@vorionsys/atsf-core 0.2.3 → 0.3.0

package/dist/trust-engine/trust-verifier.js

@@ -0,0 +1,226 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2024-2026 Vorion LLC
+/**
+ * Trust Verifier - Cryptographic State Commitment & Independent Verification
+ *
+ * Provides self-protection for the trust scoring infrastructure via:
+ * - SHA-256 hash chains that commit each trust state transition
+ * - Independent verification that detects score tampering or corruption
+ * - Bulk verification across all managed agents
+ *
+ * Design: Lightweight, synchronous-first (no Ed25519 needed for internal state).
+ * Runs after every trust score change so must be fast.
+ *
+ * @packageDocumentation
+ */
+import { createHash } from 'node:crypto';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Compute a deterministic SHA-256 hash over the trust state fields.
+ *
+ * Uses JSON.stringify with sorted keys (via explicit field order in the
+ * object literal) so the hash is reproducible regardless of insertion order.
+ */
+export function computeStateHash(agentId, score, tier, signalCount, previousHash) {
+    const data = JSON.stringify({ agentId, score, tier, signalCount, previousHash });
+    return createHash('sha256').update(data).digest('hex');
+}
+// ---------------------------------------------------------------------------
+// TrustVerifier
+// ---------------------------------------------------------------------------
+/**
+ * Maintains per-agent hash chains of trust state commitments and verifies
+ * score integrity on demand.
+ *
+ * Usage:
+ * ```ts
+ * const verifier = new TrustVerifier();
+ * verifier.commitState('agent-1', 100, 0, 1);
+ * verifier.commitState('agent-1', 150, 0, 2);
+ * const result = verifier.verifyAgent('agent-1', 150, 0);
+ * // result.verified === true
+ * ```
+ */
+export class TrustVerifier {
+    /** Per-agent ordered list of state commitments (append-only) */
+    commitments = new Map();
+    /** Allowed absolute difference between reported and committed score */
+    tolerance;
+    /**
+     * @param tolerance - Maximum absolute score divergence that still counts
+     *   as "verified". Defaults to 1.0 to absorb floating-point rounding.
+     */
+    constructor(tolerance = 1.0) {
+        this.tolerance = tolerance;
+    }
+    // -----------------------------------------------------------------------
+    // Commit
+    // -----------------------------------------------------------------------
+    /**
+     * Record a state commitment after a trust score change.
+     *
+     * Each call appends a new entry to the agent's hash chain with a SHA-256
+     * digest that includes the previous entry's hash, making retroactive
+     * tampering detectable.
+     */
+    commitState(agentId, score, tier, signalCount) {
+        const chain = this.commitments.get(agentId) ?? [];
+        const previousStateHash = chain.length > 0
+            ? chain[chain.length - 1].stateHash
+            : null;
+        const stateHash = computeStateHash(agentId, score, tier, signalCount, previousStateHash);
+        const commitment = {
+            agentId,
+            score,
+            tier,
+            signalCount,
+            stateHash,
+            previousStateHash,
+            timestamp: Date.now(),
+        };
+        chain.push(commitment);
+        this.commitments.set(agentId, chain);
+        return commitment;
+    }
+    // -----------------------------------------------------------------------
+    // Verify single agent
+    // -----------------------------------------------------------------------
+    /**
+     * Verify an agent's current trust score against its commitment chain.
+     *
+     * 1. Walks the commitment chain to verify hash integrity (each entry's
+     *    stateHash must recompute correctly and link to the previous hash).
+     * 2. Compares the latest committed score to the provided `currentScore`.
+     * 3. Compares the latest committed tier to `currentTier`.
