@wowok/agent-mcp 2.7.0 → 2.7.2

package/dist/knowledge/passport-risk.js

@@ -1,450 +1 @@
-import { MAX_GUARD_COUNT_PASSPORT, MAX_SUBMISSION_SIZE_PASSPORT, PASSPORT_ERROR_CODES, } from "./passport-ledger.js";
-const R_P_1_01 = {
-    id: "R-PASS-01",
-    category: "lifecycle",
-    trigger: "tx_hash binding — Passport cannot be reused across transactions",
-    check: (ctx) => {
-        if (ctx.operation_type !== "create" && ctx.operation_type !== "use")
-            return null;
-        return {
-            id: "R-PASS-01",
-            level: "HIGH",
-            category: "lifecycle",
-            title: "tx_hash binding — Passport cannot be reused across transactions",
-            description: "Passport is bound to tx_context::digest(ctx) at creation time. All write functions (guard_add / guard_clear / verify) and result queries require tx_hash to match the current transaction, otherwise abort E_DIGEST_NOT_MATCH (11) or E_TX_NOT_MATCH (8). Caller must complete all operations within the same transaction (new → guard_add → verify → result → consume).",
-            affected_stakeholders: ["creator", "consumer"],
-            scenario: "Caller attempts to use Passport created in a previous transaction",
-            mitigation: "SDK encapsulates single-transaction flow (verify_guard: new → guard_add → verify → freeze). To reuse across transactions, you must recreate the Passport and resubmit all Guard data.",
-            evidence: "tx_hash field set at new() time, enforced in guard_add/verify/result",
-            related_move_error: "E_DIGEST_NOT_MATCH (11), E_TX_NOT_MATCH (8)",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_1_02 = {
-    id: "R-PASS-02",
-    category: "lifecycle",
-    trigger: "has_verified one-time — Guard config cannot be modified after verify",
-    check: (ctx) => {
-        if (!ctx.has_verified)
-            return null;
-        if (ctx.operation_type !== "guard_add" && ctx.operation_type !== "guard_clear")
-            return null;
-        return {
-            id: "R-PASS-02",
-            level: "MEDIUM",
-            category: "lifecycle",
-            title: "has_verified one-time — Guard config cannot be modified after verify",
-            description: "After Passport.has_verified=true, guard_add / guard_clear / verify all abort E_HAS_VERIFIED (4). verify is a one-time operation and its result is tamper-proof. This is Passport's core security guarantee (anti-tampering), but also means all Guards must be fully configured before verify.",
-            affected_stakeholders: ["creator"],
-            scenario: "Caller attempts to modify Guard configuration after verify()",
-            mitigation: "Fully plan all Guards (impack + non-impack + relies dependencies) before verify(). To modify after verify, create a new Passport.",
-            evidence: `has_verified=${ctx.has_verified}, operation=${ctx.operation_type}`,
-            related_move_error: "E_HAS_VERIFIED (4)",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_1_03 = {
-    id: "R-PASS-03",
-    category: "structural",
-    trigger: "No impack Guard — verify will fail E_IMPACK_GUARD_NOT_FOUND",
-    check: (ctx) => {
-        if (ctx.operation_type !== "verify")
-            return null;
-        if (ctx.has_impack_guard)
-            return null;
-        return {
-            id: "R-PASS-03",
-            level: "MEDIUM",
-            category: "structural",
-            title: "No impack Guard — verify will fail E_IMPACK_GUARD_NOT_FOUND",
-            description: "verify() requires at least 1 impack=true Guard. If all Guards are impack=false, verify aborts E_IMPACK_GUARD_NOT_FOUND (9). Guards with impack=false only record per-Guard result and do not affect the final result.",
-            affected_stakeholders: ["creator"],
-            scenario: "Passport configured with only non-impack Guards",
-            mitigation: "Configure at least 1 Guard as impack=true. Failure of this Guard immediately sets the overall result=false.",
-            evidence: `has_impack_guard=${ctx.has_impack_guard ?? false}`,
-            related_move_error: "E_IMPACK_GUARD_NOT_FOUND (9)",
