@research-engineering/agentic-proofkit 0.1.156 → 0.1.158

package/docs/proofkit-contract-map.md

@@ -47,7 +47,7 @@ owner boundaries. It is not a second command-family inventory.
 | Receipts and producers | `proof-receipt-admission`, `receipt-producer-admission`, `receipt-currentness-scope`, `receipt-trust-class`, `producer-policy-self-proof` | receipt sets, producer policy, scope/currentness facts, trust classes | receipt shape, producer/receipt compatibility, self-proof diagnostics | producer authentication, freshness policy, CI trust roots | receipt/provenance report |
 | Release and deployment | `release-authority`, `external-consumer`, `registry-consumer-proof-input-compose`, `registry-consumer`, `deployment-evidence-admission`, `completion-criteria`, `branch-authority`, `readiness-closeout` | package facts, tarball/registry facts, explicit primitive registry/install/smoke facts, deployment evidence, criteria, branch facts | artifact/channel boundary checks, registry-consumer input composition, release diagnostics, falsifiable criteria shape | package publication, registry fetch, package-manager execution, deployment, rollback, approval | composed input, release/deployment/readiness report |
 | Supply-chain and quality | `self-check`, release workflow, `npm run release:sbom`, `npm run self:coverage`, `npm run go:actionlint`, `npm run go:bench` | release artifacts, source workflows, specs, bindings, witness plans, explicit benchmark invocation | deterministic self-check report shape, SBOM candidate evidence, coverage metrics, workflow lint routing, benchmark entrypoints | public-source provenance, vulnerability triage, license approval, CI run admission, release approval | self-check report, SBOM, metrics report, CI signal, or benchmark output |
-| Repository structure | `repo-profile-admission`, `workspace-manifest-facts`, `workspace-registry`, `workspace-changed-package-plan`, `workspace-shard-partition`, `typescript-public-api-surfaces`, `text-policy`, `secret-scan`, `package-runtime-dependency-admission` | explicit repo/profile facts, caller-owned manifest records, caller-owned roots, caller-owned text file inventories, optional `environmentClassPolicies` tuples | structural admission, manifest-to-workspace fact projection, workspace graph projections, TypeScript package public API checks, text policy admission, explicit-inventory secret-like text detection, shard plans | repository freshness, git/file discovery, command policy, package manager truth, provider secret scanning | structural, fact, policy, or planning report |
+| Repository structure | `repo-profile-admission`, `workspace-manifest-facts`, `workspace-registry`, `workspace-changed-package-plan`, `workspace-shard-partition`, `typescript-public-api-surfaces`, `text-policy`, `secret-scan`, `package-runtime-dependency-admission` | explicit repo/profile facts, caller-owned manifest records, caller-owned roots, caller-owned text file inventories, explicit TypeScript package-manifest and per-condition source paths, optional `environmentClassPolicies` tuples | structural admission, manifest-to-workspace fact projection, workspace graph projections, bounded TypeScript package public API checks over referenced files, text policy admission, explicit-inventory secret-like text detection, shard plans | repository freshness, git/file discovery, compiler output provenance, command policy, package manager truth, provider secret scanning | structural, fact, policy, or planning report |
 | Custom and generated artifacts | `custom-rule-boundary`, `document-lifecycle-boundary`, `rendered-artifact-freshness`, `conformance-profile`, `json-report-cli-adapter-source`, `witness-plan`, `witness-scheduler-plan` | custom rule metadata, document lifecycle records, artifact digests, profile manifests, command metadata, adapter language | boundary checks, generated-view freshness shape, deterministic adapter source generation, scheduler metadata checks | rule execution, document meaning, cache contents, CI scheduling, committed generated-source freshness | boundary report, generated source artifact, or scheduler report |
 | CLI metadata | `help` | optional command name or help flag | built-in command catalog and help text routing | command selection, semantic proof, freshness, merge policy | text help only |
 
