@research-engineering/agentic-proofkit 0.5.0 → 0.5.1

package/docs/specs/proofkit-spec-proof-core/overview.md

@@ -154,6 +154,20 @@ execution receipts, and merge policy.
   package, field, representation, variant, and positive/negative relation
   coverage without attributing correlated edits to independent field
   causality, selecting a codec, or changing a public source boundary.
+- `REQ-PROOFKIT-SPEC-025`: a versioned disjoint-role experiment selects one
+  admitted private v2 source-grammar owner record, grouped JSON with an
+  entity-local hybrid layout;
+  its strict bounded codec delegates meaning to the representation-neutral
+  model, binds each collection to one model-limit owner, preserves every
+  projection, metadata-presence state, and lexical source location, and emits
+  deterministic nondisclosing diagnostics. A bounded single-member traversal-,
+  symlink-, duplicate-, and trailing-data-closed archive byte-binds the exact
+  V3 screen, while independent
+  field, limit, selection, mutant, round-trip, fuzz-seed, package, and
+  admitted grammar-owner-record and package-inventory witnesses close the
+  selected owner boundary without migrating current sources, exposing a new
+  public CLI, proving open-world absence of undeclared equivalent parsers, or
+  claiming that no future owner-approved grammar can be added.
 
 ## Non-Claims
 

package/docs/specs/proofkit-spec-proof-core/requirements.v1.json

@@ -568,6 +568,19 @@
       "lifecycle": {"state": "active", "replacementRequirementIds": [], "evidenceRefs": []},
       "deferral": null,
       "updatePolicy": {"reviewOwnerId": "proofkit.spec-proof-core", "requiresImpactDeclaration": true, "requiresProofBindingReview": true}
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "ownerId": "proofkit.spec-proof-core",
+      "invariant": "A private requirement-source codec selection admits grouped JSON with the frozen entity-local hybrid layout through one admitted v2 persisted-grammar owner record for internal/kernel/requirementsourcecodec after a versioned disjoint-role screen rejects compact and pretty JSON layouts for edit-locality failure and admits no YAML, TOML, or restricted-text parser authority. The selection record byte-binds a bounded single-member traversal-, symlink-, duplicate-, and trailing-data-closed binary archive and the exact extracted V3 evidence tree, including its method sources, fixture corpus, rendered candidates, independent token reports, review results, validation, edit rows, and decision, and its metric registry, layout order, thresholds, observations, and evaluator have exact decision closure. The selected codec maps bounded UTF-8 bytes through duplicate-, case-, unknown-, missing-, null-, integer-, and Unicode-scalar-closed structural admission into exactly one requirementsourcemodel.NormalizeWithLimits call; each wire collection names one model-limit owner; immutable atomic, authoring-layout, typed-reference, and lexical source-map projections preserve metadata absence, present-null deferral, present-record deferral, ordered actions, sorted dynamic maps, and caller wire order; and formatting re-admits the semantic model before emitting fixed-order entity-local canonical JSON with exact unsafe-scalar escaping and one final line feed. Raw-byte, UTF-8, lexical-token, nesting, representation-cardinality, model-resource, model-semantic, and canonical-output failures have fixed precedence, while diagnostic paths contain only canonical field names, numeric indexes, or placeholders and resolve synthetic model identities to exact wire spans. Independently authored field, limit-coefficient, selection, and executable mutant manifests close DTO fields and cardinalities, structural schema, resource formula, candidate roles, decision, diagnostic paths, and losing-grammar dependencies; round-trip, idempotence, source-span replay, exact-limit, fuzz-seed, admitted grammar-owner record, and exact package-inventory witnesses close the currently selected owner boundary without claiming open-world absence of undeclared semantically equivalent parsers or a ban on future owner-approved grammars.",
+      "claimLevel": "blocking",
+      "riskClass": "high",
+      "proofBindingRefs": ["proofkit/requirement-bindings.json"],
+      "nonClaimRefs": ["NC-PROOFKIT-SPEC-025"],
+      "nonClaims": ["This private codec does not migrate or rewrite current requirement sources, expose a public source extension or CLI command, retain a normalized mirror, authenticate requirement meaning or derivation provenance, generalize the frozen formatter screen beyond its byte-bound corpus, prove the open-world absence of undeclared semantically equivalent parsers, prevent a future owner-approved grammar from being added, execute native witnesses, approve merge or release, or establish rollout or production readiness."],
+      "lifecycle": {"state": "active", "replacementRequirementIds": [], "evidenceRefs": []},
+      "deferral": null,
+      "updatePolicy": {"reviewOwnerId": "proofkit.spec-proof-core", "requiresImpactDeclaration": true, "requiresProofBindingReview": true}
     }
   ],
   "nonClaims": [

