@sourcey/catalog-verifier 1.0.0

package/dist/modules/provenance/src/evidence-bindings.d.ts

@@ -0,0 +1,10 @@
+import type { CatalogEvent } from "../../../contracts/events/src/index.js";
+import { type EvidenceAssertion } from "../../../contracts/evidence/src/index.js";
+import type { Observation } from "../../../contracts/observations/src/index.js";
+export type EvidenceBindingEvent = Omit<CatalogEvent, "protected">;
+export declare function assertEvidenceBindingClosure(input: {
+    readonly events: readonly EvidenceBindingEvent[];
+    readonly observations: ReadonlyMap<string, Observation>;
+}): void;
+export declare function evidenceAssertions(event: EvidenceBindingEvent): readonly EvidenceAssertion[];
+//# sourceMappingURL=evidence-bindings.d.ts.map

package/dist/modules/provenance/src/evidence-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-bindings.d.ts","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAEhF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAEnE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACzD,GAAG,IAAI,CA2CP;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,iBAAiB,EAAE,CAI5F"}

package/dist/modules/provenance/src/evidence-bindings.js

@@ -0,0 +1,49 @@
+import { evidenceAssertionSchema, } from "../../../contracts/evidence/src/index.js";
+export function assertEvidenceBindingClosure(input) {
+    for (const event of input.events) {
+        if (event.kind !== "evidence.bound")
+            continue;
+        const observationId = payloadString(event, "observation_id");
+        const observation = input.observations.get(observationId);
+        if (!observation) {
+            throw new Error(`Evidence event ${event.event_id} targets missing observation ${observationId}.`);
+        }
+        const assertions = evidenceAssertions(event);
+        if (assertions.length === 0) {
+            throw new Error(`Evidence event ${event.event_id} lacks exact proof assertions.`);
+        }
+        if (!observation.capture?.normalized_object) {
+            throw new Error(`Evidence event ${event.event_id} lacks normalized evidence.`);
+        }
+        if (payloadString(event, "normalized_object_digest") !==
+            observation.capture.normalized_object.digest) {
+            throw new Error(`Evidence event ${event.event_id} targets the wrong normalized evidence object.`);
+        }
+        if (new Set(assertions.map((assertion) => assertion.path)).size !== assertions.length) {
+            throw new Error(`Evidence event ${event.event_id} repeats an asserted path.`);
+        }
+        const expectedPolarity = observation.outcome === "supports-candidate"
+            ? "supports"
+            : observation.outcome === "contradicts-candidate"
+                ? "contradicts"
+                : null;
+        if (!expectedPolarity ||
+            assertions.some((assertion) => assertion.polarity !== expectedPolarity)) {
+            throw new Error(`Evidence event ${event.event_id} assertions do not match its observation outcome.`);
+        }
+    }
+}
+export function evidenceAssertions(event) {
+    if (event.kind !== "evidence.bound")
+        return [];
+    const assertions = event.payload.assertions;
+    return Array.isArray(assertions) ? evidenceAssertionSchema.array().parse(assertions) : [];
+}
+function payloadString(event, key) {
+    const value = event.payload[key];
+    if (typeof value !== "string") {
+        throw new Error(`Event ${event.event_id} payload.${key} is not a string.`);
+    }
+    return value;
+}
+//# sourceMappingURL=evidence-bindings.js.map

package/dist/modules/provenance/src/evidence-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-bindings.js","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-bindings.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uBAAuB,GACxB,MAAM,0CAA0C,CAAC;AAKlD,MAAM,UAAU,4BAA4B,CAAC,KAG5C;IACC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,aAAa,GAAG,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,gCAAgC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,IACE,aAAa,CAAC,KAAK,EAAE,0BAA0B,CAAC;YAChD,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,gDAAgD,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,gBAAgB,GACpB,WAAW,CAAC,OAAO,KAAK,oBAAoB;YAC1C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,WAAW,CAAC,OAAO,KAAK,uBAAuB;gBAC/C,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,IAAI,CAAC;QACb,IACE,CAAC,gBAAgB;YACjB,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,gBAAgB,CAAC,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,CAAC,QAAQ,mDAAmD,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAI,KAAK,CAAC,OAAmC,CAAC,UAAU,CAAC;IACzE,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,KAA2B,EAAE,GAAW;IAC7D,MAAM,KAAK,GAAI,KAAK,CAAC,OAAmC,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,QAAQ,YAAY,GAAG,mBAAmB,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/modules/provenance/src/evidence-coverage.d.ts

