml",
|
|
1441
|
+
"commandIds": [
|
|
1442
|
+
"proofkit.actionlint",
|
|
1443
|
+
"proofkit.package-gate",
|
|
1444
|
+
"proofkit.platform-smoke",
|
|
1445
|
+
"proofkit.python-package",
|
|
1446
|
+
"proofkit.python-verify"
|
|
1447
|
+
],
|
|
1448
|
+
"environmentClasses": [
|
|
1449
|
+
"local-go",
|
|
1450
|
+
"local-python"
|
|
1451
|
+
]
|
|
1452
|
+
},
|
|
1453
|
+
{
|
|
1454
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-012",
|
|
1455
|
+
"scenarioId": "proofkit.supply-chain-quality.release-channel-authority-vocabulary",
|
|
1456
|
+
"witnessId": "proofkit.release-channel.authority-vocabulary",
|
|
1457
|
+
"witnessKind": "contract",
|
|
1458
|
+
"witnessPath": "internal/kernel/releasechannel/releasechannel.go",
|
|
1459
|
+
"commandIds": [
|
|
1460
|
+
"proofkit.go-test"
|
|
1461
|
+
],
|
|
1462
|
+
"environmentClasses": [
|
|
1463
|
+
"local-go"
|
|
1464
|
+
]
|
|
1465
|
+
},
|
|
1466
|
+
{
|
|
1467
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-013",
|
|
1468
|
+
"scenarioId": "proofkit.supply-chain-quality.workflow-package-gate-oracle",
|
|
1469
|
+
"witnessId": "proofkit.workflow-package-gate.typed-oracle",
|
|
1470
|
+
"witnessKind": "contract",
|
|
1471
|
+
"witnessPath": "scripts/workflow_package_gate_oracle_test.go",
|
|
1472
|
+
"commandIds": [
|
|
1473
|
+
"proofkit.go-test"
|
|
1474
|
+
],
|
|
1475
|
+
"environmentClasses": [
|
|
1476
|
+
"local-go"
|
|
1477
|
+
]
|
|
1478
|
+
},
|
|
1479
|
+
{
|
|
1480
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-014",
|
|
1481
|
+
"scenarioId": "proofkit.supply-chain-quality.registry-release-authority-typed-projection",
|
|
1482
|
+
"witnessId": "proofkit.registry-consumer.release-authority-projection",
|
|
1483
|
+
"witnessKind": "contract",
|
|
1484
|
+
"witnessPath": "internal/command/registryconsumer/registryconsumer_test.go",
|
|
1485
|
+
"commandIds": [
|
|
1486
|
+
"proofkit.go-test"
|
|
1487
|
+
],
|
|
1488
|
+
"environmentClasses": [
|
|
1489
|
+
"local-go"
|
|
1490
|
+
]
|
|
1491
|
+
},
|
|
1492
|
+
{
|
|
1493
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-014",
|
|
1494
|
+
"scenarioId": "proofkit.supply-chain-quality.external-release-authority-typed-projection",
|
|
1495
|
+
"witnessId": "proofkit.external-consumer.release-authority-projection",
|
|
1496
|
+
"witnessKind": "contract",
|
|
1497
|
+
"witnessPath": "internal/command/externalconsumer/externalconsumer_test.go",
|
|
1498
|
+
"commandIds": [
|
|
1499
|
+
"proofkit.go-test"
|
|
1500
|
+
],
|
|
1501
|
+
"environmentClasses": [
|
|
1502
|
+
"local-go"
|
|
1503
|
+
]
|
|
1504
|
+
},
|
|
1505
|
+
{
|
|
1506
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-015",
|
|
1507
|
+
"scenarioId": "proofkit.supply-chain-quality.release-closeout-completion-criteria",
|
|
1508
|
+
"witnessId": "proofkit.release-closeout.completion-criteria-gate",
|
|
1509
|
+
"witnessKind": "contract",
|
|
1510
|
+
"witnessPath": "internal/tools/releasecloseoutinput/main_test.go",
|
|
1511
|
+
"commandIds": [
|
|
1512
|
+
"proofkit.go-test",
|
|
1513
|
+
"proofkit.package-gate"
|
|
1514
|
+
],
|
|
1515
|
+
"environmentClasses": [
|
|
1516
|
+
