@vorionsys/basis 1.0.1

package/README.md

@@ -0,0 +1,195 @@
+# @vorionsys/basis
+
+**Behavioral AI Safety & Integrity Standard (BASIS)** - Open standard for AI agent governance with an 8-tier trust framework, 23 trust factors, and a KYA (Know Your Agent) verification SDK.
+
+## Overview
+
+BASIS defines how autonomous AI agents earn, maintain, and lose trust. It provides:
+
+- **8 Trust Tiers (T0-T7)**: Progressive autonomy levels from Sandbox to Autonomous
+- **23 Trust Factors**: 15 core + 8 life-critical evaluation criteria
+- **Tier-Gated Capabilities**: What agents can do at each trust level
+- **KYA Framework**: Identity, Authorization, Accountability, and Behavior monitoring
+- **Validation Gate**: Central pass/reject/escalate decisions for agent manifests
+
+## Installation
+
+```bash
+npm install @vorionsys/basis
+```
+
+## Quick Start
+
+```typescript
+import {
+  TrustTier,
+  CORE_FACTORS,
+  calculateTrustScore,
+  getRequiredFactors,
+  getTrustTierFromScore,
+} from '@vorionsys/basis';
+
+// Get required factors for a tier
+const required = getRequiredFactors(TrustTier.T4_OPERATIONAL);
+console.log(`T4 requires ${required.length} factors`);
+
+// Calculate trust score from factor scores
+const evaluation = calculateTrustScore(factorScores, TrustTier.T4_OPERATIONAL);
+console.log(`Score: ${evaluation.totalScore}/1000`);
+console.log(`Compliant: ${evaluation.compliant}`);
+console.log(`Missing: ${evaluation.missingFactors}`);
+```
+
+## Trust Tiers
+
+| Tier | Score | Name | Factors Required | Description |
+|------|-------|------|-----------------|-------------|
+| T0 | 0-199 | Sandbox | 0 | Observation only, no external access |
+| T1 | 200-349 | Observed | 3 | Basic competence demonstrated |
+| T2 | 350-499 | Provisional | 6 | Accountability + safety emerging |
+| T3 | 500-649 | Verified | 9 | Security + identity confirmed |
+| T4 | 650-799 | Operational | 13 | Human oversight + alignment |
+| T5 | 800-875 | Trusted | 16 | Stewardship + humility |
+| T6 | 876-950 | Certified | 20 | Adaptability + causal reasoning |
+| T7 | 951-1000 | Autonomous | 23 | Full autonomy - all factors |
+
+## Trust Factors
+
+### Core Factors (15)
+
+| Code | Name | Required From | Tier |
+|------|------|--------------|------|
+| CT-COMP | Competence | T1 | Foundational |
+| CT-REL | Reliability | T1 | Foundational |
+| CT-OBS | Observability | T1 | Foundational |
+| CT-TRANS | Transparency | T2 | Foundational |
+| CT-ACCT | Accountability | T2 | Foundational |
+| CT-SAFE | Safety | T2 | Foundational |
+| CT-SEC | Security | T3 | Foundational |
+| CT-PRIV | Privacy | T3 | Foundational |
+| CT-ID | Identity | T3 | Foundational |
+| OP-HUMAN | Human Oversight | T4 | Operational |
+| OP-ALIGN | Alignment | T4 | Operational |
+| OP-STEW | Stewardship | T5 | Operational |
+| SF-HUM | Humility | T5 | Sophisticated |
+| SF-ADAPT | Adaptability | T6 | Sophisticated |
+| SF-LEARN | Continuous Learning | T6 | Sophisticated |
+
+### Life-Critical Factors (8)
+
+For healthcare, safety, and life-saving AI applications:
+
+| Code | Name | Required From |
