@sourcey/catalog-verifier 1.0.0

package/dist/modules/evidence-operations/src/evidence-normalization.js

@@ -0,0 +1,309 @@
+import { TextDecoder, TextEncoder } from "node:util";
+import { parse } from "parse5";
+import { z } from "zod";
+import { canonicalJson, digest, sha256Bytes } from "../../primitives/src/index.js";
+import { PARSE5_VERSION } from "./dependency-versions.js";
+const digestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/u);
+const utf8 = new TextDecoder("utf-8", { fatal: true });
+const encoder = new TextEncoder();
+export const EVIDENCE_NORMALIZER_PRE_JSON_VARIANTS_TOOLCHAIN = {
+    algorithm: "sourcey.deterministic-content-normalizer/v1",
+    html_metadata: ["meta", "structured-data", "canonical-link"],
+    html_links: ["a[href]", "form[action]"],
+    html_link_protocols: ["http", "https", "mailto"],
+    parse5: PARSE5_VERSION,
+    unicode: "NFC",
+};
+/** Exact retained profile for captures created before empty HTML values were omitted. */
+export const EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN = {
+    ...EVIDENCE_NORMALIZER_PRE_JSON_VARIANTS_TOOLCHAIN,
+    json_media_types: ["application/json", "application/*+json", "application/*-json"],
+};
+export const EVIDENCE_NORMALIZER_TOOLCHAIN = {
+    ...EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN,
+    html_empty_values: "omit",
+};
+/** Exact retained XML profile for captures created before empty HTML values were omitted. */
+export const EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_XML_TOOLCHAIN = {
+    ...EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN,
+    xml_media_types: ["application/xml", "text/xml", "application/*+xml"],
+};
+export const EVIDENCE_NORMALIZER_XML_TOOLCHAIN = {
+    ...EVIDENCE_NORMALIZER_TOOLCHAIN,
+    xml_media_types: ["application/xml", "text/xml", "application/*+xml"],
+};
+/** Exact retained profile for evidence captured before public mail actions were preserved. */
+export const EVIDENCE_NORMALIZER_WEB_LINK_TOOLCHAIN = {
+    algorithm: "sourcey.deterministic-content-normalizer/v1",
+    html_metadata: ["meta", "structured-data", "canonical-link"],
+    html_links: ["a[href]", "form[action]"],
+    parse5: PARSE5_VERSION,
+    unicode: "NFC",
+};
+export const EVIDENCE_NORMALIZER_CANONICAL_LINK_TOOLCHAIN = {
+    algorithm: "sourcey.deterministic-content-normalizer/v1",
+    html_metadata: ["meta", "structured-data", "canonical-link"],
+    parse5: PARSE5_VERSION,
+    unicode: "NFC",
+};
+export const EVIDENCE_NORMALIZER_FOUNDATION_TOOLCHAIN = {
+    algorithm: "sourcey.deterministic-content-normalizer/v1",
+    parse5: PARSE5_VERSION,
+    unicode: "NFC",
+};
+const EVIDENCE_NORMALIZER_IDENTITY = {
+    normalizer_contract: "sourcey.evidence-normalizer/v1alpha1",
+    normalizer_id: "sourcey-deterministic-content",
+    version: "1",
+};
+function evidenceNormalizerDefinition(toolchain) {
+    return { ...EVIDENCE_NORMALIZER_IDENTITY, toolchain_digest: digest(toolchain) };
+}
+export const EVIDENCE_NORMALIZER = evidenceNormalizerDefinition(EVIDENCE_NORMALIZER_TOOLCHAIN);
+export const EVIDENCE_NORMALIZER_XML = evidenceNormalizerDefinition(EVIDENCE_NORMALIZER_XML_TOOLCHAIN);
+export const EVIDENCE_NORMALIZER_CANONICAL_LINK = evidenceNormalizerDefinition(EVIDENCE_NORMALIZER_CANONICAL_LINK_TOOLCHAIN);
+export const EVIDENCE_NORMALIZER_FOUNDATION = evidenceNormalizerDefinition(EVIDENCE_NORMALIZER_FOUNDATION_TOOLCHAIN);
+const NORMALIZER_TOOLCHAIN_BY_DIGEST = new Map([
+    [EVIDENCE_NORMALIZER.toolchain_digest, EVIDENCE_NORMALIZER_TOOLCHAIN],
+    [
+        digest(EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN),
+        EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_TOOLCHAIN,
+    ],
+    [
+        digest(EVIDENCE_NORMALIZER_PRE_JSON_VARIANTS_TOOLCHAIN),
+        EVIDENCE_NORMALIZER_PRE_JSON_VARIANTS_TOOLCHAIN,
+    ],
+    [EVIDENCE_NORMALIZER_XML.toolchain_digest, EVIDENCE_NORMALIZER_XML_TOOLCHAIN],
+    [
+        digest(EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_XML_TOOLCHAIN),
+        EVIDENCE_NORMALIZER_PRE_EMPTY_HTML_VALUES_XML_TOOLCHAIN,
+    ],
+    [digest(EVIDENCE_NORMALIZER_WEB_LINK_TOOLCHAIN), EVIDENCE_NORMALIZER_WEB_LINK_TOOLCHAIN],
+    [
+        EVIDENCE_NORMALIZER_CANONICAL_LINK.toolchain_digest,
+        EVIDENCE_NORMALIZER_CANONICAL_LINK_TOOLCHAIN,
+    ],
+    [
+        EVIDENCE_NORMALIZER_FOUNDATION.toolchain_digest,
+        EVIDENCE_NORMALIZER_FOUNDATION_TOOLCHAIN,
+    ],
+]);
+export const evidenceNormalizerSchema = z
+    .object({
+    normalizer_contract: z.literal(EVIDENCE_NORMALIZER.normalizer_contract),
+    normalizer_id: z.literal(EVIDENCE_NORMALIZER.normalizer_id),
+    version: z.literal(EVIDENCE_NORMALIZER.version),
+    toolchain_digest: digestSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (!NORMALIZER_TOOLCHAIN_BY_DIGEST.has(value.toolchain_digest)) {
+        context.addIssue({
+            code: "custom",
+            path: ["toolchain_digest"],
+            message: "Evidence normalizer toolchain is not retained for exact verification.",
+        });
+    }
+});
+export function normalizeEvidenceCapture(input) {
+    const toolchainDigest = input.normalizerToolchainDigest ?? EVIDENCE_NORMALIZER.toolchain_digest;
+    const toolchain = normalizerToolchainForDigest(toolchainDigest);
+    const mediaType = input.mediaType.split(";", 1)[0]?.trim().toLowerCase();
+    let normalized;
+    if (mediaType && matchesMediaType(mediaType, jsonMediaTypes(toolchainDigest, toolchain))) {