@@ -121,7 +121,7 @@ Decision tree:
 | Tests or proof evidence need inventory. | `test-evidence-inventory`; use `--projection discovery-draft` only for explicit discovered-test facts, then `requirement-coverage-input-compose` when an aggregate `coverage_compose_input` exists, then `requirement-coverage-view` when a `coverage_view_input` exists | Compose only from explicit caller-owned facts. Discovery drafts are candidate-only and cannot close coverage. Use `failureClassifications[]`, `warningClassifications[]`, and `agentActionPlan[]` for machine routing. Escalate when tests are route-only, weak-oracle, unbound, or outside the caller-owned coverage universe. |
 | A change set is known. | `changed-path-set`, optionally `requirement-impact-input-compose`, `impact`, then `selective-gate-plan --agent-envelope` | Raw `knownChangedPaths` in `agent-route` are diagnostic only. Materialize a caller-owned `changed_path_set`, compose a caller-owned `impact_input` before `impact`, and compose a caller-owned `selective_gate_plan_input` before `selective-gate-plan`. Use `scanObligation` to name whether a `text-policy`, `secret-scan`, or caller-owned external scanner is required. Fail closed on unknown scope, dynamic edges, missing owner routes, unbound proof-like paths, or full-gate escalation. |
 | Caller-owned file contents need secret-like text detection. | `secret-scan` | Provide explicit sorted file inventory with content. Stop before claiming repository-wide discovery, credential validity, provider ingestion, merge readiness, or replacement of GitHub secret scanning. |
-| Does a TypeScript package public API match a caller-owned manifest? | `agent-route` with `goal: "verify_typescript_public_api"` and explicit `typescript_public_api_manifest` plus `typescript_public_api_repo_root`, then `typescript-public-api-surfaces --repo-root <caller-selected-root>` | This is an explicit filesystem scanner. Stop before guessing `repo-root`, claiming checkout freshness, package-manager truth, or merge readiness. |
+| Does a TypeScript package public API match a caller-owned manifest? | `agent-route` with `goal: "verify_typescript_public_api"` and explicit `typescript_public_api_manifest` plus `typescript_public_api_repo_root`, then `typescript-public-api-surfaces --repo-root <caller-selected-root>` | The manifest must name each referenced `package.json`, sorted-unique export conditions, and a non-JSX `.ts`, `.mts`, or `.cts` `sourcePath` whose canonical target has the same admitted extension class. The bounded scanner accepts only the fail-closed export grammar in `proofkit/cli-contract.v1.json`; it does not parse unrestricted TypeScript or TSX, infer conventional layouts, or prove compiler output provenance, checkout freshness, package-manager truth, or merge readiness. |
 | Receipts are available for planned checks. | `selective-gate-evidence --agent-envelope`; then materialize a caller-owned `obligation_decision_input` from the evidence output plus command routes, currentness, and trust facts; then run `selective-gate-obligation-decision-input`; then materialize the resulting `obligation_decision` input and run `obligation-decision --agent-envelope` | Escalate on missing, stale, invalid, untrusted, blocked, unavailable, or unknown-scope evidence. |
 | Human inspection is needed. | `requirement-source-view`, `requirement-proof-view`, `requirement-coverage-view`, `requirement-spec-tree-view`, or `requirement-browser-server` | `agent-route` emits browser commands as plan-only by default. Use `browserMode: "serve_local_view"` for `--serve` and `openBrowser: true` for `--open`. Rendered HTML and Markdown are presentation only unless the consumer admits a tracked artifact freshness gate. |
 | Temporary external document lifecycle facts, generated views, or rendered views need authority classification. | `document-lifecycle-boundary` | Treat lifecycle records as caller-owned metadata. Temporary design docs and implementation plans are not retained repository authority unless rewritten into deterministic specs, proof bindings, tests, package-public docs, or backlog rows. |

package/docs/specs/proofkit-package-boundary/overview.md

@@ -13,22 +13,27 @@ denial, and package artifact behavior only.
 - `REQ-PROOFKIT-PACKAGE-002`: the CLI builds deterministic reports, plans,
   generated source artifacts, and policy-admission results from explicit
   caller-owned JSON, declared no-input command parameters, or declared explicit
-  scanner scope classes without executing native witnesses, scanning implicit
-  repository state, deciding proof freshness, or accepting broad caller-supplied
-  phrase suppressors that can hide readiness overclaims.
+  scanner scope classes. Explicit scanners consume only caller-named bounded
+  canonical files under documented fail-closed grammars rather than guessing
+  layouts or silently accepting unsupported syntax; no command executes native
+  witnesses, scans implicit repository state, decides proof freshness, or accepts
+  broad caller-supplied phrase suppressors that can hide readiness overclaims.
 - `REQ-PROOFKIT-PACKAGE-003`: the root package remains installable and
   executable by an outside consumer on the current native platform without
   claiming registry publication.
 - `REQ-PROOFKIT-PACKAGE-004`: CI package-gate receipts used as merge evidence
   are admitted through a declared producer policy and proof-receipt shape
   validator instead of current-build output alone.
-- `REQ-PROOFKIT-PACKAGE-005`: the Go source, static analysis, package gate,
-  and vulnerability gates remain the native merge-critical quality floor for
-  the current Proofkit source tree.
+- `REQ-PROOFKIT-PACKAGE-005`: tracked source hygiene covers each admitted text
+  language in staged blobs and the current worktree; Go formatting, static
+  analysis, test, package, and vulnerability gates remain the native
+  merge-critical quality floor and explicitly provision every runtime required
+  by a merge-critical oracle.
 - `REQ-PROOFKIT-PACKAGE-006`: Python/uv distribution is a platform wheel
   wrapper over the same Go CLI, with wheel-safe package metadata, wheel tags,
-  embedded binary identity, local install smoke proof, and explicit non-claims
-  until PyPI publication.
+  embedded binary identity, local install smoke proof, POSIX exec
+  process-identity and signal preservation, and explicit non-claims until PyPI
+  publication.
 - `REQ-PROOFKIT-PACKAGE-007`: package-public Markdown records release-channel
   state only and must not embed exact per-version provider facts that are owned
   by immutable registry, release, and manifest artifacts.

