@typedstandards/civic-typed-harness 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -3,6 +3,57 @@
 Factual record of what changed per published version. Section references are
 to the Typed Standards specification unless noted otherwise.
 
+## 0.2.0 — 2026-08-17
+
+**Breaking: identity-bearing config is now required**
+([civic-ai-tools#153](https://github.com/npstorey/civic-ai-tools/issues/153) —
+the [ADR-0024](../../docs/adr/0024-evidence-path-configuration.md) posture at
+the domain layer: configuration that reaches signed output is absent-or-error,
+never defaulted). 0.1.0 applied the civicaitools.org reference deployment's
+identity via silently-applied default parameters; 0.2.0 removes every such
+default, so a bare call fails typecheck instead of attributing output to the
+reference deployment.
+
+- **Breaking — the config parameter is required in five API families:**
+  - `buildProvenanceGraph(trace, input, config)` — `ProvenanceConfig`
+    required (was defaulted to `CIVICAITOOLS_PROVENANCE_CONFIG`).
+  - `buildDatHereEnvironment(model, skillMcpServerUrl, config)` and
+    `deriveDatHereEnvelopeFields(input, config)` —
+    `DatHereEnvironmentConfig` required (was defaulted to
+    `CIVICAITOOLS_ENVIRONMENT_CONFIG`; the `host` field lands under the
+    envelope hash, so this default was the sharpest instance).
+  - `new TraceBuilder(config)` — `TraceBuilderConfig` required (was
+    defaulted to `CIVICAITOOLS_TRACE_CONFIG`). The intra-config
+    `now`/`randomBytes` operational fallbacks are unchanged — they are not
+    identity.
+  - `isDatasetKeyedSource(sourceId, registry)`,
+    `displayNameForSource(sourceId, registry)`,
+    `formatDataSourcesSummary(entries, registry)` — `CivicSourceRegistry`
+    required in all three (was defaulted to `CIVIC_SOURCE_REGISTRY`).
+- **Breaking — the model-agent description is omitted when unset.** The
+  module-private fallback description is deleted.
+  `ProvenanceConfig.modelAgentDescription` stays optional, but when unset the
+  PROV model agent now carries **no** `dcterms:description` field at all
+  (honest absence, not an empty string — ADR-0024 §B) instead of the fallback
+  text. `CIVICAITOOLS_PROVENANCE_CONFIG` now carries
+  `modelAgentDescription: 'Large language model via OpenRouter'`, so
+  reference-config output is byte-identical to 0.1.0.
+- **The reference-value exports remain.** `CIVICAITOOLS_PROVENANCE_CONFIG`,
+  `CIVICAITOOLS_ENVIRONMENT_CONFIG`, `CIVICAITOOLS_TRACE_CONFIG`, and
+  `CIVIC_SOURCE_REGISTRY` are still exported — they are the reference
+  deployment's values, which the reference app passes explicitly; they are no
+  longer applied on any caller's behalf.
+- **Migration:** pass the exported reference configs to reproduce 0.1.x
+  behavior byte-for-byte (see README §"Migrating from 0.1.x"). Golden
+  fixtures are unchanged; byte parity now comes from tests passing the
+  reference config explicitly, never from restored defaults.
+- **Enforcement:** `src/required-config.assert.ts` encodes the acceptance
+  condition — one `@ts-expect-error` bare call per changed signature —
+  so reintroducing a default parameter fails `npm run typecheck` and
+  `npm run build`.
+- Dependencies unchanged (`@typedstandards/produce-core` `^0.2.0` remains the
+  single runtime dependency).
+
 ## 0.1.0 — 2026-08-02
 
 Initial release: the civic **domain harness** for Typed Standards evidence

package/README.md

@@ -14,18 +14,36 @@ The civic **domain harness** for [Typed Standards](../../docs/architecture/typed
 
 **The internal boundary is load-bearing:** no capture module defines vocabulary, and no format-extension module walks a trace — this sentence reserves a future split of the format-extension group into its own package (a civic extension *of Typed Standards*, distinct from the civic *harness* proper) as a mechanical move rather than a re-partition. The boundary is enforced by `src/purity.test.ts`.
 