+        normalized = `${canonicalJson(JSON.parse(decodeText(input.bytes)))}\n`;
+    }
+    else if (mediaType === "text/html" || mediaType === "application/xhtml+xml") {
+        normalized = normalizeHtml(decodeText(input.bytes), {
+            includeCanonicalLinks: "html_metadata" in toolchain && toolchain.html_metadata.includes("canonical-link"),
+            includeDocumentLinks: "html_links" in toolchain,
+            includeMailtoLinks: "html_link_protocols" in toolchain && toolchain.html_link_protocols.includes("mailto"),
+            omitEmptyValues: "html_empty_values" in toolchain,
+        });
+    }
+    else if (mediaType &&
+        "xml_media_types" in toolchain &&
+        matchesMediaType(mediaType, toolchain.xml_media_types)) {
+        normalized = normalizeText(decodeText(input.bytes));
+    }
+    else if (mediaType?.startsWith("text/")) {
+        normalized = normalizeText(decodeText(input.bytes));
+    }
+    else {
+        throw new Error(`Evidence media type ${input.mediaType} has no approved normalizer.`);
+    }
+    const bytes = encoder.encode(normalized);
+    return { bytes, digest: sha256Bytes(bytes) };
+}
+function jsonMediaTypes(toolchainDigest, toolchain) {
+    if ("json_media_types" in toolchain)
+        return toolchain.json_media_types;
+    if (!NORMALIZER_TOOLCHAIN_BY_DIGEST.has(toolchainDigest)) {
+        throw new Error(`Evidence normalizer ${toolchainDigest} is not recognized.`);
+    }
+    // These retained digests predate the explicit media-type field; their exact
+    // historical algorithm normalized application/json and +json variants.
+    return ["application/json", "application/*+json"];
+}
+function matchesMediaType(mediaType, patterns) {
+    return patterns.some((pattern) => {
+        const wildcard = pattern.indexOf("*");
+        return wildcard < 0
+            ? mediaType === pattern
+            : mediaType.startsWith(pattern.slice(0, wildcard)) &&
+                mediaType.endsWith(pattern.slice(wildcard + 1));
+    });
+}
+export function evidenceNormalizerForToolchainDigest(value) {
+    return evidenceNormalizerDefinition(normalizerToolchainForDigest(value));
+}
+function normalizerToolchainForDigest(value) {
+    const toolchain = NORMALIZER_TOOLCHAIN_BY_DIGEST.get(value);
+    if (!toolchain)
+        throw new Error(`Evidence normalizer ${value} is not recognized.`);
+    return toolchain;
+}
+function normalizeHtml(html, options) {
+    const document = parse(html);
+    const visible = [];
+    const metadata = [];
+    const structured = [];
+    const canonicalLinks = [];
+    const documentLinks = [];
+    visitHtml(document, false, options.includeMailtoLinks, options.omitEmptyValues, visible, metadata, structured, canonicalLinks, documentLinks);
+    const sections = [
+        ["metadata", [...new Set(metadata)].sort()],
+        ...(options.includeCanonicalLinks
+            ? [["canonical-links", [...new Set(canonicalLinks)].sort()]]
+            : []),
+        ...(options.includeDocumentLinks
+            ? [["document-links", [...new Set(documentLinks)].sort()]]
+            : []),
+        ["structured-data", [...new Set(structured)].sort()],
+        ["content", visible],
+    ];
+    const rendered = sections
+        .filter(([, lines]) => lines.length > 0)
+        .map(([name, lines]) => `[${name}]\n${lines.join("\n")}`)
+        .join("\n\n");
+    if (!rendered)
+        throw new Error("Evidence HTML is empty after normalization.");
+    return `${rendered}\n`;
+}
+function visitHtml(node, suppressed, includeMailtoLinks, omitEmptyValues, visible, metadata, structured, canonicalLinks, documentLinks) {
+    if (isElement(node)) {
+        const tag = node.tagName.toLowerCase();
+        const attributes = new Map(node.attrs.map((attribute) => [attribute.name, attribute.value]));
+        if (tag === "meta") {
+            const name = attributes.get("name") ?? attributes.get("property");
+            const content = attributes.get("content");
+            if (name && content) {
+                const normalizedName = normalizeInline(name);
+                const normalizedContent = normalizeInline(content);
+                if (!omitEmptyValues || (normalizedName && normalizedContent)) {
+                    metadata.push(`${normalizedName}: ${normalizedContent}`);
+                }
+            }
+        }
+        if (tag === "link" &&
+            attributes.get("rel")?.toLowerCase().split(/\s+/u).includes("canonical")) {
+            const href = attributes.get("href");
+            if (href) {
+                const normalizedHref = normalizeInline(href);
+                if (!omitEmptyValues || normalizedHref)
+                    canonicalLinks.push(normalizedHref);
+            }
+        }
+        if (!suppressed && (tag === "a" || tag === "form")) {
+            const destination = evidenceDocumentLink(attributes.get(tag === "a" ? "href" : "action") ?? "", includeMailtoLinks);
+            if (destination) {
+                const label = visibleElementText(node);
+                documentLinks.push(label ? `${label}: ${destination}` : destination);
+            }
+        }
+        if (tag === "script" && attributes.get("type")?.toLowerCase() === "application/ld+json") {
+            const source = node.childNodes
+                .filter((child) => child.nodeName === "#text")
+                .map((child) => ("value" in child ? child.value : ""))
