@research-engineering/agentic-proofkit 0.1.157 → 0.1.159

package/proofkit/requirement-bindings.json

@@ -349,7 +349,7 @@
       "claimLevel": "blocking",
       "proofState": "witness_backed",
       "nonClaims": [
-        "This requirement does not claim repository scanning, semantic boundary correctness, automatic requirement extraction, native witness execution, receipt authenticity, proof freshness, owner approval, merge approval, release approval, rollout approval, or old proof-owner retirement approval."
+        "This requirement does not claim repository scanning, text extraction from files, semantic boundary correctness, automatic requirement extraction, native witness execution, receipt authenticity, proof freshness, owner approval, merge approval, release approval, rollout approval, or old proof-owner retirement approval."
       ]
     },
     {
@@ -479,7 +479,7 @@
       "claimLevel": "blocking",
       "proofState": "witness_backed",
       "nonClaims": [
-        "This requirement does not claim provider-run success, Windows support, performance budget enforcement, or release approval."
+        "This requirement does not claim provider-run success, branch-protection settings, Windows support, performance budget enforcement, or release approval."
       ]
     },
     {
@@ -572,6 +572,22 @@
         "This requirement does not claim producer authentication, hermetic or reproducible builds, registry publication, provider evidence freshness, release approval, rollout approval, production readiness, or exact artifact closure outside downstream package and release validators."
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-021",
+      "ownerId": "proofkit.supply-chain-quality",
+      "specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not change canonical source storage, semantic selection, stable identity, text output, help output, browser sessions, merge approval, release approval, or rollout readiness."]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "ownerId": "proofkit.supply-chain-quality",
+      "specPath": "docs/specs/proofkit-supply-chain-quality/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not claim full WCAG conformance, every branded browser, provider CI ingestion, registry publication, release approval, rollout approval, or production readiness."]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-017",
       "ownerId": "proofkit.spec-proof-core",
@@ -591,6 +607,46 @@
       "nonClaims": [
         "This requirement does not claim byte-for-byte help text compatibility across owner-approved CLI contract corrections, command recommendation, command execution through family membership, consumer policy, native witness execution, merge approval, release approval, rollout approval, or production readiness."
       ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-019",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not claim ambient repository discovery, later-checkout freshness, requirement meaning, proof adequacy, native witness execution, merge approval, release approval, rollout approval, or production readiness."]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-020",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not claim source completeness outside the admitted snapshot, product meaning, proof freshness, native execution, merge approval, release approval, rollout approval, or production readiness."]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-021",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not authenticate the surrounding browser profile or operating-system user and does not claim remote access, annotation persistence, agent execution, provider delivery, proof freshness, merge approval, release approval, rollout approval, branded Safari behavior, or production readiness."]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-022",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not claim textual equivalence, inferred moves, product meaning, proof freshness, merge approval, release approval, rollout approval, or production readiness."]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-023",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This requirement does not infer code topology, line or branch coverage, native execution, proof freshness, merge approval, release approval, rollout approval, or production readiness."]