+|------|------|--------------|
+| LC-UNCERT | Uncertainty Quantification | T4 |
+| LC-HANDOFF | Graceful Degradation & Handoff | T4 |
+| LC-EMPHUM | Empirical Humility | T5 |
+| LC-CAUSAL | Clinical Causal Understanding | T6 |
+| LC-PATIENT | Patient-Centered Autonomy | T6 |
+| LC-EMP | Empathy & Emotional Intelligence | T7 |
+| LC-MORAL | Nuanced Moral Reasoning | T7 |
+| LC-TRACK | Proven Efficacy Track Record | T7 |
+
+## KYA (Know Your Agent)
+
+The KYA framework provides a complete agent verification pipeline:
+
+```typescript
+import { KYA } from '@vorionsys/basis';
+
+const kya = new KYA({
+  didResolver: myDIDResolver,
+  policyEngine: myPolicyEngine,
+  database: myDatabase,
+});
+
+// Complete verification flow:
+// 1. Identity (DID + signature verification)
+// 2. Authorization (capability + policy check)
+// 3. Accountability (audit chain logging)
+// 4. Behavior (anomaly detection)
+const result = await kya.verifyAgent({
+  agentDID: 'did:vorion:agent-123',
+  action: 'read',
+  resource: 'documents/report.pdf',
+  proof: { challenge, signature, timestamp },
+});
+
+if (result.allowed) {
+  console.log(`Trust score: ${result.trustScore}`);
+  console.log(`Anomalies: ${result.anomalies}`);
+}
+```
+
+## Validation Gate
+
+Central pass/reject/escalate decisions:
+
+```typescript
+import { GateDecision, ValidationSeverity } from '@vorionsys/basis';
+
+// GateDecision.PASS     - Agent proceeds
+// GateDecision.REJECT   - Agent blocked
+// GateDecision.ESCALATE - Human review required
+```
+
+## Capabilities
+
+Tier-gated capabilities define what agents can do:
+
+```typescript
+import { getCapabilitiesForTier, hasCapability, TrustTier } from '@vorionsys/basis';
+
+const caps = getCapabilitiesForTier(TrustTier.T4_OPERATIONAL);
+const canWrite = hasCapability('CAP-WRITE-DATA', TrustTier.T2_PROVISIONAL);
+```
+
+Capability categories: Data Access, File Operations, API Access, Code Execution, Agent Interaction, Resource Management, System Administration, Governance.
+
+## API Reference
+
+### Trust Score Calculation
+
+```typescript
+calculateTrustScore(scores: FactorScore[], tier: TrustTier): TrustEvaluation
+getRequiredFactors(tier: TrustTier): FactorCode[]
+getCriticalFactorsForTier(tier: TrustTier): string[]
+getFactorThresholdsForTier(tier: TrustTier): Record<string, FactorThreshold>
+getTrustTierFromScore(score: number): TrustTier
+getTierName(tier: TrustTier): string
+getTierColor(tier: TrustTier): string
+```
+
+### Constants
+
+```typescript
+CORE_FACTORS        // 15 core trust factors
+LIFE_CRITICAL_FACTORS // 8 life-critical factors
+ALL_FACTORS         // All 23 factors combined
+TIER_THRESHOLDS     // Score ranges per tier
+TRUST_TIER_DISPLAY  // Display config (name, color)
+```
+
+## TypeScript
+
+```typescript
+import type {
+  TrustTier,
+  FactorTier,
+  FactorCode,
+  CoreFactorCode,
+  LifeCriticalFactorCode,
+  FactorScore,
+  TrustEvaluation,
+  FactorThreshold,
+  Capability,
+  CapabilityCategory,
+  GateDecision,
+  ValidationSeverity,
+  KYAConfig,
+} from '@vorionsys/basis';
+```
+
+## License
+
+Apache-2.0

