@research-engineering/agentic-proofkit 0.1.145 → 0.1.147

package/proofkit/cli-contract.v1.json

@@ -103,15 +103,19 @@
             "item": {
               "kind": {
                 "enum": [
-                  "adoption_workflow",
-                  "authoring_plan",
+              "adoption_workflow",
+              "authoring_plan",
+              "binding_witness_plan_input",
+              "capability_map",
                   "changed_path_set",
+                  "coverage_compose_input",
                   "coverage_view_input",
                   "deployment_evidence_input",
                   "impact_input",
                   "migration_parity",
                   "migration_plan",
                   "obligation_decision",
+                  "obligation_decision_input",
                   "overview_claims",
                   "proof_binding",
                   "readiness_closeout_input",
@@ -124,6 +128,7 @@
                   "selective_evidence",
                   "selective_gate_plan_input",
                   "spec_tree_bundle",
+                  "test_discovery",
                   "test_inventory",
                   "typescript_public_api_manifest",
                   "typescript_public_api_repo_root",
@@ -263,6 +268,20 @@
         "--input-pointer"
       ]
     },
+    {
+      "command": "capability-map-admission",
+      "input": "required",
+      "stdin": true,
+      "inputPointer": true,
+      "scopeClass": "explicit_caller_input",
+      "outputModes": [
+        "json"
+      ],
+      "allowedFlags": [
+        "--input",
+        "--input-pointer"
+      ]
+    },
     {
       "command": "changed-path-set",
       "input": "required",
@@ -823,6 +842,53 @@
         "--input",
         "--input-pointer"
       ],
+      "inputContract": {
+        "contractId": "proofkit.requirement-coverage-input-compose.input.v1",
+        "schemaVersion": 1,
+        "authority": "requirement coverage input compose input contract",
+        "commonRequiredFields": [
+          "coverageUniverse",
+          "localEnvironmentPolicy",
+          "options",
+          "ownerInvariantRegistry",
+          "requirementSource",
+          "schemaVersion",
+          "selectedOwnerIds",
+          "viewInputId"
+        ],
+        "modes": {
+          "normalized": {
+            "requires": [
+              "compactProofContract",
+              "normalizedTestEvidenceInventory"
+            ],
+            "forbids": [
+              "requirementProofBinding",
+              "testEvidenceInventory"
+            ],
+            "nonClaim": "Normalized mode preserves source-set provenance through normalizedTestEvidenceInventory."
+          },
+          "direct": {
+            "requires": [
+              "requirementProofBinding",
+              "testEvidenceInventory"
+            ],
+            "forbids": [
+              "compactProofContract",
+              "normalizedTestEvidenceInventory"
+            ],
+            "admittedInventoryAuthority": "caller_owned_inventory",
+            "rejects": [
+              "caller_owned_inventory_source_set",
+              "caller_owned_test_discovery_candidate_inventory"
+            ],
+            "nonClaim": "Direct mode admits passed child reports and rejects source-set or candidate inventory inputs that need an explicit normalization/materialization envelope."
+          }
+        },
+        "nonClaims": [
+          "Coverage input composition does not execute native tests, authenticate receipts, decide freshness, or approve merge."
+        ]
+      },
       "outputContract": {
         "contractId": "proofkit.requirement-coverage-input-compose.output.v1",
         "schemaVersion": 1,
@@ -839,6 +905,10 @@
           "testEvidenceInventory",
           "viewInputId"
         ],
+        "optionalFields": [
+          "normalizedTestEvidenceInventory"
+        ],
+        "provenanceRule": "When normalizedTestEvidenceInventory is present, it preserves the admitted source-set envelope and its nested inventory must equal testEvidenceInventory.",
         "nonClaims": [
           "Coverage input composition emits a direct requirement-coverage-view input and does not execute native tests, authenticate receipts, decide freshness, or approve merge."
         ]
@@ -1291,50 +1361,98 @@
         "--projection"
       ],
       "inputContract": {
-        "contractId": "proofkit.test-evidence-inventory.proof-binding-derived.input.v1",