@@ -0,0 +1,35 @@
+import { type EvidenceAssertion } from "../../../contracts/evidence/src/index.js";
+import type { CoverageRequirement } from "../../../contracts/policies/src/index.js";
+export interface EvidenceCoverageDiagnostic {
+    readonly path: string;
+    readonly status: "covered" | "uncovered";
+    readonly proof_kinds: CoverageRequirement["proof_kinds"];
+    readonly guidance: string;
+}
+/**
+ * Policy roots describe material claims when the corresponding field is
+ * present. Required revision fields are always applicable; optional public
+ * facts enter the claim graph only when the revision publishes them.
+ */
+export declare function applicableEvidenceCoverageRequirements(content: unknown, requirements: readonly CoverageRequirement[]): CoverageRequirement[];
+/**
+ * Returns the smallest exact paths an extractor must consider to prove a
+ * policy field. Objects expand to their complete leaf closure while ordinary
+ * arrays remain atomic because evidence for one item cannot prove that a list
+ * is exhaustive. Eligibility rule arrays are the exception: each declared
+ * criterion is independently provable, so sources may compose the complete
+ * rule set without any source claiming criteria it does not contain.
+ */
+export declare function evidenceCoverageCandidateRequirements(content: unknown, requirements: readonly CoverageRequirement[]): CoverageRequirement[];
+/**
+ * True when the asserted paths prove the whole required value: either an
+ * assertion covers the value directly, or every child of an object is
+ * covered. This lets independent captures compose without weakening any
+ * individual assertion or changing the public coverage policy.
+ */
+export declare function evidenceRequirementIsCovered(content: unknown, requirement: CoverageRequirement, assertions: readonly EvidenceAssertion[]): boolean;
+export declare function evaluateEvidenceCoverage(content: unknown, requirements: readonly CoverageRequirement[], assertions: readonly EvidenceAssertion[]): EvidenceCoverageDiagnostic[];
+export declare function evidencePathsOverlap(left: string, right: string): boolean;
+export declare function evidenceAssertionSatisfiesRequirement(assertion: EvidenceAssertion, requirement: CoverageRequirement): boolean;
+export declare function valueAtEvidencePointer(value: unknown, pointer: string): unknown;
+//# sourceMappingURL=evidence-coverage.d.ts.map

package/dist/modules/provenance/src/evidence-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-coverage.d.ts","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAC3C,mBAAmB,EAAE,CAEvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAC3C,mBAAmB,EAAE,CAQvB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,mBAAmB,EAChC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,OAAO,CAUT;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,EAC5C,UAAU,EAAE,SAAS,iBAAiB,EAAE,GACvC,0BAA0B,EAAE,CAS9B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,iBAAiB,EAC5B,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAST;AAkCD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAU/E"}