     }
   ],
   "bindings": [
@@ -702,6 +758,32 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-002",
+      "scenarioId": "proofkit.package-boundary.typescript-explicit-scan-topology",
+      "witnessId": "proofkit.typescript-public-api.explicit-scan-topology",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/publicapi/public_api_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-002",
+      "scenarioId": "proofkit.package-boundary.typescript-fail-closed-source-grammar",
+      "witnessId": "proofkit.typescript-public-api.fail-closed-source-grammar",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/publicapi/public_api_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-003",
       "scenarioId": "proofkit.package-boundary.outside-consumer-artifact",
@@ -745,6 +827,32 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-005",
+      "scenarioId": "proofkit.package-boundary.staged-and-worktree-source-hygiene",
+      "witnessId": "proofkit.source-hygiene.tracked-language-closure",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/source_hygiene_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-005",
+      "scenarioId": "proofkit.package-boundary.merge-critical-runtime-preconditions",
+      "witnessId": "proofkit.ci.merge-critical-runtime-preconditions",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/workflow_package_gate_oracle_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-PACKAGE-006",
       "scenarioId": "proofkit.package-boundary.python-wheel-candidate",
@@ -759,6 +867,19 @@
         "local-python"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-PACKAGE-006",
+      "scenarioId": "proofkit.package-boundary.python-wrapper-posix-lifecycle",
+      "witnessId": "proofkit.python-package.posix-exec-lifecycle",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/pythonpackage/exec_lifecycle_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-001",
       "scenarioId": "proofkit.spec-proof-core.requirement-source-admission",
@@ -837,6 +958,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-003",
+      "scenarioId": "proofkit.spec-proof-core.self-hosting-witness-command-identity",
+      "witnessId": "proofkit.witness-plan.self-hosting-command-identity",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbinding/projections_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-004",
       "scenarioId": "proofkit.spec-proof-core.selective-planning-and-evidence",
@@ -850,6 +984,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-004",
+      "scenarioId": "proofkit.spec-proof-core.changed-path-agent-reference-closure",
+      "witnessId": "proofkit.changed-path-set.agent-reference-closure",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/changedpathset/changedpathset_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-005",
       "scenarioId": "proofkit.spec-proof-core.rendered-view-and-agent-envelope-non-authority",
@@ -876,6 +1023,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-005",
+      "scenarioId": "proofkit.spec-proof-core.agent-envelope-reference-closure",
+      "witnessId": "proofkit.agent-envelope.reference-closure",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/agentenvelope/agentenvelope_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-006",
       "scenarioId": "proofkit.spec-proof-core.test-inventory-normalized-output",
@@ -1475,6 +1635,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-004",
+      "scenarioId": "proofkit.supply-chain-quality.cli-output-schema-evolution",
+      "witnessId": "proofkit.cli-contract.output-schema-evolution",
+      "witnessKind": "contract",
+      "witnessPath": "internal/app/app_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-005",
       "scenarioId": "proofkit.supply-chain-quality.codeql-workflow",
@@ -1533,6 +1706,21 @@
         "local-python"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-011",
+      "scenarioId": "proofkit.supply-chain-quality.ci-complete-go-package-set",
+      "witnessId": "proofkit.ci.complete-go-package-set-oracle",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/validate-self-hosting-receipts_test.go",
+      "commandIds": [
+        "proofkit.go-test",
+        "proofkit.package-gate"
+      ],
+      "environmentClasses": [
+        "local-go",
+        "local-go-python"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-012",
       "scenarioId": "proofkit.supply-chain-quality.release-channel-authority-vocabulary",
@@ -1643,6 +1831,19 @@
         "local-go"
       ]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-016",
+      "scenarioId": "proofkit.supply-chain-quality.release-platform-self-hosting-binary",
+      "witnessId": "proofkit.self-hosting.release-platform-binary-projection",
+      "witnessKind": "contract",
+      "witnessPath": "scripts/validate-self-hosting-receipts_test.go",
+      "commandIds": [
+        "proofkit.go-test"
+      ],
+      "environmentClasses": [
+        "local-go"
+      ]
+    },
     {
       "requirementId": "REQ-PROOFKIT-QUALITY-016",
       "scenarioId": "proofkit.supply-chain-quality.release-platform-package-artifact",
@@ -1983,9 +2184,167 @@
       "environmentClasses": [
         "local-go"
       ]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-021",
+      "scenarioId": "proofkit.supply-chain-quality.cli-json-layout-parity",
+      "witnessId": "proofkit.stablejson.layout-parity-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/stablejson/stablejson_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-021",
+      "scenarioId": "proofkit.supply-chain-quality.cli-json-layout-process-boundary",
+      "witnessId": "proofkit.app.json-layout-process-boundary-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/app/app_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-021",
+      "scenarioId": "proofkit.supply-chain-quality.cli-json-layout-file-boundary",
