@tangle-network/agent-eval 0.175.0 → 0.177.0

package/docs/campaign-proposers.md

@@ -20,6 +20,50 @@ Use it when one surface must get better.
 Use it when two or more methods must be compared at equal budget.
 Runnable versions: [`examples/self-improve-optimizer`](../examples/self-improve-optimizer/) and [`examples/compare-optimization-methods`](../examples/compare-optimization-methods/).
 
+## Compose searches over a candidate
+
+Use `scopedOptimizationMethod()` to change one projection while scoring the complete candidate.
+The caller supplies `project` and `merge`; Eval does not prescribe profile names or learning procedures.
+Their roundtrip must preserve the exact baseline before any child search runs.
+Scoped artifact paths and dispatch identity include the complete parent hash to prevent reuse across different evaluation contexts.
+A text or component surface can include serialized profiles, working evaluation definitions, and immutable state references.
+The host must resolve and verify those references when executing a candidate.
+Keep final decision cases outside the working candidate and every optimizer callback.
+
+Use `sequentialOptimizationMethod()` to pass each selected candidate into the next method.
+It does not require an intermediate candidate to beat the original baseline.
+Each child can use GEPA, SkillOpt, or an arbitrary `OptimizationMethod` callback.
+Use the existing GEPA recipe when only the optimizer engines change over one shared surface.
+
+```ts
+const learnerThenSpecialist = sequentialOptimizationMethod({
+  name: 'learner-then-specialist',
+  methods: [
+    scopedOptimizationMethod({
+      name: 'learner', method: learnerSearch,
+      project: selectLearner, merge: replaceLearner,
+    }),
+    scopedOptimizationMethod({
+      name: 'specialist', method: specialistSearch,
+      project: selectSpecialist, merge: replaceSpecialist,
+    }),
+  ],
+})
+```
+
+Pass this method and a joint method to `compareOptimizationMethods()` to compare their final candidates.
+Its existing `optimizationConcurrency` controls independent searches; stages inside a sequence run in order.
+All children share the spend account and receive only train and selection cases.
+Child costs are reconciled separately and summed without adding ledger charges.
+The returned `composition.stages` preserves each baseline hash, selected surface, cost, provenance, token usage, and history receipt.
+Missing child usage remains missing in that child's provenance.
+Comparison scores retain this composition.
+
+Set `searchHistoryPolicy: 'require-complete'` on the outer comparison or `selfImprove()` call to require every child receipt.
+Set `searchHistoryVerification: 'ledger'` to verify each referenced ledger before final assessment.
+Composite history coverage contains recursive `stages`; it does not fabricate one aggregate receipt.
+Any parent receipt supplied by a custom method is also verified; it cannot replace missing child evidence.
+
 ## Read An Improvement Result
 
 `selfImprove({ method })` executes the complete method once and measures its selected surface on final cases.

package/docs/public-api.md

@@ -7,11 +7,11 @@ Generated by `pnpm api:census` on demand — this is a dated reading, not a gate
 | measure | count |
 | --- | --- |
 | export subpaths | 28 |
-| published value exports (subpath x symbol) | 1380 |
-| distinct symbols | 1211 |
-| production | 931 |
+| published value exports (subpath x symbol) | 1403 |
+| distinct symbols | 1231 |
+| production | 944 |
 | planned | 218 |
-| none | 231 |
+| none | 241 |
 
 Type-only exports are not listed: a type binds no runtime surface, and removing one cannot break a caller at run time.
 
@@ -84,7 +84,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `.`
 
-338 value exports — 271 production, 34 planned, 33 none.
+348 value exports — 273 production, 35 planned, 40 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -111,7 +111,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `argHash` | production | agent-runtime:src/runtime/supervise/detector-monitor.ts |
 | `assertCapabilityHeadroom` | production | blueprint-agent:scripts/experiments/lib/validity-gates.ts |
 | `assertCrossFamily` | production | agent-builder:frontier/judges/artifact-head-to-head.ts |
-| `assertCrossFamilyServed` | planned | doc: docs/building-doctrine.md |
+| `assertCrossFamilyServed` | planned | doc: README.md |
 | `assertNoHiddenLeak` | planned | doc: docs/design/statistics-decisions.md |
 | `assertNoJudgeVerdict` | production | this package: src/analyst/policy-edit.ts:6 |
 | `assertProductBenchmarkRun` | production | creative-agent:eval/research-package.ts |
@@ -151,6 +151,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `checkTraceContracts` | production | creative-agent:eval/lib/trace-contracts.ts |
 | `clamp01` | production | agent-dev-container:products/intelligence/api/src/lib/consultant/executor.ts |
 | `classifyFailure` | production | phony:products/builder/api/src/eval/autoresearch/trace-analyst.ts |
+| `classifyFailureReason` | none | only this package's tests: tests/failure-taxonomy.test.ts:2 |
 | `cliffsDelta` | production | agent-builder:src/lib/.server/eval/loops/differential-eval.ts |
 | `CODING_HARNESSES` | production | agent-runtime:src/runtime/define-leaderboard.ts |
 | `cohensD` | production | starter-foundry:examples/recruiter-eval-workspace/eval/src/eval/regression/gate.ts |
@@ -182,6 +183,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `createAntiSlopJudge` | production | phony:products/builder/api/src/eval/judges.ts |
 | `createBoundedTraceAnalysisStore` | production | braid:src/adapters/analysis/trace-store.ts |
 | `createChatClient` | production | agent-dev-container:products/intelligence/api/src/lib/intent-audit-analyst.ts |
+| `createChatTraceEngine` | planned | doc: docs/trace-analysis.md |
 | `createDspyRlmTraceEngine` | production | agent-dev-container:products/intelligence/api/src/lib/deep-trace-analyst.ts |
 | `createFeedbackTrajectory` | production | agent-builder:src/lib/.server/eval/feedback/feedback-capture.ts |
 | `createLlmCorrectnessChecker` | production | agent-app:src/eval/index.ts |
@@ -190,11 +192,14 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `CrossFamilyError` | production | creative-agent:eval/lib/judge-ensemble.ts |
 | `decidePairedPromotion` | production | discovery-lab:tools/decide.mjs |
 | `DECISION_PAIRED_DELTA_STATISTIC` | production | this package: src/campaign/gates/promotion-policy.ts:33 |
+| `DEFAULT_BOUNDED_PROCESS_TIMEOUT_MS` | production | this package: src/command-runner.ts:28 |
+| `DEFAULT_FAILURE_REASON_RULES` | none | only this package's tests: tests/failure-taxonomy.test.ts:2 |
 | `DEFAULT_PERMUTATIONS` | none | — |
 | `DEFAULT_RED_TEAM_CORPUS` | production | starter-foundry:registry/layers/agent-eval/redteam/files/src/eval/redteam/runner.ts |
 | `DEFAULT_REDACTION_RULES` | production | agent-dev-container:products/intelligence/api/src/lib/redact.ts |
 | `DEFAULT_TRACE_ANALYST_BUDGETS` | production | agent-builder:src/lib/.server/eval/stores/d1-trace-analysis-store-adapter.ts |
 | `DEFAULT_TRACE_ANALYST_KINDS` | production | agent-dev-container:products/intelligence/api/src/lib/deep-trace-analyst.ts |
+| `DEFAULT_TRACE_ANALYST_OUTPUT_TOKENS` | production | this package: src/analyst/chat-trace-engine.ts:46 |
 | `defaultBlendWeights` | production | blueprint-agent:scripts/experiments/lib/qa-grader.ts |
 | `defineAgentEval` | planned | example: examples/evaluate-a-change/index.ts:10 |
 | `defineEquivalenceCheck` | planned | example: examples/verify-without-an-answer-key/index.ts:13 |
@@ -225,8 +230,10 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `extractProducedState` | production | agent-app:src/eval/index.ts |
 | `extractUsage` | production | this package: src/contract/intake/code-agent-session.ts:12 |
 | `extractUsageFromSse` | production | this package: src/trace/capture-fetch.ts:8 |
+| `FAILURE_BLAME` | none | only this package's tests: tests/failure-taxonomy.test.ts:2 |
 | `FAILURE_CLASSES` | production | agent-dev-container:products/intelligence/api/src/lib/deep-trace-analyst.ts |
 | `FAILURE_MODE_KIND_SPEC` | planned | consumer tests: legal-agent:tests/eval/analysts/completion-coverage.ts |
+| `failureBlame` | none | only this package's tests: tests/failure-taxonomy.test.ts:2 |
 | `failureClusterView` | production | insurance-agent:scripts/analyze-agent-eval-evidence.ts |
 | `feedbackTrajectoriesToDatasetScenarios` | production | creative-agent:eval/control/creative-onboarding.ts |
 | `feedbackTrajectoriesToOptimizerRows` | production | agent-dev-container:products/intelligence/api/src/lib/feedback-memory.ts |
@@ -251,6 +258,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `holm` | planned | doc: docs/design/statistics-decisions.md |
 | `improvementVerdict` | production | blueprint-agent:scripts/experiments/lib/vb-improve-harness.ts |
 | `inferDomainKeywords` | production | blueprint-agent:scripts/experiments/lib/analyze-vb-run/suite-projection.ts |
+| `INFRA_FAILURE_BLAMES` | none | only this package's tests: tests/failure-taxonomy.test.ts:2 |
 | `InMemoryFeedbackTrajectoryStore` | production | creative-agent:eval/control/creative-onboarding.ts |
 | `InMemoryRawProviderSink` | production | agent-builder:src/lib/.server/eval/loops/canonical-campaign.ts |
 | `inMemoryReviewStore` | production | agent-builder:scripts/propose-review-smoke.ts |
@@ -279,6 +287,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `llmJudge` | production | agent-runtime:examples/agentic-data-creation/offline-fixtures.ts |
 | `LlmResponseError` | production | agent-dev-container:products/intelligence/api/src/lib/optimization-engine.ts |
 | `loadScorecard` | production | ai-trading-blueprint:evals/src/trading/scorecard-integration.ts |
+| `LOCAL_COMMAND_RUNNER_DEFAULT_CAP_MS` | none | only this package's tests: src/command-runner.test.ts:6 |
 | `localCommandRunner` | production | blueprint-agent:scripts/experiments/lib/command-runner.ts |
 | `makeFinding` | production | agent-dev-container:products/intelligence/api/src/lib/consultant/candidates.ts |
 | `makePolicyEdit` | none | only this package's tests: src/analyst/policy-edit.test.ts:2 |
@@ -344,6 +353,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `projectRuntimeTrajectoryEvidence` | production | agent-dev-container:products/intelligence/api/src/lib/workflow-trace-preflight.ts |
 | `PromptRegistry` | production | blueprint-agent:scripts/experiments/lib/surface-prompt-registry.ts |
 | `proposeSynthesisTargets` | production | blueprint-agent:scripts/experiments/researcher/inspect.ts |
+| `quotaExhaustedUntil` | none | only this package's tests: src/campaign/transient-failure.test.ts:3 |
 | `ranks` | planned | doc: docs/design/statistics-decisions.md |
 | `readProductBenchmarkManifest` | production | creative-agent:eval/research-package.ts |
 | `recordRuns` | planned | consumer tests: tax-agent:tests/eval/benchmarks/taxcalc/analyze.mjs |
@@ -362,7 +372,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `roundTripRunRecord` | none | only this package's tests: tests/run-record.test.ts:3 |
 | `routeFields` | none | only this package's tests: src/hidden-criteria-grading.test.ts:4 |
 | `runAgentControlLoop` | production | agent-runtime:src/run.ts |
-| `runBoundedProcess` | production | this package: src/sandbox-harness.ts:16 |
+| `runBoundedProcess` | production | this package: src/command-runner.ts:28 |
 | `runCampaign` | production | agent-app:src/eval-campaign/index.ts |
 | `runCanaries` | production | agent-builder:src/lib/.server/eval/loops/canary-cron.ts |
 | `runCounterfactual` | production | traces:src/replay-batch.ts |
@@ -438,7 +448,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `./analyst`
 