+     */
+    verifyAgent(agentId, currentScore, currentTier) {
+        const chain = this.commitments.get(agentId);
+        const issues = [];
+        // No commitments at all — nothing to verify
+        if (!chain || chain.length === 0) {
+            return {
+                agentId,
+                verified: true,
+                currentScore,
+                expectedScore: currentScore,
+                divergence: 0,
+                commitmentChainValid: true,
+                checkpointsVerified: 0,
+                issues: [],
+            };
+        }
+        // Step 1: verify hash chain integrity
+        const chainResult = this.verifyCommitmentChain(agentId);
+        if (!chainResult.valid) {
+            issues.push(`Commitment chain broken at index ${chainResult.brokenAt}`);
+        }
+        // Step 2: compare latest committed score/tier to reported values
+        const latest = chain[chain.length - 1];
+        const divergence = Math.abs(currentScore - latest.score);
+        let scoreMatch = divergence <= this.tolerance;
+        if (!scoreMatch) {
+            issues.push(`INTEGRITY_VIOLATION: score divergence ${divergence} exceeds tolerance ${this.tolerance} ` +
+                `(current=${currentScore}, committed=${latest.score})`);
+        }
+        // Step 3: tier mismatch
+        if (currentTier !== latest.tier) {
+            issues.push(`Tier mismatch: current=${currentTier}, committed=${latest.tier}`);
+            scoreMatch = false;
+        }
+        return {
+            agentId,
+            verified: scoreMatch && chainResult.valid,
+            currentScore,
+            expectedScore: latest.score,
+            divergence,
+            commitmentChainValid: chainResult.valid,
+            checkpointsVerified: chain.length,
+            issues,
+        };
+    }
+    // -----------------------------------------------------------------------
+    // Hash chain verification
+    // -----------------------------------------------------------------------
+    /**
+     * Walk the commitment chain for an agent and verify that every hash
+     * correctly links to the previous one.
+     *
+     * Returns `{ valid: true }` when the chain is empty or fully intact.
+     */
+    verifyCommitmentChain(agentId) {
+        const chain = this.commitments.get(agentId);
+        if (!chain || chain.length === 0) {
+            return { valid: true };
+        }
+        for (let i = 0; i < chain.length; i++) {
+            const entry = chain[i];
+            // Verify the previousStateHash pointer
+            const expectedPrevHash = i === 0
+                ? null
+                : chain[i - 1].stateHash;
+            if (entry.previousStateHash !== expectedPrevHash) {
+                return { valid: false, brokenAt: i };
+            }
+            // Recompute the state hash and compare
+            const recomputed = computeStateHash(entry.agentId, entry.score, entry.tier, entry.signalCount, entry.previousStateHash);
+            if (recomputed !== entry.stateHash) {
+                return { valid: false, brokenAt: i };
+            }
+        }
+        return { valid: true };
+    }
+    // -----------------------------------------------------------------------
+    // Accessors
+    // -----------------------------------------------------------------------
+    /**
+     * Retrieve the full commitment chain for an agent (oldest first).
+     */
+    getCommitments(agentId) {
+        return this.commitments.get(agentId) ?? [];
+    }
+    /**
+     * Retrieve the most recent commitment for an agent, or `undefined` if
+     * no commitments exist.
+     */
+    getLatestCommitment(agentId) {
+        const chain = this.commitments.get(agentId);
+        if (!chain || chain.length === 0)
+            return undefined;
+        return chain[chain.length - 1];
+    }
+    // -----------------------------------------------------------------------
+    // Housekeeping
+    // -----------------------------------------------------------------------
+    /**
+     * Clear commitments. If `agentId` is provided, only that agent's chain
+     * is removed; otherwise all commitments are purged.
+     */
+    clearCommitments(agentId) {
+        if (agentId !== undefined) {
+            this.commitments.delete(agentId);
+        }
+        else {
+            this.commitments.clear();
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Bulk verification
+    // -----------------------------------------------------------------------
+    /**
+     * Verify multiple agents in one call.
+     *
+     * @param scores - Map of agentId -> { score, tier } representing current
+     *   reported trust state for each agent.