package/docs/specs/proofkit-package-boundary/requirements.v1.json

@@ -35,7 +35,7 @@
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-002",
       "ownerId": "proofkit.package-boundary",
-      "invariant": "The CLI builds deterministic reports, plans, generated source artifacts, and policy-admission results from explicit caller-owned JSON, declared no-input command parameters, or declared explicit scanner scope classes without executing native witnesses, scanning implicit repository state, deciding proof freshness, or accepting broad caller-supplied phrase suppressors that can hide readiness overclaims.",
+      "invariant": "The CLI builds deterministic reports, plans, generated source artifacts, and policy-admission results from explicit caller-owned JSON, declared no-input command parameters, or declared explicit scanner scope classes; explicit scanners consume only caller-named bounded canonical files under documented fail-closed grammars rather than guessing layouts or silently accepting unsupported syntax, and no command executes native witnesses, scans implicit repository state, decides proof freshness, or accepts broad caller-supplied phrase suppressors that can hide readiness overclaims.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": [
@@ -116,7 +116,7 @@
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-005",
       "ownerId": "proofkit.package-boundary",
-      "invariant": "The Go source, formatting, static analysis, vet, test, package artifact, and vulnerability gates remain the native merge-critical quality floor for the current Proofkit source tree.",
+      "invariant": "Tracked source hygiene covers every admitted project text language in both staged blobs and the current worktree, while Go formatting, static analysis, vet, test, package artifact, and vulnerability gates remain the native merge-critical quality floor and explicitly provision every runtime required by a merge-critical oracle.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": [
@@ -143,7 +143,7 @@
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-006",
       "ownerId": "proofkit.package-boundary",
-      "invariant": "Python/uv distribution is a platform wheel wrapper over the same Go CLI, with wheel-safe package metadata, wheel tags, embedded binary identity, local install smoke proof, and explicit non-claims until PyPI publication.",
+      "invariant": "Python/uv distribution is a platform wheel wrapper over the same Go CLI, with wheel-safe package metadata, wheel tags, embedded binary identity, local install smoke proof, POSIX exec process-identity and signal preservation, and explicit non-claims until PyPI publication.",
       "claimLevel": "blocking",
       "riskClass": "medium",
       "proofBindingRefs": [

package/docs/specs/proofkit-spec-proof-core/overview.md

@@ -25,16 +25,18 @@ execution receipts, and merge policy.
 - `REQ-PROOFKIT-SPEC-003`: witness planning accepts caller-owned structured
   command metadata, scheduler constraints, environment classes, and
   binding-derived command projections only through admitted witness vocabulary
-  and conservative safe argv policy, without executing commands or selecting
-  repository policy.
+  and conservative safe argv policy. Self-hosting bindings and witness plans
+  preserve command ids, argv, and environment classes without executing
+  commands or selecting repository policy.
 - `REQ-PROOFKIT-SPEC-004`: selective planning and selective evidence reports
-  keep changed-path facts, planned commands, receipts, evidence class,
-  producer-admission state, and obligation candidates explicit, keep merge
-  approval consumer-owned, and fail closed for unknown or unmatched proof
-  inputs.
+  keep canonical changed-path facts, resolvable agent references, planned
+  commands, receipts, evidence class, producer-admission state, and obligation
+  candidates explicit, keep merge approval consumer-owned, and fail closed for
+  unknown or unmatched proof inputs.
 - `REQ-PROOFKIT-SPEC-005`: rendered proof views and agent envelopes remain
-  bounded, derived presentations over structured source and never become
-  canonical proof or requirement authority.
+  bounded, reference-closed derived presentations over structured source,
+  count each semantic omission once, and never become canonical proof or
+  requirement authority.
 - `REQ-PROOFKIT-SPEC-006`: test evidence inventory, explicit test-discovery
   draft projections, proof-binding-derived inventory projections, normalized
   inventory projections, coverage-view input composition, and requirement
@@ -92,8 +94,9 @@ execution receipts, and merge policy.
   and emits only bounded candidate requirements, bindings, or owner guidance.
 - `REQ-PROOFKIT-SPEC-018`: an authored command-family catalog covers every
   public CLI command exactly once, deterministically generates the private
-  runtime navigation projection, and adds opt-in family help without changing
-  root help, per-command help, or leaf dispatch.
+  runtime navigation projection, and adds opt-in family help while preserving
+  existing help invocation forms, process channels, no-input behavior, and leaf
+  dispatch; descriptor and help truth remains owned by `REQ-PROOFKIT-QUALITY-004`.
 