-127 value exports — 77 production, 19 planned, 31 none.
+129 value exports — 78 production, 20 planned, 31 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -484,6 +494,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `CONTROL_INTEGRITY_ANALYST` | none | only this package's tests: src/analyst/kinds/control-integrity.test.ts:5 |
 | `ControlIntegrityAnalyst` | none | — |
 | `createChatClient` | production | agent-dev-container:products/intelligence/api/src/lib/intent-audit-analyst.ts |
+| `createChatTraceEngine` | planned | doc: docs/trace-analysis.md |
 | `createDspyRlmTraceEngine` | production | agent-dev-container:products/intelligence/api/src/lib/deep-trace-analyst.ts |
 | `createPrimeBenchmarkRunner` | production | this package: src/analyst/benchmark-command.ts:62 |
 | `createPublicBenchmarkDirectRunner` | production | this package: src/analyst/benchmark-command.ts:60 |
@@ -493,6 +504,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `decodeReplyRows` | production | this package: src/analyst/benchmark-public-model.ts:57 |
 | `DEFAULT_MAX_VERIFICATION_ARTIFACT_BYTES` | production | this package: src/analyst/benchmark-command.ts:73 |
 | `DEFAULT_TRACE_ANALYST_KINDS` | production | agent-dev-container:products/intelligence/api/src/lib/deep-trace-analyst.ts |
+| `DEFAULT_TRACE_ANALYST_OUTPUT_TOKENS` | production | this package: src/analyst/chat-trace-engine.ts:46 |
 | `defaultIsMaterial` | none | only this package's tests: src/analyst/analyst.test.ts:8 |
 | `defineCustomAnalyst` | planned | doc: docs/trace-analysis.md |
 | `defineTraceAnalyst` | planned | doc: docs/charter.md |
@@ -558,7 +570,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `rlmEngineLimits` | none | only this package's tests: src/analyst/definition-parity.test.ts:26 |
 | `roundAgentRxStep` | production | this package: src/analyst/benchmark-agentrx-calibration.ts:2 |
 | `runAnalystBenchmark` | production | this package: benchmarks/trace-analysis/codetracebench-glm52-20260730/summarize-codetracer.mjs:6 |
-| `runAnalystBenchmarkCommand` | production | this package: src/cli.ts:16 |
+| `runAnalystBenchmarkCommand` | production | this package: src/cli.ts:17 |
 | `runPrimeExchange` | production | this package: src/analyst/benchmark-runner-prime.ts:19 |
 | `runTraceAnalyst` | production | this package: scripts/gepa-analyst-campaign.ts:71 |
 | `scoreAnalystFindings` | production | this package: scripts/gepa-analyst-campaign.ts:57 |
@@ -616,7 +628,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `./campaign`
 
-118 value exports — 77 production, 15 planned, 26 none.
+122 value exports — 81 production, 15 planned, 26 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -625,7 +637,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `assertCampaignDesign` | production | this package: src/campaign/plan-campaign-run.ts:10 |
 | `assertCampaignSplitIdentity` | production | agent-knowledge:src/memory/experiment/learning-pairs.ts |
 | `assertCodeSurfaceIdentity` | none | — |
-| `assertCompleteSearchHistory` | production | this package: src/campaign/presets/compare-optimization-methods.ts:31 |
+| `assertCompleteSearchHistory` | production | this package: src/campaign/optimization-method.ts:9 |
 | `assertSearchHistoryMatchesReplay` | planned | doc: docs/search-history-receipts.md |
 | `autoevalsScorerJudge` | none | only this package's tests: src/campaign/upstream-evaluators.test.ts:6 |
 | `buildCellSchedule` | production | this package: src/campaign/plan-campaign-run.ts:9 |
@@ -634,7 +646,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `buildTraceAnalystSurfaceDispatch` | none | only this package's tests: src/campaign/analyst-surface.test.ts:4 |
 | `campaignBreakdown` | production | this package: src/campaign/external-text-evaluation.ts:11 |
 | `campaignMeanComposite` | production | agent-dev-container:products/intelligence/api/src/lib/optimization-engine.ts |
-| `campaignMeasurementDigest` | none | only this package's tests: src/campaign/provenance-integrity.test.ts:5 |
+| `campaignMeasurementDigest` | production | this package: src/contract/self-improve-method.ts:12 |
 | `campaignScenarioIdentity` | production | agent-runtime:bench/src/swe-arena/premeasured-from-cells.mts |
 | `campaignSplitDigest` | production | agent-runtime:bench/src/swe-arena/premeasured-from-cells.mts |
 | `campaignSplitDigestFromIdentities` | production | agent-runtime:src/improvement/method-identity.ts |
@@ -644,7 +656,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `codeSurfaceIdentityMaterial` | none | — |
 | `combineComparisonCosts` | production | this package: src/campaign/external-text-optimization.ts:41 |
 | `compareOptimizationMethods` | production | agent-app:src/eval-campaign/index.ts |
-| `compareRankKeys` | production | this package: src/campaign/presets/run-optimization.ts:29 |
+| `compareRankKeys` | production | this package: src/campaign/presets/run-optimization.ts:30 |
 | `componentSurfaceIdentityMaterial` | none | only this package's tests: src/campaign/surface-identity.test.ts:4 |
 | `composeGate` | production | discovery-lab:tools/confirmation-gate.mjs |
 | `costFromLedgerSummary` | production | supervisor-lab:bench/drain/seat.ts |
@@ -660,7 +672,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `detectScale` | production | this package: src/campaign/gates/promotion-policy.ts:39 |
 | `dimensionRegressions` | production | agent-dev-container:products/intelligence/api/src/lib/optimization-engine.ts |
 | `discoverEvalFixtures` | planned | doc: docs/eval-fixtures.md |
-| `emitLoopProvenance` | production | this package: src/contract/self-improve.ts:27 |
+| `emitLoopProvenance` | production | this package: src/contract/self-improve.ts:26 |
 | `externalTextOptimizationMethod` | production | agent-app:src/eval-campaign/index.ts |
 | `FileSearchLedger` | none | — |
 | `finalizeProfileMatrix` | production | discovery-lab:tools/run-profile-confirmation.mjs |
@@ -678,7 +690,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `llmJudge` | production | agent-runtime:examples/agentic-data-creation/offline-fixtures.ts |
 | `loadEvalFixture` | planned | doc: docs/eval-fixtures.md |
 | `loadEvalFixtureScenarios` | planned | example: examples/eval-fixtures-quickstart/index.ts:11 |
-| `loopProvenanceArgsFromResult` | production | this package: src/contract/self-improve.ts:27 |
+| `loopProvenanceArgsFromResult` | production | this package: src/contract/self-improve.ts:26 |
 | `loopProvenanceSpans` | none | only this package's tests: src/campaign/provenance-integrity.test.ts:5 |
 | `makePlaybackDispatch` | none | only this package's tests: src/campaign/presets/playback.test.ts:6 |
 | `makeProposalFinding` | production | agent-runtime:bench/src/swe-arena/outer-loop.mts |
@@ -697,16 +709,18 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `ProfileMatrixError` | production | this package: src/campaign/presets/segmented-profile-matrix.ts:22 |
 | `provenanceRecordPath` | planned | consumer tests: agent-dev-container:products/intelligence/api/tests/optimization-engine.test.ts |
 | `provenanceSpansPath` | none | only this package's tests: tests/contract-self-improve.test.ts:25 |
+| `quotaExhaustedUntil` | none | only this package's tests: src/campaign/transient-failure.test.ts:3 |
 | `readCachedCell` | production | discovery-lab:tools/strict-screen.mjs |
 | `readExternalOptimizerObservationArtifact` | production | agent-runtime:src/improvement/method-execution.ts |
 | `readGepaCandidatePopulationArtifact` | production | agent-runtime:src/improvement/method-execution.ts |
 | `recordCandidatePopulationSearch` | production | this package: src/campaign/gepa-optimization-method.ts:67 |
 | `renderScoreboardMarkdown` | production | blueprint-agent:scripts/experiments/eval/launch-scoreboard/run.ts |
 | `renderSurfaceDiff` | production | agent-dev-container:products/intelligence/api/src/lib/optimization-evidence-packet.ts |
+| `replaySearchLedgerText` | production | this package: src/campaign/search-history-receipt.ts:9 |
 | `resolveExternalOptimizerCallbackLimits` | production | this package: src/analyst/dspy-rlm-engine.ts:1 |
 | `resolveExternalOptimizerProcessLimits` | production | this package: src/analyst/benchmark-command-persistence.ts:6 |
 | `resolveRunDir` | production | agent-dev-container:products/intelligence/api/src/lib/eval-engine.ts |
-| `resolveWorktreePath` | none | only this package's tests: tests/campaign/worktree.test.ts:16 |
+| `resolveWorktreePath` | none | only this package's tests: tests/campaign/worktree.test.ts:17 |
 | `rolloutArgumentDiff` | none | only this package's tests: src/campaign/grounded-reflection.test.ts:2 |
 | `runCampaign` | production | agent-app:src/eval-campaign/index.ts |
 | `runEval` | production | ai-trading-blueprint:evals/src/sim/multishot-user-sim.ts |
@@ -717,17 +731,18 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `scoreboardSummary` | production | blueprint-agent:scripts/experiments/eval/launch-scoreboard/run.ts |
 | `scoreDiscrimination` | production | supervisor-lab:bench/comms/seat-discrimination.ts |
 | `scoreUserStory` | production | blueprint-agent:scripts/experiments/eval/launch-scoreboard/scoreboard-core.ts |
-| `searchHistoryCoverageRow` | production | this package: src/campaign/presets/compare-optimization-methods.ts:31 |
-| `SearchHistoryRequiredError` | none | only this package's tests: src/campaign/presets/compare-optimization-methods-history.test.ts:7 |
-| `SearchLedgerConflictError` | production | this package: src/campaign/search-ledger.ts:33 |
-| `SearchLedgerError` | production | this package: src/campaign/search-ledger.ts:33 |
+| `searchHistoryCoverageRow` | production | this package: src/campaign/optimization-method.ts:9 |
+| `SearchHistoryRequiredError` | none | only this package's tests: src/campaign/presets/compare-optimization-methods-history.test.ts:10 |
+| `SearchLedgerConflictError` | production | this package: src/campaign/search-ledger.ts:34 |
+| `SearchLedgerError` | production | this package: src/campaign/search-ledger.ts:34 |
 | `SearchLedgerIntegrityError` | production | this package: src/campaign/search-ledger-file.ts:10 |
-| `SearchRecorder` | production | this package: src/campaign/presets/run-optimization.ts:37 |
+| `SearchRecorder` | production | this package: src/campaign/presets/run-optimization.ts:38 |
 | `selectDiscriminative` | none | only this package's tests: src/campaign/scenario-selection.test.ts:2 |
 | `sequentialDecide` | planned | doc: docs/experiment.md |
 | `sequentialPairedGate` | planned | consumer tests: legal-agent:tests/eval/self-improve.ts |
 | `skillOptOptimizationMethod` | production | agent-app:src/eval-campaign/index.ts |
 | `surfaceContentHash` | production | discovery-lab:tools/run-profile-confirmation.mjs |
+| `surfaceDispatchRef` | production | this package: src/campaign/presets/run-final-comparison.ts:4 |
 | `surfaceHash` | production | agent-builder:src/lib/.server/eval/loops/evolution-runner.ts |
 | `tangleTracesRoot` | none | only this package's tests: src/campaign/run-dir.test.ts:4 |
 | `traceAnalystQualityJudge` | production | this package: scripts/gepa-analyst-campaign.ts:74 |
@@ -736,12 +751,13 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `validateSearchLedgerEvent` | planned | consumer tests: discovery-lab:tools/search-ledger-planless.test.mjs |
 | `verifyCodeSurface` | production | agent-runtime:src/candidate-execution/builder.ts |
 | `verifyLoopProvenanceRecord` | none | only this package's tests: src/campaign/provenance-integrity.test.ts:5 |
+| `verifySearchHistoryArtifact` | production | this package: src/campaign/optimization-method.ts:9 |
 | `verifySearchHistoryReceipt` | planned | doc: docs/search-history-receipts.md |
-| `WorktreeAdapterError` | none | only this package's tests: tests/campaign/worktree.test.ts:16 |
+| `WorktreeAdapterError` | none | only this package's tests: tests/campaign/worktree.test.ts:17 |
 