"local-go"
|
|
1517
|
+
]
|
|
1518
|
+
},
|
|
1519
|
+
{
|
|
1520
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1521
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-owner",
|
|
1522
|
+
"witnessId": "proofkit.release-platform.owner-targets",
|
|
1523
|
+
"witnessKind": "contract",
|
|
1524
|
+
"witnessPath": "internal/kernel/releaseplatform/releaseplatform_test.go",
|
|
1525
|
+
"commandIds": [
|
|
1526
|
+
"proofkit.go-test"
|
|
1527
|
+
],
|
|
1528
|
+
"environmentClasses": [
|
|
1529
|
+
"local-go"
|
|
1530
|
+
]
|
|
1531
|
+
},
|
|
1532
|
+
{
|
|
1533
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1534
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-package-artifact",
|
|
1535
|
+
"witnessId": "proofkit.packageverify.release-platform-parity",
|
|
1536
|
+
"witnessKind": "contract",
|
|
1537
|
+
"witnessPath": "internal/tools/packageverify/main_test.go",
|
|
1538
|
+
"commandIds": [
|
|
1539
|
+
"proofkit.go-test",
|
|
1540
|
+
"proofkit.package-artifact"
|
|
1541
|
+
],
|
|
1542
|
+
"environmentClasses": [
|
|
1543
|
+
"local-go"
|
|
1544
|
+
]
|
|
1545
|
+
},
|
|
1546
|
+
{
|
|
1547
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1548
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-package-build",
|
|
1549
|
+
"witnessId": "proofkit.packagebuild.release-platform-wrapper-parity",
|
|
1550
|
+
"witnessKind": "contract",
|
|
1551
|
+
"witnessPath": "internal/tools/packagebuild/main_test.go",
|
|
1552
|
+
"commandIds": [
|
|
1553
|
+
"proofkit.go-test",
|
|
1554
|
+
"proofkit.package-artifact"
|
|
1555
|
+
],
|
|
1556
|
+
"environmentClasses": [
|
|
1557
|
+
"local-go"
|
|
1558
|
+
]
|
|
1559
|
+
},
|
|
1560
|
+
{
|
|
1561
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1562
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-python-wheels",
|
|
1563
|
+
"witnessId": "proofkit.pythonpackage.release-platform-parity",
|
|
1564
|
+
"witnessKind": "contract",
|
|
1565
|
+
"witnessPath": "internal/tools/pythonpackage/metadata_test.go",
|
|
1566
|
+
"commandIds": [
|
|
1567
|
+
"proofkit.go-test",
|
|
1568
|
+
"proofkit.python-package",
|
|
1569
|
+
"proofkit.python-verify"
|
|
1570
|
+
],
|
|
1571
|
+
"environmentClasses": [
|
|
1572
|
+
"local-go",
|
|
1573
|
+
"local-python"
|
|
1574
|
+
]
|
|
1575
|
+
},
|
|
1576
|
+
{
|
|
1577
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1578
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-pypi-candidates",
|
|
1579
|
+
"witnessId": "proofkit.pypiregistry.release-platform-completeness",
|
|
1580
|
+
"witnessKind": "contract",
|
|
1581
|
+
"witnessPath": "internal/tools/pypiregistry/main_test.go",
|
|
1582
|
+
"commandIds": [
|
|
1583
|
+
"proofkit.go-test"
|
|
1584
|
+
],
|
|
1585
|
+
"environmentClasses": [
|
|
1586
|
+
"local-go"
|
|
1587
|
+
]
|
|
1588
|
+
},
|
|
1589
|
+
{
|
|
1590
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-016",
|
|
1591
|
+
"scenarioId": "proofkit.supply-chain-quality.release-platform-sbom-subjects",
|
|
1592
|
+
"witnessId": "proofkit.releasesbom.release-platform-subjects",
|
|
1593
|
+
"witnessKind": "contract",
|
|
1594
|
+