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@research-engineering/agentic-proofkit",
   "description": "Reusable proof profile, report, graph, and witness-planning primitives.",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "type": "module",
   "license": "MIT",
   "sideEffects": false,

package/proofkit/requirement-bindings.json

@@ -696,6 +696,14 @@
       "proofState": "witness_backed",
       "nonClaims": ["This private single-source model does not select or expose a source codec, parse or serialize a persisted source, retain a normalized mirror, establish cross-source requirement identity, authenticate derivation objects, digests, selectors, or freshness, authenticate a caller-declared sourceKind or prove its author's authority or trust class, cut over any current requirement consumer, prove requirement meaning or implementation correctness, execute native witnesses, approve merge or release, or establish rollout or production readiness."]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "ownerId": "proofkit.spec-proof-core",
+      "specPath": "docs/specs/proofkit-spec-proof-core/requirements.v1.json",
+      "claimLevel": "blocking",
+      "proofState": "witness_backed",
+      "nonClaims": ["This private codec does not migrate or rewrite current requirement sources, expose a public source extension or CLI command, retain a normalized mirror, authenticate requirement meaning or derivation provenance, generalize the frozen formatter screen beyond its byte-bound corpus, prove the open-world absence of undeclared semantically equivalent parsers, prevent a future owner-approved grammar from being added, execute native witnesses, approve merge or release, or establish rollout or production readiness."]
+    },
     {
       "requirementId": "REQ-PROOFKIT-WORKFLOW-001",
       "ownerId": "proofkit.agent-workflow",
@@ -4577,6 +4585,328 @@
       "commandIds": ["proofkit.go-test"],
       "environmentClasses": ["local-go"]
     },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-selection-closure",
+      "witnessId": "proofkit.requirement-source-codec.selection-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/selection_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestSelectionRecordIsClosedAndDecisionIsReproducible",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSelectionRecordIsClosedAndDecisionIsReproducible$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-selection-evidence-closure",
+      "witnessId": "proofkit.requirement-source-codec.selection-evidence-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/selection_evidence_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestSelectionEvidenceIsByteBoundAndProjectsDecision",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSelectionEvidenceIsByteBoundAndProjectsDecision$'"
+        },
+        {
+          "selector": "TestScreenTreeDigestRejectsByteAndInventoryMutation",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestScreenTreeDigestRejectsByteAndInventoryMutation$'"
+        },
+        {
+          "selector": "TestScreenArchiveAdmissionRejectsUnsafeTopology",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestScreenArchiveAdmissionRejectsUnsafeTopology$'"
+        },
+        {
+          "selector": "TestScreenArchiveAdmissionRejectsTrailingCompressedData",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestScreenArchiveAdmissionRejectsTrailingCompressedData$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-decision-projection-closure",
+      "witnessId": "proofkit.requirement-source-codec.decision-projection-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/selection_projection_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestDecisionProjectionRejectsReplacementObservationDrift",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestDecisionProjectionRejectsReplacementObservationDrift$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-replacement-predicate-closure",
+      "witnessId": "proofkit.requirement-source-codec.replacement-predicate-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/selection_evaluator_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestChallengerEligibilityRequiresEveryReplacementPredicate",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestChallengerEligibilityRequiresEveryReplacementPredicate$'"
+        },
+        {
+          "selector": "TestSelectionMetricRegistrySemanticsDriveEvaluator",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSelectionMetricRegistrySemanticsDriveEvaluator$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-package-boundary-closure",