 ### `./contract`
 
-64 value exports — 40 production, 15 planned, 9 none.
+65 value exports — 41 production, 14 planned, 10 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -780,11 +796,12 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `measuredComparisonFromAgentProfileImprovementExperiment` | production | agent-runtime:src/intelligence/authored-profile-improvement.ts |
 | `measuredComparisonFromCandidateExperiment` | production | agent-runtime:src/intelligence/improvement-cycle.ts |
 | `observeCodeAgentSession` | production | this package: src/contract/intake/code-agent-session.ts:13 |
+| `observeCodeAgentStore` | none | only this package's tests: tests/contract-code-agent-store.test.ts:5 |
 | `paretoPolicy` | none | only this package's tests: src/campaign/gates/promotion-policy.test.ts:3 |
 | `paretoSignificanceGate` | production | agent-app:src/eval-campaign/index.ts |
 | `parseAgentTrace` | planned | doc: docs/code-agent-intake.md |
 | `parseCodeAgentJsonl` | planned | doc: docs/code-agent-intake.md |
-| `parseCodeAgentJsonlFile` | planned | doc: docs/code-agent-intake.md |
+| `parseCodeAgentJsonlFile` | production | this package: src/contract/intake/code-agent-store.ts:38 |
 | `partitionRunsByAuthoringModel` | planned | doc: docs/code-agent-intake.md |
 | `REFERENCE_EQUIVALENCE_INPUT_LIMITS` | none | only this package's tests: src/reference-equivalence-judge.test.ts:13 |
 | `REFERENCE_EQUIVALENCE_JUDGE_VERSION` | none | only this package's tests: src/reference-equivalence-judge.test.ts:13 |
@@ -812,7 +829,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `./experiment`
 
-83 value exports — 48 production, 18 planned, 17 none.
+84 value exports — 50 production, 17 planned, 17 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -831,7 +848,8 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `composeFunnels` | planned | doc: docs/experiment.md |
 | `computeEstimand` | production | this package: src/experiment/define.ts:21 |
 | `computeInterval` | production | this package: src/experiment/define.ts:21 |
-| `createEvidenceReceipt` | planned | consumer tests: agent-runtime:tests/integration/runtime-eval-pursuit-evidence.test.ts |
+| `createCampaignEvidenceReceipt` | production | this package: src/campaign/presets/compare-optimization-methods.ts:11 |
+| `createEvidenceReceipt` | production | this package: src/experiment/campaign-evidence.ts:7 |
 | `defineExperiment` | production | this package: scripts/tb-gated-stop-ab.ts:55 |
 | `DesignRefusalError` | none | only this package's tests: tests/experiment/power.test.ts:10 |
 | `eProcess` | production | this package: src/campaign/gates/sequential.ts:35 |
@@ -941,7 +959,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `./ledger-core`
 
-16 value exports — 15 production, 0 planned, 1 none.
+17 value exports — 16 production, 0 planned, 1 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -955,6 +973,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `LedgerCanonicalizationError` | none | only this package's tests: src/ledger-core/canonical.test.ts:5 |
 | `probeAtomicFileLock` | production | this package: src/campaign/single-run-lock.ts:17 |
 | `readTrustedHeadFile` | production | this package: src/ledger-core/journal.ts:29 |
+| `replayLedgerText` | production | this package: src/campaign/search-ledger.ts:22 |
 | `trustedHeadPathFor` | production | this package: src/ledger-core/journal.ts:29 |
 | `tryAcquireAtomicFileLock` | production | this package: src/campaign/single-run-lock.ts:17 |
 | `tryWithLedgerFileLock` | production | this package: src/campaign/search-ledger-file.ts:3 |
@@ -1232,7 +1251,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `ROLLOUT_ROLES` | production | this package: src/rollout/interchange/harbor.ts:60 |
 | `ROLLOUT_SCHEMA` | production | agent-runtime:bench/src/rollout-ledger/backfill-swe-arena.mts |
 | `ROLLOUT_SPLITS` | production | this package: src/rollout/interchange/harbor.ts:60 |
-| `runRolloutReleaseCli` | production | this package: src/cli.ts:18 |
+| `runRolloutReleaseCli` | production | this package: src/cli.ts:19 |
 | `scoreOrigin` | production | this package: src/rollout/mint.ts:38 |
 | `scrubLines` | production | supervisor-lab:bench/vertical-rollout-package.ts |
 | `scrubRolloutLine` | none | only this package's tests: src/rollout/release/scrub.test.ts:4 |
@@ -1270,7 +1289,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 ### `./supervisor-run`
 
-29 value exports — 21 production, 4 planned, 4 none.
+33 value exports — 23 production, 4 planned, 6 none.
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
@@ -1284,23 +1303,27 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `isUnavailable` | production | discovery-lab:tools/disco.mjs |
 | `loopsSupervisorRunReader` | planned | named in traces (bind not in the import graph) |
 | `NO_SOURCE_LIMITS` | production | traces:src/supervisor-run-context.ts |
+| `NO_TERMINAL_RECORD` | none | only this package's tests: src/supervisor-run/terminal-record.test.ts:8 |
 | `parsePatch` | planned | named in browser-agent-driver (bind not in the import graph) |
 | `parseSupervisorTree` | production | discovery-lab:experiments/0005-run-visibility/probe.mjs |
 | `readClaudeCodeSupervisorRun` | none | only this package's tests: src/supervisor-run/claude-code-reader.test.ts:6 |
 | `readLoopsSupervisorRun` | planned | named in discovery-lab (bind not in the import graph) |
 | `readRuntimeSupervisorRun` | production | discovery-lab:pursuits/final-agent-authored-campaign-20260810/materialize-candidates.mjs |
+| `readTerminalRecord` | production | this package: src/supervisor-run/analyze.ts:18 |
 | `renderSupervisorRollupMarkdown` | production | traces:src/cli.ts |
 | `renderSupervisorRunHeadline` | production | discovery-lab:experiments/0005-run-visibility/probe.mjs |
 | `renderSupervisorRunMarkdown` | production | agent-runtime:bench/src/swe-arena/run-report.mts |
 | `reportSupervisorRound` | production | agent-runtime:bench/src/swe-arena/outer-loop.mts |
 | `rollupSupervisorRuns` | production | discovery-lab:tools/disco.mjs |
+| `runSupervisorRunCommand` | production | this package: src/cli.ts:20 |
+| `RUNTIME_FAILED_STATUS` | none | — |
 | `runtimeSupervisorRunReader` | none | only this package's tests: src/supervisor-run/index.test.ts:2 |
 | `showMeasured` | production | this package: src/supervisor-run/render.ts:8 |
 | `SUPERVISOR_RUN_INTEGRITY_SCHEMA` | production | this package: src/supervisor-run/integrity.ts:4 |
-| `SUPERVISOR_RUN_ROLLUP_SCHEMA` | production | this package: src/supervisor-run/analyze.ts:18 |
-| `SUPERVISOR_RUN_SCHEMA` | production | this package: src/supervisor-run/analyze.ts:18 |
+| `SUPERVISOR_RUN_ROLLUP_SCHEMA` | production | this package: src/supervisor-run/analyze.ts:19 |
+| `SUPERVISOR_RUN_SCHEMA` | production | this package: src/supervisor-run/analyze.ts:19 |
 | `supervisorRunRolloutLines` | planned | consumer tests: discovery-lab:tools/runtime-journal-eval.test.mjs |
-| `unavailable` | production | this package: src/supervisor-run/analyze.ts:18 |
+| `unavailable` | production | this package: src/supervisor-run/analyze.ts:19 |
 | `writeSupervisorRunReport` | production | agent-runtime:bench/src/swe-arena/run-report.mts |
 | `writeSupervisorRunReportSafe` | production | agent-runtime:bench/src/swe-arena/outer-loop.mts |
 