+        "contractId": "proofkit.test-evidence-inventory.input.v1",
         "schemaVersion": 1,
-        "authority": "proof-binding-derived test inventory projection admission",
-        "appliesWhen": "--projection proof-binding-derived",
-        "fields": {
-          "commandRefPolicy": {
-            "required": true,
+        "authority": "test evidence inventory admission and projection admission",
+        "projectionVariants": {
+          "discovery-draft": {
+            "authority": "caller-owned test discovery draft projection admission",
+            "appliesWhen": "--projection discovery-draft",
+            "normalizedInventory": "not_supported",
+            "requiredFields": [
+              "authority",
+              "discoveredTests",
+              "discoveredTests[].title",
+              "draftId",
+              "repository",
+              "runner",
+              "schemaVersion"
+            ],
             "fields": {
-              "prefix": {
-                "required": true,
-                "format": "stable rule id namespace used to derive commandRefs"
+              "nonClaims": {
+                "default": []
+              },
+              "repository.nonClaims": {
+                "default": []
+              },
+              "runner.nonClaims": {
+                "default": []
+              },
+              "discoveredTests[].nonClaims": {
+                "default": []
               }
-            }
-          },
-          "compactProofContract": {
-            "required": true,
-            "format": "compact requirement proof binding contract"
-          },
-          "inventoryId": {
-            "required": true,
-            "format": "stable rule id"
-          },
-          "nonClaims": {
-            "default": []
+            },
+            "candidateOutput": {
+              "authority": "caller_owned_test_discovery_candidate_inventory",
+              "candidateKind": "proofkit.test-inventory-discovery-draft.candidate-inventory",
+              "strictInventoryAdmission": "rejected_until_owner_materialized"
+            },
+            "nonClaim": "Discovery draft reports candidate-only guidance from explicit caller-owned facts; it does not scan repositories, execute tests, emit semantic_falsifier evidence, or close coverage."
           },
-          "requirementSource": {
-            "required": true,
+          "proof-binding-derived": {
+            "authority": "proof-binding-derived test inventory projection admission",
+            "appliesWhen": "--projection proof-binding-derived",
+            "normalizedInventory": "supported",
             "fields": {
-              "requirements": {
+              "commandRefPolicy": {
+                "required": true,
+                "fields": {
+                  "prefix": {
+                    "required": true,
+                    "format": "stable rule id namespace used to derive commandRefs"
+                  }
+                }
+              },
+              "compactProofContract": {
+                "required": true,
+                "format": "compact requirement proof binding contract"
+              },
+              "inventoryId": {
+                "required": true,
+                "format": "stable rule id"
+              },
+              "nonClaims": {
+                "default": []
+              },
+              "requirementSource": {
                 "required": true,
-                "itemFields": {
-                  "ownerId": "stable rule id",
-                  "requirementId": "stable rule id"
+                "fields": {
+                  "requirements": {
+                    "required": true,
+                    "itemFields": {
+                      "ownerId": "stable rule id",
+                      "requirementId": "stable rule id"
+                    }
+                  }
                 }
+              },
+              "schemaVersion": {
+                "required": true,
+                "value": 1
               }
-            }
+            },
+            "nonClaim": "This projection input does not make Proofkit the owner of requirement meaning, native test execution, repository scanning, proof freshness, or merge policy."
           },
-          "schemaVersion": {
-            "required": true,
-            "value": 1
+          "strict-inventory": {
+            "authority": "caller-owned strict test inventory admission",