-## Config, not constants
+## Config, not constants — and required, never defaulted
 
-Every value that names a deployment is a **typed config input**, with the civicaitools.org demo values exported as overridable defaults:
+Every value that names a deployment is a **required typed config input**. As of 0.2.0 the harness never applies a deployment identity on a caller's behalf: a call that omits the config **fails typecheck** ([ADR-0024](../../docs/adr/0024-evidence-path-configuration.md)'s posture at the domain layer — configuration that reaches signed output is absent-or-error, never defaulted; the removal of the 0.1.x defaults is [civic-ai-tools#153](https://github.com/npstorey/civic-ai-tools/issues/153)). The `CIVICAITOOLS_*` exports are the civicaitools.org **reference deployment's values** — the reference app passes them explicitly; any other instance supplies its own.
 
-| Value | Config type | Demo default export |
+| Identity-bearing input | Config type | Reference-value export |
 |---|---|---|
-| Platform-agent identity/URL | `PlatformAgentConfig` | `CIVICAITOOLS_PLATFORM_AGENT` |
+| Platform-agent identity/URL | `PlatformAgentConfig` (`ProvenanceConfig.platformAgent`) | `CIVICAITOOLS_PLATFORM_AGENT` |
 | MCP source registry (server URLs, catalog types, display names) | `CivicSourceRegistry` | `CIVIC_SOURCE_REGISTRY` |
-| Tool-name → source-id resolver | `ToolSourceResolver` | `civicToolSourceResolver` |
-| Environment-extension `host` | `DatHereEnvironmentConfig` | `CIVICAITOOLS_ENVIRONMENT_CONFIG` |
+| Tool-name → source-id resolver (a caller-supplied input, not a silent default) | `ToolSourceResolver` | `civicToolSourceResolver` |
+| Environment-extension `host` (lands under the envelope hash) | `DatHereEnvironmentConfig` | `CIVICAITOOLS_ENVIRONMENT_CONFIG` |
 | Trace `service.name` / scope identity | `TraceBuilderConfig` | `CIVICAITOOLS_TRACE_CONFIG` |
-| Provenance build (all of the above + model-agent description) | `ProvenanceConfig` | `CIVICAITOOLS_PROVENANCE_CONFIG` |
+| Model-agent `dcterms:description` | `ProvenanceConfig.modelAgentDescription` (optional field) | carried in `CIVICAITOOLS_PROVENANCE_CONFIG` |
+| Provenance build (platform agent + source registry + model-agent description) | `ProvenanceConfig` | `CIVICAITOOLS_PROVENANCE_CONFIG` |
+
+`modelAgentDescription` is the one **optional** field among these: when unset, the PROV model agent carries no `dcterms:description` at all — the field is omitted from the graph (honest absence), never filled with a fallback. The `now`/`randomBytes` fields on `TraceBuilderConfig` are operational fallbacks (runtime clock/CSPRNG), not identity, and keep their intra-config defaults.
+
+### Migrating from 0.1.x
+
+0.1.x applied the reference deployment's identity via silent default parameters; 0.2.0 removes every such default — the breaking change is the point: a bare call that would have embedded civicaitools.org's identity in the output now fails to compile. To reproduce 0.1.x behavior byte-for-byte, pass the exported reference configs explicitly:
+
+```ts
+// 0.1.x — compiled, and silently attributed output to the reference deployment:
+const graph = buildProvenanceGraph(trace, input);
+
+// 0.2.0 — the same output, byte-identical, with the identity stated:
+import { CIVICAITOOLS_PROVENANCE_CONFIG } from '@typedstandards/civic-typed-harness';
+const graph = buildProvenanceGraph(trace, input, CIVICAITOOLS_PROVENANCE_CONFIG);
+```
+
+Likewise: `buildDatHereEnvironment` / `deriveDatHereEnvelopeFields` take `CIVICAITOOLS_ENVIRONMENT_CONFIG`, `new TraceBuilder(...)` takes `CIVICAITOOLS_TRACE_CONFIG`, and `isDatasetKeyedSource` / `displayNameForSource` / `formatDataSourcesSummary` take `CIVIC_SOURCE_REGISTRY`. The acceptance condition is encoded in `src/required-config.assert.ts`: reintroducing any of the removed defaults fails `npm run typecheck`.
 