-            auto_fixable: true,
-        };
-    },
-};
-const R_P_2_01 = {
-    id: "R-PASS-04",
-    category: "logic",
-    trigger: "Depended Guard order error — E_RELIES_GUARD_NOT_ADDED",
-    check: (ctx) => {
-        if (ctx.operation_type !== "guard_add")
-            return null;
-        if (!ctx.relies_map)
-            return null;
-        const added = new Set(ctx.guard_config?.guard.map(g => g.object) ?? []);
-        for (const [guard, relies] of Object.entries(ctx.relies_map)) {
-            if (!added.has(guard))
-                continue;
-            for (const rely of relies) {
-                if (!added.has(rely)) {
-                    return {
-                        id: "R-PASS-04",
-                        level: "HIGH",
-                        category: "logic",
-                        title: "Depended Guard order error — E_RELIES_GUARD_NOT_ADDED",
-                        description: `Guard ${guard} depends on Guard ${rely}, but ${rely} has not been added to Passport yet. guard_add checks dependencies in topological order; if a depended Guard was not added first, abort E_RELIES_GUARD_NOT_ADDED (2).`,
-                        affected_stakeholders: ["creator"],
-                        scenario: "Adding a Guard with relies before adding the relied Guard",
-                        mitigation: `Add the depended Guard ${rely} first, then ${guard}. Dependencies are returned by guard::relies(guard).`,
-                        evidence: `guard=${guard}, missing_rely=${rely}`,
-                        related_move_error: "E_RELIES_GUARD_NOT_ADDED (2)",
-                        auto_fixable: false,
-                    };
-                }
-            }
-        }
-        return null;
-    },
-};
-const R_P_2_02 = {
-    id: "R-PASS-05",
-    category: "structural",
-    trigger: "submission serialized exceeds 256 bytes — E_SUBMISSION_SIZE_EXCEEDED",
-    check: (ctx) => {
-        if (ctx.max_submission_size === undefined)
-            return null;
-        if (ctx.max_submission_size <= MAX_SUBMISSION_SIZE_PASSPORT)
-            return null;
-        return {
-            id: "R-PASS-05",
-            level: "MEDIUM",
-            category: "structural",
-            title: `submission serialized exceeds ${MAX_SUBMISSION_SIZE_PASSPORT} bytes — E_SUBMISSION_SIZE_EXCEEDED`,
-            description: `Single submission serialized size is ${ctx.max_submission_size} bytes > MAX_SUBMISSION_SIZE_PASSPORT=${MAX_SUBMISSION_SIZE_PASSPORT}. verify() checks BCS serialized size of each submission; if exceeded, abort E_SUBMISSION_SIZE_EXCEEDED (3).`,
-            affected_stakeholders: ["creator"],
-            scenario: "Submission value too large (e.g. long string or nested struct)",
-            mitigation: `Trim submission data to <= ${MAX_SUBMISSION_SIZE_PASSPORT} bytes. For large objects, use Repository references instead of inline data.`,
-            evidence: `max_submission_size=${ctx.max_submission_size}, limit=${MAX_SUBMISSION_SIZE_PASSPORT}`,
-            related_move_error: "E_SUBMISSION_SIZE_EXCEEDED (3)",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_2_03 = {
-    id: "R-PASS-06",
-    category: "structural",
-    trigger: "Guard count reaches 20 limit — E_GUARD_COUNT_EXCEEDED",
-    check: (ctx) => {
-        if (ctx.guard_count === undefined)
-            return null;
-        if (ctx.guard_count < MAX_GUARD_COUNT_PASSPORT)
-            return null;
-        return {
-            id: "R-PASS-06",
-            level: "LOW",
-            category: "structural",
-            title: `Guard count reaches ${MAX_GUARD_COUNT_PASSPORT} limit — E_GUARD_COUNT_EXCEEDED`,
-            description: `Guard count ${ctx.guard_count} >= MAX_GUARD_COUNT_PASSPORT=${MAX_GUARD_COUNT_PASSPORT}. guard_add on a new Guard aborts E_GUARD_COUNT_EXCEEDED (1). Existing Guards can still be updated, but no new ones can be added.`,
-            affected_stakeholders: ["creator"],
-            scenario: "Passport with many Guard dependencies (e.g. complex multi-factor verification)",
-            mitigation: `Plan Guard count reasonably within <= ${MAX_GUARD_COUNT_PASSPORT}. For more verifications, merge similar Guards or use relies logical composition.`,