 ## Non-Claims
 

package/docs/specs/proofkit-spec-proof-core/requirements.v1.json

@@ -62,7 +62,7 @@
     {
       "requirementId": "REQ-PROOFKIT-SPEC-003",
       "ownerId": "proofkit.spec-proof-core",
-      "invariant": "Witness planning accepts caller-owned structured command metadata, scheduler constraints, environment classes, and binding-derived command projections only through admitted witness vocabulary and conservative safe argv policy, without executing commands or selecting repository policy.",
+      "invariant": "Witness planning accepts caller-owned structured command metadata, scheduler constraints, environment classes, and binding-derived command projections only through admitted witness vocabulary and conservative safe argv policy; self-hosting requirement bindings and witness plans preserve the same command ids, argv, and environment classes without executing commands or selecting repository policy.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": [
@@ -89,7 +89,7 @@
     {
       "requirementId": "REQ-PROOFKIT-SPEC-004",
       "ownerId": "proofkit.spec-proof-core",
-      "invariant": "Selective planning and selective evidence reports keep changed-path facts, planned commands, receipts, evidence class, producer-admission state, and obligation candidates explicit, keep merge approval consumer-owned, and fail closed for unknown or unmatched proof inputs.",
+      "invariant": "Selective planning and selective evidence reports keep canonical changed-path facts, resolvable agent references, planned commands, receipts, evidence class, producer-admission state, and obligation candidates explicit, keep merge approval consumer-owned, and fail closed for unknown or unmatched proof inputs.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": [
@@ -116,7 +116,7 @@
     {
       "requirementId": "REQ-PROOFKIT-SPEC-005",
       "ownerId": "proofkit.spec-proof-core",
-      "invariant": "Rendered proof views and agent envelopes remain bounded, derived presentations over structured source and never become canonical proof or requirement authority.",
+      "invariant": "Rendered proof views and agent envelopes remain bounded, reference-closed derived presentations over structured source, count each semantic omission once, and never become canonical proof or requirement authority.",
       "claimLevel": "blocking",
       "riskClass": "medium",
       "proofBindingRefs": [
@@ -467,7 +467,7 @@
     {
       "requirementId": "REQ-PROOFKIT-SPEC-018",
       "ownerId": "proofkit.spec-proof-core",
-      "invariant": "Command family navigation projects the complete public CLI command inventory from one authored family catalog into a deterministic private runtime projection, preserves existing root and per-command help and leaf dispatch, admits only opt-in family help forms, rejects missing, duplicated, oversized, unsorted, or reserved-operand-colliding families, and does not infer command selection, execute commands through family membership, or create a second command inventory owner.",
+      "invariant": "Command family navigation projects the complete public CLI command inventory from one authored family catalog into a deterministic private runtime projection, preserves root and per-command help invocation forms, stdout and stderr channel discipline, no-input behavior, and leaf dispatch, admits only opt-in family help forms, rejects missing, duplicated, oversized, unsorted, or reserved-operand-colliding families, and does not infer command selection, execute commands through family membership, or create a second command inventory owner.",
       "claimLevel": "blocking",
       "riskClass": "medium",
       "proofBindingRefs": [
@@ -477,7 +477,7 @@
         "NC-PROOFKIT-SPEC-018"
       ],
       "nonClaims": [
-        "This requirement does not claim command recommendation, command execution through family membership, consumer policy, native witness execution, merge approval, release approval, rollout approval, or production readiness."
+        "This requirement does not claim byte-for-byte help text compatibility across owner-approved CLI contract corrections, command recommendation, command execution through family membership, consumer policy, native witness execution, merge approval, release approval, rollout approval, or production readiness."
       ],
       "lifecycle": {
         "state": "active",