+      "witnessId": "proofkit.app.json-layout-file-boundary-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/app/cli_abi_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-asset-and-security-boundary",
+      "witnessId": "proofkit.requirement-browser.workspace-security-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbrowser/workspace_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-project-execution-evidence",
+      "witnessId": "proofkit.requirement-browser.project-execution-evidence-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/browserproofverify/playwright_report_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-proof-artifact-confinement",
+      "witnessId": "proofkit.requirement-browser.proof-artifact-confinement-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/tools/browserproofverify/artifact_paths_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-terminal-concurrency",
+      "witnessId": "proofkit.requirement-browser.terminal-concurrency-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbrowser/workspace_handoff_boundary_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-process-lifecycle",
+      "witnessId": "proofkit.requirement-browser.process-lifecycle-falsifier",
+      "witnessKind": "technical",
+      "witnessPath": "scripts/browser-proof-execution.test.mjs",
+      "commandIds": ["proofkit.browser-check"],
+      "environmentClasses": ["local-node-browser"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-019",
+      "scenarioId": "proofkit.spec-proof-core.requirement-context-composition",
+      "witnessId": "proofkit.requirement-context.compose-round-trip-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementcontext/requirementcontext_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-020",
+      "scenarioId": "proofkit.spec-proof-core.requirement-context-slicing",
+      "witnessId": "proofkit.requirement-context.slice-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementcontext/slice_closure_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-021",
+      "scenarioId": "proofkit.spec-proof-core.requirement-browser-workspace-handoff",
+      "witnessId": "proofkit.requirement-browser.workspace-handoff-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbrowser/workspace_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-021",
+      "scenarioId": "proofkit.spec-proof-core.requirement-browser-tree-domain-closure",
+      "witnessId": "proofkit.requirement-browser.tree-domain-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbrowser/workspace_handoff_boundary_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-021",
+      "scenarioId": "proofkit.spec-proof-core.requirement-browser-packet-bounds",
+      "witnessId": "proofkit.requirement-browser.packet-bounds-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementbrowser/handoff_bounds_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-022",
+      "scenarioId": "proofkit.spec-proof-core.requirement-semantic-diff",
+      "witnessId": "proofkit.requirement-semantic-diff.owner-field-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementdiff/requirementdiff_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-023",
+      "scenarioId": "proofkit.spec-proof-core.requirement-traceability-evidence-planes",
+      "witnessId": "proofkit.requirement-traceability.evidence-plane-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/command/requirementgraph/requirementgraph_test.go",
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-021",
+      "scenarioId": "proofkit.spec-proof-core.requirement-browser-rendered-runtime",
+      "witnessId": "proofkit.requirement-browser.rendered-runtime-falsifier",
+      "witnessKind": "technical",
+      "witnessPath": "tests/browser/workspace.spec.mjs",
+      "commandIds": ["proofkit.browser-check"],
+      "environmentClasses": ["local-node-browser"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-QUALITY-022",
+      "scenarioId": "proofkit.supply-chain-quality.browser-static-and-runtime-proof",
+      "witnessId": "proofkit.requirement-browser.static-runtime-proof-falsifier",
+      "witnessKind": "technical",
+      "witnessPath": "tests/browser/workspace.spec.mjs",
+      "commandIds": ["proofkit.browser-check"],
+      "environmentClasses": ["local-node-browser"]
     }
   ],
   "witnessCommands": [
+    {
+      "commandId": "proofkit.browser-check",
+      "command": "npm run browser:check",
+      "environmentClass": "local-node-browser"
+    },
     {
       "commandId": "proofkit.ci-receipt-anchor",
       "command": "npm run self:receipt",

package/proofkit/witness-plan.json

@@ -14,6 +14,7 @@
     "environmentClasses": [
       "local-go",
       "local-go-python",
+      "local-node-browser",
       "local-python"
     ],
     "environmentClassPolicies": [
@@ -47,6 +48,18 @@
           "write-local"
         ]
       },
+      {
+        "environmentClass": "local-node-browser",
+        "networkPolicies": [
+          "none"
+        ],
+        "credentialClasses": [
+          "none"
+        ],
+        "cachePolicies": [
+          "disabled"
+        ]
+      },
       {
         "environmentClass": "local-python",
         "networkPolicies": [
@@ -62,6 +75,7 @@
       }
     ],
     "parallelGroups": [
+      "browser-runtime",
       "coverage-metrics",
       "local-go-static",
       "package-artifact",
@@ -628,6 +642,41 @@
           0
         ]
       }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.browser-check",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "browser:check"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-node-browser"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/browser-runtime-proof.json",
+          "required": true
+        }
+      ],
+      "parallelGroup": "browser-runtime",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
     }
   ],
   "policies": [
@@ -669,6 +718,80 @@
         "Self-hosting witness policy does not prove producer authentication or merge approval."