@@ -1468,7 +1491,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `createOtelTracingStore` | none | only this package's tests: tests/trace-contracts.test.ts:4 |
 | `DEFAULT_REDACTION_RULES` | production | agent-dev-container:products/intelligence/api/src/lib/redact.ts |
 | `DEFAULT_TRACE_ANALYST_BUDGETS` | production | agent-builder:src/lib/.server/eval/stores/d1-trace-analysis-store-adapter.ts |
-| `defaultProviderRedactor` | production | this package: src/llm-client.ts:46 |
+| `defaultProviderRedactor` | production | this package: src/llm-client.ts:53 |
 | `defaultTraceInsightPanel` | none | only this package's tests: src/trace-analyst/insights.test.ts:3 |
 | `describeTraceInsightScope` | production | blueprint-agent:scripts/experiments/lib/analyze-vb-run/report-html.ts |
 | `domainEvidencePattern` | production | blueprint-agent:scripts/experiments/lib/analyze-vb-run/session-loader.ts |
@@ -1523,7 +1546,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `OUTPUT_VALUE` | production | agent-runtime:src/runtime/supervise-surface.ts |
 | `planTraceInsightQuestions` | none | only this package's tests: src/trace-analyst/insights.test.ts:3 |
 | `projectOtlpFlatLine` | production | this package: src/trace-analyst/otlp-to-run-records.ts:63 |
-| `providerFromBaseUrl` | production | this package: src/llm-client.ts:46 |
+| `providerFromBaseUrl` | production | this package: src/llm-client.ts:53 |
 | `REDACTION_VERSION` | production | agent-dev-container:products/intelligence/api/src/lib/redact.ts |
 | `redactString` | production | agent-dev-container:products/intelligence/api/src/lib/redact.ts |
 | `redactValue` | production | traces:src/index.ts |
@@ -1626,7 +1649,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 
 | symbol | consumer | evidence |
 | --- | --- | --- |
-| `buildOpenApi` | production | this package: src/cli.ts:20 |
+| `buildOpenApi` | production | this package: src/cli.ts:22 |
 | `createApp` | planned | doc: docs/wire-protocol.md |
 | `dispatchRpc` | planned | doc: docs/wire-protocol.md |
 | `ErrorResponseSchema` | production | this package: src/wire/openapi.ts:15 |
@@ -1637,7 +1660,7 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `handleJudge` | production | this package: src/wire/rpc.ts:15 |
 | `handleListRubrics` | production | this package: src/wire/rpc.ts:15 |
 | `handleTracesIngest` | production | this package: src/wire/server.ts:20 |
-| `handleVersion` | production | this package: src/cli.ts:19 |
+| `handleVersion` | production | this package: src/cli.ts:21 |
 | `hashRubric` | production | this package: src/wire/handlers.ts:22 |
 | `HealthResponseSchema` | production | this package: src/wire/openapi.ts:15 |
 | `JudgeRequestSchema` | production | this package: src/wire/openapi.ts:15 |
@@ -1647,10 +1670,10 @@ The `none` set was reviewed symbol by symbol on 2026-08-21. Four rules decided m
 | `RUBRIC_VERSION_SCHEME` | none | — |
 | `RubricDimensionSchema` | none | only this package's tests: tests/wire/schemas.test.ts:12 |
 | `RubricSchema` | none | only this package's tests: tests/wire/schemas.test.ts:12 |
-| `runRpcBatch` | production | this package: src/cli.ts:21 |
-| `runRpcOnce` | production | this package: src/cli.ts:21 |
+| `runRpcBatch` | production | this package: src/cli.ts:23 |
+| `runRpcOnce` | production | this package: src/cli.ts:23 |
 | `startServer` | production | creative-agent:eval/ingestion-server.ts |
-| `startServerAsync` | production | this package: src/cli.ts:22 |
+| `startServerAsync` | production | this package: src/cli.ts:24 |
 | `TraceEventSchema` | planned | named in insurance-agent (bind not in the import graph) |
 | `TracesIngestRequestSchema` | production | this package: src/wire/openapi.ts:15 |
 | `TracesIngestResponseSchema` | production | this package: src/wire/openapi.ts:15 |

