@vorionsys/atsf-core 0.3.1 → 0.4.1

package/dist/trust-engine/scheduled-verifier.js

@@ -0,0 +1,257 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2024-2026 Vorion LLC
+/**
+ * Scheduled Trust Integrity Verifier
+ *
+ * Runs periodic integrity checks on all tracked agents' trust scores by
+ * verifying their cryptographic commitment chains. Alerts on any divergence.
+ *
+ * Frequency scales by trust tier:
+ *   T5-T7: every hour (high-trust agents are high-value targets)
+ *   T2-T4: every 4 hours
+ *   T0-T1: every 24 hours (low trust, low blast radius)
+ *
+ * @packageDocumentation
+ */
+import { EventEmitter } from 'node:events';
+export const DEFAULT_SCHEDULED_VERIFIER_CONFIG = {
+    highTrustIntervalMs: 3_600_000, // 1 hour
+    mediumTrustIntervalMs: 14_400_000, // 4 hours
+    lowTrustIntervalMs: 86_400_000, // 24 hours
+    tickIntervalMs: 60_000, // 1 minute
+    emitEvents: true,
+};
+// ---------------------------------------------------------------------------
+// ScheduledVerifier
+// ---------------------------------------------------------------------------
+export class ScheduledVerifier extends EventEmitter {
+    verifier;
+    config;
+    /** When each agent was last verified (agentId → timestamp) */
+    lastVerified = new Map();
+    /** Audit trail of verification results */
+    auditLog = [];
+    /** Maximum audit entries to retain in memory */
+    maxAuditEntries = 10_000;
+    /** Tick timer handle */
+    tickTimer = null;
+    /** Current registered agents and their trust state */
+    agents = new Map();
+    /** Running flag */
+    running = false;
+    constructor(verifier, config) {
+        super();
+        this.verifier = verifier;
+        this.config = { ...DEFAULT_SCHEDULED_VERIFIER_CONFIG, ...config };
+    }
+    // -----------------------------------------------------------------------
+    // Agent registration
+    // -----------------------------------------------------------------------
+    /**
+     * Register or update an agent's trust state for scheduled verification.
+     */
+    registerAgent(agentId, score, tier) {
+        this.agents.set(agentId, { agentId, score, tier });
+    }
+    /**
+     * Remove an agent from scheduled verification.
+     */
+    unregisterAgent(agentId) {
+        this.agents.delete(agentId);
+        this.lastVerified.delete(agentId);
+    }
+    /**
+     * Update an agent's trust state (called after score changes).
+     */
+    updateAgentState(agentId, score, tier) {
+        const existing = this.agents.get(agentId);
+        if (existing) {
+            existing.score = score;
+            existing.tier = tier;
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Scheduling
+    // -----------------------------------------------------------------------
+    /**
+     * Start the periodic verification scheduler.
+     */
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.tickTimer = setInterval(() => this.tick(), this.config.tickIntervalMs);
+    }
+    /**
+     * Stop the scheduler.
+     */
+    stop() {
+        this.running = false;
+        if (this.tickTimer) {
+            clearInterval(this.tickTimer);
+            this.tickTimer = null;
+        }
+    }
+    /**
+     * Check if the scheduler is running.
+     */
+    isRunning() {
+        return this.running;
+    }
+    // -----------------------------------------------------------------------
+    // Core verification loop
+    // -----------------------------------------------------------------------
+    /**
+     * Single tick: check which agents are due for verification and run them.
+     * Can also be called manually for on-demand checks.