 ## Purity contract (harness-grade)
 
@@ -37,7 +55,7 @@ Runtime dependency: **`@typedstandards/produce-core` (`^0.2.0`) only.** The veri
 
 ## Byte-compatibility
 
-The port is tested for **byte parity** against golden outputs captured from the reference implementation (`src/__fixtures__/website-golden.json`): with the demo default config, `buildProvenanceGraph` and `buildDataSources` reproduce the app's output byte-for-byte, and `RUBRIC_VERSION_SHA256` is asserted against the exact reference digest (moving the rubric changes no hashes). Fixture-level byte-compat against produce-core's `reference-golden.json` (`src/golden-reproduction.test.ts`) and the produce→verify composition round-trip (`src/composition-roundtrip.test.ts`) landed in S2 P2 and run with the suite.
+The port is tested for **byte parity** against golden outputs captured from the reference implementation (`src/__fixtures__/website-golden.json`): with the reference config passed explicitly, `buildProvenanceGraph` and `buildDataSources` reproduce the app's output byte-for-byte, and `RUBRIC_VERSION_SHA256` is asserted against the exact reference digest (moving the rubric changes no hashes). Fixture-level byte-compat against produce-core's `reference-golden.json` (`src/golden-reproduction.test.ts`) and the produce→verify composition round-trip (`src/composition-roundtrip.test.ts`) landed in S2 P2 and run with the suite.
 
 ## Develop
 

package/dist/capture/provenance.d.ts

@@ -30,11 +30,13 @@ export interface ProvenanceConfig {
      *  overrides when present (the skill is fetched from that source's MCP
      *  server). Default `socrata`. */
     skillSourceId?: string;
-    /** `dcterms:description` of the model agent. Default names the demo
-     *  deployment's model gateway. */
+    /** `dcterms:description` of the model agent. When unset, the model agent
+     *  carries no `dcterms:description` at all — the field is omitted from the
+     *  graph (honest omission), never filled with a fallback. */
     modelAgentDescription?: string;
 }
-/** Demo default: the civicaitools.org reference deployment. */
+/** The civicaitools.org reference deployment's values. Passed explicitly by
+ *  the reference app — never applied as a default. */
 export declare const CIVICAITOOLS_PROVENANCE_CONFIG: ProvenanceConfig;
 /**
  * Build a W3C PROV-O JSON-LD graph from an OTel trace and package metadata.
@@ -45,4 +47,4 @@ export declare const CIVICAITOOLS_PROVENANCE_CONFIG: ProvenanceConfig;
  * - Prompt, skill guidance, data responses, output → prov:Entity
  * - LLM model, MCP server, platform → prov:Agent
  */
-export declare function buildProvenanceGraph(trace: Record<string, unknown>, input: ProvenanceInput, config?: ProvenanceConfig): ProvGraph;
+export declare function buildProvenanceGraph(trace: Record<string, unknown>, input: ProvenanceInput, config: ProvenanceConfig): ProvGraph;