"witnessPath": "internal/tools/releasesbom/main_test.go",
|
|
1595
|
+
"commandIds": [
|
|
1596
|
+
"proofkit.go-test",
|
|
1597
|
+
"proofkit.release-sbom"
|
|
1598
|
+
],
|
|
1599
|
+
"environmentClasses": [
|
|
1600
|
+
"local-go"
|
|
1601
|
+
]
|
|
1602
|
+
},
|
|
1603
|
+
{
|
|
1604
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-017",
|
|
1605
|
+
"scenarioId": "proofkit.supply-chain-quality.secret-json-kernel-owner",
|
|
1606
|
+
"witnessId": "proofkit.secretjson.private-kernel-owner",
|
|
1607
|
+
"witnessKind": "contract",
|
|
1608
|
+
"witnessPath": "internal/kernel/secretjson/secretjson_test.go",
|
|
1609
|
+
"commandIds": [
|
|
1610
|
+
"proofkit.go-test"
|
|
1611
|
+
],
|
|
1612
|
+
"environmentClasses": [
|
|
1613
|
+
"local-go"
|
|
1614
|
+
]
|
|
1615
|
+
},
|
|
1616
|
+
{
|
|
1617
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-017",
|
|
1618
|
+
"scenarioId": "proofkit.supply-chain-quality.deployment-secret-json-scan",
|
|
1619
|
+
"witnessId": "proofkit.deployment-evidence.secret-json-scan",
|
|
1620
|
+
"witnessKind": "contract",
|
|
1621
|
+
"witnessPath": "internal/command/deploymentevidenceadmission/deployment_evidence_admission_test.go",
|
|
1622
|
+
"commandIds": [
|
|
1623
|
+
"proofkit.go-test"
|
|
1624
|
+
],
|
|
1625
|
+
"environmentClasses": [
|
|
1626
|
+
"local-go"
|
|
1627
|
+
]
|
|
1628
|
+
},
|
|
1629
|
+
{
|
|
1630
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-017",
|
|
1631
|
+
"scenarioId": "proofkit.supply-chain-quality.readiness-secret-taxonomy",
|
|
1632
|
+
"witnessId": "proofkit.readiness-closeout.central-secret-taxonomy",
|
|
1633
|
+
"witnessKind": "contract",
|
|
1634
|
+
"witnessPath": "internal/command/readinesscloseout/readinesscloseout_test.go",
|
|
1635
|
+
"commandIds": [
|
|
1636
|
+
"proofkit.go-test"
|
|
1637
|
+
],
|
|
1638
|
+
"environmentClasses": [
|
|
1639
|
+
"local-go"
|
|
1640
|
+
]
|
|
1641
|
+
},
|
|
1642
|
+
{
|
|
1643
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-017",
|
|
1644
|
+
"scenarioId": "proofkit.supply-chain-quality.secret-json-owner-governance",
|
|
1645
|
+
"witnessId": "proofkit.secret-json.owner-governance",
|
|
1646
|
+
"witnessKind": "contract",
|
|
1647
|
+
"witnessPath": "scripts/secret_json_owner_governance_test.go",
|
|
1648
|
+
"commandIds": [
|
|
1649
|
+
"proofkit.go-test"
|
|
1650
|
+
],
|
|
1651
|
+
"environmentClasses": [
|
|
1652
|
+
"local-go"
|
|
1653
|
+
]
|
|
1654
|
+
},
|
|
1655
|
+
{
|
|
1656
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
1657
|
+
"scenarioId": "proofkit.supply-chain-quality.trusted-publisher-identity-owner",
|
|
1658
|
+
"witnessId": "proofkit.trusted-publisher.identity-owner",
|
|
1659
|
+
"witnessKind": "contract",
|
|
1660
|
+
"witnessPath": "internal/kernel/trustedpublisher/trustedpublisher_test.go",
|
|
1661
|
+
"commandIds": [
|
|
1662
|
+
"proofkit.go-test"
|
|
1663
|
+
],
|
|
1664
|
+
"environmentClasses": [
|
|
1665
|
+
"local-go"
|
|
1666
|
+
]
|
|
1667
|
+
},
|
|
1668
|
+
{
|
|
1669
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
1670
|
+
"scenarioId": "proofkit.supply-chain-quality.release-publisher-channel-mapping",
|
|
1671