+      "witnessId": "proofkit.requirement-source-codec.package-boundary-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/package_boundary_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestProductionPackageHasOneCodecAndNoSyntaxDependency",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestProductionPackageHasOneCodecAndNoSyntaxDependency$'"
+        },
+        {
+          "selector": "TestSelectedV2GrammarOwnerRecordIsExact",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSelectedV2GrammarOwnerRecordIsExact$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-field-closure",
+      "witnessId": "proofkit.requirement-source-codec.field-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/field_manifest_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestFieldManifestMatchesWireDTOAndClosedShape",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestFieldManifestMatchesWireDTOAndClosedShape$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-roundtrip-closure",
+      "witnessId": "proofkit.requirement-source-codec.roundtrip-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/roundtrip_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestFormatParseRoundTripPreservesEveryProjection",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestFormatParseRoundTripPreservesEveryProjection$'"
+        },
+        {
+          "selector": "TestCanonicalFormatIsIdempotent",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCanonicalFormatIsIdempotent$'"
+        },
+        {
+          "selector": "TestFormatPreservesMetadataAbsenceNullAndRecord",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestFormatPreservesMetadataAbsenceNullAndRecord$'"
+        },
+        {
+          "selector": "TestSourceMapReplaysKeyAndValueSpans",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSourceMapReplaysKeyAndValueSpans$'"
+        },
+        {
+          "selector": "TestReturnedSourceMapIsImmutable",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestReturnedSourceMapIsImmutable$'"
+        },
+        {
+          "selector": "TestSourceMapIndexesLexicalWireOrderNotNormalizedOrder",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestSourceMapIndexesLexicalWireOrderNotNormalizedOrder$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-layout-closure",
+      "witnessId": "proofkit.requirement-source-codec.layout-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/format_layout_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestHybridLayoutKeepsStableSiblingEntityLinesUnchanged",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestHybridLayoutKeepsStableSiblingEntityLinesUnchanged$'"
+        },
+        {
+          "selector": "TestHybridLayoutUsesCommaFirstEntityArrays",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestHybridLayoutUsesCommaFirstEntityArrays$'"
+        },
+        {
+          "selector": "TestCanonicalStringsEscapeUnsafeScalarsWithoutHTMLEscaping",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCanonicalStringsEscapeUnsafeScalarsWithoutHTMLEscaping$'"
+        },
+        {
+          "selector": "TestCanonicalMapKeysAreSorted",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCanonicalMapKeysAreSorted$'"
+        },
+        {
+          "selector": "TestOrderedActionsRetainOrder",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestOrderedActionsRetainOrder$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-mutant-closure",
+      "witnessId": "proofkit.requirement-source-codec.mutant-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/mutant_manifest_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestCodecMutantManifestClosesRepresentationFailures",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCodecMutantManifestClosesRepresentationFailures$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-resource-closure",
+      "witnessId": "proofkit.requirement-source-codec.resource-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/limits_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestRawByteBoundaryIsExactAndDominatesUTF8",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestRawByteBoundaryIsExactAndDominatesUTF8$'"
+        },
+        {
+          "selector": "TestTokenAndNestingLimitsPrecedeShapeAdmission",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestTokenAndNestingLimitsPrecedeShapeAdmission$'"
+        },
+        {
+          "selector": "TestLexicalTokenLimitDominatesNestingWhenBothFail",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestLexicalTokenLimitDominatesNestingWhenBothFail$'"