package/artifacts/@openzeppelin/contracts/access/AccessControl.sol/AccessControl.dbg.json

@@ -0,0 +1,4 @@
+{
+  "_format": "hh-sol-dbg-1",
+  "buildInfo": "..\\..\\..\\..\\build-info\\357d1bba4062d461f497f221490811a3.json"
+}

package/artifacts/@openzeppelin/contracts/access/AccessControl.sol/AccessControl.json

@@ -0,0 +1,236 @@
+{
+  "_format": "hh-sol-artifact-1",
+  "contractName": "AccessControl",
+  "sourceName": "@openzeppelin/contracts/access/AccessControl.sol",
+  "abi": [
+    {
+      "inputs": [],
+      "name": "AccessControlBadConfirmation",
+      "type": "error"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "internalType": "bytes32",
+          "name": "neededRole",
+          "type": "bytes32"
+        }
+      ],
+      "name": "AccessControlUnauthorizedAccount",
+      "type": "error"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "previousAdminRole",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "newAdminRole",
+          "type": "bytes32"
+        }
+      ],
+      "name": "RoleAdminChanged",
+      "type": "event"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "sender",
+          "type": "address"
+        }
+      ],
+      "name": "RoleGranted",
+      "type": "event"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "sender",
+          "type": "address"
+        }
+      ],
+      "name": "RoleRevoked",
+      "type": "event"
+    },
+    {
+      "inputs": [],
+      "name": "DEFAULT_ADMIN_ROLE",
+      "outputs": [
+        {
+          "internalType": "bytes32",
+          "name": "",
+          "type": "bytes32"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        }
+      ],
+      "name": "getRoleAdmin",
+      "outputs": [
+        {
+          "internalType": "bytes32",
+          "name": "",
+          "type": "bytes32"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "grantRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "hasRole",
+      "outputs": [
+        {
+          "internalType": "bool",
+          "name": "",
+          "type": "bool"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "callerConfirmation",
+          "type": "address"
+        }
+      ],
+      "name": "renounceRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "revokeRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes4",
+          "name": "interfaceId",
+          "type": "bytes4"
+        }
+      ],
+      "name": "supportsInterface",
+      "outputs": [
+        {
+          "internalType": "bool",
+          "name": "",
+          "type": "bool"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    }
+  ],
+  "bytecode": "0x",
+  "deployedBytecode": "0x",
+  "linkReferences": {},
+  "deployedLinkReferences": {}
+}

package/artifacts/@openzeppelin/contracts/access/IAccessControl.sol/IAccessControl.dbg.json

@@ -0,0 +1,4 @@
+{
+  "_format": "hh-sol-dbg-1",
+  "buildInfo": "..\\..\\..\\..\\build-info\\357d1bba4062d461f497f221490811a3.json"
+}

package/artifacts/@openzeppelin/contracts/access/IAccessControl.sol/IAccessControl.json

@@ -0,0 +1,204 @@
+{
+  "_format": "hh-sol-artifact-1",
+  "contractName": "IAccessControl",
+  "sourceName": "@openzeppelin/contracts/access/IAccessControl.sol",
+  "abi": [
+    {
+      "inputs": [],
+      "name": "AccessControlBadConfirmation",
+      "type": "error"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "internalType": "bytes32",
+          "name": "neededRole",
+          "type": "bytes32"
+        }
+      ],
+      "name": "AccessControlUnauthorizedAccount",
+      "type": "error"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "previousAdminRole",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "newAdminRole",
+          "type": "bytes32"
+        }
+      ],
+      "name": "RoleAdminChanged",
+      "type": "event"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "sender",
+          "type": "address"
+        }
+      ],
+      "name": "RoleGranted",
+      "type": "event"
+    },
+    {
+      "anonymous": false,
+      "inputs": [
+        {
+          "indexed": true,
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        },
+        {
+          "indexed": true,
+          "internalType": "address",
+          "name": "sender",
+          "type": "address"
+        }
+      ],
+      "name": "RoleRevoked",
+      "type": "event"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        }
+      ],
+      "name": "getRoleAdmin",
+      "outputs": [
+        {
+          "internalType": "bytes32",
+          "name": "",
+          "type": "bytes32"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "grantRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "hasRole",
+      "outputs": [
+        {
+          "internalType": "bool",
+          "name": "",
+          "type": "bool"
+        }
+      ],
+      "stateMutability": "view",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "callerConfirmation",
+          "type": "address"
+        }
+      ],
+      "name": "renounceRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    },
+    {
+      "inputs": [
+        {
+          "internalType": "bytes32",
+          "name": "role",
+          "type": "bytes32"
+        },
+        {
+          "internalType": "address",
+          "name": "account",
+          "type": "address"
+        }
+      ],
+      "name": "revokeRole",
+      "outputs": [],
+      "stateMutability": "nonpayable",
+      "type": "function"
+    }
+  ],
+  "bytecode": "0x",
+  "deployedBytecode": "0x",
+  "linkReferences": {},
+  "deployedLinkReferences": {}
+}

package/artifacts/@openzeppelin/contracts/interfaces/IERC4906.sol/IERC4906.dbg.json

@@ -0,0 +1,4 @@
+{
+  "_format": "hh-sol-dbg-1",
+  "buildInfo": "..\\..\\..\\..\\build-info\\357d1bba4062d461f497f221490811a3.json"
+}