|
+
"witnessId": "proofkit.release-publisher.channel-mapping",
|
|
1672
|
+
"witnessKind": "contract",
|
|
1673
|
+
"witnessPath": "internal/kernel/releasepublisher/releasepublisher_test.go",
|
|
1674
|
+
"commandIds": [
|
|
1675
|
+
"proofkit.go-test"
|
|
1676
|
+
],
|
|
1677
|
+
"environmentClasses": [
|
|
1678
|
+
"local-go"
|
|
1679
|
+
]
|
|
1680
|
+
},
|
|
1681
|
+
{
|
|
1682
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
1683
|
+
"scenarioId": "proofkit.supply-chain-quality.release-manifest-trusted-publisher-retention",
|
|
1684
|
+
"witnessId": "proofkit.release-manifest.trusted-publisher-retention",
|
|
1685
|
+
"witnessKind": "contract",
|
|
1686
|
+
"witnessPath": "internal/tools/releasemanifest/main_test.go",
|
|
1687
|
+
"commandIds": [
|
|
1688
|
+
"proofkit.go-test",
|
|
1689
|
+
"proofkit.package-artifact"
|
|
1690
|
+
],
|
|
1691
|
+
"environmentClasses": [
|
|
1692
|
+
"local-go"
|
|
1693
|
+
]
|
|
1694
|
+
},
|
|
1695
|
+
{
|
|
1696
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
1697
|
+
"scenarioId": "proofkit.supply-chain-quality.release-closeout-trusted-publisher-rejection",
|
|
1698
|
+
"witnessId": "proofkit.release-closeout.trusted-publisher-rejection",
|
|
1699
|
+
"witnessKind": "contract",
|
|
1700
|
+
"witnessPath": "internal/tools/releasecloseoutinput/main_test.go",
|
|
1701
|
+
"commandIds": [
|
|
1702
|
+
"proofkit.go-test",
|
|
1703
|
+
"proofkit.package-gate"
|
|
1704
|
+
],
|
|
1705
|
+
"environmentClasses": [
|
|
1706
|
+
"local-go"
|
|
1707
|
+
]
|
|
1708
|
+
},
|
|
1709
|
+
{
|
|
1710
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-018",
|
|
1711
|
+
"scenarioId": "proofkit.supply-chain-quality.release-workflow-trusted-publisher-env",
|
|
1712
|
+
"witnessId": "proofkit.release-workflow.trusted-publisher-env",
|
|
1713
|
+
"witnessKind": "technical",
|
|
1714
|
+
"witnessPath": ".github/workflows/release.yml",
|
|
1715
|
+
"commandIds": [
|
|
1716
|
+
"proofkit.actionlint"
|
|
1717
|
+
],
|
|
1718
|
+
"environmentClasses": [
|
|
1719
|
+
"local-go"
|
|
1720
|
+
]
|
|
1721
|
+
},
|
|
1722
|
+
{
|
|
1723
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-019",
|
|
1724
|
+
"scenarioId": "proofkit.supply-chain-quality.installed-package-json-abi-smoke",
|
|
1725
|
+
"witnessId": "proofkit.packageverify.installed-json-abi-smoke",
|
|
1726
|
+
"witnessKind": "contract",
|
|
1727
|
+
"witnessPath": "internal/tools/packageverify/main_test.go",
|
|
1728
|
+
"commandIds": [
|
|
1729
|
+
"proofkit.go-test",
|
|
1730
|
+
"proofkit.package-artifact"
|
|
1731
|
+
],
|
|
1732
|
+
"environmentClasses": [
|
|
1733
|
+
"local-go"
|
|
1734
|
+
]
|
|
1735
|
+
},
|
|
1736
|
+
{
|
|
1737
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-019",
|
|
1738
|
+
"scenarioId": "proofkit.supply-chain-quality.registry-install-json-abi-evidence",
|
|
1739
|
+
"witnessId": "proofkit.release-workflow.registry-install-json-abi-evidence",
|
|
1740
|
+
"witnessKind": "technical",
|
|
1741
|
+
"witnessPath": ".github/workflows/release.yml",
|
|
1742
|
+
"commandIds": [
|
|
1743
|
+
"proofkit.actionlint"
|
|
1744
|
+
],
|
|
1745
|
+
"environmentClasses": [