+                .join("");
+            try {
+                structured.push(canonicalJson(JSON.parse(source)));
+            }
+            catch {
+                // Malformed structured data is ignored as input, never repaired or guessed.
+            }
+        }
+        suppressed =
+            suppressed || ["script", "style", "template", "noscript", "svg", "canvas"].includes(tag);
+    }
+    else if (node.nodeName === "#text" && !suppressed && "value" in node) {
+        const text = normalizeInline(node.value);
+        if (text)
+            visible.push(text);
+    }
+    if ("childNodes" in node) {
+        for (const child of node.childNodes) {
+            visitHtml(child, suppressed, includeMailtoLinks, omitEmptyValues, visible, metadata, structured, canonicalLinks, documentLinks);
+        }
+    }
+}
+function evidenceDocumentLink(value, includeMailtoLinks) {
+    const normalized = normalizeInline(value);
+    if (!normalized || normalized.startsWith("#"))
+        return null;
+    try {
+        const parsed = new URL(normalized, "https://sourcey.invalid/");
+        return parsed.protocol === "http:" ||
+            parsed.protocol === "https:" ||
+            (includeMailtoLinks && parsed.protocol === "mailto:")
+            ? normalized
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function visibleElementText(node) {
+    const parts = [];
+    collectVisibleElementText(node, false, parts);
+    return normalizeInline(parts.join(" "));
+}
+function collectVisibleElementText(node, suppressed, parts) {
+    if (isElement(node)) {
+        suppressed =
+            suppressed ||
+                ["script", "style", "template", "noscript", "svg", "canvas"].includes(node.tagName.toLowerCase());
+    }
+    else if (node.nodeName === "#text" && !suppressed && "value" in node) {
+        const text = normalizeInline(node.value);
+        if (text)
+            parts.push(text);
+    }
+    if ("childNodes" in node) {
+        for (const child of node.childNodes)
+            collectVisibleElementText(child, suppressed, parts);
+    }
+}
+function isElement(node) {
+    return "tagName" in node && "attrs" in node;
+}
+function decodeText(bytes) {
+    return utf8.decode(bytes).replace(/^\uFEFF/u, "");
+}
+function normalizeText(text) {
+    const normalized = text
+        .replaceAll("\r\n", "\n")
+        .replaceAll("\r", "\n")
+        .normalize("NFC")
+        .split("\n")
+        .map((line) => line.replace(/[ \t]+$/gu, ""))
+        .join("\n")
+        .trim();
+    if (!normalized)
+        throw new Error("Evidence text is empty after normalization.");
+    return `${normalized}\n`;
+}
+function normalizeInline(text) {
+    return text.normalize("NFC").replace(/\s+/gu, " ").trim();
+}
+//# sourceMappingURL=evidence-normalization.js.map

package/dist/modules/evidence-operations/src/evidence-normalization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-normalization.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/evidence-normalization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAA8B,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAe,MAAM,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAChE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,SAAS,EAAE,6CAA6C;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAC5D,UAAU,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;IACvC,mBAAmB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;IAChD,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,yFAAyF;AACzF,MAAM,CAAC,MAAM,mDAAmD,GAAG;IACjE,GAAG,+CAA+C;IAClD,gBAAgB,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;CAC1E,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,GAAG,mDAAmD;IACtD,iBAAiB,EAAE,MAAM;CACjB,CAAC;AAEX,6FAA6F;AAC7F,MAAM,CAAC,MAAM,uDAAuD,GAAG;IACrE,GAAG,mDAAmD;IACtD,eAAe,EAAE,CAAC,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,CAAC;CAC7D,CAAC;AAEX,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,GAAG,6BAA6B;IAChC,eAAe,EAAE,CAAC,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,CAAC;CAC7D,CAAC;AAEX,8FAA8F;AAC9F,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,SAAS,EAAE,6CAA6C;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAC5D,UAAU,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;IACvC,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,4CAA4C,GAAG;IAC1D,SAAS,EAAE,6CAA6C;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IAC5D,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,SAAS,EAAE,6CAA6C;IACxD,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,4BAA4B,GAAG;IACnC,mBAAmB,EAAE,sCAAsC;IAC3D,aAAa,EAAE,+BAA+B;IAC9C,OAAO,EAAE,GAAG;CACJ,CAAC;AAEX,SAAS,4BAA4B,CACnC,SAQmD;IAEnD,OAAO,EAAE,GAAG,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,EAAW,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAC,6BAA6B,CAAC,CAAC;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CACjE,iCAAiC,CAClC,CAAC;AACF,MAAM,CAAC,MAAM,kCAAkC,GAAG,4BAA4B,CAC5E,4CAA4C,CAC7C,CAAC;AACF,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CACxE,wCAAwC,CACzC,CAAC;AAEF,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAU5C;IACA,CAAC,mBAAmB,CAAC,gBAA0B,EAAE,6BAA6B,CAAC;IAC/E;QACE,MAAM,CAAC,mDAAmD,CAAC;QAC3D,mDAAmD;KACpD;IACD;QACE,MAAM,CAAC,+CAA+C,CAAC;QACvD,+CAA+C;KAChD;IACD,CAAC,uBAAuB,CAAC,gBAA0B,EAAE,iCAAiC,CAAC;IACvF;QACE,MAAM,CAAC,uDAAuD,CAAC;QAC/D,uDAAuD;KACxD;IACD,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,sCAAsC,CAAC;IACxF;QACE,kCAAkC,CAAC,gBAA0B;QAC7D,4CAA4C;KAC7C;IACD;QACE,8BAA8B,CAAC,gBAA0B;QACzD,wCAAwC;KACzC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IACvE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAAC;IAC3D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAC/C,gBAAgB,EAAE,YAAY;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,gBAA0B,CAAC,EAAE,CAAC;QAC1E,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,kBAAkB,CAAC;YAC1B,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,eAAe,GACnB,KAAK,CAAC,yBAAyB,IAAK,mBAAmB,CAAC,gBAA2B,CAAC;IACtF,MAAM,SAAS,GAAG,4BAA4B,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,IAAI,UAAkB,CAAC;IACvB,IAAI,SAAS,IAAI,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACzF,UAAU,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;SAAM,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;QAC9E,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAClD,qBAAqB,EACnB,eAAe,IAAI,SAAS,IAAI,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACpF,oBAAoB,EAAE,YAAY,IAAI,SAAS;YAC/C,kBAAkB,EAChB,qBAAqB,IAAI,SAAS,IAAI,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxF,eAAe,EAAE,mBAAmB,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;SAAM,IACL,SAAS;QACT,iBAAiB,IAAI,SAAS;QAC9B,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,eAAe,CAAC,EACtD,CAAC;QACD,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,SAAS,8BAA8B,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CACrB,eAAuB,EACvB,SAA0D;IAE1D,IAAI,kBAAkB,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC;IACvE,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,uBAAuB,eAAe,qBAAqB,CAAC,CAAC;IAC/E,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,QAA2B;IACtE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,QAAQ,GAAG,CAAC;YACjB,CAAC,CAAC,SAAS,KAAK,OAAO;YACvB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC9C,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAa;IAChE,OAAO,4BAA4B,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAa;IAUb,MAAM,SAAS,GAAG,8BAA8B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,qBAAqB,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAKD,SAAS,aAAa,CACpB,IAAY,EACZ,OAKC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,SAAS,CACP,QAAQ,EACR,KAAK,EACL,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,eAAe,EACvB,OAAO,EACP,QAAQ,EACR,UAAU,EACV,cAAc,EACd,aAAa,CACd,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,CAAC,qBAAqB;YAC/B,CAAC,CAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAW;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,oBAAoB;YAC9B,CAAC,CAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAW;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC,SAAS,EAAE,OAAO,CAAC;KACZ,CAAC;IACX,MAAM,QAAQ,GAAG,QAAQ;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACxD,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9E,OAAO,GAAG,QAAQ,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAChB,IAAe,EACf,UAAmB,EACnB,kBAA2B,EAC3B,eAAwB,EACxB,OAAiB,EACjB,QAAkB,EAClB,UAAoB,EACpB,cAAwB,EACxB,aAAuB;IAEvB,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBACpB,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC7C,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,eAAe,IAAI,CAAC,cAAc,IAAI,iBAAiB,CAAC,EAAE,CAAC;oBAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,KAAK,iBAAiB,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;QACD,IACE,GAAG,KAAK,MAAM;YACd,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,eAAe,IAAI,cAAc;oBAAE,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,WAAW,GAAG,oBAAoB,CACtC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrD,kBAAkB,CACnB,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACvC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU;iBAC3B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;iBAC7C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBACrD,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;QACD,UAAU;YACR,UAAU,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;SAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,SAAS,CACP,KAAK,EACL,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,OAAO,EACP,QAAQ,EACR,UAAU,EACV,cAAc,EACd,aAAa,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,kBAA2B;IACtE,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO;YAChC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,CAAC,kBAAkB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC;YACrD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAkB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAe,EAAE,UAAmB,EAAE,KAAe;IACtF,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,UAAU;YACR,UAAU;gBACV,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACnE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAC3B,CAAC;IACN,CAAC;SAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU;YAAE,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAe;IAChC,OAAO,SAAS,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,UAAU,GAAG,IAAI;SACpB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;SACxB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC;SACtB,SAAS,CAAC,KAAK,CAAC;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;SAC5C,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IACV,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChF,OAAO,GAAG,UAAU,IAAI,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC"}

package/dist/modules/evidence-operations/src/proof-graph.d.ts

@@ -0,0 +1,22 @@