package/dist/capture/provenance.js

@@ -9,20 +9,23 @@
 //
 // Config-not-constants: the platform-agent identity, the source-agent
 // registry (server URLs), and the model-agent description are typed config
-// inputs; `CIVICAITOOLS_PROVENANCE_CONFIG` is the demo default and
-// reproduces the reference implementation's output byte-for-byte (property
-// insertion order is preserved throughout — the legacy hash chain's byte
-// contract).
+// inputs, and the config is REQUIRED — no deployment identity is ever
+// applied silently (ADR-0024 posture at the domain layer).
+// `CIVICAITOOLS_PROVENANCE_CONFIG` is the reference deployment's values,
+// which the reference app passes explicitly; with it, the builder reproduces
+// the reference implementation's output byte-for-byte (property insertion
+// order is preserved throughout — the legacy hash chain's byte contract).
 import { makeProvGraph, makeEntityNode, makeActivityNode, makeAgentNode, provRef, provUsed, provWasGeneratedBy, provWasDerivedFrom, provWasAssociatedWith, xsdDateTime, } from '@typedstandards/produce-core';
 import { hash } from "./trace.js";
 import { makeCivicProvContext, civicUrn, civicModelUrn, civicSourceAgentUrn, civicPlatformUrn, CIVICAITOOLS_PLATFORM_AGENT, } from "../format/vocabulary.js";
 import { CIVIC_SOURCE_REGISTRY, FALLBACK_SOURCE_ID, isDatasetKeyedSource, } from "../format/sources.js";
-/** Demo default: the civicaitools.org reference deployment. */
+/** The civicaitools.org reference deployment's values. Passed explicitly by
+ *  the reference app — never applied as a default. */
 export const CIVICAITOOLS_PROVENANCE_CONFIG = {
     platformAgent: CIVICAITOOLS_PLATFORM_AGENT,
     sourceRegistry: CIVIC_SOURCE_REGISTRY,
+    modelAgentDescription: 'Large language model via OpenRouter',
 };
-const DEFAULT_MODEL_AGENT_DESCRIPTION = 'Large language model via OpenRouter';
 // --- Helpers ---
 function getAttr(attrs, key) {
     const attr = attrs.find(a => a.key === key);
@@ -42,7 +45,7 @@ function nanoToIso(nano) {
  * - Prompt, skill guidance, data responses, output → prov:Entity
  * - LLM model, MCP server, platform → prov:Agent
  */
-export function buildProvenanceGraph(trace, input, config = CIVICAITOOLS_PROVENANCE_CONFIG) {
+export function buildProvenanceGraph(trace, input, config) {
     const otel = trace;
     const spans = otel?.resourceSpans?.[0]?.scopeSpans?.[0]?.spans || [];
     const { packageId, promptHash, promptText, outputText, model, portal } = input;
@@ -50,7 +53,6 @@ export function buildProvenanceGraph(trace, input, config = CIVICAITOOLS_PROVENA
     const registry = config.sourceRegistry;
     const fallbackSourceId = config.fallbackSourceId ?? FALLBACK_SOURCE_ID;
     const skillSourceId = config.skillSourceId ?? FALLBACK_SOURCE_ID;
-    const modelDescription = config.modelAgentDescription ?? DEFAULT_MODEL_AGENT_DESCRIPTION;
     const graph = [];
     // --- Entities ---
     // User prompt
@@ -78,11 +80,15 @@ export function buildProvenanceGraph(trace, input, config = CIVICAITOOLS_PROVENA
         'dcterms:description': 'AI-generated analysis output',
     }));
     // --- Agents ---
-    // LLM model
+    // LLM model. The description is emitted only when the config supplies one —
+    // absent otherwise (honest omission, same idiom as deriveProducerProfile /
+    // deriveSummaryEmission in ../format/dathere.ts).
     const modelUrn = civicModelUrn(model);
     graph.push(makeAgentNode(modelUrn, {
         'dcterms:title': model,
-        'dcterms:description': modelDescription,
+        ...(config.modelAgentDescription
+            ? { 'dcterms:description': config.modelAgentDescription }
+            : {}),
     }, ['prov:SoftwareAgent']));
     // MCP server agents — one per distinct data source that appears in the
     // trace. Tool spans carry `mcp.source`; evidence records captured before