|
|
1746
|
+
"local-go"
|
|
1747
|
+
]
|
|
1748
|
+
},
|
|
1749
|
+
{
|
|
1750
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-019",
|
|
1751
|
+
"scenarioId": "proofkit.supply-chain-quality.release-manifest-json-abi-registry-evidence",
|
|
1752
|
+
"witnessId": "proofkit.release-manifest.json-abi-registry-evidence",
|
|
1753
|
+
"witnessKind": "contract",
|
|
1754
|
+
"witnessPath": "internal/tools/releasemanifest/main_test.go",
|
|
1755
|
+
"commandIds": [
|
|
1756
|
+
"proofkit.go-test",
|
|
1757
|
+
"proofkit.package-artifact"
|
|
1758
|
+
],
|
|
1759
|
+
"environmentClasses": [
|
|
1760
|
+
"local-go"
|
|
1761
|
+
]
|
|
1762
|
+
},
|
|
1763
|
+
{
|
|
1764
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-003",
|
|
1765
|
+
"scenarioId": "proofkit.supply-chain-quality.fuzz-property-boundaries",
|
|
1766
|
+
"witnessId": "proofkit.kernel.fuzz-property-boundaries",
|
|
1767
|
+
"witnessKind": "contract",
|
|
1768
|
+
"witnessPath": "internal/kernel/admission/json_fuzz_test.go",
|
|
1769
|
+
"commandIds": [
|
|
1770
|
+
"proofkit.go-test"
|
|
1771
|
+
],
|
|
1772
|
+
"environmentClasses": [
|
|
1773
|
+
"local-go"
|
|
1774
|
+
]
|
|
1775
|
+
},
|
|
1776
|
+
{
|
|
1777
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-006",
|
|
1778
|
+
"scenarioId": "proofkit.supply-chain-quality.osv-workflow",
|
|
1779
|
+
"witnessId": "proofkit.osv.workflow-source",
|
|
1780
|
+
"witnessKind": "technical",
|
|
1781
|
+
"witnessPath": ".github/workflows/osv-scanner.yml",
|
|
1782
|
+
"commandIds": [
|
|
1783
|
+
"proofkit.actionlint"
|
|
1784
|
+
],
|
|
1785
|
+
"environmentClasses": [
|
|
1786
|
+
"local-go"
|
|
1787
|
+
]
|
|
1788
|
+
},
|
|
1789
|
+
{
|
|
1790
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-001",
|
|
1791
|
+
"scenarioId": "proofkit.supply-chain-quality.release-attestation-wiring",
|
|
1792
|
+
"witnessId": "proofkit.release-workflow.attestation-wiring",
|
|
1793
|
+
"witnessKind": "technical",
|
|
1794
|
+
"witnessPath": ".github/workflows/release.yml",
|
|
1795
|
+
"commandIds": [
|
|
1796
|
+
"proofkit.actionlint"
|
|
1797
|
+
],
|
|
1798
|
+
"environmentClasses": [
|
|
1799
|
+
"local-go"
|
|
1800
|
+
]
|
|
1801
|
+
},
|
|
1802
|
+
{
|
|
1803
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-002",
|
|
1804
|
+
"scenarioId": "proofkit.supply-chain-quality.release-sbom",
|
|
1805
|
+
"witnessId": "proofkit.release-sbom.deterministic-inventory",
|
|
1806
|
+
"witnessKind": "contract",
|
|
1807
|
+
"witnessPath": "internal/tools/releasesbom/main.go",
|
|
1808
|
+
"commandIds": [
|
|
1809
|
+
"proofkit.release-sbom"
|
|
1810
|
+
],
|
|
1811
|
+
"environmentClasses": [
|
|
1812
|
+
"local-go"
|
|
1813
|
+
]
|
|
1814
|
+
},
|
|
1815
|
+
{
|
|
1816
|
+
"requirementId": "REQ-PROOFKIT-QUALITY-007",
|
|
1817
|
+
"scenarioId": "proofkit.supply-chain-quality.scorecard-workflow",
|
|
1818
|
+
"witnessId": "proofkit.scorecard.workflow-source",
|
|
1819
|
+
"witnessKind": "technical",
|
|
1820
|
+
"witnessPath": ".github/workflows/scorecard.yml",
|
|
1821
|
+
"commandIds": [
|
|
1822
|
+
"proofkit.actionlint"
|
|
1823
|
+
],
|
|
1824
|
+