+import type { AgentReadinessDeclarationRevision, AgentReadinessRevision } from "../../../contracts/agent-readiness/src/index.js";
+import type { CatalogEvent } from "../../../contracts/events/src/index.js";
+import type { CaptureReceipt } from "../../../contracts/evidence/src/index.js";
+import type { Observation } from "../../../contracts/observations/src/index.js";
+import type { EntityRevision, OfferRevision, ProgramRevision } from "../../../contracts/revisions/src/index.js";
+import { type Digest } from "../../primitives/src/index.js";
+type Revision = EntityRevision | ProgramRevision | OfferRevision | AgentReadinessRevision | AgentReadinessDeclarationRevision;
+/**
+ * Verifies the complete public evidence graph from immutable local bytes.
+ * Callers supply already-materialized objects; this kernel performs no I/O.
+ */
+export declare function verifyEvidenceObjectGraph(input: {
+    readonly revisions: readonly Revision[];
+    readonly events: readonly CatalogEvent[];
+    readonly observations: readonly Observation[];
+    readonly captureReceipts: readonly CaptureReceipt[];
+    readonly captures: ReadonlyMap<Digest, Uint8Array>;
+    readonly normalizedObjects: ReadonlyMap<Digest, Uint8Array>;
+    readonly allowFixtureEvidence?: boolean;
+}): void;
+export {};
+//# sourceMappingURL=proof-graph.d.ts.map

package/dist/modules/evidence-operations/src/proof-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-graph.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/proof-graph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,sBAAsB,EACvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAiB,KAAK,MAAM,EAAuB,MAAM,+BAA+B,CAAC;AAQhG,KAAK,QAAQ,GACT,cAAc,GACd,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,iCAAiC,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnD,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC,GAAG,IAAI,CAkOP"}

package/dist/modules/evidence-operations/src/proof-graph.js

@@ -0,0 +1,188 @@
+import { canonicalJson, digest, sha256Bytes } from "../../primitives/src/index.js";
+import { deriveSourceStanding, evidenceNormalizerForToolchainDigest, normalizeEvidenceCapture, verifyEvidenceAssertions, } from "./submission-verifier.js";
+/**
+ * Verifies the complete public evidence graph from immutable local bytes.
+ * Callers supply already-materialized objects; this kernel performs no I/O.
+ */
+export function verifyEvidenceObjectGraph(input) {
+    const revisions = new Map(input.revisions.map((revision) => [revision.revision_digest, revision]));
+    const observations = new Map(input.observations.map((observation) => [observation.observation_id, observation]));
+    const captureReceipts = new Map();
+    const captureReceiptOperations = new Set();
+    for (const receipt of input.captureReceipts) {
+        const { receipt_digest: receiptDigest, protected: _, ...core } = receipt;
+        if (digest(core) !== receiptDigest ||
+            captureReceipts.has(receiptDigest) ||
+            captureReceiptOperations.has(receipt.operation_id)) {
+            throw new Error(`Capture receipt ${receiptDigest} is not uniquely content-addressed.`);
+        }
+        captureReceipts.set(receiptDigest, receipt);
+        captureReceiptOperations.add(receipt.operation_id);
+    }
+    const usedCaptureReceipts = new Set();
+    for (const observation of input.observations) {
+        const capture = observation.capture;
+        if (capture?.availability !== "public")
+            continue;
+        const captureBytes = input.captures.get(capture.digest);
+        if (!captureBytes ||
+            captureBytes.byteLength !== capture.bytes ||
+            sha256Bytes(captureBytes) !== capture.digest) {
+            throw new Error(`Observation ${observation.observation_id} lacks its public capture bytes.`);
+        }
+        if (!capture.normalized_object) {
+            throw new Error(`Observation ${observation.observation_id} lacks its normalized evidence declaration.`);
+        }
+        const normalizedBytes = input.normalizedObjects.get(capture.normalized_object.digest);
+        if (!normalizedBytes ||
+            normalizedBytes.byteLength !== capture.normalized_object.bytes ||
+            sha256Bytes(normalizedBytes) !== capture.normalized_object.digest) {
+            throw new Error(`Observation ${observation.observation_id} lacks its normalized evidence bytes.`);
+        }
+        const normalizer = evidenceNormalizerForToolchainDigest(capture.normalized_object.toolchain_digest);
+        if (capture.normalized_object.normalizer_contract !== normalizer.normalizer_contract ||
+            capture.normalized_object.normalizer_id !== normalizer.normalizer_id ||
+            capture.normalized_object.version !== normalizer.version) {
+            throw new Error(`Observation ${observation.observation_id} uses an unsupported evidence normalizer.`);
+        }
+        const reproduced = normalizeEvidenceCapture({
+            bytes: captureBytes,
+            mediaType: capture.media_type,
+            normalizerToolchainDigest: normalizer.toolchain_digest,
+        });
+        if (reproduced.digest !== capture.normalized_object.digest ||
+            !bytesEqual(reproduced.bytes, normalizedBytes)) {
+            throw new Error(`Observation ${observation.observation_id} does not reproduce its normalized evidence.`);
+        }
+    }
+    for (const event of input.events) {
+        if (event.kind !== "evidence.bound")
+            continue;
+        const revisionDigest = event.subject.revision_digest;