package/dist/capture/trace.d.ts

@@ -50,7 +50,9 @@ export type TraceRandomBytes = (byteLength: number) => Uint8Array;
 /**
  * TraceBuilder identity + determinism inputs. The identity strings name the
  * capturing service, so they are per-instance config (config-not-constants);
- * the demo values are `CIVICAITOOLS_TRACE_CONFIG` below.
+ * the reference deployment's values are `CIVICAITOOLS_TRACE_CONFIG` below.
+ * The identity fields are required; `now`/`randomBytes` are operational
+ * fallbacks, not identity, and default to the runtime's clock and CSPRNG.
  */
 export interface TraceBuilderConfig {
     /** OTel resource `service.name`. */
@@ -67,8 +69,8 @@ export interface TraceBuilderConfig {
      *  `crypto.getRandomValues` (Web Crypto — Node 18+ and every browser). */
     randomBytes?: TraceRandomBytes;
 }
-/** Demo default: the civicaitools.org reference deployment's capture
- *  identity. */
+/** The civicaitools.org reference deployment's capture identity. Passed
+ *  explicitly by the reference app — never applied as a default. */
 export declare const CIVICAITOOLS_TRACE_CONFIG: TraceBuilderConfig;
 export declare class TraceBuilder {
     readonly traceId: string;
@@ -77,7 +79,7 @@ export declare class TraceBuilder {
     private readonly config;
     private readonly now;
     private readonly randomBytes;
-    constructor(config?: TraceBuilderConfig);
+    constructor(config: TraceBuilderConfig);
     private randomHex;
     private nowNano;
     /**

package/dist/capture/trace.js

@@ -5,8 +5,10 @@
 //     implements and @typedstandards/produce-core re-exports (0.2.0), removing
 //     the module's only `node:crypto` use — the harness is browser-safe.
 //   - The resource/scope identity constants (`service.name`, scope
-//     name/version, semconv version) are typed config inputs with the demo
-//     values as the exported default (config-not-constants, S2 brief §2).
+//     name/version, semconv version) are REQUIRED typed config inputs
+//     (config-not-constants, S2 brief §2); the reference deployment's values
+//     are exported as `CIVICAITOOLS_TRACE_CONFIG` for explicit use, never
+//     applied as a default.
 //
 // Clock + RNG are INHERENT to capture (span timestamps and ids are what
 // capture *is*): this module is the sanctioned exception to the package's
@@ -32,8 +34,8 @@ function attrsFromRecord(attrs) {
 export function hash(content) {
     return sha256Hex(content);
 }
-/** Demo default: the civicaitools.org reference deployment's capture
- *  identity. */
+/** The civicaitools.org reference deployment's capture identity. Passed
+ *  explicitly by the reference app — never applied as a default. */
 export const CIVICAITOOLS_TRACE_CONFIG = {
     serviceName: 'civic-ai-tools-website',
     scopeName: 'civic-ai-tools-evidence',
@@ -53,7 +55,7 @@ export class TraceBuilder {
     config;
     now;
     randomBytes;
-    constructor(config = CIVICAITOOLS_TRACE_CONFIG) {
+    constructor(config) {
         this.config = config;
         this.now = config.now ?? Date.now;
         this.randomBytes = config.randomBytes ?? defaultRandomBytes;