package/docs/search-history-receipts.md

@@ -147,6 +147,37 @@ const comparison = await compareOptimizationMethods({
 })
 ```
 
+`selfImprove({ method })` accepts the same `searchHistoryPolicy` and `searchHistoryVerification` options.
+Both workflows use the same method preparation, result validation, cost reconciliation, and history admission.
+`selfImprove` returns `searchHistoryCoverage`; comparison returns coverage for every method.
+The default remains `allow-missing` with receipt verification.
+
+### Verify referenced history before final assessment
+
+Set `searchHistoryVerification: 'ledger'` to require the referenced bytes, even with `allow-missing`.
+Combine it with `require-complete` to require both verified bytes and complete history.
+
+```ts
+const comparison = await compareOptimizationMethods({
+  // ...methods, partitions, dispatch, judges, runDir
+  searchHistoryPolicy: 'require-complete',
+  searchHistoryVerification: 'ledger',
+  storage,
+})
+```
+
+Eval reads the receipt URI through `storage.read`.
+A `file:` URI becomes a local path; other URIs remain opaque storage keys.
+A custom `CampaignStorage` can resolve retained artifacts without another ledger implementation.
+Missing bytes, length or digest mismatches, invalid chains, and replay discrepancies refuse final dispatch.
+A verified coverage row carries `ledgerVerified: true`.
+Receipt-only coverage does not make that claim.
+
+Existing search recorders compute `ledger.sha256` with `hashCanonical` over the complete JSONL string.
+It hashes that string's canonical JSON encoding, rather than the raw UTF-8 file.
+Verification preserves this existing identity scheme.
+`byteLength` measures the UTF-8 JSONL bytes.
+
 Every method finishes optimization before the first untouched-final-test dispatch. Under `require-complete`, missing, malformed, producer-mismatched, interrupted, or denominator-incomplete evidence aborts at that boundary.
 
 ## Verification boundary
@@ -155,7 +186,8 @@ Every method finishes optimization before the first untouched-final-test dispatc
 
 `assertSearchHistoryMatchesReplay()` additionally proves that the envelope was derived from the supplied canonical replay.
 
-Neither function fetches or retains the ledger artifact. A skeptical consumer must resolve `receipt.ledger`, verify its digest and byte length, replay it with `SearchLedger`, and then call `assertSearchHistoryMatchesReplay()`.
+`verifySearchHistoryArtifact(receipt, storage)` resolves bytes and runs both checks through the canonical journal codec.
+The two receipt-only functions do not fetch or retain the ledger artifact. A skeptical consumer must resolve `receipt.ledger`, verify its digest and byte length, replay it with `SearchLedger`, and then call `assertSearchHistoryMatchesReplay()`.
 
 The receipt does not prove that:
 
@@ -175,3 +207,18 @@ Those claims require held-out evaluation, artifact retention, provenance verific
 - **Knowledge** owns what information was visible, retrieved, and selected for use.
 - **Interface** owns portable profiles, diffs, identities, and digest primitives.
 - **SDKs** should automate these owner contracts, not copy their types or introduce another optimizer loop.
+
+## Bind final measurements to execution evidence
+
+Both complete-method workflows accept optional `evidence: CampaignEvidenceContext`.
+It requires the caller's pursuit, evaluator, environment, authority, and attestation provenance.
+Eval does not infer independent authority or certify those external declarations.
+
+Each measured baseline and winner receives the existing `EvidenceReceipt` format.
+Eval derives candidate, input-set, output, and result digests from the executed surface and complete campaign.
+A missing or deferred final measurement cannot produce a receipt.
+Receipts describe measurements; they do not override the release gate or replace the method's selected winner.
+
+`createCampaignEvidenceReceipt` on `/experiment` provides the same binding for other complete campaign consumers.
+Changing an output changes its output digest; changing a judge result changes its measurement digest.
+The final receipt retains caller authority, including `candidate-self-report`, without upgrading it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-eval",
-  "version": "0.175.0",
+  "version": "0.177.0",
   "description": "Evaluate and improve AI agents from runs, traces, judges, and feedback. Compare candidates, cluster failures, measure lift, and gate releases.",
   "homepage": "https://github.com/tangle-network/agent-eval#readme",
   "repository": {

package/dist/attestation-XSUpbc4o.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attestation-XSUpbc4o.js","names":[],"sources":["../src/experiment-tracker.ts","../src/attestation.ts"],"sourcesContent":["/**\n * Experiment tracker — git-provenanced experiment log with N-rep stats and a\n * KEEP / REGRESSION / NOISE verdict against a parent.\n *\n * Every loop the fleet runs reduces to the same question: \"I ran the candidate\n * N times — is the median measurably better than the parent, or is the delta\n * inside the noise band?\" The hand-rolled copies bake a fixed score scale\n * (percentage points), a fixed store path (`.evolve/experiments-v2.json`), and\n * `execSync('git …')` straight into the module. This is the canonical version:\n * provenance and persistence are injected, thresholds are configurable, and the\n * stats + verdict are pure functions you can unit-test without a git repo or a\n * filesystem.\n *\n * Stats per experiment: median / mean / min / max / iqr / stddev / passRate /\n * n, plus a `stable` flag (`iqr < iqrUnstableAbove && stddev < stddevUnstableAbove`).\n *\n * Verdict against a parent (both must have `n >= minRepsForVerdict`):\n *   - NOISE       — the candidate is too unstable to judge (`!stable`)\n *   - KEEP        — `medianDelta >  keepThreshold`\n *   - REGRESSION  — `medianDelta < -regressionThreshold`\n *   - NOISE       — otherwise (delta inside the band)\n * With no parent (or insufficient reps) the verdict is the neutral ITERATE.\n */\n\nimport { execSync } from 'node:child_process'\nimport type { EvidenceRef } from './analyst/types'\nimport { iqr } from './baseline'\nimport { ValidationError } from './errors'\n\n/** Verdict for one experiment relative to its parent. ITERATE is the neutral\n *  \"keep collecting reps / no parent to compare against\" state. */\nexport type ExperimentVerdict = 'KEEP' | 'ITERATE' | 'NOISE' | 'REGRESSION'\n\n/** Git provenance for the working tree an experiment was run from. */\nexport interface ExperimentProvenance {\n  /** Commit sha (short or full — the tracker does not interpret it). */\n  commit: string\n  /** First line of the commit message. */\n  message: string\n  /** Files changed vs the parent commit, or a marker like 'uncommitted'. */\n  changedFiles: string[]\n}\n\n/** A single repetition of an experiment, carrying the score the verdict is\n *  computed on plus any free-form per-rep metrics the consumer wants kept. */\nexport interface ExperimentRep {\n  /** 0-indexed repetition number within the experiment. */\n  rep: number\n  /** The score this rep is judged on (same scale as the thresholds). */\n  score: number\n  /** ISO timestamp the rep completed. */\n  timestamp: string\n  /** Stable execution/run identity that produced this score. */\n  runId?: string\n  /** Mechanically resolvable trace, artifact, metric, or finding evidence. */\n  evidence?: EvidenceRef[]\n  /** Whether this rep passed the consumer's own gate — folded into `passRate`. */\n  passed?: boolean\n  /** Free-form numeric metrics retained for later analysis. */\n  metrics?: Record<string, number>\n}\n\nexport interface ExperimentStats {\n  median: number\n  mean: number\n  min: number\n  max: number\n  /** Inter-quartile range of the rep scores. */\n  iqr: number\n  /** Population standard deviation of the rep scores. */\n  stddev: number\n  /** Fraction of reps with `passed === true`, over reps that set `passed`.\n   *  null when no rep declared a pass/fail outcome. */\n  passRate: number | null\n  /** Number of reps. */\n  n: number\n  /** True when the sample is tight enough to trust for a verdict. */\n  stable: boolean\n}\n\nexport interface Experiment {\n  /** Stable id for the experiment. */\n  id: string\n  /** Free-form label / config descriptor. */\n  label: string\n  /** Git provenance captured when the experiment was created. */\n  provenance: ExperimentProvenance\n  /** Parent experiment id this candidate is compared against, if any. */\n  parentId?: string\n  /** One-line summary of what changed from the parent. */\n  changeSummary: string\n  reps: ExperimentRep[]\n  stats: ExperimentStats\n  verdict: ExperimentVerdict\n  /** ISO timestamp the experiment was created. */\n  createdAt: string\n}\n\nexport interface ImprovementThresholds {\n  /** medianDelta strictly above this ⇒ KEEP. Default 5. */\n  keepThreshold?: number\n  /** medianDelta strictly below the negative of this ⇒ REGRESSION. Default 5. */\n  regressionThreshold?: number\n  /** iqr at or above this ⇒ unstable. Default 10. */\n  iqrUnstableAbove?: number\n  /** stddev at or above this ⇒ unstable. Default Infinity (iqr-only stability). */\n  stddevUnstableAbove?: number\n  /** Reps required on BOTH candidate and parent before a verdict is rendered.