+     */
+    tick() {
+        const now = Date.now();
+        const due = [];
+        for (const agent of this.agents.values()) {
+            const interval = this.getIntervalForTier(agent.tier);
+            const lastChecked = this.lastVerified.get(agent.agentId) ?? 0;
+            if (now - lastChecked >= interval) {
+                due.push(agent);
+            }
+        }
+        if (due.length === 0)
+            return [];
+        const entries = [];
+        let failedCount = 0;
+        for (const agent of due) {
+            const result = this.verifier.verifyAgent(agent.agentId, agent.score, agent.tier);
+            this.lastVerified.set(agent.agentId, now);
+            const entry = {
+                agentId: agent.agentId,
+                verified: result.verified,
+                divergence: result.divergence,
+                commitmentChainValid: result.commitmentChainValid,
+                checkpointsVerified: result.checkpointsVerified,
+                issues: result.issues,
+                verifiedAt: now,
+            };
+            entries.push(entry);
+            this.appendAudit(entry);
+            if (!result.verified) {
+                failedCount++;
+                if (this.config.emitEvents) {
+                    // Determine if this is an integrity violation (score tampering) vs chain break
+                    const isIntegrityViolation = result.issues.some(i => i.includes('INTEGRITY_VIOLATION'));
+                    this.emit(isIntegrityViolation ? 'verification:integrity_violation' : 'verification:failed', {
+                        type: isIntegrityViolation ? 'verification:integrity_violation' : 'verification:failed',
+                        agentId: agent.agentId,
+                        result,
+                        timestamp: now,
+                    });
+                }
+            }
+            else if (this.config.emitEvents) {
+                this.emit('verification:passed', {
+                    type: 'verification:passed',
+                    agentId: agent.agentId,
+                    result,
+                    timestamp: now,
+                });
+            }
+        }
+        // Emit cycle-complete summary
+        if (this.config.emitEvents && entries.length > 0) {
+            this.emit('verification:cycle_complete', {
+                type: 'verification:cycle_complete',
+                agentsChecked: entries.length,
+                failedCount,
+                timestamp: now,
+            });
+        }
+        return entries;
+    }
+    // -----------------------------------------------------------------------
+    // Immediate verification
+    // -----------------------------------------------------------------------
+    /**
+     * Verify a specific agent immediately, regardless of schedule.
+     */
+    verifyNow(agentId) {
+        const agent = this.agents.get(agentId);
+        if (!agent)
+            return null;
+        const result = this.verifier.verifyAgent(agentId, agent.score, agent.tier);
+        this.lastVerified.set(agentId, Date.now());
+        const entry = {
+            agentId,
+            verified: result.verified,
+            divergence: result.divergence,
+            commitmentChainValid: result.commitmentChainValid,
+            checkpointsVerified: result.checkpointsVerified,
+            issues: result.issues,
+            verifiedAt: Date.now(),
+        };
+        this.appendAudit(entry);
+        return result;
+    }
+    /**
+     * Verify all registered agents immediately.
+     */
+    verifyAllNow() {
+        const results = new Map();
+        for (const agent of this.agents.values()) {
+            const result = this.verifier.verifyAgent(agent.agentId, agent.score, agent.tier);
+            results.set(agent.agentId, result);
+            this.lastVerified.set(agent.agentId, Date.now());
+        }
+        return results;
+    }
+    // -----------------------------------------------------------------------
+    // Audit log
+    // -----------------------------------------------------------------------
+    /**
+     * Get the audit trail of verification results.
+     * Optionally filter by agentId.
+     */
+    getAuditLog(agentId) {
+        if (agentId) {
+            return this.auditLog.filter(e => e.agentId === agentId);
+        }
+        return [...this.auditLog];
+    }
+    /**
+     * Get failed verifications from the audit log.
+     */
+    getFailedVerifications() {
+        return this.auditLog.filter(e => !e.verified);
+    }
+    /**
+     * Clear the audit log.
+     */
+    clearAuditLog() {
+        this.auditLog = [];
+    }
+    // -----------------------------------------------------------------------
+    // Internals
+    // -----------------------------------------------------------------------
+    getIntervalForTier(tier) {
+        if (tier >= 5)
+            return this.config.highTrustIntervalMs;
+        if (tier >= 2)
+            return this.config.mediumTrustIntervalMs;
+        return this.config.lowTrustIntervalMs;
+    }
+    appendAudit(entry) {
+        this.auditLog.push(entry);
+        // Trim if over capacity
+        if (this.auditLog.length > this.maxAuditEntries) {
+            this.auditLog = this.auditLog.slice(-this.maxAuditEntries);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/**
+ * Create a ScheduledVerifier with optional config overrides.