package/dist/format/dathere.d.ts

@@ -5,16 +5,18 @@ export declare const DATHERE_CONTENT_PROFILE = "datHere";
 export declare const DATHERE_PRODUCER_PROFILE = "ai-assisted-analysis/datHere";
 /** Reverse-DNS key of the auto-emitted environment extension. */
 export declare const ENVIRONMENT_EXTENSION_KEY = "org.civicaitools.environment";
-/** Demo default for the environment extension's `host` field: the
- *  civicaitools.org reference deployment. Config-not-constants — every other
- *  instance supplies its own via `DatHereEnvironmentConfig`. */
+/** The civicaitools.org reference deployment's value for the environment
+ *  extension's `host` field. Config-not-constants — every instance supplies
+ *  its own via `DatHereEnvironmentConfig`; the `host` lands under the
+ *  envelope hash, so it is never applied silently. */
 export declare const CIVICAITOOLS_ENVIRONMENT_HOST = "civicaitools.org";
 /** Per-instance configuration for the environment extension. */
 export interface DatHereEnvironmentConfig {
     /** Publishing host recorded in `org.civicaitools.environment.host`. */
     host: string;
 }
-/** The civicaitools.org demo default. */
+/** The civicaitools.org reference deployment's values. Passed explicitly by
+ *  the reference app — never applied as a default. */
 export declare const CIVICAITOOLS_ENVIRONMENT_CONFIG: DatHereEnvironmentConfig;
 /**
  * Derive the envelope's `producerProfile` (ADR-0006): the explicit value when
@@ -48,7 +50,7 @@ export declare function deriveSummaryEmission(contentProfile?: string, summary?:
  * skill-fetch span URL (the analysis's primary MCP server). Fields captured
  * honestly: `modelVersion` and `host`.
  */
-export declare function buildDatHereEnvironment(model: string, skillMcpServerUrl: string | undefined, config?: DatHereEnvironmentConfig): Record<string, unknown>;
+export declare function buildDatHereEnvironment(model: string, skillMcpServerUrl: string | undefined, config: DatHereEnvironmentConfig): Record<string, unknown>;
 /** Input to the composite datHere-policy derivation. */
 export interface DatHerePolicyInput {
     /** Model identifier (becomes `environment.modelVersion`). */
@@ -80,4 +82,4 @@ export interface DatHereEnvelopeFields {
  * the legacy canonicalization rule and any caller-supplied extensions —
  * byte-identical envelopes via the core's conditional spreads.
  */
-export declare function deriveDatHereEnvelopeFields(input: DatHerePolicyInput, config?: DatHereEnvironmentConfig): DatHereEnvelopeFields;
+export declare function deriveDatHereEnvelopeFields(input: DatHerePolicyInput, config: DatHereEnvironmentConfig): DatHereEnvelopeFields;

package/dist/format/dathere.js

@@ -25,11 +25,13 @@ export const DATHERE_CONTENT_PROFILE = 'datHere';
 export const DATHERE_PRODUCER_PROFILE = 'ai-assisted-analysis/datHere';
 /** Reverse-DNS key of the auto-emitted environment extension. */
 export const ENVIRONMENT_EXTENSION_KEY = 'org.civicaitools.environment';
-/** Demo default for the environment extension's `host` field: the
- *  civicaitools.org reference deployment. Config-not-constants — every other
- *  instance supplies its own via `DatHereEnvironmentConfig`. */
+/** The civicaitools.org reference deployment's value for the environment
+ *  extension's `host` field. Config-not-constants — every instance supplies
+ *  its own via `DatHereEnvironmentConfig`; the `host` lands under the
+ *  envelope hash, so it is never applied silently. */
 export const CIVICAITOOLS_ENVIRONMENT_HOST = 'civicaitools.org';
-/** The civicaitools.org demo default. */
+/** The civicaitools.org reference deployment's values. Passed explicitly by
+ *  the reference app — never applied as a default. */
 export const CIVICAITOOLS_ENVIRONMENT_CONFIG = {
     host: CIVICAITOOLS_ENVIRONMENT_HOST,
 };
@@ -78,7 +80,7 @@ export function deriveSummaryEmission(contentProfile, summary) {
  * skill-fetch span URL (the analysis's primary MCP server). Fields captured
  * honestly: `modelVersion` and `host`.
  */
-export function buildDatHereEnvironment(model, skillMcpServerUrl, config = CIVICAITOOLS_ENVIRONMENT_CONFIG) {
+export function buildDatHereEnvironment(model, skillMcpServerUrl, config) {
     const mcpServers = [];
     if (skillMcpServerUrl) {
         mcpServers.push({ url: skillMcpServerUrl });
@@ -97,7 +99,7 @@ export function buildDatHereEnvironment(model, skillMcpServerUrl, config = CIVIC
  * the legacy canonicalization rule and any caller-supplied extensions —
  * byte-identical envelopes via the core's conditional spreads.
  */
-export function deriveDatHereEnvelopeFields(input, config = CIVICAITOOLS_ENVIRONMENT_CONFIG) {
+export function deriveDatHereEnvelopeFields(input, config) {
     const extensions = { ...(input.extensions ?? {}) };
     if (input.contentProfile === DATHERE_CONTENT_PROFILE) {
         extensions[ENVIRONMENT_EXTENSION_KEY] = buildDatHereEnvironment(input.model, input.skillMcpServerUrl, config);