-            evidence: `guard_count=${ctx.guard_count}, limit=${MAX_GUARD_COUNT_PASSPORT}`,
-            related_move_error: "E_GUARD_COUNT_EXCEEDED (1)",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_3_01 = {
-    id: "R-PASS-07",
-    category: "logic",
-    trigger: "impack Guard failure sets overall result=false; non-impack results are ignored",
-    check: (ctx) => {
-        if (ctx.operation_type !== "verify" && ctx.operation_type !== "use")
-            return null;
-        if (!ctx.has_impack_guard)
-            return null;
-        return {
-            id: "R-PASS-07",
-            level: "HIGH",
-            category: "logic",
-            title: "impack Guard failure sets overall result=false; non-impack results are ignored",
-            description: "During verify(), any impack=true Guard failure → immediately sets result=false and returns. Even if all impack=false Guards pass, they do not affect the final result. This may mislead users into thinking non-impack Guard success can salvage the overall result.",
-            affected_stakeholders: ["creator", "consumer"],
-            scenario: "Multi-Guard Passport where one impack Guard fails but non-impack Guards pass",
-            mitigation: "Only configure Guards that truly affect business outcomes as impack=true. Non-impack Guards are for logging/audit only. Audit the verify_guard logic of impack Guards to ensure correctness.",
-            evidence: `has_impack_guard=${ctx.has_impack_guard}`,
-            related_move_error: "E_VERIFY_FAILED (7, indirect)",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_3_02 = {
-    id: "R-PASS-08",
-    category: "logic",
-    trigger: "relies logic error (AND/OR misuse) causes verification logic to mismatch intent",
-    check: (ctx) => {
-        if (ctx.operation_type !== "guard_add" && ctx.operation_type !== "verify")
-            return null;
-        if (!ctx.relies_map)
-            return null;
-        const reliesCount = Object.values(ctx.relies_map).filter(r => r.length > 0).length;
-        if (reliesCount === 0)
-            return null;
-        return {
-            id: "R-PASS-08",
-            level: "HIGH",
-            category: "logic",
-            title: "relies logic error (AND/OR misuse) causes verification logic to mismatch intent",
-            description: `Detected ${reliesCount} Guard(s) using relies dependencies. relies_logic_and=true (AND) requires all dependencies to pass; relies_logic_and=false (OR) requires any dependency to pass. AND/OR misuse causes verification logic to diverge from business intent (e.g. intent is "any pass" but configured as AND, forcing all dependencies to pass).`,
-            affected_stakeholders: ["creator", "guard_owner"],
-            scenario: "Guard with relies on multiple dependencies, but logic operator misconfigured at Guard level",
-            mitigation: "Document each Guard's dependency relationships and expected logic. AND for 'all must satisfy' scenarios (multi-factor auth); OR for 'any satisfies' scenarios (multi-path authorization). Note: relies_logic_and is returned by guard::relies() of the Guard object, not configured at the Passport layer.",
-            evidence: `guards_with_relies=${reliesCount}`,
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_3_03 = {
-    id: "R-PASS-09",
-    category: "knowledge",
-    trigger: "Constant sync gap — MAX_GUARD_COUNT/MAX_SUBMISSION_SIZE (RESOLVED)",
-    check: (ctx) => {
-        if (ctx.constants_synced === false) {
-            return {
-                id: "R-PASS-09",
-                level: "MEDIUM",
-                category: "knowledge",
-                title: "Constant sync gap: MAX_GUARD_COUNT/MAX_SUBMISSION_SIZE not synced",
-                description: "Move-layer MAX_GUARD_COUNT=20 / MAX_SUBMISSION_SIZE=256 were not synced to SDK onchain-constants.ts. Would cause SDK-layer pre-validation gaps or constant drift.",
-                affected_stakeholders: ["system"],
-                scenario: "Constant sync drift between Move / SDK / MCP",