package/docs/specs/proofkit-supply-chain-quality/overview.md

@@ -22,7 +22,8 @@ vulnerability absence, or consumer rollout safety by itself.
   fuzzing side-effecting CLI or filesystem flows.
 - `REQ-PROOFKIT-QUALITY-004`: public CLI ABI has a small golden corpus and
   canonical ABI hash covering command topology, exit code, stdout/stderr
-  channel discipline, JSON parseability, stable public diagnostics, and
+  channel discipline, JSON parseability, stable public diagnostics, explicit
+  output schema evolution for breaking JSON field changes, and
   descriptor/contract/help parity without making private descriptors public API.
 - `REQ-PROOFKIT-QUALITY-005`: CodeQL workflow source is admitted as an
   independent semantic security analysis signal for Go source without replacing
@@ -45,9 +46,10 @@ vulnerability absence, or consumer rollout safety by itself.
   unknown command refs, contract-only commands, or route-only commands. Static
   route metadata and source syntax never become semantic falsifier evidence.
 - `REQ-PROOFKIT-QUALITY-011`: CI separates the OS-independent full
-  source/package gate from macOS platform smoke, uses explicit hosted runner
-  labels instead of floating latest labels, and exposes one fail-closed
-  aggregate gate that requires every required leaf check to finish with success.
+  source/package gate from macOS platform smoke, executes the complete Go
+  package set through its owner command, uses explicit hosted runner labels
+  instead of floating latest labels, and exposes one fail-closed aggregate gate
+  that requires every required leaf check to finish with success.
 - `REQ-PROOFKIT-QUALITY-012`: release and adoption channel identifiers use one
   canonical authority vocabulary that separates durable authority channels from
   display labels, publisher environments, statuses, and candidate evidence.
@@ -65,8 +67,9 @@ vulnerability absence, or consumer rollout safety by itself.
   release closeout.
 - `REQ-PROOFKIT-QUALITY-016`: release platform targets use one private owner
   that projects platform suffixes, Go build targets, npm OS/CPU metadata,
-  package tar entries, Python wheel tags, PyPI candidate completeness, and
-  SBOM binary subjects without becoming public API.
+  package tar entries, Python wheel tags, PyPI candidate completeness,
+  self-hosting native binary selection, and SBOM binary subjects without
+  becoming public API.
 - `REQ-PROOFKIT-QUALITY-017`: report-visible secret-shaped JSON traversal
   uses one private kernel owner for deterministic paths and finding kinds while
   command packages only map findings to their local report policy.
@@ -81,6 +84,11 @@ vulnerability absence, or consumer rollout safety by itself.
   stderr discipline, generated-source hash, owner-source parity, and exact
   explicit-input counts despite an unlisted poison file in the consumer working
   directory.
+- `REQ-PROOFKIT-QUALITY-020`: package artifact execution starts from admitted
+  candidate-owned output roots, rejects ambient provider or unowned release
+  state before mutation, stays confined to the repository across symlinks,
+  binds non-empty generated content to stable source and execution-context
+  snapshots, and emits a schema-versioned execution record.
 