package/dist/format/sources.d.ts

@@ -21,14 +21,15 @@ export interface CivicSourceInfo {
 /** A source registry: source id → coordinates. Insertion order is emission
  *  order for aggregate `dataSources` entries. */
 export type CivicSourceRegistry = Record<string, CivicSourceInfo>;
-/** The civic default registry — the three demo sources. */
+/** The civic reference registry — the three demo sources. Passed explicitly
+ *  by the reference app — never applied as a default. */
 export declare const CIVIC_SOURCE_REGISTRY: CivicSourceRegistry;
 /** The source id untagged/pre-M9.1 captures fall back to. Socrata was the
  *  only source when those packages were written. */
 export declare const FALLBACK_SOURCE_ID = "socrata";
 /** Is this source dataset-keyed (one `dataSources` entry per dataset) rather
  *  than aggregate? Unknown ids are neither — they contribute no entry. */
-export declare function isDatasetKeyedSource(sourceId: string, registry?: CivicSourceRegistry): boolean;
+export declare function isDatasetKeyedSource(sourceId: string, registry: CivicSourceRegistry): boolean;
 /**
  * Resolve an MCP tool name to a source id, or `undefined` when unknown.
  * The data-source population function (capture group) takes one of these as
@@ -47,8 +48,8 @@ export declare const civicToolSourceResolver: ToolSourceResolver;
  *  capitalised form of the raw id so new sources render sensibly before the
  *  registry is updated. Missing ids coerce to the fallback source (pre-M9.3
  *  packages have no `sourceId` on dataSources entries). */
-export declare function displayNameForSource(sourceId: string | undefined | null, registry?: CivicSourceRegistry): string;
+export declare function displayNameForSource(sourceId: string | undefined | null, registry: CivicSourceRegistry): string;
 /** Format a `dataSources` array as a compact, de-duplicated summary string
  *  (middle-dot separated). Returns `null` when the array is empty or missing,
  *  letting callers render a fallback. */
-export declare function formatDataSourcesSummary(entries: DataSourceEntry[] | undefined, registry?: CivicSourceRegistry): string | null;
+export declare function formatDataSourcesSummary(entries: DataSourceEntry[] | undefined, registry: CivicSourceRegistry): string | null;

package/dist/format/sources.js

@@ -8,10 +8,12 @@
 //     app's MCP registry itself stays app-side; this is the harness's civic
 //     DEFAULT — callers supply their own resolver to add or replace sources).
 //
-// Endpoint URLs name the demo deployment's data plane, so the registry is a
-// typed config input (config-not-constants, S2 brief §2) with the civic
-// values as the exported default map.
-/** The civic default registry — the three demo sources. */
+// Endpoint URLs name a deployment's data plane, so the registry is a
+// REQUIRED typed config input (config-not-constants, S2 brief §2); the civic
+// demo map is exported as `CIVIC_SOURCE_REGISTRY` for explicit use, never
+// applied as a default.
+/** The civic reference registry — the three demo sources. Passed explicitly
+ *  by the reference app — never applied as a default. */
 export const CIVIC_SOURCE_REGISTRY = {
     socrata: {
         displayName: 'Socrata',
@@ -39,7 +41,7 @@ export const CIVIC_SOURCE_REGISTRY = {
 export const FALLBACK_SOURCE_ID = 'socrata';
 /** Is this source dataset-keyed (one `dataSources` entry per dataset) rather
  *  than aggregate? Unknown ids are neither — they contribute no entry. */
-export function isDatasetKeyedSource(sourceId, registry = CIVIC_SOURCE_REGISTRY) {
+export function isDatasetKeyedSource(sourceId, registry) {
     const info = registry[sourceId];
     return info !== undefined && info.aggregatePortalUrl === undefined;
 }
@@ -65,7 +67,7 @@ export const civicToolSourceResolver = (toolName) => CIVIC_TOOL_SOURCE_MAP[toolN
  *  capitalised form of the raw id so new sources render sensibly before the
  *  registry is updated. Missing ids coerce to the fallback source (pre-M9.3
  *  packages have no `sourceId` on dataSources entries). */
-export function displayNameForSource(sourceId, registry = CIVIC_SOURCE_REGISTRY) {
+export function displayNameForSource(sourceId, registry) {
     const id = sourceId || FALLBACK_SOURCE_ID;
     return (registry[id]?.displayName
         ?? id
@@ -77,7 +79,7 @@ export function displayNameForSource(sourceId, registry = CIVIC_SOURCE_REGISTRY)
 /** Format a `dataSources` array as a compact, de-duplicated summary string
  *  (middle-dot separated). Returns `null` when the array is empty or missing,
  *  letting callers render a fallback. */
-export function formatDataSourcesSummary(entries, registry = CIVIC_SOURCE_REGISTRY) {
+export function formatDataSourcesSummary(entries, registry) {
     if (!entries || entries.length === 0)
         return null;
     const seen = new Set();