-                mitigation: "Add MAX_GUARD_COUNT_PASSPORT=20 and MAX_SUBMISSION_SIZE_PASSPORT=256 to onchain-constants.ts",
-                evidence: "constants_synced=false",
-                resolved: false,
-                auto_fixable: true,
-            };
-        }
-        return {
-            id: "R-PASS-09",
-            level: "MEDIUM",
-            category: "knowledge",
-            title: "Constant sync gap (RESOLVED)",
-            description: "Historical issue: Move-layer MAX_GUARD_COUNT=20 / MAX_SUBMISSION_SIZE=256 were previously not synced to SDK. Fixed via onchain-constants.ts L278/L291 (ONCHAIN_CONSTANTS object) + L387/L392 (named exports). SDK passport.ts imports and re-exports these two constants from the top, no longer has local definitions.",
-            affected_stakeholders: ["system"],
-            scenario: "Constant sync drift between Move / SDK / MCP (historical, now resolved)",
-            mitigation: "Synced via MAX_GUARD_COUNT_PASSPORT / MAX_SUBMISSION_SIZE_PASSPORT. No further action required.",
-            evidence: `constants_synced=${ctx.constants_synced ?? true}, MAX_GUARD_COUNT_PASSPORT=${MAX_GUARD_COUNT_PASSPORT}, MAX_SUBMISSION_SIZE_PASSPORT=${MAX_SUBMISSION_SIZE_PASSPORT}`,
-            resolved: true,
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_4_01 = {
-    id: "R-PASS-10",
-    category: "knowledge",
-    trigger: "Passport Knowledge layer completely missing (RESOLVED, 7/7)",
-    check: (ctx) => {
-        if (ctx.knowledge_files_present === false) {
-            return {
-                id: "R-PASS-10",
-                level: "CRITICAL",
-                category: "knowledge",
-                title: "Passport Knowledge layer completely missing (0/7)",
-                description: "Passport has no dedicated files under knowledge/ directory. AI Agent cannot access Passport knowledge via passport-context.ts aggregation, causing Passport operations to lack risk pre-checks, confirmation gates, translation rules, etc.",
-                affected_stakeholders: ["system"],
-                scenario: "AI Agent attempts Passport operation without knowledge layer",
-                mitigation: "Create 7 files: passport-{risk,confirm,translation,templates,context,puzzle,ledger}.ts",
-                evidence: "knowledge_files_present=false",
-                resolved: false,
-                auto_fixable: true,
-            };
-        }
-        return {
-            id: "R-PASS-10",
-            level: "CRITICAL",
-            category: "knowledge",
-            title: "Passport Knowledge layer completely missing (RESOLVED, 7/7)",
-            description: "Historical issue: Passport previously had no dedicated files under knowledge/ (0/7). Fixed by adding 7 files: passport-{risk,confirm,translation,templates,context,puzzle,ledger}.ts. AI Agent can now access Passport knowledge via passport-context.ts aggregation.",
-            affected_stakeholders: ["system"],
-            scenario: "AI Agent attempts Passport operation (historical gap, now resolved)",
-            mitigation: "7 knowledge files created. No further action required.",
-            evidence: `knowledge_files_present=${ctx.knowledge_files_present ?? true}`,
-            resolved: true,
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_4_02 = {
-    id: "R-PASS-11",
-    category: "operational",
-    trigger: "No event emission — Passport creation/verify history cannot be tracked via events",
-    check: (ctx) => {
-        if (ctx.operation_type !== "create" && ctx.operation_type !== "verify")
-            return null;
-        return {
-            id: "R-PASS-11",
-            level: "MEDIUM",
-            category: "operational",
-            title: "No event emission — Passport creation/verify history cannot be tracked via events",
-            description: "Passport structurally has 0 event emissions (unlike Order which emits NewOrderEvent). Passport creation, Guard addition, verify, and other operations cannot be tracked via the Wow event system. Auditors must proactively query object state (query_objects with ObjectType.Passport).",