 ## Non-Claims
 

package/docs/specs/proofkit-supply-chain-quality/requirements.v1.json

@@ -51,7 +51,7 @@
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-004",
       "ownerId": "proofkit.supply-chain-quality",
-      "invariant": "Public CLI ABI has a small golden corpus and canonical ABI hash covering command topology, exit code, stdout and stderr channel discipline, JSON parseability, stable public diagnostics, and descriptor/contract/help parity without making private descriptors a public API.",
+      "invariant": "Public CLI ABI has a small golden corpus and canonical ABI hash covering command topology, exit code, stdout and stderr channel discipline, JSON parseability, stable public diagnostics, explicit output schema evolution for breaking JSON field changes, and descriptor/contract/help parity without making private descriptors a public API.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": ["proofkit/requirement-bindings.json"],
@@ -142,7 +142,7 @@
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-011",
       "ownerId": "proofkit.supply-chain-quality",
-      "invariant": "CI separates the OS-independent full source/package gate from the platform-specific macOS execution smoke, uses explicit hosted runner labels instead of floating latest labels, and exposes one fail-closed aggregate quality gate that requires every required leaf check to finish with success so skipped, failed, or cancelled leaf jobs cannot satisfy branch-protection evidence.",
+      "invariant": "CI separates the OS-independent full source/package gate from the platform-specific macOS execution smoke, executes the complete Go package set through the owner command rather than a partial package list, uses explicit hosted runner labels instead of floating latest labels, and exposes one fail-closed aggregate quality gate that requires every required leaf check to finish with success so skipped, failed, or cancelled leaf jobs cannot satisfy branch-protection evidence.",
       "claimLevel": "blocking",
       "riskClass": "medium",
       "proofBindingRefs": ["proofkit/requirement-bindings.json"],
@@ -207,7 +207,7 @@
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-016",
       "ownerId": "proofkit.supply-chain-quality",
-      "invariant": "Release platform targets have one private owner that projects exact platform suffixes, Go build targets, npm OS/CPU metadata, package tar binary entries, Python wheel tags, PyPI candidate completeness, and SBOM binary subjects without turning the platform matrix into public API.",
+      "invariant": "Release platform targets have one private owner that projects exact platform suffixes, Go build targets, npm OS/CPU metadata, package tar binary entries, Python wheel tags, PyPI candidate completeness, self-hosting native binary selection, and SBOM binary subjects without turning the platform matrix into public API.",
       "claimLevel": "blocking",
       "riskClass": "high",
       "proofBindingRefs": ["proofkit/requirement-bindings.json"],
@@ -255,6 +255,19 @@
       "lifecycle": {"state": "active", "replacementRequirementIds": [], "evidenceRefs": []},
       "deferral": null,
       "updatePolicy": {"reviewOwnerId": "proofkit.supply-chain-quality", "requiresImpactDeclaration": true, "requiresProofBindingReview": true}
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-020",
+      "ownerId": "proofkit.supply-chain-quality",
+      "invariant": "Package artifact execution rejects ambient provider evidence and unowned release state before mutating candidate outputs, removes only candidate-owned package, wheel, and release outputs through a repository-confined filesystem root without following symlinks outside that root, invalidates prior execution evidence, executes the canonical package pipeline against stable source, environment, and toolchain snapshots, requires a non-empty content-bound artifact snapshot, and emits a schema-versioned execution record.",
+      "claimLevel": "blocking",
+      "riskClass": "high",
+      "proofBindingRefs": ["proofkit/requirement-bindings.json"],
+      "nonClaimRefs": ["NC-PROOFKIT-QUALITY-020"],
+      "nonClaims": ["This requirement does not claim producer authentication, hermetic or reproducible builds, registry publication, provider evidence freshness, release approval, rollout approval, production readiness, or exact artifact closure outside downstream package and release validators."],
+      "lifecycle": {"state": "active", "replacementRequirementIds": [], "evidenceRefs": []},
+      "deferral": null,
+      "updatePolicy": {"reviewOwnerId": "proofkit.supply-chain-quality", "requiresImpactDeclaration": true, "requiresProofBindingReview": true}
     }
   ]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@research-engineering/agentic-proofkit",
   "description": "Reusable proof profile, report, graph, and witness-planning primitives.",
-  "version": "0.1.156",