+        const revision = revisionDigest ? revisions.get(revisionDigest) : undefined;
+        if (!revision)
+            throw new Error(`Evidence event ${event.event_id} lacks its exact revision.`);
+        if (revision.revision_contract === "sourcey.agent-readiness-declaration-revision/v1alpha1") {
+            throw new Error(`Evidence event ${event.event_id} cannot target a declaration revision.`);
+        }
+        const payload = event.payload;
+        const observationId = requiredString(payload.observation_id, "observation_id");
+        const observation = observations.get(observationId);
+        if (!observation?.capture) {
+            throw new Error(`Evidence event ${event.event_id} lacks captured observation bytes.`);
+        }
+        if (!Array.isArray(payload.assertions)) {
+            throw new Error(`Evidence event ${event.event_id} lacks exact proof assertions.`);
+        }
+        if (!observation.capture.normalized_object) {
+            throw new Error(`Evidence event ${event.event_id} lacks a normalized evidence declaration.`);
+        }
+        const normalizedDigest = requiredString(payload.normalized_object_digest, "normalized_object_digest");
+        if (observation.capture.normalized_object.digest !== normalizedDigest) {
+            throw new Error(`Evidence event ${event.event_id} names the wrong normalized object.`);
+        }
+        const normalizedBytes = input.normalizedObjects.get(normalizedDigest);
+        if (!normalizedBytes) {
+            throw new Error(`Evidence event ${event.event_id} normalized bytes are unavailable.`);
+        }
+        verifyEvidenceAssertions({
+            assertions: payload.assertions,
+            normalizedBytes,
+            revision,
+        });
+        const authorityRevisionDigest = requiredString(payload.authority_entity_revision_digest, "authority_entity_revision_digest");
+        const authorityEntityRevision = revisions.get(authorityRevisionDigest);
+        if (authorityEntityRevision?.revision_contract !== "sourcey.entity-revision/v1alpha1" ||
+            authorityEntityRevision.entity_id !== revision.entity_id) {
+            throw new Error(`Evidence event ${event.event_id} lacks its authority entity revision.`);
+        }
+        const authorityProgramRevisionDigest = payload.authority_program_revision_digest;
+        if (revision.revision_contract === "sourcey.offer-revision/v1alpha1" &&
+            revision.program_id !== undefined) {
+            const programDigest = requiredString(authorityProgramRevisionDigest, "authority_program_revision_digest");
+            const authorityProgramRevision = revisions.get(programDigest);
+            if (authorityProgramRevision?.revision_contract !== "sourcey.program-revision/v1alpha1" ||
+                authorityProgramRevision.entity_id !== revision.entity_id ||
+                authorityProgramRevision.program_id !== revision.program_id) {
+                throw new Error(`Evidence event ${event.event_id} lacks its authority Program revision.`);
+            }
+        }
+        else if (authorityProgramRevisionDigest !== null) {
+            throw new Error(`Evidence event ${event.event_id} has an extraneous Program authority.`);
+        }
+        if (observation.method.name === "fixture") {
+            if (!input.allowFixtureEvidence ||
+                observation.capture.source_standing !== "live-first-party" ||
+                !new URL(observation.source_uri).hostname.endsWith(".example")) {
+                throw new Error(`Fixture evidence ${event.event_id} is not allowed.`);
+            }
+            continue;
+        }
+        const captureReceiptDigest = requiredString(payload.capture_receipt_digest, "capture_receipt_digest");
+        const captureReceipt = captureReceipts.get(captureReceiptDigest);
+        if (!captureReceipt) {
+            throw new Error(`Evidence event ${event.event_id} lacks its capture receipt.`);
+        }
+        usedCaptureReceipts.add(captureReceiptDigest);
+        if (canonicalJson(captureReceipt.subject) !== canonicalJson(event.subject) ||
+            captureReceipt.authority_entity_revision_digest !== authorityRevisionDigest ||
+            captureReceipt.authority_program_revision_digest !== authorityProgramRevisionDigest ||
+            captureReceipt.issued_at > event.occurred_at) {
+            throw new Error(`Evidence event ${event.event_id} disagrees with its capture receipt.`);
+        }
+        if (!observation.capture.requested_uri ||
+            !observation.capture.final_uri ||
+            !observation.capture.redirect_chain ||
+            !observation.capture.source_standing) {
+            throw new Error(`Evidence event ${event.event_id} has incomplete capture provenance.`);
+        }
+        const method = observation.method.name;
+        if (!["http", "headless", "archive", "manual"].includes(method)) {
+            throw new Error(`Evidence event ${event.event_id} uses an unsupported capture method.`);
+        }
+        const sourceStanding = deriveSourceStanding({
+            subject_source_url: observation.source_uri,
+            requested_url: observation.capture.requested_uri,
+            final_url: observation.capture.final_uri,
+            redirect_chain: observation.capture.redirect_chain,
+            retrieved_at: observation.retrieved_at,
+            method: method,
