@riddledc/riddle-proof 0.8.63 → 0.8.64

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",

package/runtime/lib/ship.py

@@ -676,6 +676,64 @@ def first_url_from_command_output(*parts):
     return ''
 
 
+def dict_value(value):
+    return value if isinstance(value, dict) else {}
+
+
+def proof_provenance_facts(state):
+    assessment = dict_value(state.get('proof_assessment'))
+    bundle = dict_value(state.get('evidence_bundle'))
+    bundle_session = dict_value(bundle.get('proof_session'))
+    proof_session = dict_value(state.get('proof_session')) or bundle_session
+    publication = dict_value(state.get('proof_artifact_publication'))
+    checkpoint_packet = dict_value(state.get('checkpoint_packet'))
+    checkpoint_summary = dict_value(state.get('checkpoint_summary'))
+    return {
+        'version': 'riddle-proof.provenance.v1',
+        'run_id': str(state.get('run_id') or ''),
+        'checkpoint_packet_id': str(
+            checkpoint_packet.get('packet_id')
+            or checkpoint_summary.get('latest_packet_id')
+            or ''
+        ),
+        'checkpoint_response_packet_id': str(
+            checkpoint_summary.get('latest_response_packet_id')
+            or ''
+        ),
+        'evidence_bundle_id': str(
+            bundle.get('evidence_bundle_id')
+            or bundle.get('bundle_id')
+            or bundle.get('id')
+            or ''
+        ),
+        'proof_session_id': str(
+            proof_session.get('session_id')
+            or bundle_session.get('session_id')
+            or ''
+        ),
+        'proof_session_fingerprint': str(
+            state.get('proof_session_fingerprint')
+            or proof_session.get('fingerprint')
+            or bundle_session.get('fingerprint')
+            or ''
+        ),
+        'proof_assessment_id': str(
+            assessment.get('assessment_id')
+            or assessment.get('id')
+            or ''
+        ),
+        'proof_assessment_source': str(
+            assessment.get('source')
+            or state.get('proof_assessment_source')
+            or ''
+        ),
+        'proof_assessment_decision': str(assessment.get('decision') or ''),
+        'artifact_publication_commit': str(publication.get('commit') or ''),
+        'artifact_manifest_url': str(publication.get('manifest_url') or ''),
+        'artifact_source_fingerprint': str(publication.get('source_fingerprint') or ''),
+    }
+
+
 def build_ship_report(state, marked_ready=None):
     branch = state.get('target_branch') or state.get('branch') or ''
     if marked_ready is None:
@@ -685,6 +743,7 @@ def build_ship_report(state, marked_ready=None):
     after_artifact_url = first_public_artifact_url(state, 'after', 'image') or state.get('after_cdn', '')
     artifact_publication = state.get('proof_artifact_publication') or {}
     ship_gate = ship_gate_report_facts(state)
+    proof_provenance = proof_provenance_facts(state)
     return {
         'pr_url': state.get('pr_url', ''),
         'pr_branch': branch,
@@ -703,6 +762,7 @@ def build_ship_report(state, marked_ready=None):
         'proof_artifacts_manifest_url': artifact_publication.get('manifest_url', '') if isinstance(artifact_publication, dict) else '',
         'proof_artifact_publication': artifact_publication if isinstance(artifact_publication, dict) else {},
         'ship_gate': ship_gate,
+        'proof_provenance': proof_provenance,
     }
 
 

package/runtime/tests/ship_artifact_publication.py

@@ -138,12 +138,27 @@ def main():
             "proof_summary": "All assertions passed.",
             "proof_assessment_source": "supervising_agent",
             "proof_assessment": {
+                "assessment_id": "assessment_ship_artifact_test",
                 "source": "supervising_agent",
                 "decision": "ready_to_ship",
                 "summary": "Evidence is strong enough to ship.",
             },
+            "checkpoint_summary": {
+                "latest_packet_id": "rppkt_ship_artifact_test",
+                "latest_response_packet_id": "rppkt_ship_artifact_test",
+            },
+            "proof_session": {
+                "session_id": "session_ship_artifact_test",
+                "fingerprint": "fingerprint_ship_artifact_test",
+            },
+            "proof_session_fingerprint": "fingerprint_ship_artifact_test",
             "evidence_bundle": {
+                "id": "bundle_ship_artifact_test",
                 "verification_mode": "proof",
+                "proof_session": {
+                    "session_id": "session_ship_artifact_test",
+                    "fingerprint": "fingerprint_ship_artifact_test",
+                },
                 "after": {
                     "observation": {"valid": True, "reason": "ok", "telemetry_ready": True},
                     "supporting_artifacts": {
@@ -204,6 +219,46 @@ def main():
             "ship gate should expose proof decision"
         )
         assert gate_evidence.get("hard_blockers") == [], "ship gate should expose hard blockers"
+        provenance = ship_report.get("proof_provenance") or {}
+        assert provenance.get("version") == "riddle-proof.provenance.v1", (
+            "ship report should expose proof provenance version"
+        )
+        assert provenance.get("run_id") == "rp_ship_artifact_test", (
+            "ship report provenance should expose the run id"
+        )
+        assert provenance.get("checkpoint_packet_id") == "rppkt_ship_artifact_test", (
+            "ship report provenance should expose the checkpoint packet id"
+        )
+        assert provenance.get("checkpoint_response_packet_id") == "rppkt_ship_artifact_test", (
+            "ship report provenance should expose the checkpoint response packet id"
+        )
+        assert provenance.get("evidence_bundle_id") == "bundle_ship_artifact_test", (
+            "ship report provenance should expose the evidence bundle id"
+        )
+        assert provenance.get("proof_session_id") == "session_ship_artifact_test", (
+            "ship report provenance should expose the proof session id"
+        )
+        assert provenance.get("proof_session_fingerprint") == "fingerprint_ship_artifact_test", (
+            "ship report provenance should expose the proof session fingerprint"
+        )
+        assert provenance.get("proof_assessment_id") == "assessment_ship_artifact_test", (
+            "ship report provenance should expose the proof assessment id"
+        )
+        assert provenance.get("proof_assessment_source") == "supervising_agent", (
+            "ship report provenance should expose the proof assessment source"
+        )
+        assert provenance.get("proof_assessment_decision") == "ready_to_ship", (
+            "ship report provenance should expose the proof assessment decision"
+        )
+        assert provenance.get("artifact_publication_commit") == publication.get("commit"), (
+            "ship report provenance should expose the artifact publication commit"
+        )
+        assert provenance.get("artifact_manifest_url") == ship_report.get("proof_artifacts_manifest_url"), (
+            "ship report provenance should expose the artifact manifest URL"
+        )
+        assert provenance.get("artifact_source_fingerprint") == publication.get("source_fingerprint"), (
+            "ship report provenance should expose the artifact source fingerprint"
+        )
 
         comment = comment_body_path.read_text(encoding="utf-8")
         assert "file://" not in comment, "PR proof comment must not expose local file URLs"