+            "appliesWhen": "default without --projection",
+            "normalizedInventory": "supported",
+            "nonClaim": "Strict inventory admission validates caller-owned evidence records; Proofkit does not execute those tests."
           }
         },
         "nonClaims": [
-          "This projection input does not make Proofkit the owner of requirement meaning, native test execution, repository scanning, proof freshness, or merge policy.",
+          "Projection modes are closed vocabulary: proof-binding-derived or discovery-draft.",
+          "Discovery draft candidate output must be materialized into strict inventory before it can affect coverage.",
           "The derived inventory remains caller-owned input for downstream coverage views."
         ]
       },
@@ -1353,11 +1471,15 @@
           }
         },
         "agentActionPlan": {
-          "sourceDiagnosticKeys": ["failures", "warnings"],
+          "sourceDiagnosticKeys": [
+            "failures",
+            "warnings"
+          ],
           "decisionOwner": "consumer_repository",
           "nonClaim": "Agent actions are deterministic guidance over admitted caller-owned inventory facts and do not execute tests, approve merge, or decide semantic truth."
         },
         "classificationIds": [
+          "candidate_only",
           "declared_duplicate_falsifier",
           "duplicate_falsifier_candidate",
           "empty_oracle",
@@ -1372,6 +1494,7 @@
           "mock_tests_mock",
           "over_broad_integration",
           "routing_smoke_only",
+          "selector_fragility",
           "snapshot_without_oracle",
           "tautology",
           "unasserted_diagnostic",
@@ -1387,6 +1510,12 @@
           "ownerReviewState": "candidate|confirmed",
           "severity": "failure|warning"
         },
+        "oracleFields": {
+          "assertionSummary": "non-empty assertion summary for semantic_falsifier, contract_admission, and property_or_fuzz entries",
+          "expectedPublicOutcome": "non-empty expected public outcome for semantic_falsifier, contract_admission, and property_or_fuzz entries",
+          "oracleId": "stable rule id",
+          "oracleKind": "stable rule id"
+        },
         "nonClaims": [
           "Test evidence inventory classifications describe admitted caller-owned inventory facts and Proofkit-derived structural diagnostics only.",
           "Proofkit does not infer weak tests from names, prose, mocks, sleeps, snapshots, or repository scans."
@@ -1434,7 +1563,40 @@
       "allowedFlags": [
         "--input",
         "--input-pointer"
-      ]
+      ],
+      "inputContract": {
+        "contractId": "proofkit.witness-plan.input.v1",
+        "schemaVersion": 1,
+        "authority": "witness plan input admission and projection admission",
+        "variants": {
+          "explicit-command-catalog": {
+            "appliesWhen": "projection is absent",
+            "requires": [
+              "commands",
+              "vocabulary"
+            ],
+            "nonClaim": "Explicit command catalogs are caller-owned; Proofkit admits command safety shape but does not execute commands."
+          },
+          "requirement-bindings": {
+            "appliesWhen": "projection == requirement-bindings",
+            "requires": [
+              "projection",
+              "requirementProofBinding",
+              "schemaVersion",
+              "vocabulary"
+            ],
+            "projection": "requirement-bindings",
+            "admissionRules": [
+              "requirementProofBinding must pass requirement-bindings admission",
+              "vocabulary must pass witness command vocabulary admission",
+              "binding-derived projection requires exactly one admitted parallelGroup; multi-group vocabularies require an explicit witness command catalog",
+              "display command text must be display-only command text without shell control tokens, quoting, escaping, or secret-like tokens",
+              "each referenced environment class must admit networkPolicy none, credentialClass none, and cachePolicy disabled"
+            ],
+            "nonClaim": "Binding-derived witness-plan projection avoids duplicate command identity but does not prove command pass evidence or native witness freshness."
+          }
+        }
+      }
     },
     {
       "command": "witness-scheduler-plan",