+     * @returns Map of agentId -> TrustVerificationResult
+     */
+    verifyAll(scores) {
+        const results = new Map();
+        for (const [agentId, { score, tier }] of scores) {
+            results.set(agentId, this.verifyAgent(agentId, score, tier));
+        }
+        return results;
+    }
+}
+//# sourceMappingURL=trust-verifier.js.map

package/dist/trust-engine/trust-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-verifier.js","sourceRoot":"","sources":["../../src/trust-engine/trust-verifier.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6CzC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAAa,EACb,IAAY,EACZ,WAAmB,EACnB,YAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;IACjF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,aAAa;IACxB,gEAAgE;IACxD,WAAW,GAAwC,IAAI,GAAG,EAAE,CAAC;IAErE,uEAAuE;IAC/D,SAAS,CAAS;IAE1B;;;OAGG;IACH,YAAY,YAAoB,GAAG;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAC1E,SAAS;IACT,0EAA0E;IAE1E;;;;;;OAMG;IACH,WAAW,CACT,OAAe,EACf,KAAa,EACb,IAAY,EACZ,WAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS;YACpC,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAEzF,MAAM,UAAU,GAAyB;YACvC,OAAO;YACP,KAAK;YACL,IAAI;YACJ,WAAW;YACX,SAAS;YACT,iBAAiB;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAErC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0EAA0E;IAC1E,sBAAsB;IACtB,0EAA0E;IAE1E;;;;;;;OAOG;IACH,WAAW,CACT,OAAe,EACf,YAAoB,EACpB,WAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,4CAA4C;QAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO;gBACP,QAAQ,EAAE,IAAI;gBACd,YAAY;gBACZ,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,CAAC;gBACb,oBAAoB,EAAE,IAAI;gBAC1B,mBAAmB,EAAE,CAAC;gBACtB,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CACT,oCAAoC,WAAW,CAAC,QAAQ,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC;QAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,yCAAyC,UAAU,sBAAsB,IAAI,CAAC,SAAS,GAAG;gBAC1F,YAAY,YAAY,eAAe,MAAM,CAAC,KAAK,GAAG,CACvD,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CACT,0BAA0B,WAAW,eAAe,MAAM,CAAC,IAAI,EAAE,CAClE,CAAC;YACF,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,UAAU,IAAI,WAAW,CAAC,KAAK;YACzC,YAAY;YACZ,aAAa,EAAE,MAAM,CAAC,KAAK;YAC3B,UAAU;YACV,oBAAoB,EAAE,WAAW,CAAC,KAAK;YACvC,mBAAmB,EAAE,KAAK,CAAC,MAAM;YACjC,MAAM;SACP,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0BAA0B;IAC1B,0EAA0E;IAE1E;;;;;OAKG;IACH,qBAAqB,CAAC,OAAe;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAExB,uCAAuC;YACvC,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC;YAE5B,IAAI,KAAK,CAAC,iBAAiB,KAAK,gBAAgB,EAAE,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACvC,CAAC;YAED,uCAAuC;YACvC,MAAM,UAAU,GAAG,gBAAgB,CACjC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,iBAAiB,CACxB,CAAC;YAEF,IAAI,UAAU,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACH,cAAc,CAAC,OAAe;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,OAAe;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,0EAA0E;IAC1E,eAAe;IACf,0EAA0E;IAE1E;;;OAGG;IACH,gBAAgB,CAAC,OAAgB;QAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,oBAAoB;IACpB,0EAA0E;IAE1E;;;;;;OAMG;IACH,SAAS,CACP,MAAoD;QAEpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC3D,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/package.json

@@ -1,135 +1,140 @@
-{
-  "name": "@vorionsys/atsf-core",
-  "version": "0.2.3",
-  "description": "Agentic Trust Scoring Framework - Core runtime for AI agent governance, trust scoring (8-tier T0-T7 model), and policy enforcement",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./trust-engine": {
-      "types": "./dist/trust-engine/index.d.ts",
-      "import": "./dist/trust-engine/index.js"
-    },
-    "./basis": {
-      "types": "./dist/basis/index.d.ts",
-      "import": "./dist/basis/index.js"
-    },
-    "./intent": {
-      "types": "./dist/intent/index.d.ts",
-      "import": "./dist/intent/index.js"
-    },
-    "./enforce": {
-      "types": "./dist/enforce/index.d.ts",
-      "import": "./dist/enforce/index.js"
-    },
-    "./proof": {
-      "types": "./dist/proof/index.d.ts",
-      "import": "./dist/proof/index.js"
-    },
-    "./chain": {
-      "types": "./dist/chain/index.d.ts",
-      "import": "./dist/chain/index.js"
-    },
-    "./cognigate": {
-      "types": "./dist/cognigate/index.d.ts",
-      "import": "./dist/cognigate/index.js"
-    },
-    "./types": {
-      "types": "./dist/common/types.d.ts",
-      "import": "./dist/common/types.js"
-    },
-    "./persistence": {
-      "types": "./dist/persistence/index.d.ts",
-      "import": "./dist/persistence/index.js"
-    },