       ]
     },
+    {
+      "commandId": "proofkit.browser-check",
+      "inputSelectors": [
+        "go.mod",
+        "go.sum",
+        "internal/command/requirementbinding",
+        "internal/command/requirementbrowser",
+        "internal/command/requirementcontext",
+        "internal/command/requirementcoverageview",
+        "internal/command/requirementdiff",
+        "internal/command/requirementgraph",
+        "internal/command/requirementproofview",
+        "internal/command/requirementsourceadmission",
+        "internal/command/requirementsourceview",
+        "internal/command/requirementspectree",
+        "internal/command/testevidenceinventory",
+        "internal/kernel/admission",
+        "internal/kernel/admit",
+        "internal/kernel/agentenvelope",
+        "internal/kernel/browserdoc",
+        "internal/kernel/compactproofcontract",
+        "internal/kernel/digest",
+        "internal/kernel/markdownfmt",
+        "internal/kernel/report",
+        "internal/kernel/secretjson",
+        "internal/kernel/stablejson",
+        "internal/kernel/witnesscommand",
+        "internal/testsupport/browserfixture",
+        "internal/tools/browserproofverify",
+        "internal/tools/browsertestserver",
+        "package-lock.json",
+        "package.json",
+        "playwright.config.mjs",
+        "proofkit/witness-plan.json",
+        "scripts/browser-proof-execution.mjs",
+        "scripts/browser-proof-execution.test.mjs",
+        "scripts/browser-proof-inputs.mjs",
+        "scripts/browser-proof-inputs.test.mjs",
+        "scripts/browser-runtime-proof-inputs.v1.json",
+        "scripts/browser-selection-authority.test.mjs",
+        "scripts/write-browser-proof.mjs",
+        "tests/browser",
+        "tsconfig.browser.json"
+      ],
+      "outputSelectors": [
+        "artifacts/proofkit/browser-runtime-proof.json"
+      ],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [
+        "resource.proofkit.local-artifacts"
+      ],
+      "exclusiveLocks": [],
+      "sideEffectClass": "local_write",
+      "deterministicOutput": false,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Browser runtime proof does not prove registry publication, rollout, or production readiness.",
+        "Pinned Playwright engines are not branded browser compatibility proof."
+      ]
+    },
     {
       "commandId": "proofkit.ci-receipt-anchor",
       "inputSelectors": [
@@ -731,7 +854,7 @@
         "internal/command",
         "internal/testsupport/commandcoverage",
         "internal/tools/coveragemetrics",
-        "proofkit/cli-contract.v1.json",
+        "proofkit/cli-contract.v2.json",
         "proofkit/requirement-bindings.json",
         "proofkit/witness-plan.json"
       ],
@@ -873,9 +996,11 @@
         "go.mod",
         "go.sum",
         "internal",
-        "proofkit/cli-contract.v1.json",
+        "package.json",
+        "proofkit/cli-contract.v2.json",
         "proofkit/requirement-bindings.json",
         "proofkit/witness-plan.json",
+        "scripts/browser-runtime-proof-inputs.v1.json",
         "scripts/validate-self-hosting-receipts.go"
       ],
       "outputSelectors": [],