\n   *  Default 3. */\n  minRepsForVerdict?: number\n}\n\nexport interface ImprovementVerdictResult {\n  verdict: ExperimentVerdict\n  /** candidate.median − parent.median; null when no parent or insufficient reps. */\n  medianDelta: number | null\n  /** Human-readable reason for the verdict — for dashboards and logs. */\n  reason: string\n}\n\nconst DEFAULTS: Required<ImprovementThresholds> = {\n  keepThreshold: 5,\n  regressionThreshold: 5,\n  iqrUnstableAbove: 10,\n  stddevUnstableAbove: Number.POSITIVE_INFINITY,\n  minRepsForVerdict: 3,\n}\n\nfunction resolveThresholds(t: ImprovementThresholds | undefined): Required<ImprovementThresholds> {\n  const r = { ...DEFAULTS, ...(t ?? {}) }\n  if (r.keepThreshold < 0) {\n    throw new ValidationError(\n      `experiment-tracker: keepThreshold must be >= 0, got ${r.keepThreshold}`,\n    )\n  }\n  if (r.regressionThreshold < 0) {\n    throw new ValidationError(\n      `experiment-tracker: regressionThreshold must be >= 0, got ${r.regressionThreshold}`,\n    )\n  }\n  if (r.minRepsForVerdict < 1) {\n    throw new ValidationError(\n      `experiment-tracker: minRepsForVerdict must be >= 1, got ${r.minRepsForVerdict}`,\n    )\n  }\n  return r\n}\n\nfunction median(sorted: number[]): number {\n  const n = sorted.length\n  if (n === 0) return 0\n  const mid = Math.floor(n / 2)\n  return n % 2 === 0 ? (sorted[mid - 1]! + sorted[mid]!) / 2 : sorted[mid]!\n}\n\n/** Population standard deviation (÷n). 0 for fewer than 2 values. */\nfunction stddev(values: number[], mean: number): number {\n  if (values.length < 2) return 0\n  const variance = values.reduce((acc, v) => acc + (v - mean) ** 2, 0) / values.length\n  return Math.sqrt(variance)\n}\n\n/**\n * Compute the N-rep statistics for a set of reps. Pure — no I/O. The `stable`\n * flag is the trust gate the verdict depends on: a sample whose spread exceeds\n * the configured bounds can't distinguish a real delta from run-to-run noise.\n */\nexport function computeExperimentStats(\n  reps: ExperimentRep[],\n  thresholds?: ImprovementThresholds,\n): ExperimentStats {\n  const t = resolveThresholds(thresholds)\n  const n = reps.length\n  if (n === 0) {\n    return {\n      median: 0,\n      mean: 0,\n      min: 0,\n      max: 0,\n      iqr: 0,\n      stddev: 0,\n      passRate: null,\n      n: 0,\n      stable: false,\n    }\n  }\n  const scores = reps.map((r) => {\n    if (!Number.isFinite(r.score)) {\n      throw new ValidationError(`experiment-tracker: rep ${r.rep} has non-finite score ${r.score}`)\n    }\n    return r.score\n  })\n  const sorted = [...scores].sort((a, b) => a - b)\n  const mean = scores.reduce((s, v) => s + v, 0) / n\n  const sd = stddev(scores, mean)\n  const spread = iqr(scores)\n  const rated = reps.filter((r) => typeof r.passed === 'boolean')\n  const passRate = rated.length === 0 ? null : rated.filter((r) => r.passed).length / rated.length\n  const stable = spread < t.iqrUnstableAbove && sd < t.stddevUnstableAbove\n  return {\n    median: median(sorted),\n    mean,\n    min: sorted[0]!,\n    max: sorted[n - 1]!,\n    iqr: spread,\n    stddev: sd,\n    passRate,\n    n,\n    stable,\n  }\n}\n\n/**\n * Verdict for a candidate against its parent. Pure — operates on already-computed\n * stats. KEEP/REGRESSION require both sides to have `>= minRepsForVerdict` reps\n * AND the candidate to be `stable`; otherwise the result is NOISE (unstable) or\n * ITERATE (not enough reps / no parent).\n */\nexport function improvementVerdict(\n  candidate: ExperimentStats,\n  parent: ExperimentStats | null,\n  thresholds?: ImprovementThresholds,\n): ImprovementVerdictResult {\n  const t = resolveThresholds(thresholds)\n  if (!parent) {\n    return {\n      verdict: 'ITERATE',\n      medianDelta: null,\n      reason: 'no parent experiment to compare against',\n    }\n  }\n  if (candidate.n < t.minRepsForVerdict || parent.n < t.minRepsForVerdict) {\n    return {\n      verdict: 'ITERATE',\n      medianDelta: null,\n      reason: `need >= ${t.minRepsForVerdict} reps on both sides (candidate n=${candidate.n}, parent n=${parent.n})`,\n    }\n  }\n  if (!candidate.stable) {\n    return {\n      verdict: 'NOISE',\n      medianDelta: candidate.median - parent.median,\n      reason: `candidate unstable (iqr=${candidate.iqr}, stddev=${candidate.stddev.toFixed(2)})`,\n    }\n  }\n  const medianDelta = candidate.median - parent.median\n  if (medianDelta > t.keepThreshold) {\n    return { verdict: 'KEEP', medianDelta, reason: `median +${medianDelta} > +${t.keepThreshold}` }\n  }\n  if (medianDelta < -t.regressionThreshold) {\n    return {\n      verdict: 'REGRESSION',\n      medianDelta,\n      reason: `median ${medianDelta} < -${t.regressionThreshold}`,\n    }\n  }\n  return {\n    verdict: 'NOISE',\n    medianDelta,\n    reason: `median delta ${medianDelta} inside noise band [-${t.regressionThreshold}, +${t.keepThreshold}]`,\n  }\n}\n\n// ── Provenance + persistence seams ───────────────────────────────────\n\n/** Reads git provenance for the working tree. Inject a fake in tests; the\n *  default implementation shells out to `git`. */\nexport type ProvenanceReader = () => ExperimentProvenance | Promise<ExperimentProvenance>\n\n/** Persistence seam for the experiment log. Inject in-memory in tests; the\n *  filesystem implementation is `fileExperimentStore`. */\nexport interface ExperimentStore {\n  load(): Promise<Experiment[]>\n  save(experiments: Experiment[]): Promise<void>\n}\n\n/**\n * Default provenance reader: `git rev-parse HEAD`, the subject line, and the\n * files changed vs `HEAD~1`. Fail-loud — a tracker that silently logs\n * `commit: 'unknown'` corrupts the provenance the whole point of the log is to\n * carry. When the working tree genuinely has no parent commit, pass an override.\n */\nexport const gitProvenanceReader: ProvenanceReader = () => {\n  const run = (cmd: string): string => execSync(cmd, { encoding: 'utf8' }).trim()\n  const commit = run('git rev-parse --short HEAD')\n  const message = run('git log -1 --format=%s')\n  const changedRaw = run('git diff --name-only HEAD~1')\n  const changedFiles = changedRaw.length === 0 ? [] : changedRaw.split('\\n').filter(Boolean)\n  return { commit, message, changedFiles }\n}\n\n/** In-memory store — the default when no persistence is wanted (tests, ephemeral\n *  runs). State lives on the instance. */\nexport function inMemoryExperimentStore(initial: Experiment[] = []): ExperimentStore {\n  let state = initial.map((e) => structuredClone(e))\n  return {\n    async load() {\n      return state.map((e) => structuredClone(e))\n    },\n    async save(experiments) {\n      state = experiments.map((e) => structuredClone(e))\n    },\n  }\n}\n\n/** Filesystem store — a single JSON array at `path`, created on first save. */\nexport function fileExperimentStore(path: string): ExperimentStore {\n  return {\n    async load() {\n      const fs = await import('node:fs/promises')\n      try {\n        const raw = await fs.readFile(path, 'utf8')\n        const parsed = JSON.parse(raw)\n        if (!Array.isArray(parsed)) {\n          throw new ValidationError(`experiment-tracker: store at ${path} is not a JSON array`)\n        }\n        return parsed as Experiment[]\n      } catch (err) {\n        if ((err as NodeJS.ErrnoException).code === 'ENOENT') return []\n        throw err\n      }\n    },\n    async save(experiments) {\n      const fs = await import('node:fs/promises')\n      const pathMod = await import('node:path')\n      await fs.mkdir(pathMod.dirname(path), { recursive: true })\n      await fs.writeFile(path, JSON.stringify(experiments, null, 2), 'utf8')\n    },\n  }\n}\n\nexport interface ExperimentTrackerOptions {\n  store?: ExperimentStore\n  provenanceReader?: ProvenanceReader\n  thresholds?: ImprovementThresholds\n  /** Clock seam for deterministic timestamps in tests. Default `Date.now`. */\n  now?: () => number\n}\n\nexport interface CreateExperimentInput {\n  id: string\n  label: string\n  changeSummary: string\n  parentId?: string\n  /** Override provenance instead of reading from git (e.g. CI metadata). */\n  provenance?: ExperimentProvenance\n}\n\n/**\n * Stateful tracker over an `ExperimentStore`. Create an experiment (provenance\n * is captured once), append reps as they complete (stats + verdict recompute on\n * every append), and read the log back for a dashboard. All persistence and git\n * access flow through the injected seams, so the tracker is fully testable\n * without a repo or disk.