package/dist/modules/provenance/src/evidence-coverage.js

@@ -0,0 +1,131 @@
+import { EVIDENCE_DERIVATION_RULE_PATHS, } from "../../../contracts/evidence/src/index.js";
+import { compareCanonicalStrings } from "../../primitives/src/index.js";
+/**
+ * Policy roots describe material claims when the corresponding field is
+ * present. Required revision fields are always applicable; optional public
+ * facts enter the claim graph only when the revision publishes them.
+ */
+export function applicableEvidenceCoverageRequirements(content, requirements) {
+    return requirements.filter((requirement) => pointerExists(content, requirement.path));
+}
+/**
+ * Returns the smallest exact paths an extractor must consider to prove a
+ * policy field. Objects expand to their complete leaf closure while ordinary
+ * arrays remain atomic because evidence for one item cannot prove that a list
+ * is exhaustive. Eligibility rule arrays are the exception: each declared
+ * criterion is independently provable, so sources may compose the complete
+ * rule set without any source claiming criteria it does not contain.
+ */
+export function evidenceCoverageCandidateRequirements(content, requirements) {
+    const candidates = [];
+    for (const requirement of applicableEvidenceCoverageRequirements(content, requirements)) {
+        const paths = new Set();
+        collectCoveragePaths(content, requirement.path, paths);
+        candidates.push(...[...paths].map((path) => ({ ...requirement, path })));
+    }
+    return candidates.sort((left, right) => compareCanonicalStrings(left.path, right.path));
+}
+/**
+ * True when the asserted paths prove the whole required value: either an
+ * assertion covers the value directly, or every child of an object is
+ * covered. This lets independent captures compose without weakening any
+ * individual assertion or changing the public coverage policy.
+ */
+export function evidenceRequirementIsCovered(content, requirement, assertions) {
+    if (pathOrAncestorHasAcceptedAssertion(requirement, assertions))
+        return true;
+    const value = valueAtEvidencePointer(content, requirement.path);
+    const children = evidenceCoverageChildren(value, requirement.path);
+    return (children.length > 0 &&
+        children.every((path) => evidenceRequirementIsCovered(content, { ...requirement, path }, assertions)));
+}
+export function evaluateEvidenceCoverage(content, requirements, assertions) {
+    return applicableEvidenceCoverageRequirements(content, requirements).map((requirement) => ({
+        path: requirement.path,
+        status: evidenceRequirementIsCovered(content, requirement, assertions)
+            ? "covered"
+            : "uncovered",
+        proof_kinds: requirement.proof_kinds,
+        guidance: requirement.guidance,
+    }));
+}
+export function evidencePathsOverlap(left, right) {
+    return left === right || left.startsWith(`${right}/`) || right.startsWith(`${left}/`);
+}
+export function evidenceAssertionSatisfiesRequirement(assertion, requirement) {
+    return (assertion.polarity === "supports" &&
+        requirement.proof_kinds.includes(assertion.proof_kind) &&
+        (assertion.proof_kind !== "derived" ||
+            (assertion.derivation_rule !== null &&
+                assertion.path === EVIDENCE_DERIVATION_RULE_PATHS[assertion.derivation_rule] &&
+                requirement.derivation_rules.includes(assertion.derivation_rule))));
+}
+function collectCoveragePaths(content, path, paths) {
+    const value = valueAtEvidencePointer(content, path);
+    const children = evidenceCoverageChildren(value, path);
+    if (children.length === 0) {
+        paths.add(path);
+        return;
+    }
+    for (const child of children)
+        collectCoveragePaths(content, child, paths);
+}
+function pathOrAncestorHasAcceptedAssertion(requirement, assertions) {
+    let candidate = requirement.path;
+    while (candidate.length > 0) {
+        if (assertions.some((assertion) => assertion.path === candidate &&
+            evidenceAssertionSatisfiesRequirement(assertion, requirement))) {
+            return true;
+        }
+        const separator = candidate.lastIndexOf("/");
+        if (separator <= 0)
+            return false;
+        candidate = candidate.slice(0, separator);
+    }
+    return false;
+}
+export function valueAtEvidencePointer(value, pointer) {
+    let current = value;
+    for (const encoded of pointer.slice(1).split("/")) {
+        const segment = encoded.replaceAll("~1", "/").replaceAll("~0", "~");
+        if (typeof current !== "object" || current === null || !(segment in current)) {
+            throw new Error(`Evidence path ${pointer} does not exist in the revision.`);
+        }
+        current = current[segment];
+    }
+    return current;
+}
+function pointerExists(value, pointer) {
+    try {
+        valueAtEvidencePointer(value, pointer);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isComposableObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function evidenceCoverageChildren(value, path) {
+    if (path === "/domains" && Array.isArray(value)) {
+        return value.map((_, index) => `${path}/${index}/value`);
+    }
+    if (Array.isArray(value))
+        return value.map((_, index) => `${path}/${index}`);
+    if (!isComposableObject(value))
+        return [];
+    const keys = Object.keys(value).sort(compareCanonicalStrings);
+    const semanticKeys = keys.filter((key) => !(path === "/lifecycle" && key === "effective_from") &&
+        key !== "benefit_id" &&
+        !(path.startsWith("/eligibility/") && (key === "criterion_id" || key === "reason")) &&
+        !(path.startsWith("/eligibility/") && key === "type") &&
+        !(path.startsWith("/eligibility/") &&
+            key === "kind" &&
+            ["predicate", "manual", "constant"].includes(String(value.kind))));
+    return semanticKeys.map((key) => `${path}/${escapePointerSegment(key)}`);
+}
+function escapePointerSegment(value) {
+    return value.replaceAll("~", "~0").replaceAll("/", "~1");
+}
+//# sourceMappingURL=evidence-coverage.js.map