-            affected_stakeholders: ["system", "consumer"],
-            scenario: "Auditor attempts to reconstruct Passport lifecycle from events",
-            mitigation: "Proactively fetch Passport state via query interfaces (ObjectPassportSchema). Downstream consumers should record their own business events and correlate them with Passport object addresses.",
-            evidence: "0 events in passport.move",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_4_03 = {
-    id: "R-PASS-12",
-    category: "operational",
-    trigger: "result_for_permission lazy-loads impack field",
-    check: (ctx) => {
-        if (ctx.operation_type !== "use")
-            return null;
-        return {
-            id: "R-PASS-12",
-            level: "LOW",
-            category: "operational",
-            title: "result_for_permission lazy-loads impack field",
-            description: "The Passport.impack field (vector<address>) is NOT populated at verify() time; it is lazily loaded only on the first call to result_for_permission(). This means querying ObjectPassport.impack_guard after verify but before result_for_permission is called may return an empty array.",
-            affected_stakeholders: ["consumer", "system"],
-            scenario: "Consumer queries impack_guard list before result_for_permission is called",
-            mitigation: "Document the lazy-loading behavior. To get the impack list immediately, call result_for_permission() explicitly. Note: this function checks result=true (E_VERIFY_FAILED if false).",
-            evidence: "impack field lazy-filled in result_for_permission()",
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_5_01 = {
-    id: "R-PASS-13",
-    category: "lifecycle",
-    trigger: "destroy must occur before freeze — frozen object cannot be destroyed",
-    check: (ctx) => {
-        if (ctx.operation_type !== "destroy" && ctx.operation_type !== "freezen")
-            return null;
-        if (ctx.is_frozen) {
-            return {
-                id: "R-PASS-13",
-                level: "INFO",
-                category: "lifecycle",
-                title: "destroy must occur before freeze — frozen object cannot be destroyed",
-                description: "Passport is frozen (becomes immutable after freeze_object). destroy() needs to receive self: Passport by value, but a frozen object can no longer be received by value. To destroy, the operation must happen before freeze.",
-                affected_stakeholders: ["creator"],
-                scenario: "Creator attempts to destroy a frozen Passport",
-                mitigation: "Document the workflow: destroy and freezen are mutually exclusive terminal operations. Freeze = permanent retention; destroy = resource release.",
-                evidence: `is_frozen=${ctx.is_frozen}`,
-                auto_fixable: false,
-            };
-        }
-        return {
-            id: "R-PASS-13",
-            level: "INFO",
-            category: "lifecycle",
-            title: "destroy must occur before freeze — workflow reminder",
-            description: "destroy and freezen are two terminal operations for Passport. destroy releases resources (object::delete); freezen permanently retains (transfer::freeze_object). The two are mutually exclusive: after freeze, destroy is not allowed; after destroy, freeze is not allowed.",
-            affected_stakeholders: ["creator"],
-            scenario: "Creator choosing between destroy and freezen",
-            mitigation: "Use freezen to permanently retain verification records (for audit); use destroy for one-time verification (to release gas storage fees).",
-            evidence: `operation=${ctx.operation_type}`,
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_5_02 = {
-    id: "R-PASS-14",
-    category: "logic",
-    trigger: "Depended Guard cannot have its own dependencies — restricts complex verification logic",
-    check: (ctx) => {
-        if (!ctx.has_transitive_relies)
-            return null;
-        return {
-            id: "R-PASS-14",
-            level: "LOW",
-            category: "logic",