\n */\nexport class ExperimentTracker {\n  private readonly store: ExperimentStore\n  private readonly provenanceReader: ProvenanceReader\n  private readonly thresholds: Required<ImprovementThresholds>\n  private readonly now: () => number\n\n  constructor(options: ExperimentTrackerOptions = {}) {\n    this.store = options.store ?? inMemoryExperimentStore()\n    this.provenanceReader = options.provenanceReader ?? gitProvenanceReader\n    this.thresholds = resolveThresholds(options.thresholds)\n    this.now = options.now ?? Date.now\n  }\n\n  async create(input: CreateExperimentInput): Promise<Experiment> {\n    const experiments = await this.store.load()\n    if (experiments.some((e) => e.id === input.id)) {\n      throw new ValidationError(`experiment-tracker: experiment id \"${input.id}\" already exists`)\n    }\n    if (input.parentId && !experiments.some((e) => e.id === input.parentId)) {\n      throw new ValidationError(\n        `experiment-tracker: parent experiment \"${input.parentId}\" not found`,\n      )\n    }\n    const provenance = input.provenance ?? (await this.provenanceReader())\n    const experiment: Experiment = {\n      id: input.id,\n      label: input.label,\n      provenance,\n      parentId: input.parentId,\n      changeSummary: input.changeSummary,\n      reps: [],\n      stats: computeExperimentStats([], this.thresholds),\n      verdict: 'ITERATE',\n      createdAt: new Date(this.now()).toISOString(),\n    }\n    experiments.push(experiment)\n    await this.store.save(experiments)\n    return structuredClone(experiment)\n  }\n\n  /** Append a rep (its `rep` index defaults to the current rep count) and\n   *  recompute stats + verdict. Returns the updated experiment. */\n  async addRep(\n    experimentId: string,\n    rep: Omit<ExperimentRep, 'rep' | 'timestamp'> & { rep?: number; timestamp?: string },\n  ): Promise<Experiment> {\n    const experiments = await this.store.load()\n    const exp = experiments.find((e) => e.id === experimentId)\n    if (!exp)\n      throw new ValidationError(`experiment-tracker: experiment \"${experimentId}\" not found`)\n    if (rep.runId !== undefined && rep.runId.trim().length === 0) {\n      throw new ValidationError('experiment-tracker: rep runId must be non-empty when present')\n    }\n    const evidence = rep.evidence?.map((reference, index) => {\n      if (reference.uri.trim().length === 0) {\n        throw new ValidationError(\n          `experiment-tracker: rep evidence[${index}].uri must be non-empty`,\n        )\n      }\n      return {\n        kind: reference.kind,\n        uri: reference.uri,\n        ...(reference.excerpt === undefined ? {} : { excerpt: reference.excerpt }),\n      }\n    })\n    const fullRep: ExperimentRep = {\n      rep: rep.rep ?? exp.reps.length,\n      score: rep.score,\n      timestamp: rep.timestamp ?? new Date(this.now()).toISOString(),\n      ...(rep.runId === undefined ? {} : { runId: rep.runId }),\n      ...(evidence === undefined ? {} : { evidence }),\n      ...(rep.passed === undefined ? {} : { passed: rep.passed }),\n      ...(rep.metrics === undefined ? {} : { metrics: { ...rep.metrics } }),\n    }\n    exp.reps.push(fullRep)\n    exp.stats = computeExperimentStats(exp.reps, this.thresholds)\n    const parent = exp.parentId ? experiments.find((e) => e.id === exp.parentId) : undefined\n    exp.verdict = improvementVerdict(exp.stats, parent?.stats ?? null, this.thresholds).verdict\n    await this.store.save(experiments)\n    return structuredClone(exp)\n  }\n\n  async get(experimentId: string): Promise<Experiment | undefined> {\n    const experiments = await this.store.load()\n    const found = experiments.find((e) => e.id === experimentId)\n    return found ? structuredClone(found) : undefined\n  }\n\n  async list(): Promise<Experiment[]> {\n    return this.store.load()\n  }\n\n  /** Full verdict (not just the enum) for an experiment vs its parent. */\n  async verdictFor(experimentId: string): Promise<ImprovementVerdictResult> {\n    const experiments = await this.store.load()\n    const exp = experiments.find((e) => e.id === experimentId)\n    if (!exp)\n      throw new ValidationError(`experiment-tracker: experiment \"${experimentId}\" not found`)\n    const parent = exp.parentId ? experiments.find((e) => e.id === exp.parentId) : undefined\n    return improvementVerdict(exp.stats, parent?.stats ?? null, this.thresholds)\n  }\n}\n","/**\n * Reproducibility attestation for any serializable report object.\n *\n * `attest()` binds a report to its content address (sha-256 over canonical\n * JSON) AND binds that address to the provenance needed to reproduce it:\n * model versions, seeds, price-table hash, code SHA, inputs hash. The outer\n * `envelopeHash` prevents provenance from being rewritten while leaving the\n * report hash valid.\n *\n * Layering: content-addressing is the substrate's job; cryptographic SIGNING\n * (who vouches for the attestation, key management, transparency logs) is the\n * consumer's layer on top. An `AttestedReport` is a stable byte-identical\n * payload a consumer can sign — the substrate never holds keys.\n *\n * Generic by design: the report parameter is ANY value `canonicalJson`\n * accepts (campaign results, fuzz capsules, scorecards, cost ledgers). Do not\n * couple this module to a specific report schema.\n */\n\nimport { contentHash } from './verdict-cache'\n\n/** Hash scheme identifier carried by every attestation. A verifier rejects\n * unknown algorithms instead of guessing. */\nexport const ATTESTATION_ALGORITHM = 'sha256/canonical-json' as const\n\nexport interface AttestationProvenance {\n  /** Every model involved in producing the report, name → version/id. */\n  modelVersions: Record<string, string>\n  /** RNG seeds the run was driven by, when seeded. */\n  seeds?: number[]\n  /** Content hash of the price table used for cost figures — cost numbers\n   * are only reproducible against the same prices. */\n  priceTableHash?: string\n  /** Git SHA of the code that produced the report. */\n  codeSha: string\n  /** Content hash of the input set (scenarios, dataset manifest, ...). */\n  inputsHash?: string\n  /** ISO-8601 timestamp, caller-supplied — the substrate stays clock-free\n   * so attestation is deterministic and testable. */\n  createdAt: string\n}\n\nexport interface AttestedReport {\n  /** Hex sha-256 over the canonical JSON of the report. */\n  reportHash: string\n  provenance: AttestationProvenance\n  algorithm: typeof ATTESTATION_ALGORITHM\n  /**\n   * Hex sha-256 over `{ reportHash, provenance, algorithm }`. New attestations\n   * always carry it. Optional only so persisted pre-envelope attestations can\n   * still be read and explicitly recognized as legacy by callers.\n   */\n  envelopeHash?: string\n}\n\nexport interface AttestationVerification {\n  valid: boolean\n  /** Populated iff `valid` is false — names the exact mismatch. */\n  reason?: string\n  /** True only for a valid pre-envelope attestation whose provenance is not cryptographically bound. */\n  legacyUnboundProvenance?: true\n}\n\nfunction envelopeMaterial(\n  reportHash: string,\n  provenance: AttestationProvenance,\n  algorithm: typeof ATTESTATION_ALGORITHM,\n): object {\n  return { reportHash, provenance, algorithm }\n}\n\n/**\n * Content-address a report and bind it to its provenance. Throws (via\n * `canonicalJson`) if the report or provenance contains undefined / function /\n * symbol / non-finite numbers — an attestation that cannot be unambiguously\n * serialized cannot be trusted.\n */\nexport function attest(report: unknown, provenance: AttestationProvenance): AttestedReport {\n  const reportHash = contentHash(report)\n  const algorithm = ATTESTATION_ALGORITHM\n  return {\n    reportHash,\n    provenance,\n    algorithm,\n    envelopeHash: contentHash(envelopeMaterial(reportHash, provenance, algorithm)),\n  }\n}\n\n/**\n * Verify a report against its attestation. Returns a typed outcome rather\n * than throwing: an unverifiable report (e.g. one that no longer\n * canonicalizes) is a verification failure with the cause in `reason`, not a\n * crash — verifiers run in pipelines that must record WHY, not die.\n *\n * Legacy attestations without `envelopeHash` remain readable, but verification\n * explicitly marks their provenance as unbound so a promotion path can refuse\n * them instead of accidentally treating old metadata as cryptographic proof.\n */\nexport function verifyAttestation(\n  report: unknown,\n  attested: AttestedReport,\n): AttestationVerification {\n  if (attested.algorithm !== ATTESTATION_ALGORITHM) {\n    return {\n      valid: false,\n      reason: `unknown algorithm '${attested.algorithm}' — this verifier only checks '${ATTESTATION_ALGORITHM}'`,\n    }\n  }\n  let recomputed: string\n  try {\n    recomputed = contentHash(report)\n  } catch (err) {\n    return {\n      valid: false,\n      reason: `report is not canonicalizable: ${err instanceof Error ? err.message : String(err)}`,\n    }\n  }\n  if (recomputed !