"environmentClasses": [
|
|
1825
|
+
"local-go"
|
|
1826
|
+
]
|
|
1827
|
+
}
|
|
1828
|
+
],
|
|
1829
|
+
"witnessCommands": [
|
|
1830
|
+
{
|
|
1831
|
+
"commandId": "proofkit.ci-receipt-anchor",
|
|
1832
|
+
"command": "npm run self:receipt",
|
|
1833
|
+
"environmentClass": "local-go"
|
|
1834
|
+
},
|
|
1835
|
+
{
|
|
1836
|
+
"commandId": "proofkit.go-fmt",
|
|
1837
|
+
"command": "npm run go:fmt",
|
|
1838
|
+
"environmentClass": "local-go"
|
|
1839
|
+
},
|
|
1840
|
+
{
|
|
1841
|
+
"commandId": "proofkit.go-staticcheck",
|
|
1842
|
+
"command": "npm run go:staticcheck",
|
|
1843
|
+
"environmentClass": "local-go"
|
|
1844
|
+
},
|
|
1845
|
+
{
|
|
1846
|
+
"commandId": "proofkit.go-test",
|
|
1847
|
+
"command": "go test ./...",
|
|
1848
|
+
"environmentClass": "local-go"
|
|
1849
|
+
},
|
|
1850
|
+
{
|
|
1851
|
+
"commandId": "proofkit.go-vet",
|
|
1852
|
+
"command": "go vet ./...",
|
|
1853
|
+
"environmentClass": "local-go"
|
|
1854
|
+
},
|
|
1855
|
+
{
|
|
1856
|
+
"commandId": "proofkit.go-vulncheck",
|
|
1857
|
+
"command": "npm run go:vulncheck",
|
|
1858
|
+
"environmentClass": "local-go"
|
|
1859
|
+
},
|
|
1860
|
+
{
|
|
1861
|
+
"commandId": "proofkit.package-artifact",
|
|
1862
|
+
"command": "npm run package:artifact",
|
|
1863
|
+
"environmentClass": "local-go"
|
|
1864
|
+
},
|
|
1865
|
+
{
|
|
1866
|
+
"commandId": "proofkit.package-gate",
|
|
1867
|
+
"command": "npm run check",
|
|
1868
|
+
"environmentClass": "local-go"
|
|
1869
|
+
},
|
|
1870
|
+
{
|
|
1871
|
+
"commandId": "proofkit.platform-smoke",
|
|
1872
|
+
"command": "npm run platform:smoke",
|
|
1873
|
+
"environmentClasses": [
|
|
1874
|
+
"local-go",
|
|
1875
|
+
"local-python"
|
|
1876
|
+
]
|
|
1877
|
+
},
|
|
1878
|
+
{
|
|
1879
|
+
"commandId": "proofkit.python-package",
|
|
1880
|
+
"command": "npm run python:package",
|
|
1881
|
+
"environmentClass": "local-python"
|
|
1882
|
+
},
|
|
1883
|
+
{
|
|
1884
|
+
"commandId": "proofkit.python-verify",
|
|
1885
|
+
"command": "npm run python:verify",
|
|
1886
|
+
"environmentClass": "local-python"
|
|
1887
|
+
},
|
|
1888
|
+
{
|
|
1889
|
+
"commandId": "proofkit.actionlint",
|
|
1890
|
+
"command": "npm run go:actionlint",
|
|
1891
|
+
"environmentClass": "local-go"
|
|
1892
|
+
},
|
|
1893
|
+
{
|
|
1894
|
+
"commandId": "proofkit.coverage-metrics",
|
|
1895
|
+
"command": "npm run self:coverage",
|
|
1896
|
+
"environmentClass": "local-go"
|
|
1897
|
+
},
|
|
1898
|
+
{
|
|
1899
|
+
"commandId": "proofkit.go-bench",
|
|
1900
|
+
"command": "npm run go:bench",
|
|
1901
|
+
"environmentClass": "local-go"
|
|
1902
|
+
},
|
|
1903
|
+
{
|
|
1904
|
+
"commandId": "proofkit.release-sbom",
|
|
1905
|
+
"command": "npm run release:sbom",
|
|
1906
|
+
"environmentClass": "local-go"
|
|
1907
|
+
}
|
|
1908
|
+
],
|
|
1909
|
+
"nonClaims": [
|
|
1910
|
+
"Requirement proof bindings do not execute native witnesses.",
|
|
1911
|
+
"Requirement proof bindings do not authenticate receipt producers or decide proof freshness.",
|
|
1912
|
+
"Requirement proof bindings do not approve package release or consumer rollout."
|
|
1913
|
+
]
|
|
1914
|
+
}
|