-            title: "Depended Guard cannot have its own dependencies — restricts complex verification logic",
-            description: "Passport's relies mechanism forbids transitive dependencies: a relied-upon Guard cannot have its own relies. This means 'A depends on B, B depends on C' chain verification cannot be modeled. Complex verification logic must be flattened to single-layer dependencies or split into multiple Passports.",
-            affected_stakeholders: ["creator", "guard_owner"],
-            scenario: "Designer attempts to model transitive Guard dependencies",
-            mitigation: "Accept the design constraint. For chain verification, flatten all dependency Guards into a single-layer AND dependency, or use Machine workflows to model multi-stage verification.",
-            evidence: `has_transitive_relies=${ctx.has_transitive_relies}`,
-            auto_fixable: false,
-        };
-    },
-};
-const R_P_5_03 = {
-    id: "R-PASS-15",
-    category: "operational",
-    trigger: "verify_guard is a native function — verification logic is opaque",
-    check: (ctx) => {
-        if (ctx.operation_type !== "verify")
-            return null;
-        return {
-            id: "R-PASS-15",
-            level: "INFO",
-            category: "operational",
-            title: "verify_guard is a native function — verification logic is opaque",
-            description: "guard::verify_guard(passport, guard, submission, impack) is a native function; its internal implementation is not visible in Move source code. The verification logic (how submission is parsed, how Guard table is matched, how result is returned) is implemented by the Wow runtime. Developers cannot fully understand verification details by reading Move source code.",
-            affected_stakeholders: ["creator", "guard_owner"],
-            scenario: "Developer attempts to debug verify() failure",
-            mitigation: "Document native behavior: verify_guard verifies submission item-by-item per Guard.table config; types must match. Returns false on failure (does not abort). To debug, test each Guard's submission individually.",
-            evidence: "guard::verify_guard is native",
-            auto_fixable: false,
-        };
-    },
-};
-const ALL_RULES = [
-    R_P_1_01, R_P_1_02, R_P_1_03,
-    R_P_2_01, R_P_2_02, R_P_2_03,
-    R_P_3_01, R_P_3_02, R_P_3_03,
-    R_P_4_01, R_P_4_02, R_P_4_03,
-    R_P_5_01, R_P_5_02, R_P_5_03,
-];
-export const PASSPORT_RISK_VERSION = "1.0.0";
-export function getAllRiskRules() {
-    return [...ALL_RULES];
-}
-export function getRiskRulesCount() {
-    return ALL_RULES.length;
-}
-export function getRiskRulesByCategory(category) {
-    return ALL_RULES.filter(r => r.category === category);
-}
-export function assessPassportRisks(ctx) {
-    const risks = [];
-    for (const rule of ALL_RULES) {
-        const r = rule.check(ctx);
-        if (r)
-            risks.push(r);
-    }
-    const levelRank = {
-        CRITICAL: 4, HIGH: 3, MEDIUM: 2, LOW: 1, INFO: 0,
-    };
-    const overall = risks.length === 0
-        ? "LOW"
-        : risks.reduce((max, r) => levelRank[r.level] > levelRank[max] ? r.level : max, "INFO");
-    const byCategory = {};
-    const byLevel = {};
-    for (const r of risks) {
-        byCategory[r.category] = (byCategory[r.category] ?? 0) + 1;
-        byLevel[r.level] = (byLevel[r.level] ?? 0) + 1;
-    }
-    const advice = {};
-    for (const r of risks) {
-        for (const s of r.affected_stakeholders) {
-            if (!advice[s])
-                advice[s] = [];
-            advice[s].push(`${r.id}: ${r.mitigation}`);
-        }
-    }
-    const blockingRisks = risks.filter(r => r.level === "CRITICAL" && !r.resolved);
-    const reviewRisks = risks.filter(r => (r.level === "CRITICAL" || r.level === "HIGH") && !r.resolved);
-    return {
-        summary: `Assessed ${risks.length} risk(s) across ${Object.keys(byCategory).length} categories`,
-        risks,
-        overall_risk: overall,
-        risks_by_category: byCategory,
-        risks_by_level: byLevel,
-        stakeholder_advice: advice,
-        needs_human_review: reviewRisks.length > 0,