-    "./langchain": {
-      "types": "./dist/langchain/index.d.ts",
-      "import": "./dist/langchain/index.js"
-    },
-    "./sandbox-training": {
-      "types": "./dist/sandbox-training/index.d.ts",
-      "import": "./dist/sandbox-training/index.js"
-    }
-  },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src",
-    "clean": "rimraf dist"
-  },
-  "dependencies": {
-    "@vorionsys/contracts": "^0.1.1",
-    "@fastify/cors": "^10.0.0",
-    "@fastify/helmet": "^12.0.0",
-    "@fastify/rate-limit": "^10.0.0",
-    "fastify": "^5.0.0",
-    "pino": "^9.0.0",
-    "pino-pretty": "^11.0.0",
-    "zod": "^3.24.1"
-  },
-  "devDependencies": {
-    "@types/node": "^22.10.5",
-    "typescript": "^5.7.2",
-    "vitest": "^4.0.18"
-  },
-  "peerDependencies": {
-    "@langchain/core": ">=0.2.0",
-    "better-sqlite3": ">=9.0.0",
-    "typescript": "^5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@langchain/core": {
-      "optional": true
-    },
-    "better-sqlite3": {
-      "optional": true
-    }
-  },
-  "keywords": [
-    "ai",
-    "agent",
-    "trust",
-    "trust-scoring",
-    "governance",
-    "ai-governance",
-    "ai-safety",
-    "atsf",
-    "vorion",
-    "policy-enforcement",
-    "audit-trail",
-    "multi-agent",
-    "langchain",
-    "agentic"
-  ],
-  "author": "Vorion <team@vorion.org>",
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/vorionsys/vorion.git",
-    "directory": "packages/atsf-core"
-  },
-  "homepage": "https://vorion.org",
-  "bugs": {
-    "url": "https://github.com/vorionsys/vorion/issues"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@vorionsys/atsf-core",
+  "version": "0.3.0",
+  "description": "Agentic Trust Scoring Framework - Core runtime for AI agent governance, trust scoring (8-tier T0-T7 model), and policy enforcement",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./trust-engine": {
+      "types": "./dist/trust-engine/index.d.ts",
+      "import": "./dist/trust-engine/index.js"
+    },
+    "./basis": {
+      "types": "./dist/basis/index.d.ts",
+      "import": "./dist/basis/index.js"
+    },
+    "./intent": {
+      "types": "./dist/intent/index.d.ts",
+      "import": "./dist/intent/index.js"
+    },
+    "./enforce": {
+      "types": "./dist/enforce/index.d.ts",
+      "import": "./dist/enforce/index.js"
+    },
+    "./proof": {
+      "types": "./dist/proof/index.d.ts",
+      "import": "./dist/proof/index.js"
+    },
+    "./chain": {
+      "types": "./dist/chain/index.d.ts",
+      "import": "./dist/chain/index.js"
+    },
+    "./cognigate": {
+      "types": "./dist/cognigate/index.d.ts",
+      "import": "./dist/cognigate/index.js"
+    },
+    "./types": {
+      "types": "./dist/common/types.d.ts",
+      "import": "./dist/common/types.js"
+    },
+    "./persistence": {
+      "types": "./dist/persistence/index.d.ts",
+      "import": "./dist/persistence/index.js"
+    },
+    "./langchain": {
+      "types": "./dist/langchain/index.d.ts",
+      "import": "./dist/langchain/index.js"
+    },
+    "./sandbox-training": {
+      "types": "./dist/sandbox-training/index.d.ts",
+      "import": "./dist/sandbox-training/index.js"
+    },
+    "./paramesphere": {
+      "types": "./dist/paramesphere/index.d.ts",
+      "import": "./dist/paramesphere/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@vorionsys/basis": "*",
+    "@vorionsys/contracts": "^0.2.0",
+    "@fastify/cors": "^10.0.0",
+    "@fastify/helmet": "^12.0.0",
+    "@fastify/rate-limit": "^10.0.0",
+    "fastify": "^5.0.0",
+    "pino": "^9.0.0",
+    "pino-pretty": "^11.0.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.5",
+    "typescript": "^5.7.2",
+    "vitest": "^4.0.18"
+  },
+  "peerDependencies": {
+    "@langchain/core": ">=0.2.0",
+    "better-sqlite3": ">=9.0.0",
+    "typescript": "^5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@langchain/core": {
+      "optional": true
+    },
+    "better-sqlite3": {
+      "optional": true
+    }
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "trust",
+    "trust-scoring",
+    "governance",
+    "ai-governance",
+    "ai-safety",
+    "atsf",
+    "vorion",
+    "policy-enforcement",
+    "audit-trail",
+    "multi-agent",
+    "langchain",
+    "agentic"
+  ],
+  "author": "Vorion <team@vorion.org>",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vorionsys/vorion.git",
+    "directory": "packages/atsf-core"
+  },
+  "homepage": "https://vorion.org",
+  "bugs": {
+    "url": "https://github.com/vorionsys/vorion/issues"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}