+            response_status_code: captureReceipt.capture.response_status_code,
+            media_type: observation.capture.media_type,
+            digest: observation.capture.digest,
+            availability: observation.capture.availability === "public" ? "public" : "restricted",
+        }, authorityEntityRevision);
+        if (sourceStanding !== observation.capture.source_standing) {
+            throw new Error(`Evidence event ${event.event_id} has incorrect source standing.`);
+        }
+        const receiptCapture = captureReceipt.capture;
+        if (receiptCapture.subject_source_url !== observation.source_uri ||
+            receiptCapture.requested_url !== observation.capture.requested_uri ||
+            receiptCapture.final_url !== observation.capture.final_uri ||
+            canonicalJson(receiptCapture.redirect_chain) !==
+                canonicalJson(observation.capture.redirect_chain) ||
+            receiptCapture.retrieved_at !== observation.retrieved_at ||
+            receiptCapture.method !== observation.method.name ||
+            receiptCapture.media_type !== observation.capture.media_type ||
+            receiptCapture.digest !== observation.capture.digest ||
+            receiptCapture.bytes !== observation.capture.bytes ||
+            receiptCapture.availability !==
+                (observation.capture.availability === "public" ? "public" : "restricted")) {
+            throw new Error(`Evidence event ${event.event_id} capture receipt binds different bytes.`);
+        }
+    }
+    for (const receipt of input.captureReceipts) {
+        if (!usedCaptureReceipts.has(receipt.receipt_digest)) {
+            throw new Error(`Capture receipt ${receipt.receipt_digest} is not bound by an evidence event.`);
+        }
+    }
+}
+function requiredString(value, name) {
+    if (typeof value !== "string")
+        throw new Error(`Evidence proof ${name} is not a string.`);
+    return value;
+}
+function bytesEqual(left, right) {
+    return (left.byteLength === right.byteLength && left.every((value, index) => value === right[index]));
+}
+//# sourceMappingURL=proof-graph.js.map

package/dist/modules/evidence-operations/src/proof-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-graph.js","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/proof-graph.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAe,MAAM,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAChG,OAAO,EACL,oBAAoB,EACpB,oCAAoC,EACpC,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAQzC;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CACnF,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1D,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QACzE,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,aAAa;YAC9B,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC;YAClC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,aAAa,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5C,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,EAAE,YAAY,KAAK,QAAQ;YAAE,SAAS;QACjD,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAgB,CAAC,CAAC;QAClE,IACE,CAAC,YAAY;YACb,YAAY,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK;YACzC,WAAW,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,MAAM,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,eAAe,WAAW,CAAC,cAAc,kCAAkC,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,6CAA6C,CACvF,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAgB,CAAC,CAAC;QAChG,IACE,CAAC,eAAe;YAChB,eAAe,CAAC,UAAU,KAAK,OAAO,CAAC,iBAAiB,CAAC,KAAK;YAC9D,WAAW,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM,EACjE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,uCAAuC,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,oCAAoC,CACrD,OAAO,CAAC,iBAAiB,CAAC,gBAA0B,CACrD,CAAC;QACF,IACE,OAAO,CAAC,iBAAiB,CAAC,mBAAmB,KAAK,UAAU,CAAC,mBAAmB;YAChF,OAAO,CAAC,iBAAiB,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;YACpE,OAAO,CAAC,iBAAiB,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EACxD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,2CAA2C,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,yBAAyB,EAAE,UAAU,CAAC,gBAA0B;SACjE,CAAC,CAAC;QACH,IACE,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,MAAM;YACtD,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,WAAW,CAAC,cAAc,8CAA8C,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QACrD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAC7F,IAAI,QAAQ,CAAC,iBAAiB,KAAK,uDAAuD,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,wCAAwC,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,oCAAoC,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,2CAA2C,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,gBAAgB,GAAG,cAAc,CACrC,OAAO,CAAC,wBAAwB,EAChC,0BAA0B,CACjB,CAAC;QACZ,IAAI,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,oCAAoC,CAAC,CAAC;QACxF,CAAC;QACD,wBAAwB,CAAC;YACvB,UAAU,EAAE,OAAO,CAAC,UAEF;YAClB,eAAe;YACf,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,uBAAuB,GAAG,cAAc,CAC5C,OAAO,CAAC,gCAAgC,EACxC,kCAAkC,CACnC,CAAC;QACF,MAAM,uBAAuB,GAAG,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvE,IACE,uBAAuB,EAAE,iBAAiB,KAAK,kCAAkC;YACjF,uBAAuB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACxD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,8BAA8B,GAAG,OAAO,CAAC,iCAAiC,CAAC;QACjF,IACE,QAAQ,CAAC,iBAAiB,KAAK,iCAAiC;YAChE,QAAQ,CAAC,UAAU,KAAK,SAAS,EACjC,CAAC;YACD,MAAM,aAAa,GAAG,cAAc,CAClC,8BAA8B,EAC9B,mCAAmC,CACpC,CAAC;YACF,MAAM,wBAAwB,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