+  "version": "0.1.158",
   "type": "module",
   "license": "MIT",
   "sideEffects": false,

package/proofkit/cli-contract.v1.json

@@ -249,6 +249,49 @@
           "This input contract describes agent-route admission only.",
           "It does not validate referenced file contents, execute commands, read repositories, or approve merge."
         ]
+      },
+      "outputContract": {
+        "contractId": "proofkit.agent-route.output.v2",
+        "schemaVersion": 2,
+        "authority": "deterministic route report derived from admitted agent-route input",
+        "requiredFields": [
+          "guidanceSlice",
+          "reportId",
+          "reportKind",
+          "schemaVersion",
+          "selectedRouteFamily",
+          "state"
+        ],
+        "fields": {
+          "schemaVersion": {
+            "value": 2
+          },
+          "selectedRouteFamily": {
+            "enum": [
+              "adoption",
+              "migration",
+              "release_and_deployment",
+              "rendered_views",
+              "repository_structure",
+              "requirement_proof_binding",
+              "requirement_source",
+              "selective_evidence",
+              "selective_planning",
+              "test_inventory_and_coverage",
+              "unknown"
+            ]
+          },
+          "guidanceSlice": {
+            "requiredFields": [
+              "routeFamily"
+            ],
+            "routeFamilyRule": "must equal selectedRouteFamily"
+          }
+        },
+        "changesFromV1": [
+          "selectedFamily is replaced by selectedRouteFamily",
+          "guidanceSlice.family is replaced by guidanceSlice.routeFamily"
+        ]
       }
     },
     {
@@ -1836,7 +1879,71 @@
       ],
       "requiredFlags": [
         "--repo-root"
-      ]
+      ],
+      "inputContract": {
+        "contractId": "proofkit.typescript-public-api-surfaces.input.v1",
+        "schemaVersion": 1,
+        "authority": "caller-owned manifest plus explicitly selected filesystem snapshot",
+        "fields": {
+          "schemaVersion": {
+            "required": true,
+            "value": 1
+          },
+          "machineContract": {
+            "required": true,
+            "value": "public_api_surfaces"
+          },
+          "entries": {
+            "required": true,
+            "maxItems": 1024,
+            "item": {
+              "requiredFields": [
+                "exportConditions",
+                "exportKey",
+                "packageManifestPath",
+                "packageName",
+                "runtimeExports",
+                "typeExports"
+              ],
+              "optionalFields": [
+                "deniedExportKeys"
+              ],
+              "pathAuthority": "packageManifestPath names an explicit repo-relative package.json; every export condition names its explicit repo-relative non-JSX TypeScript sourcePath, and the canonical resolved source target must also have a .ts, .mts, or .cts extension",
+              "setFields": "deniedExportKeys, runtimeExports, and typeExports are sorted unique arrays",
+              "exportConditionsRule": "non-empty and sorted unique by condition"
+            }
+          }
+        },
+        "resourceBudgets": {
+          "maxSourceFileBytes": 8388608,
+          "maxPackageManifestBytes": 262144,
+          "maxAggregateFileReadBytes": 67108864
+        },
+        "sourceGrammar": {
+          "grammarId": "proofkit.typescript-public-api.export-subset.v1",
+          "mode": "fail_closed",
+          "identifierDomain": "direct ASCII identifiers in code; Unicode remains permitted inside comments and literals",
+          "admittedExportForms": [
+            "named runtime re-exports from a string module specifier",
+            "named type re-exports from a string module specifier",
+            "ASCII-named function, class, enum, interface, type, const, let, and var exports"
+          ],
+          "rejectedLexicalForms": [
+            "slash tokens outside comments, including division and regular-expression literals",
+            "template interpolation",
+            "escaped or direct non-ASCII code identifiers",
+            "unterminated comments or literals",
+            "unbalanced delimiters",
+            "top-level angle-bracket syntax in variable export declarations"
+          ]
+        },
+        "nonClaims": [
+          "The command does not infer conventional package or source layouts.",
+          "The command does not parse JSX or admit TSX source files.",
+          "The command does not parse unrestricted TypeScript; sources outside the documented export grammar fail closed.",
+          "Caller-owned source-to-condition mappings do not prove compiler output provenance, checkout freshness, package-manager truth, merge readiness, or rollout."
+        ]
+      }
     },
     {
       "command": "witness-plan",