+ */
+export function createScheduledVerifier(verifier, config) {
+    return new ScheduledVerifier(verifier, config);
+}
+//# sourceMappingURL=scheduled-verifier.js.map

package/dist/trust-engine/scheduled-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-verifier.js","sourceRoot":"","sources":["../../src/trust-engine/scheduled-verifier.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoB3C,MAAM,CAAC,MAAM,iCAAiC,GAAsC;IAClF,mBAAmB,EAAE,SAAS,EAAK,SAAS;IAC5C,qBAAqB,EAAE,UAAU,EAAE,UAAU;IAC7C,kBAAkB,EAAE,UAAU,EAAK,WAAW;IAC9C,cAAc,EAAE,MAAM,EAAa,WAAW;IAC9C,UAAU,EAAE,IAAI;CACjB,CAAC;AAmCF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACzC,QAAQ,CAAgB;IACxB,MAAM,CAA0B;IAExC,8DAA8D;IACtD,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEtD,0CAA0C;IAClC,QAAQ,GAA6B,EAAE,CAAC;IAEhD,gDAAgD;IACxC,eAAe,GAAG,MAAM,CAAC;IAEjC,wBAAwB;IAChB,SAAS,GAA0C,IAAI,CAAC;IAEhE,sDAAsD;IAC9C,MAAM,GAAiC,IAAI,GAAG,EAAE,CAAC;IAEzD,mBAAmB;IACX,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,QAAuB,EAAE,MAAyC;QAC5E,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,iCAAiC,EAAE,GAAG,MAAM,EAAE,CAAC;IACpE,CAAC;IAED,0EAA0E;IAC1E,qBAAqB;IACrB,0EAA0E;IAE1E;;OAEG;IACH,aAAa,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY;QACxD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAe;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;YACvB,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,aAAa;IACb,0EAA0E;IAE1E;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAE1E;;;OAGG;IACH,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAsB,EAAE,CAAC;QAElC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE9D,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhC,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE1C,MAAM,KAAK,GAA2B;gBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,GAAG;aAChB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAExB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,WAAW,EAAE,CAAC;gBAEd,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC3B,+EAA+E;oBAC/E,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CACvC,CAAC;oBAEF,IAAI,CAAC,IAAI,CACP,oBAAoB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,qBAAqB,EACjF;wBACE,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,qBAAqB;wBACvF,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,MAAM;wBACN,SAAS,EAAE,GAAG;qBACa,CAC9B,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBAC/B,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM;oBACN,SAAS,EAAE,GAAG;iBACa,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;gBACvC,IAAI,EAAE,6BAA6B;gBACnC,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,WAAW;gBACX,SAAS,EAAE,GAAG;aACa,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAE1E;;OAEG;IACH,SAAS,CAAC,OAAe;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3C,MAAM,KAAK,GAA2B;YACpC,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;;OAGG;IACH,WAAW,CAAC,OAAgB;QAC1B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAElE,kBAAkB,CAAC,IAAY;QACrC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACtD,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;IACxC,CAAC;IAEO,WAAW,CAAC,KAA6B;QAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,wBAAwB;QACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAuB,EACvB,MAAyC;IAEzC,OAAO,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/package.json

@@ -1,140 +1,140 @@
-{
-  "name": "@vorionsys/atsf-core",
-  "version": "0.3.1",
-  "description": "Agentic Trust Scoring Framework - Core runtime for AI agent governance, trust scoring (8-tier T0-T7 model), and policy enforcement",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "default": "./dist/index.js"
-    },
-    "./trust-engine": {
-      "types": "./dist/trust-engine/index.d.ts",
-      "import": "./dist/trust-engine/index.js"
-    },
-    "./basis": {
-      "types": "./dist/basis/index.d.ts",
-      "import": "./dist/basis/index.js"
-    },
-    "./intent": {
-      "types": "./dist/intent/index.d.ts",
-      "import": "./dist/intent/index.js"
-    },
-    "./enforce": {
-      "types": "./dist/enforce/index.d.ts",
-      "import": "./dist/enforce/index.js"
-    },
-    "./proof": {
-      "types": "./dist/proof/index.d.ts",
-      "import": "./dist/proof/index.js"
-    },
-    "./chain": {
-      "types": "./dist/chain/index.d.ts",
-      "import": "./dist/chain/index.js"
-    },
-    "./cognigate": {
-      "types": "./dist/cognigate/index.d.ts",
-      "import": "./dist/cognigate/index.js"
-    },
-    "./types": {
-      "types": "./dist/common/types.d.ts",
-      "import": "./dist/common/types.js"
-    },
-    "./persistence": {
-      "types": "./dist/persistence/index.d.ts",
-      "import": "./dist/persistence/index.js"
-    },
-    "./langchain": {