package/proofkit/receipt-producer-policy.json

@@ -5,7 +5,7 @@
     "proofkit.package-gate"
   ],
   "environmentClasses": [
-    "local-go"
+    "local-go-python"
   ],
   "producers": [
     {
@@ -16,7 +16,7 @@
         "proofkit.package-gate"
       ],
       "environmentClasses": [
-        "local-go"
+        "local-go-python"
       ],
       "evidenceRefs": [
         ".github/workflows/ci.yml"
@@ -31,7 +31,7 @@
         "proofkit.package-gate"
       ],
       "environmentClasses": [
-        "local-go"
+        "local-go-python"
       ],
       "evidenceRefs": [
         "AGENTS.md"
@@ -44,6 +44,7 @@
     "Receipt producer policy does not admit merge-satisfying GitHub Actions receipts by environment variable alone.",
     "Receipt producer policy does not approve package release or consumer rollout.",
     "Receipt producer policy does not authenticate protected-ref or workflow state by itself.",
-    "Receipt producer policy does not compute receipt freshness."
+    "Receipt producer policy does not compute receipt freshness.",
+    "The local-go-python package receipt is an aggregate package-gate receipt and does not provide independent local-go and local-python receipt classes."
   ]
 }

package/proofkit/requirement-bindings.json

@@ -561,6 +561,16 @@
       "nonClaims": [
         "This requirement does not claim registry publication, every command's runtime behavior, execution of non-native platform binaries, provider-side install freshness, consumer dependency admission, release approval, rollout approval, or production readiness."
       ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-017",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": [
+        "This requirement does not claim repository scanning, code correctness, extraction completeness, final requirement meaning, proof-binding adequacy, native witness execution, proof freshness, merge approval, release approval, rollout approval, or production readiness."
+      ]
     }
   ],
   "bindings": [
@@ -694,7 +704,7 @@
         "proofkit.package-gate"
       ],
       "environmentClasses": [
-        "local-go"
+        "local-go-python"
       ]
     },
     {
@@ -792,6 +802,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-003",
+      "scenarioId": "proofkit.spec-proof-core.binding-derived-witness-plan",
+      "witnessId": "proofkit.witness-plan.binding-derived-projection",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/witnessplan/witnessplan_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-004",
       "scenarioId": "proofkit.spec-proof-core.selective-planning-and-evidence",
@@ -844,6 +867,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-006",
+      "scenarioId": "proofkit.spec-proof-core.test-discovery-draft-candidate-barrier",
+      "witnessId": "proofkit.test-inventory.discovery-draft-candidate-barrier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/testevidenceinventory/testevidenceinventory_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-006",
       "scenarioId": "proofkit.spec-proof-core.proof-binding-derived-test-inventory",
@@ -1471,6 +1507,7 @@
       ],
       "environmentClasses": [
         "local-go",
+        "local-go-python",
         "local-python"
       ]
     },
@@ -1537,7 +1574,8 @@
         "proofkit.package-gate"
       ],
       "environmentClasses": [
-        "local-go"
+        "local-go",
+        "local-go-python"
       ]
     },
     {
@@ -1727,7 +1765,8 @@
         "proofkit.package-gate"
       ],
       "environmentClasses": [
-        "local-go"
+        "local-go",
+        "local-go-python"
       ]
     },
     {
@@ -1848,13 +1887,26 @@
       "environmentClasses": [
         "local-go"
       ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-017",
+      "scenarioId": "proofkit.spec-proof-core.capability-map-admission-trust-modes",
+      "witnessId": "proofkit.capability-map-admission.trust-mode-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/capabilitymapadmission/capability_map_admission_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
     }
   ],
   "witnessCommands": [
     {
       "commandId": "proofkit.ci-receipt-anchor",
       "command": "npm run self:receipt",
-      "environmentClass": "local-go"
+      "environmentClass": "local-go-python"
     },
     {
       "commandId": "proofkit.go-fmt",
@@ -1889,7 +1941,9 @@
     {
       "commandId": "proofkit.package-gate",
       "command": "npm run check",
-      "environmentClass": "local-go"
+      "environmentClasses": [
+        "local-go-python"
+      ]
     },
     {
       "commandId": "proofkit.platform-smoke",

package/proofkit/witness-plan.json

@@ -13,6 +13,7 @@
     ],
     "environmentClasses": [
       "local-go",
+      "local-go-python",
       "local-python"
     ],
     "environmentClassPolicies": [
@@ -31,6 +32,21 @@
           "write-local"
         ]
       },
+      {
+        "environmentClass": "local-go-python",
+        "networkPolicies": [
+          "external",
+          "none"
+        ],
+        "credentialClasses": [
+          "none"
+        ],
+        "cachePolicies": [
+          "disabled",
+          "read-only",
+          "write-local"
+        ]
+      },
       {
         "environmentClass": "local-python",
         "networkPolicies": [
@@ -89,7 +105,7 @@
           "PROOFKIT_MERGE_SATISFYING_PRODUCER"
         ],
         "classes": [
-          "local-go"
+          "local-go-python"
         ]
       },
       "timeoutMs": 600000,
@@ -296,7 +312,7 @@
         "inherit": "none",
         "allowlist": [],
         "classes": [
-          "local-go"
+          "local-go-python"
         ]
       },
       "timeoutMs": 600000,