package/dist/modules/provenance/src/evidence-coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-coverage.js","sourceRoot":"","sources":["../../../../modules/provenance/src/evidence-coverage.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,GAE/B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AASxE;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CACpD,OAAgB,EAChB,YAA4C;IAE5C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qCAAqC,CACnD,OAAgB,EAChB,YAA4C;IAE5C,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,KAAK,MAAM,WAAW,IAAI,sCAAsC,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAgB,EAChB,WAAgC,EAChC,UAAwC;IAExC,IAAI,kCAAkC,CAAC,WAAW,EAAE,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CACL,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnB,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,4BAA4B,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAC5E,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,YAA4C,EAC5C,UAAwC;IAExC,OAAO,sCAAsC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,MAAM,EAAE,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC;YACpE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW;QACf,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC9D,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,SAA4B,EAC5B,WAAgC;IAEhC,OAAO,CACL,SAAS,CAAC,QAAQ,KAAK,UAAU;QACjC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QACtD,CAAC,SAAS,CAAC,UAAU,KAAK,SAAS;YACjC,CAAC,SAAS,CAAC,eAAe,KAAK,IAAI;gBACjC,SAAS,CAAC,IAAI,KAAK,8BAA8B,CAAC,SAAS,CAAC,eAAe,CAAC;gBAC5E,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB,EAAE,IAAY,EAAE,KAAkB;IAC9E,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kCAAkC,CACzC,WAAgC,EAChC,UAAwC;IAExC,IAAI,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC;IACjC,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,IACE,UAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,SAAS;YAC5B,qCAAqC,CAAC,SAAS,EAAE,WAAW,CAAC,CAChE,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,OAAe;IACpE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,kCAAkC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,OAAe;IACpD,IAAI,CAAC;QACH,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,IAAY;IAC5D,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC9B,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,KAAK,gBAAgB,CAAC;QACpD,GAAG,KAAK,YAAY;QACpB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC;QACnF,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC;QACrD,CAAC,CACC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAChC,GAAG,KAAK,MAAM;YACd,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACjE,CACJ,CAAC;IACF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/dist/modules/provenance/src/index.d.ts