package/dist/required-config.assert.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/required-config.assert.js

@@ -0,0 +1,27 @@
+// Type-level acceptance gate for the 0.2.0 breaking change (civic-ai-tools#153,
+// findings A3–A7): identity-bearing config is a REQUIRED parameter — a bare
+// call that omits it must FAIL typecheck. Each `@ts-expect-error` below
+// asserts exactly that: if a silently-applied default parameter is ever
+// reintroduced, the bare call becomes legal, the directive turns unused, and
+// `npm run typecheck` / `npm run build` fail.
+//
+// Compile-time only: the guard function is never exported and never invoked,
+// and the `declare`d values have no runtime existence.
+import { buildProvenanceGraph, buildDatHereEnvironment, deriveDatHereEnvelopeFields, TraceBuilder, isDatasetKeyedSource, displayNameForSource, formatDataSourcesSummary, } from "./index.js";
+function rejectsBareCalls() {
+    // @ts-expect-error A3 — buildProvenanceGraph: the ProvenanceConfig is required
+    buildProvenanceGraph(trace, provenanceInput);
+    // @ts-expect-error A4 — buildDatHereEnvironment: the DatHereEnvironmentConfig is required
+    buildDatHereEnvironment('model/slug', undefined);
+    // @ts-expect-error A4 — deriveDatHereEnvelopeFields: the DatHereEnvironmentConfig is required
+    deriveDatHereEnvelopeFields(policyInput);
+    // @ts-expect-error A6 — TraceBuilder: the TraceBuilderConfig is required
+    new TraceBuilder();
+    // @ts-expect-error A7 — isDatasetKeyedSource: the CivicSourceRegistry is required
+    isDatasetKeyedSource('socrata');
+    // @ts-expect-error A7 — displayNameForSource: the CivicSourceRegistry is required
+    displayNameForSource('socrata');
+    // @ts-expect-error A7 — formatDataSourcesSummary: the CivicSourceRegistry is required
+    formatDataSourcesSummary(entries);
+}
+void rejectsBareCalls;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@typedstandards/civic-typed-harness",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Civic-domain harness for Typed Standards evidence packages — the DOMAIN layer of the ADR-0021 format/domain line: civic PROV-O vocabulary and provenance builder, datHere envelope-policy derivations, and the capture machinery (trace builder, skill-metadata extraction, data-source population, adversarial rubric core). Derives; @typedstandards/produce-core assembles.",
   "license": "MIT",
   "author": "Nathan Storey",
@@ -36,6 +36,7 @@
     "@typedstandards/produce-core": "^0.2.0"
   },
   "devDependencies": {
+    "@typedstandards/verify-core": "^0.8.0",
     "@typescript-eslint/parser": "^8",
     "eslint": "^9",
     "typescript": "^5.9.3"