9D,IACE,wBAAwB,EAAE,iBAAiB,KAAK,mCAAmC;gBACnF,wBAAwB,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;gBACzD,wBAAwB,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAC3D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,wCAAwC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;aAAM,IAAI,8BAA8B,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,IACE,CAAC,KAAK,CAAC,oBAAoB;gBAC3B,WAAW,CAAC,OAAO,CAAC,eAAe,KAAK,kBAAkB;gBAC1D,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC9D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,QAAQ,kBAAkB,CAAC,CAAC;YACxE,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,oBAAoB,GAAG,cAAc,CACzC,OAAO,CAAC,sBAAsB,EAC9B,wBAAwB,CACzB,CAAC;QACF,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,mBAAmB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC9C,IACE,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;YACtE,cAAc,CAAC,gCAAgC,KAAK,uBAAuB;YAC3E,cAAc,CAAC,iCAAiC,KAAK,8BAA8B;YACnF,cAAc,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,sCAAsC,CAAC,CAAC;QAC1F,CAAC;QACD,IACE,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa;YAClC,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS;YAC9B,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc;YACnC,CAAC,WAAW,CAAC,OAAO,CAAC,eAAe,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,qCAAqC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,sCAAsC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,cAAc,GAAG,oBAAoB,CACzC;YACE,kBAAkB,EAAE,WAAW,CAAC,UAAU;YAC1C,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa;YAChD,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS;YACxC,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc;YAClD,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,MAAM,EAAE,MAAoD;YAC5D,oBAAoB,EAAE,cAAc,CAAC,OAAO,CAAC,oBAAoB;YACjE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;YAClC,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;SACtF,EACD,uBAAuB,CACxB,CAAC;QACF,IAAI,cAAc,KAAK,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,iCAAiC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC;QAC9C,IACE,cAAc,CAAC,kBAAkB,KAAK,WAAW,CAAC,UAAU;YAC5D,cAAc,CAAC,aAAa,KAAK,WAAW,CAAC,OAAO,CAAC,aAAa;YAClE,cAAc,CAAC,SAAS,KAAK,WAAW,CAAC,OAAO,CAAC,SAAS;YAC1D,aAAa,CAAC,cAAc,CAAC,cAAc,CAAC;gBAC1C,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;YACnD,cAAc,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY;YACxD,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI;YACjD,cAAc,CAAC,UAAU,KAAK,WAAW,CAAC,OAAO,CAAC,UAAU;YAC5D,cAAc,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,CAAC,MAAM;YACpD,cAAc,CAAC,KAAK,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK;YAClD,cAAc,CAAC,YAAY;gBACzB,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAC3E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,yCAAyC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,cAAc,qCAAqC,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,mBAAmB,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC"}

package/dist/modules/evidence-operations/src/source-authority.d.ts

@@ -0,0 +1,31 @@
+import type { Domain } from "../../../contracts/revisions/src/index.js";
+/**
+ * Canonical-source authority for catalog evidence.
+ *
+ * A cited source may prove facts for a subject only when the party publishing
+ * it controls those facts. The vendor's own domains always qualify. A third
+ * party qualifies only when the subject's roles name that party's entity, the
+ * channel-operator case: Pulley's perks page is canonical for the terms of a
+ * perk Pulley grants, because the record says Pulley operates it. Directory
+ * and aggregator listings match neither test and are inert; they never count
+ * toward evidence coverage. Aggregators copy one another's numbers, so citing
+ * them would join the chain of restated guesses this catalog exists to break.
+ * (2026-08-12: 47 live offers were found carrying economics, eligibility, and
+ * access sourced from an aggregator that neither operated nor published the
+ * underlying programs.)
+ */
+export declare function hostnameWithinEntityDomains(hostname: string, domains: readonly Domain[], retrievedAt: number): boolean;
+/**
+ * Split a subject's cited sources into the canonical set worth capturing and
+ * the inert hosts that cannot carry authority for it. Inert sources are not
+ * captured at all: the capture allowlist pins each job to its cited host, so
+ * a listing on the wrong host can never redirect its way into authority, and
+ * skipping it avoids spending extraction effort on text that will not count.
+ */
+export declare function partitionCanonicalEvidenceSources<Source extends {
+    readonly url: string;
+}>(sources: readonly Source[], canonicalDomains: readonly Domain[], retrievalInstant: number): {
+    readonly canonical: Source[];
+    readonly inertHosts: string[];
+};
+//# sourceMappingURL=source-authority.d.ts.map

package/dist/modules/evidence-operations/src/source-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-authority.d.ts","sourceRoot":"","sources":["../../../../modules/evidence-operations/src/source-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAIxE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAYT;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,SAAS;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EACvF,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,gBAAgB,EAAE,MAAM,GACvB;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CA2BjE"}