@@ -0,0 +1,68 @@
+import type { AgentReadinessPolicy, AgentReadinessRevision } from "../../../contracts/agent-readiness/src/index.js";
+import type { Provenance } from "../../../contracts/artifact/src/index.js";
+import { type CatalogEvent } from "../../../contracts/events/src/index.js";
+import type { EvidenceAssertion } from "../../../contracts/evidence/src/index.js";
+import type { Observation } from "../../../contracts/observations/src/index.js";
+import type { CoveragePolicy, FreshnessPolicy } from "../../../contracts/policies/src/index.js";
+import type { EntityRevision, OfferRevision, ProgramRevision } from "../../../contracts/revisions/src/index.js";
+import { type Digest } from "../../primitives/src/index.js";
+export { evidenceAssertions } from "./evidence-bindings.js";
+export { applicableEvidenceCoverageRequirements, evaluateEvidenceCoverage, evidenceAssertionSatisfiesRequirement, evidenceCoverageCandidateRequirements, evidencePathsOverlap, evidenceRequirementIsCovered, valueAtEvidencePointer, } from "./evidence-coverage.js";
+export * from "./material-claims.js";
+export { buildProspectiveEvidenceStandingGraph } from "./prospective-evidence.js";
+type Revision = EntityRevision | ProgramRevision | OfferRevision | AgentReadinessRevision;
+export interface FieldCoverage {
+    readonly path: string;
+    readonly supporting_event_ids: Digest[];
+    readonly contradicting_event_ids: Digest[];
+    readonly accepted_proof_kinds: EvidenceAssertion["proof_kind"][];
+    readonly evidence_proof_kinds: EvidenceAssertion["proof_kind"][];
+    readonly latest_observation_at?: string;
+    readonly freshness: Provenance["fields"][number]["freshness"];
+}
+export type EvidenceStanding = "supported" | "contradicted" | "mixed" | "missing";
+/** Field standing over the shared event graph; both catalog pathways read it here. */
+export declare function evidenceStatusFor(field: {
+    readonly supporting_event_ids: readonly string[];
+    readonly contradicting_event_ids: readonly string[];
+} | undefined): EvidenceStanding;
+export interface DerivedProvenance {
+    readonly tier: Provenance["tier"];
+    readonly freshness: Provenance["freshness"];
+    readonly dispute: Provenance["dispute"];
+    readonly coverage_policy_digest: Digest;
+    readonly freshness_policy_digest: Digest;
+    readonly basis_event_ids: Digest[];
+    readonly fields: FieldCoverage[];
+    readonly attestation_event_id?: Digest;
+    readonly verification_event_id?: Digest;
+}
+export type ProvenanceEvent = Omit<CatalogEvent, "protected">;
+export interface EvidenceStandingGraph {
+    readonly byRevisionDigest: ReadonlyMap<string, readonly ProvenanceEvent[]>;
+    readonly observations: ReadonlyMap<string, Observation>;
+    readonly inactiveEventIds: ReadonlySet<string>;
+    readonly evidenceBindingActivity: ReadonlyMap<string, boolean>;
+    readonly activeAuthorityClaims: ReadonlyMap<string, {
+        readonly entityId: string;
+        readonly authorizedIssuerId: string;
+        readonly controlledDomain: string;
+        readonly validUntil: string;
+        readonly eventIds: readonly Digest[];
+    }>;
+}
+export interface EventGraph extends EvidenceStandingGraph {
+    readonly events: readonly CatalogEvent[];
+    readonly byId: ReadonlyMap<string, CatalogEvent>;
+    readonly byRevisionDigest: ReadonlyMap<string, readonly CatalogEvent[]>;
+}
+export declare function buildEventGraph(events: readonly CatalogEvent[], observations: readonly Observation[]): EventGraph;
+export declare function deriveProvenance(input: {
+    readonly revision: Revision;
+    readonly authorityEntityRevision: EntityRevision;
+    readonly graph: EvidenceStandingGraph;
+    readonly coveragePolicy: CoveragePolicy | AgentReadinessPolicy;
+    readonly freshnessPolicy: FreshnessPolicy;
+    readonly policyAsOf: string;
+}): DerivedProvenance;
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/provenance/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/provenance/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EACV,cAAc,EAEd,eAAe,EAChB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,2CAA2C,CAAC;AAKnD,OAAO,EAA2B,KAAK,MAAM,EAAE,MAAM,+BAA+B,CAAC;AASrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,sCAAsC,EACtC,wBAAwB,EACxB,qCAAqC,EACrC,qCAAqC,EACrC,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,qCAAqC,EAAE,MAAM,2BAA2B,CAAC;AAElF,KAAK,QAAQ,GAAG,cAAc,GAAG,eAAe,GAAG,aAAa,GAAG,sBAAsB,CAAC;AAE1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;IACjE,QAAQ,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;IACjE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;CAC/D;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,CAAC;AAElF,sFAAsF;AACtF,wBAAgB,iBAAiB,CAC/B,KAAK,EACD;IACE,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrD,GACD,SAAS,GACZ,gBAAgB,CAQlB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;IACjC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC,CAAC;IAC3E,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxD,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,uBAAuB,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,QAAQ,CAAC,qBAAqB,EAAE,WAAW,CACzC,MAAM,EACN;QACE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,CACF,CAAC;CACH;AAED,MAAM,WAAW,UAAW,SAAQ,qBAAqB;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;CACzE;AAeD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,YAAY,EAAE,EAC/B,YAAY,EAAE,SAAS,WAAW,EAAE,GACnC,UAAU,CA+QZ;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,cAAc,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,oBAAoB,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GAAG,iBAAiB,CA8QpB"}