package/proofkit/requirement-bindings.json

@@ -349,7 +349,7 @@
       "claimLevel": "blocking",
       "proofState": "witness_backed",
       "nonClaims": [
-        "This requirement does not claim repository scanning, semantic boundary correctness, automatic requirement extraction, native witness execution, receipt authenticity, proof freshness, owner approval, merge approval, release approval, rollout approval, or old proof-owner retirement approval."
+        "This requirement does not claim repository scanning, text extraction from files, semantic boundary correctness, automatic requirement extraction, native witness execution, receipt authenticity, proof freshness, owner approval, merge approval, release approval, rollout approval, or old proof-owner retirement approval."
       ]
     },
     {
@@ -479,7 +479,7 @@
       "claimLevel": "blocking",
       "proofState": "witness_backed",
       "nonClaims": [
-        "This requirement does not claim provider-run success, Windows support, performance budget enforcement, or release approval."
+        "This requirement does not claim provider-run success, branch-protection settings, Windows support, performance budget enforcement, or release approval."
       ]
     },
     {
@@ -562,6 +562,16 @@
         "This requirement does not claim registry publication, every command's runtime behavior, execution of non-native platform binaries, provider-side install freshness, consumer dependency admission, release approval, rollout approval, or production readiness."
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-020",
+      "ownerId": "proofkit.supply-chain-quality",
+      "specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": [
+        "This requirement does not claim producer authentication, hermetic or reproducible builds, registry publication, provider evidence freshness, release approval, rollout approval, production readiness, or exact artifact closure outside downstream package and release validators."
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-017",
       "ownerId": "proofkit.spec-proof-core",
@@ -579,7 +589,7 @@
       "claimLevel": "blocking",
       "proofState": "witness_backed",
       "nonClaims": [
-        "This requirement does not claim command recommendation, command execution through family membership, consumer policy, native witness execution, merge approval, release approval, rollout approval, or production readiness."
+        "This requirement does not claim byte-for-byte help text compatibility across owner-approved CLI contract corrections, command recommendation, command execution through family membership, consumer policy, native witness execution, merge approval, release approval, rollout approval, or production readiness."
       ]
     }
   ],
@@ -692,6 +702,32 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-002",
+      "scenarioId": "proofkit.package-boundary.typescript-explicit-scan-topology",
+      "witnessId": "proofkit.typescript-public-api.explicit-scan-topology",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/publicapi/public_api_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-002",
+      "scenarioId": "proofkit.package-boundary.typescript-fail-closed-source-grammar",
+      "witnessId": "proofkit.typescript-public-api.fail-closed-source-grammar",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/publicapi/public_api_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-003",
       "scenarioId": "proofkit.package-boundary.outside-consumer-artifact",
@@ -735,6 +771,32 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-005",
+      "scenarioId": "proofkit.package-boundary.staged-and-worktree-source-hygiene",
+      "witnessId": "proofkit.source-hygiene.tracked-language-closure",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/source_hygiene_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-005",
+      "scenarioId": "proofkit.package-boundary.merge-critical-runtime-preconditions",
+      "witnessId": "proofkit.ci.merge-critical-runtime-preconditions",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/workflow_package_gate_oracle_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-006",
       "scenarioId": "proofkit.package-boundary.python-wheel-candidate",
@@ -749,6 +811,19 @@
         "local-python"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-006",
+      "scenarioId": "proofkit.package-boundary.python-wrapper-posix-lifecycle",
+      "witnessId": "proofkit.python-package.posix-exec-lifecycle",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/pythonpackage/exec_lifecycle_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-001",
       "scenarioId": "proofkit.spec-proof-core.requirement-source-admission",
@@ -827,6 +902,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-003",
+      "scenarioId": "proofkit.spec-proof-core.self-hosting-witness-command-identity",
+      "witnessId": "proofkit.witness-plan.self-hosting-command-identity",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbinding/projections_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-004",
       "scenarioId": "proofkit.spec-proof-core.selective-planning-and-evidence",
@@ -840,6 +928,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-004",
+      "scenarioId": "proofkit.spec-proof-core.changed-path-agent-reference-closure",
+      "witnessId": "proofkit.changed-path-set.agent-reference-closure",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/changedpathset/changedpathset_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-005",
       "scenarioId": "proofkit.spec-proof-core.rendered-view-and-agent-envelope-non-authority",
@@ -866,6 +967,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-005",
+      "scenarioId": "proofkit.spec-proof-core.agent-envelope-reference-closure",
+      "witnessId": "proofkit.agent-envelope.reference-closure",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/agentenvelope/agentenvelope_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-006",
       "scenarioId": "proofkit.spec-proof-core.test-inventory-normalized-output",
@@ -1465,6 +1579,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-004",
+      "scenarioId": "proofkit.supply-chain-quality.cli-output-schema-evolution",
+      "witnessId": "proofkit.cli-contract.output-schema-evolution",
+      "witnessKind": "contract",
+      "witnessPath": "internal/app/app_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-005",
       "scenarioId": "proofkit.supply-chain-quality.codeql-workflow",
@@ -1523,6 +1650,21 @@
         "local-python"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-011",
+      "scenarioId": "proofkit.supply-chain-quality.ci-complete-go-package-set",
+      "witnessId": "proofkit.ci.complete-go-package-set-oracle",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/validate-self-hosting-receipts_test.go",
+      "commandIds": [
+        "proofkit.go-test",
+        "proofkit.package-gate"
+      ],
+      "environmentClasses": [
+        "local-go",
+        "local-go-python"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-012",
       "scenarioId": "proofkit.supply-chain-quality.release-channel-authority-vocabulary",
@@ -1575,6 +1717,36 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-020",
+      "scenarioId": "proofkit.supply-chain-quality.package-artifact-clean-materialization",
+      "witnessId": "proofkit.package-artifact.clean-materialization-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/packageartifact/main_test.go",
+      "commandIds": [
+        "proofkit.go-test",
+        "proofkit.package-artifact"
+      ],
+      "environmentClasses": [
+        "local-go",
+        "local-go-python"
+      ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-020",
+      "scenarioId": "proofkit.supply-chain-quality.package-artifact-output-ownership-and-confinement",
+      "witnessId": "proofkit.package-artifact.output-ownership-and-confinement-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/packageartifactrecord/record_test.go",
+      "commandIds": [
+        "proofkit.go-test",
+        "proofkit.package-artifact"
+      ],
+      "environmentClasses": [
+        "local-go",
+        "local-go-python"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-015",
       "scenarioId": "proofkit.supply-chain-quality.release-closeout-completion-criteria",
@@ -1603,6 +1775,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-016",
+      "scenarioId": "proofkit.supply-chain-quality.release-platform-self-hosting-binary",
+      "witnessId": "proofkit.self-hosting.release-platform-binary-projection",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/validate-self-hosting-receipts_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-016",
       "scenarioId": "proofkit.supply-chain-quality.release-platform-package-artifact",
@@ -1918,6 +2103,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-018",
+      "scenarioId": "proofkit.spec-proof-core.command-family-help-compatibility",
+      "witnessId": "proofkit.command-family-navigation.help-compatibility-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/app/command_family_catalog_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-018",
       "scenarioId": "proofkit.spec-proof-core.command-family-navigation-parity",