== attested.reportHash) {\n    return {\n      valid: false,\n      reason: `report hash mismatch: attested ${attested.reportHash}, recomputed ${recomputed}`,\n    }\n  }\n\n  if (attested.envelopeHash === undefined) {\n    return { valid: true, legacyUnboundProvenance: true }\n  }\n\n  let envelopeHash: string\n  try {\n    envelopeHash = contentHash(\n      envelopeMaterial(attested.reportHash, attested.provenance, attested.algorithm),\n    )\n  } catch (err) {\n    return {\n      valid: false,\n      reason: `attestation provenance is not canonicalizable: ${err instanceof Error ? err.message : String(err)}`,\n    }\n  }\n  if (envelopeHash !== attested.envelopeHash) {\n    return {\n      valid: false,\n      reason: `attestation envelope hash mismatch: attested ${attested.envelopeHash}, recomputed ${envelopeHash}`,\n    }\n  }\n\n  return { valid: true }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwHA,MAAM,WAA4C;CAChD,eAAe;CACf,qBAAqB;CACrB,kBAAkB;CAClB,qBAAqB,OAAO;CAC5B,mBAAmB;AACrB;AAEA,SAAS,kBAAkB,GAAuE;CAChG,MAAM,IAAI;EAAE,GAAG;EAAU,GAAI,KAAK,CAAC;CAAG;CACtC,IAAI,EAAE,gBAAgB,GACpB,MAAM,IAAI,gBACR,uDAAuD,EAAE,eAC3D;CAEF,IAAI,EAAE,sBAAsB,GAC1B,MAAM,IAAI,gBACR,6DAA6D,EAAE,qBACjE;CAEF,IAAI,EAAE,oBAAoB,GACxB,MAAM,IAAI,gBACR,2DAA2D,EAAE,mBAC/D;CAEF,OAAO;AACT;AAEA,SAAS,OAAO,QAA0B;CACxC,MAAM,IAAI,OAAO;CACjB,IAAI,MAAM,GAAG,OAAO;CACpB,MAAM,MAAM,KAAK,MAAM,IAAI,CAAC;CAC5B,OAAO,IAAI,MAAM,KAAK,OAAO,MAAM,KAAM,OAAO,QAAS,IAAI,OAAO;AACtE;;AAGA,SAAS,OAAO,QAAkB,MAAsB;CACtD,IAAI,OAAO,SAAS,GAAG,OAAO;CAC9B,MAAM,WAAW,OAAO,QAAQ,KAAK,MAAM,OAAO,IAAI,SAAS,GAAG,CAAC,IAAI,OAAO;CAC9E,OAAO,KAAK,KAAK,QAAQ;AAC3B;;;;;;AAOA,SAAgB,uBACd,MACA,YACiB;CACjB,MAAM,IAAI,kBAAkB,UAAU;CACtC,MAAM,IAAI,KAAK;CACf,IAAI,MAAM,GACR,OAAO;EACL,QAAQ;EACR,MAAM;EACN,KAAK;EACL,KAAK;EACL,KAAK;EACL,QAAQ;EACR,UAAU;EACV,GAAG;EACH,QAAQ;CACV;CAEF,MAAM,SAAS,KAAK,KAAK,MAAM;EAC7B,IAAI,CAAC,OAAO,SAAS,EAAE,KAAK,GAC1B,MAAM,IAAI,gBAAgB,2BAA2B,EAAE,IAAI,wBAAwB,EAAE,OAAO;EAE9F,OAAO,EAAE;CACX,CAAC;CACD,MAAM,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC;CAC/C,MAAM,OAAO,OAAO,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI;CACjD,MAAM,KAAK,OAAO,QAAQ,IAAI;CAC9B,MAAM,SAAS,IAAI,MAAM;CACzB,MAAM,QAAQ,KAAK,QAAQ,MAAM,OAAO,EAAE,WAAW,SAAS;CAC9D,MAAM,WAAW,MAAM,WAAW,IAAI,OAAO,MAAM,QAAQ,MAAM,EAAE,MAAM,CAAC,CAAC,SAAS,MAAM;CAC1F,MAAM,SAAS,SAAS,EAAE,oBAAoB,KAAK,EAAE;CACrD,OAAO;EACL,QAAQ,OAAO,MAAM;EACrB;EACA,KAAK,OAAO;EACZ,KAAK,OAAO,IAAI;EAChB,KAAK;EACL,QAAQ;EACR;EACA;EACA;CACF;AACF;;;;;;;AAQA,SAAgB,mBACd,WACA,QACA,YAC0B;CAC1B,MAAM,IAAI,kBAAkB,UAAU;CACtC,IAAI,CAAC,QACH,OAAO;EACL,SAAS;EACT,aAAa;EACb,QAAQ;CACV;CAEF,IAAI,UAAU,IAAI,EAAE,qBAAqB,OAAO,IAAI,EAAE,mBACpD,OAAO;EACL,SAAS;EACT,aAAa;EACb,QAAQ,WAAW,EAAE,kBAAkB,mCAAmC,UAAU,EAAE,aAAa,OAAO,EAAE;CAC9G;CAEF,IAAI,CAAC,UAAU,QACb,OAAO;EACL,SAAS;EACT,aAAa,UAAU,SAAS,OAAO;EACvC,QAAQ,2BAA2B,UAAU,IAAI,WAAW,UAAU,OAAO,QAAQ,CAAC,EAAE;CAC1F;CAEF,MAAM,cAAc,UAAU,SAAS,OAAO;CAC9C,IAAI,cAAc,EAAE,eAClB,OAAO;EAAE,SAAS;EAAQ;EAAa,QAAQ,WAAW,YAAY,MAAM,EAAE;CAAgB;CAEhG,IAAI,cAAc,CAAC,EAAE,qBACnB,OAAO;EACL,SAAS;EACT;EACA,QAAQ,UAAU,YAAY,MAAM,EAAE;CACxC;CAEF,OAAO;EACL,SAAS;EACT;EACA,QAAQ,gBAAgB,YAAY,uBAAuB,EAAE,oBAAoB,KAAK,EAAE,cAAc;CACxG;AACF;;;;;;;AAqBA,MAAa,4BAA8C;CACzD,MAAM,OAAO,QAAwB,SAAS,KAAK,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK;CAC9E,MAAM,SAAS,IAAI,4BAA4B;CAC/C,MAAM,UAAU,IAAI,wBAAwB;CAC5C,MAAM,aAAa,IAAI,6BAA6B;CAEpD,OAAO;EAAE;EAAQ;EAAS,cADL,WAAW,WAAW,IAAI,CAAC,IAAI,WAAW,MAAM,IAAI,CAAC,CAAC,OAAO,OAAO;CAClD;AACzC;;;AAIA,SAAgB,wBAAwB,UAAwB,CAAC,GAAoB;CACnF,IAAI,QAAQ,QAAQ,KAAK,MAAM,gBAAgB,CAAC,CAAC;CACjD,OAAO;EACL,MAAM,OAAO;GACX,OAAO,MAAM,KAAK,MAAM,gBAAgB,CAAC,CAAC;EAC5C;EACA,MAAM,KAAK,aAAa;GACtB,QAAQ,YAAY,KAAK,MAAM,gBAAgB,CAAC,CAAC;EACnD;CACF;AACF;;AAGA,SAAgB,oBAAoB,MAA+B;CACjE,OAAO;EACL,MAAM,OAAO;GACX,MAAM,KAAK,MAAM,OAAO;GACxB,IAAI;IACF,MAAM,MAAM,MAAM,GAAG,SAAS,MAAM,MAAM;IAC1C,MAAM,SAAS,KAAK,MAAM,GAAG;IAC7B,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,gBAAgB,gCAAgC,KAAK,qBAAqB;IAEtF,OAAO;GACT,SAAS,KAAK;IACZ,IAAK,IAA8B,SAAS,UAAU,OAAO,CAAC;IAC9D,MAAM;GACR;EACF;EACA,MAAM,KAAK,aAAa;GACtB,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,UAAU,MAAM,OAAO;GAC7B,MAAM,GAAG,MAAM,QAAQ,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;GACzD,MAAM,GAAG,UAAU,MAAM,KAAK,UAAU,aAAa,MAAM,CAAC,GAAG,MAAM;EACvE;CACF;AACF;;;;;;;;AA0BA,IAAa,oBAAb,MAA+B;CAC7B;CACA;CACA;CACA;CAEA,YAAY,UAAoC,CAAC,GAAG;EAClD,KAAK,QAAQ,QAAQ,SAAS,wBAAwB;EACtD,KAAK,mBAAmB,QAAQ,oBAAoB;EACpD,KAAK,aAAa,kBAAkB,QAAQ,UAAU;EACtD,KAAK,MAAM,QAAQ,OAAO,KAAK;CACjC;CAEA,MAAM,OAAO,OAAmD;EAC9D,MAAM,cAAc,MAAM,KAAK,MAAM,KAAK;EAC1C,IAAI,YAAY,MAAM,MAAM,EAAE,OAAO,MAAM,EAAE,GAC3C,MAAM,IAAI,gBAAgB,sCAAsC,MAAM,GAAG,iBAAiB;EAE5F,IAAI,MAAM,YAAY,CAAC,YAAY,MAAM,MAAM,EAAE,OAAO,MAAM,QAAQ,GACpE,MAAM,IAAI,gBACR,0CAA0C,MAAM,SAAS,YAC3D;EAEF,MAAM,aAAa,MAAM,cAAe,MAAM,KAAK,iBAAiB;EACpE,MAAM,aAAyB;GAC7B,IAAI,MAAM;GACV,OAAO,MAAM;GACb;GACA,UAAU,MAAM;GAChB,eAAe,MAAM;GACrB,MAAM,CAAC;GACP,OAAO,uBAAuB,CAAC,GAAG,KAAK,UAAU;GACjD,SAAS;GACT,WAAW,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;EAC9C;EACA,YAAY,KAAK,UAAU;EAC3B,MAAM,KAAK,MAAM,KAAK,WAAW;EACjC,OAAO,gBAAgB,UAAU;CACnC;;;CAIA,MAAM,OACJ,cACA,KACqB;EACrB,MAAM,cAAc,MAAM,KAAK,MAAM,KAAK;EAC1C,MAAM,MAAM,YAAY,MAAM,MAAM,EAAE,OAAO,YAAY;EACzD,IAAI,CAAC,KACH,MAAM,IAAI,gBAAgB,mCAAmC,aAAa,YAAY;EACxF,IAAI,IAAI,UAAU,KAAA,KAAa,IAAI,MAAM,KAAK,CAAC,CAAC,WAAW,GACzD,MAAM,IAAI,gBAAgB,8DAA8D;EAE1F,MAAM,WAAW,IAAI,UAAU,KAAK,WAAW,UAAU;GACvD,IAAI,UAAU,IAAI,KAAK,CAAC,CAAC,WAAW,GAClC,MAAM,IAAI,gBACR,oCAAoC,MAAM,wBAC5C;GAEF,OAAO;IACL,MAAM,UAAU;IAChB,KAAK,UAAU;IACf,GAAI,UAAU,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,UAAU,QAAQ;GAC1E;EACF,CAAC;EACD,MAAM,UAAyB;GAC7B,KAAK,IAAI,OAAO,IAAI,KAAK;GACzB,OAAO,IAAI;GACX,WAAW,IAAI,aAAa,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;GAC7D,GAAI,IAAI,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,IAAI,MAAM;GACtD,GAAI,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS;GAC7C,GAAI,IAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,IAAI,OAAO;GACzD,GAAI,IAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,QAAQ,EAAE;EACrE;EACA,IAAI,KAAK,KAAK,OAAO;EACrB,IAAI,QAAQ,uBAAuB,IAAI,MAAM,KAAK,UAAU;EAC5D,MAAM,SAAS,IAAI,WAAW,YAAY,MAAM,MAAM,EAAE,OAAO,IAAI,QAAQ,IAAI,KAAA;EAC/E,IAAI,UAAU,mBAAmB,IAAI,OAAO,QAAQ,SAAS,MAAM,KAAK,UAAU,CAAC,CAAC;EACpF,MAAM,KAAK,MAAM,KAAK,WAAW;EACjC,OAAO,gBAAgB,GAAG;CAC5B;CAEA,MAAM,IAAI,cAAuD;EAE/D,MAAM,SAAQ,MADY,KAAK,MAAM,KAAK,EAAA,CAChB,MAAM,MAAM,EAAE,OAAO,YAAY;EAC3D,OAAO,QAAQ,gBAAgB,KAAK,IAAI,KAAA;CAC1C;CAEA,MAAM,OAA8B;EAClC,OAAO,KAAK,MAAM,KAAK;CACzB;;CAGA,MAAM,WAAW,cAAyD;EACxE,MAAM,cAAc,MAAM,KAAK,MAAM,KAAK;EAC1C,MAAM,MAAM,YAAY,MAAM,MAAM,EAAE,OAAO,YAAY;EACzD,IAAI,CAAC,KACH,MAAM,IAAI,gBAAgB,mCAAmC,aAAa,YAAY;EACxF,MAAM,SAAS,IAAI,WAAW,YAAY,MAAM,MAAM,EAAE,OAAO,IAAI,QAAQ,IAAI,KAAA;EAC/E,OAAO,mBAAmB,IAAI,OAAO,QAAQ,SAAS,MAAM,KAAK,UAAU;CAC7E;AACF;;;;;;;;;;;;;;;;;;;;;;;ACjbA,MAAa,wBAAwB;AAwCrC,SAAS,iBACP,YACA,YACA,WACQ;CACR,OAAO;EAAE;EAAY;EAAY;CAAU;AAC7C;;;;;;;AAQA,SAAgB,OAAO,QAAiB,YAAmD;CACzF,MAAM,aAAa,YAAY,MAAM;CACrC,MAAM,YAAY;CAClB,OAAO;EACL;EACA;EACA;EACA,cAAc,YAAY,iBAAiB,YAAY,YAAY,SAAS,CAAC;CAC/E;AACF;;;;;;;;;;;AAYA,SAAgB,kBACd,QACA,UACyB;CACzB,IAAI,SAAS,cAAA,yBACX,OAAO;EACL,OAAO;EACP,QAAQ,sBAAsB,SAAS,UAAU,iCAAiC,sBAAsB;CAC1G;CAEF,IAAI;CACJ,IAAI;EACF,aAAa,YAAY,MAAM;CACjC,SAAS,KAAK;EACZ,OAAO;GACL,OAAO;GACP,QAAQ,kCAAkC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC3F;CACF;CACA,IAAI,eAAe,SAAS,YAC1B,OAAO;EACL,OAAO;EACP,QAAQ,kCAAkC,SAAS,WAAW,eAAe;CAC/E;CAGF,IAAI,SAAS,iBAAiB,KAAA,GAC5B,OAAO;EAAE,OAAO;EAAM,yBAAyB;CAAK;CAGtD,IAAI;CACJ,IAAI;EACF,eAAe,YACb,iBAAiB,SAAS,YAAY,SAAS,YAAY,SAAS,SAAS,CAC/E;CACF,SAAS,KAAK;EACZ,OAAO;GACL,OAAO;GACP,QAAQ,kDAAkD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;EAC3G;CACF;CACA,IAAI,iBAAiB,SAAS,cAC5B,OAAO;EACL,OAAO;EACP,QAAQ,gDAAgD,SAAS,aAAa,eAAe;CAC/F;CAGF,OAAO,EAAE,OAAO,KAAK;AACvB"}

package/dist/attestation-c1QvaBdX.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attestation-c1QvaBdX.d.ts","names":[],"sources":["../src/statistics/power-and-mde.ts","../src/statistics/random.ts","../src/experiment-tracker.ts","../src/attestation.ts"],"mappings":";;;;;;;;iBAWgB,mBAAmB;EACjC;EACA;EACA;EACA;;;;;;;;;;;iBAsBc,yBAAyB;EACvC;EACA;EACA;EACA;;;;;;;;iBAkBc,UAAU;EACxB;EACA;EACA;EACA;;;;;;;;;;;;;;;;iBAyBc,iBAAiB;EAC/B;EACA;EACA;EACA;EACA;;;;;;;iBAyBc,aAAa;EAC3B;EACA;EACA;EACA;EACA;;;;;;;;iBCrHc,WAAW;;;;;KCyBf;;UAGK;;EAEf;;EAEA;;EAEA;;;;UAKe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA,WAAW;;EAEX;;EAEA,UAAU;;UAGK;EACf;EACA;EACA;EACA;;EAEA;;EAEA;;;EAGA;;EAEA;;EAEA;;UAGe;;EAEf;;EAEA;;EAEA,YAAY;;EAEZ;;EAEA;EACA,MAAM;EACN,OAAO;EACP,SAAS;;EAET;;UAGe;;EAEf;;EAEA;;EAEA;;EAEA;;;EAGA;;UAGe;EACf,SAAS;;EAET;;EAEA;;;;;;;iBAkDc,uBACd,MAAM,iBACN,aAAa,wBACZ;;;;;;;iBAgDa,mBACd,WAAW,iBACX,QAAQ,wBACR,aAAa,wBACZ;;;KA6CS,yBAAyB,uBAAuB,QAAQ;;;UAInD;EACf,QAAQ,QAAQ;EAChB,KAAK,aAAa,eAAe;;;;iBAoBnB,wBAAwB,UAAS,eAAoB;;iBAarD,oBAAoB,eAAe;UAyBlC;EACf,QAAQ;EACR,mBAAmB;EACnB,aAAa;;EAEb;;UAGe;EACf;EACA;EACA;EACA;;EAEA,aAAa;;;;;;;;;cAUF;mBACM;mBACA;mBACA;mBACA;EAEjB,YAAY,UAAS;EAOf,OAAO,OAAO,wBAAwB,QAAQ;;;EA6B9C,OACJ,sBACA,KAAK,KAAK;IAAwC;IAAc;MAC/D,QAAQ;EAqCL,IAAI,uBAAuB,QAAQ;EAMnC,QAAQ,QAAQ;;EAKhB,WAAW,uBAAuB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;cCzarC;UAEI;;EAEf,eAAe;;EAEf;;;EAGA;;EAEA;;EAEA;;;EAGA;;UAGe;;EAEf;EACA,YAAY;EACZ,kBAAkB;;;;;;EAMlB;;UAGe;EACf;;EAEA;;EAEA;;;;;;;;iBAiBc,OAAO,iBAAiB,YAAY,wBAAwB;;;;;;;;;;;iBAqB5D,kBACd,iBACA,UAAU,iBACT"}