-      "types": "./dist/langchain/index.d.ts",
-      "import": "./dist/langchain/index.js"
-    },
-    "./sandbox-training": {
-      "types": "./dist/sandbox-training/index.d.ts",
-      "import": "./dist/sandbox-training/index.js"
-    },
-    "./paramesphere": {
-      "types": "./dist/paramesphere/index.d.ts",
-      "import": "./dist/paramesphere/index.js"
-    }
-  },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src",
-    "clean": "rm -rf dist"
-  },
-  "dependencies": {
-    "@vorionsys/basis": "*",
-    "@vorionsys/contracts": "^0.2.0",
-    "@fastify/cors": "^10.0.0",
-    "@fastify/helmet": "^12.0.0",
-    "@fastify/rate-limit": "^10.0.0",
-    "fastify": "^5.0.0",
-    "pino": "^9.0.0",
-    "pino-pretty": "^11.0.0",
-    "zod": "^3.24.1"
-  },
-  "devDependencies": {
-    "@types/node": "^22.10.5",
-    "typescript": "^5.7.2",
-    "vitest": "^4.0.18"
-  },
-  "peerDependencies": {
-    "@langchain/core": ">=0.2.0",
-    "better-sqlite3": ">=9.0.0",
-    "typescript": "^5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@langchain/core": {
-      "optional": true
-    },
-    "better-sqlite3": {
-      "optional": true
-    }
-  },
-  "keywords": [
-    "ai",
-    "agent",
-    "trust",
-    "trust-scoring",
-    "governance",
-    "ai-governance",
-    "ai-safety",
-    "atsf",
-    "vorion",
-    "policy-enforcement",
-    "audit-trail",
-    "multi-agent",
-    "langchain",
-    "agentic"
-  ],
-  "author": "Vorion <team@vorion.org>",
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/vorionsys/vorion.git",
-    "directory": "packages/atsf-core"
-  },
-  "homepage": "https://vorion.org",
-  "bugs": {
-    "url": "https://github.com/vorionsys/vorion/issues"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@vorionsys/atsf-core",
+  "version": "0.4.1",
+  "description": "Agentic Trust Scoring Framework - Core runtime for AI agent governance, trust scoring (8-tier T0-T7 model), and policy enforcement",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./trust-engine": {
+      "types": "./dist/trust-engine/index.d.ts",
+      "import": "./dist/trust-engine/index.js"
+    },
+    "./basis": {
+      "types": "./dist/basis/index.d.ts",
+      "import": "./dist/basis/index.js"
+    },
+    "./intent": {
+      "types": "./dist/intent/index.d.ts",
+      "import": "./dist/intent/index.js"
+    },
+    "./enforce": {
+      "types": "./dist/enforce/index.d.ts",
+      "import": "./dist/enforce/index.js"
+    },
+    "./proof": {
+      "types": "./dist/proof/index.d.ts",
+      "import": "./dist/proof/index.js"
+    },
+    "./chain": {
+      "types": "./dist/chain/index.d.ts",
+      "import": "./dist/chain/index.js"
+    },
+    "./cognigate": {
+      "types": "./dist/cognigate/index.d.ts",
+      "import": "./dist/cognigate/index.js"
+    },
+    "./types": {
+      "types": "./dist/common/types.d.ts",
+      "import": "./dist/common/types.js"
+    },
+    "./persistence": {
+      "types": "./dist/persistence/index.d.ts",
+      "import": "./dist/persistence/index.js"
+    },
+    "./langchain": {
+      "types": "./dist/langchain/index.d.ts",
+      "import": "./dist/langchain/index.js"
+    },
+    "./sandbox-training": {
+      "types": "./dist/sandbox-training/index.d.ts",
+      "import": "./dist/sandbox-training/index.js"
+    },
+    "./paramesphere": {
+      "types": "./dist/paramesphere/index.d.ts",
+      "import": "./dist/paramesphere/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@vorionsys/basis": "*",
+    "@vorionsys/contracts": "^0.2.0",
+    "@fastify/cors": "^10.0.0",
+    "@fastify/helmet": "^12.0.0",
+    "@fastify/rate-limit": "^10.0.0",
+    "fastify": "^5.0.0",
+    "pino": "^9.0.0",
+    "pino-pretty": "^11.0.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.5",
+    "typescript": "^5.7.2",
+    "vitest": "^4.0.18"
+  },
+  "peerDependencies": {
+    "@langchain/core": ">=0.2.0",
+    "better-sqlite3": ">=9.0.0",
+    "typescript": "^5.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@langchain/core": {
+      "optional": true
+    },
+    "better-sqlite3": {
+      "optional": true
+    }
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "trust",
+    "trust-scoring",
+    "governance",
+    "ai-governance",
+    "ai-safety",
+    "atsf",
+    "vorion",
+    "policy-enforcement",
+    "audit-trail",
+    "multi-agent",
+    "langchain",
+    "agentic"
+  ],
+  "author": "Vorion <team@vorion.org>",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vorionsys/vorion.git",
+    "directory": "packages/atsf-core"
+  },
+  "homepage": "https://vorion.org",
+  "bugs": {
+    "url": "https://github.com/vorionsys/vorion/issues"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}