-        blocks_publish: blockingRisks.length > 0,
-    };
-}
-export { PASSPORT_ERROR_CODES };
+import{MAX_GUARD_COUNT_PASSPORT,MAX_SUBMISSION_SIZE_PASSPORT,PASSPORT_ERROR_CODES}from'./passport-ledger.js';const R_P_1_01={'id':'R-PASS-01','category':'lifecycle','trigger':'tx_hash\x20binding\x20—\x20Passport\x20cannot\x20be\x20reused\x20across\x20transactions','check':a=>{if(a['operation_type']!=='create'&&a['operation_type']!=='use')return null;return{'id':'R-PASS-01','level':'HIGH','category':'lifecycle','title':'tx_hash\x20binding\x20—\x20Passport\x20cannot\x20be\x20reused\x20across\x20transactions','description':'Passport\x20is\x20bound\x20to\x20tx_context::digest(ctx)\x20at\x20creation\x20time.\x20All\x20write\x20functions\x20(guard_add\x20/\x20guard_clear\x20/\x20verify)\x20and\x20result\x20queries\x20require\x20tx_hash\x20to\x20match\x20the\x20current\x20transaction,\x20otherwise\x20abort\x20E_DIGEST_NOT_MATCH\x20(11)\x20or\x20E_TX_NOT_MATCH\x20(8).\x20Caller\x20must\x20complete\x20all\x20operations\x20within\x20the\x20same\x20transaction\x20(new\x20→\x20guard_add\x20→\x20verify\x20→\x20result\x20→\x20consume).','affected_stakeholders':['creator','consumer'],'scenario':'Caller\x20attempts\x20to\x20use\x20Passport\x20created\x20in\x20a\x20previous\x20transaction','mitigation':'SDK\x20encapsulates\x20single-transaction\x20flow\x20(verify_guard:\x20new\x20→\x20guard_add\x20→\x20verify\x20→\x20freeze).\x20To\x20reuse\x20across\x20transactions,\x20you\x20must\x20recreate\x20the\x20Passport\x20and\x20resubmit\x20all\x20Guard\x20data.','evidence':'tx_hash\x20field\x20set\x20at\x20new()\x20time,\x20enforced\x20in\x20guard_add/verify/result','related_move_error':'E_DIGEST_NOT_MATCH\x20(11),\x20E_TX_NOT_MATCH\x20(8)','auto_fixable':![]};}},R_P_1_02={'id':'R-PASS-02','category':'lifecycle','trigger':'has_verified\x20one-time\x20—\x20Guard\x20config\x20cannot\x20be\x20modified\x20after\x20verify','check':a=>{if(!a['has_verified'])return null;if(a['operation_type']!=='guard_add'&&a['operation_type']!=='guard_clear')return null;return{'id':'R-PASS-02','level':'MEDIUM','category':'lifecycle','title':'has_verified\x20one-time\x20—\x20Guard\x20config\x20cannot\x20be\x20modified\x20after\x20verify','description':'After\x20Passport.has_verified=true,\x20guard_add\x20/\x20guard_clear\x20/\x20verify\x20all\x20abort\x20E_HAS_VERIFIED\x20(4).\x20verify\x20is\x20a\x20one-time\x20operation\x20and\x20its\x20result\x20is\x20tamper-proof.\x20This\x20is\x20Passport\x27s\x20core\x20security\x20guarantee\x20(anti-tampering),\x20but\x20also\x20means\x20all\x20Guards\x20must\x20be\x20fully\x20configured\x20before\x20verify.','affected_stakeholders':['creator'],'scenario':'Caller\x20attempts\x20to\x20modify\x20Guard\x20configuration\x20after\x20verify()','mitigation':'Fully\x20plan\x20all\x20Guards\x20(impack\x20+\x20non-impack\x20+\x20relies\x20dependencies)\x20before\x20verify().\x20To\x20modify\x20after\x20verify,\x20create\x20a\x20new\x20Passport.','evidence':'has_verified='+a['has_verified']+',\x20operation='+a['operation_type'],'related_move_error':'E_HAS_VERIFIED\x20(4)','auto_fixable':![]};}},R_P_1_03={'id':'R-PASS-03','category':'structural','trigger':'No\x20impack\x20Guard\x20—\x20verify\x20will\x20fail\x20E_IMPACK_GUARD_NOT_FOUND','check':a=>{if(a['operation_type']!=='verify')return null;if(a['has_impack_guard'])return null;return{'id':'R-PASS-03','level':'MEDIUM','category':'structural','title':'No\x20impack\x20Guard\x20—\x20verify\x20will\x20fail\x20E_IMPACK_GUARD_NOT_FOUND','description':'verify()\x20requires\x20at\x20least\x201\x20impack=true\x20Guard.\x20If\x20all\x20Guards\x20are\x20impack=false,\x20verify\x20aborts\x20E_IMPACK_GUARD_NOT_FOUND\x20(9).\x20Guards\x20with\x20impack=false\x20only\x20record\x20per-Guard\x20result\x20and\x20do\x20not\x20affect\x20the\x20final\x20result.','affected_stakeholders':['creator'],'scenario':'Passport\x20configured\x20with\x20only\x20non-impack\x20Guards','mitigation':'Configure\x20at\x20least\x201\x20Guard\x20as\x20impack=true.