+        },
+        {
+          "selector": "TestRepresentationCollectionLimitPrecedesModelSemantics",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestRepresentationCollectionLimitPrecedesModelSemantics$'"
+        },
+        {
+          "selector": "TestDynamicMapCollectionLimitPrecedesParameterSemantics",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestDynamicMapCollectionLimitPrecedesParameterSemantics$'"
+        },
+        {
+          "selector": "TestModelResourcePreflightPrecedesSemanticValidation",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestModelResourcePreflightPrecedesSemanticValidation$'"
+        },
+        {
+          "selector": "TestCodecLimitsCannotUnderCoverModel",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCodecLimitsCannotUnderCoverModel$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-limit-formula-closure",
+      "witnessId": "proofkit.requirement-source-codec.limit-formula-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/limit_manifest_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestLimitCoefficientManifestMatchesProductionFormula",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestLimitCoefficientManifestMatchesProductionFormula$'"
+        },
+        {
+          "selector": "TestLimitArithmeticRejectsOverflow",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestLimitArithmeticRejectsOverflow$'"
+        },
+        {
+          "selector": "TestCanonicalByteBoundCoversWorstAdmittedEscapeExpansion",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestCanonicalByteBoundCoversWorstAdmittedEscapeExpansion$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-diagnostic-closure",
+      "witnessId": "proofkit.requirement-source-codec.diagnostic-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/diagnostics_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestInvalidUTF8UsesByteOnlyCoordinates",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestInvalidUTF8UsesByteOnlyCoordinates$'"
+        },
+        {
+          "selector": "TestValidUnicodeDiagnosticsUseScalarColumns",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestValidUnicodeDiagnosticsUseScalarColumns$'"
+        },
+        {
+          "selector": "TestBareCRAndCRLFAdvanceScalarLinesOnce",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestBareCRAndCRLFAdvanceScalarLinesOnce$'"
+        },
+        {
+          "selector": "TestMultipleValueDiagnosticSpansSecondToken",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestMultipleValueDiagnosticSpansSecondToken$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-admission-closure",
+      "witnessId": "proofkit.requirement-source-codec.admission-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/admission_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestParseDiagnosticsDoNotDiscloseCallerTextOrDynamicKeys",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestParseDiagnosticsDoNotDiscloseCallerTextOrDynamicKeys$'"
+        },
+        {
+          "selector": "TestPreShapeDiagnosticsDoNotDiscloseUnknownKeys",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestPreShapeDiagnosticsDoNotDiscloseUnknownKeys$'"
+        },
+        {
+          "selector": "TestParseDiagnosticsRedactSemanticEntityIDsAndResolveExactSpan",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestParseDiagnosticsRedactSemanticEntityIDsAndResolveExactSpan$'"
+        },
+        {
+          "selector": "TestParseAcceptsValidUnicodeSurrogatePairLosslessly",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestParseAcceptsValidUnicodeSurrogatePairLosslessly$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
+    {
+      "requirementId": "REQ-PROOFKIT-SPEC-025",
+      "scenarioId": "proofkit.spec-proof-core.requirement-source-codec-fuzz-seed-closure",
+      "witnessId": "proofkit.requirement-source-codec.fuzz-seed-closure-falsifier",
+      "witnessKind": "contract",
+      "witnessPath": "internal/kernel/requirementsourcecodec/codec_fuzz_test.go",
+      "witnessSelectors": [
+        {
+          "selector": "TestFuzzSeedCorpusRoundTrips",
+          "command": "go test ./internal/kernel/requirementsourcecodec -run '^TestFuzzSeedCorpusRoundTrips$'"
+        }
+      ],
+      "commandIds": ["proofkit.go-test"],
+      "environmentClasses": ["local-go"]
+    },
     {
       "requirementId": "REQ-PROOFKIT-SPEC-023",
       "scenarioId": "proofkit.spec-proof-core.requirement-traceability-topology-closure",