\x20Failure\x20of\x20this\x20Guard\x20immediately\x20sets\x20the\x20overall\x20result=false.','evidence':'has_impack_guard='+(a['has_impack_guard']??![]),'related_move_error':'E_IMPACK_GUARD_NOT_FOUND\x20(9)','auto_fixable':!![]};}},R_P_2_01={'id':'R-PASS-04','category':'logic','trigger':'Depended\x20Guard\x20order\x20error\x20—\x20E_RELIES_GUARD_NOT_ADDED','check':a=>{if(a['operation_type']!=='guard_add')return null;if(!a['relies_map'])return null;const b=new Set(a['guard_config']?.['guard']['map'](c=>c['object'])??[]);for(const [c,d]of Object['entries'](a['relies_map'])){if(!b['has'](c))continue;for(const e of d){if(!b['has'](e))return{'id':'R-PASS-04','level':'HIGH','category':'logic','title':'Depended\x20Guard\x20order\x20error\x20—\x20E_RELIES_GUARD_NOT_ADDED','description':'Guard\x20'+c+'\x20depends\x20on\x20Guard\x20'+e+',\x20but\x20'+e+'\x20has\x20not\x20been\x20added\x20to\x20Passport\x20yet.\x20guard_add\x20checks\x20dependencies\x20in\x20topological\x20order;\x20if\x20a\x20depended\x20Guard\x20was\x20not\x20added\x20first,\x20abort\x20E_RELIES_GUARD_NOT_ADDED\x20(2).','affected_stakeholders':['creator'],'scenario':'Adding\x20a\x20Guard\x20with\x20relies\x20before\x20adding\x20the\x20relied\x20Guard','mitigation':'Add\x20the\x20depended\x20Guard\x20'+e+'\x20first,\x20then\x20'+c+'.\x20Dependencies\x20are\x20returned\x20by\x20guard::relies(guard).','evidence':'guard='+c+',\x20missing_rely='+e,'related_move_error':'E_RELIES_GUARD_NOT_ADDED\x20(2)','auto_fixable':![]};}}return null;}},R_P_2_02={'id':'R-PASS-05','category':'structural','trigger':'submission\x20serialized\x20exceeds\x20256\x20bytes\x20—\x20E_SUBMISSION_SIZE_EXCEEDED','check':a=>{if(a['max_submission_size']===undefined)return null;if(a['max_submission_size']<=MAX_SUBMISSION_SIZE_PASSPORT)return null;return{'id':'R-PASS-05','level':'MEDIUM','category':'structural','title':'submission\x20serialized\x20exceeds\x20'+MAX_SUBMISSION_SIZE_PASSPORT+'\x20bytes\x20—\x20E_SUBMISSION_SIZE_EXCEEDED','description':'Single\x20submission\x20serialized\x20size\x20is\x20'+a['max_submission_size']+'\x20bytes\x20>\x20MAX_SUBMISSION_SIZE_PASSPORT='+MAX_SUBMISSION_SIZE_PASSPORT+'.\x20verify()\x20checks\x20BCS\x20serialized\x20size\x20of\x20each\x20submission;\x20if\x20exceeded,\x20abort\x20E_SUBMISSION_SIZE_EXCEEDED\x20(3).','affected_stakeholders':['creator'],'scenario':'Submission\x20value\x20too\x20large\x20(e.g.\x20long\x20string\x20or\x20nested\x20struct)','mitigation':'Trim\x20submission\x20data\x20to\x20<=\x20'+MAX_SUBMISSION_SIZE_PASSPORT+'\x20bytes.\x20For\x20large\x20objects,\x20use\x20Repository\x20references\x20instead\x20of\x20inline\x20data.','evidence':'max_submission_size='+a['max_submission_size']+',\x20limit='+MAX_SUBMISSION_SIZE_PASSPORT,'related_move_error':'E_SUBMISSION_SIZE_EXCEEDED\x20(3)','auto_fixable':![]};}},R_P_2_03={'id':'R-PASS-06','category':'structural','trigger':'Guard\x20count\x20reaches\x2020\x20limit\x20—\x20E_GUARD_COUNT_EXCEEDED','check':a=>{if(a['guard_count']===undefined)return null;if(a['guard_count']<MAX_GUARD_COUNT_PASSPORT)return null;return{'id':'R-PASS-06','level':'LOW','category':'structural','title':'Guard\x20count\x20reaches\x20'+MAX_GUARD_COUNT_PASSPORT+'\x20limit\x20—\x20E_GUARD_COUNT_EXCEEDED','description':'Guard\x20count\x20'+a['guard_count']+'\x20>=\x20MAX_GUARD_COUNT_PASSPORT='+MAX_GUARD_COUNT_PASSPORT+'.\x20guard_add\x20on\x20a\x20new\x20Guard\x20aborts\x20E_GUARD_COUNT_EXCEEDED\x20(1).\x20Existing\x20Guards\x20can\x20still\x20be\x20updated,\x20but\x20no\x20new\x20ones\x20can\x20be\x20added.','affected_stakeholders':['creator'],'scenario':'Passport\x20with\x20many\x20Guard\x20dependencies\x20(e.g.\x20complex\x20multi-factor\x20verification)','mitigation':'Plan\x20Guard\x20count\x20reasonably\x20within\x20<=\x20'+MAX_GUARD_COUNT_PASSPORT+'.\x20For\x20more\x20verifications,\x20merge\x20similar\x20Guards\x20or\x20use\x20relies\x20logical\x20composition.','evidence':'guard_count='+a['guard_count']+',\x20limit='+MAX_GUARD_COUNT_PASSPORT,'related_move_error':'E_GUARD_COUNT_EXCEEDED\x20(1)','auto_fixable':![]};}},R_P_3_01={'id':'R-PASS-07','category':'logic','trigger':'impack\x20Guard\x20failure\x20sets\x20overall\x20result=false;\x20non-impack\x20results\x20are\x20ignored','check':a=>{if(a['operation_type']!=='verify'&&a['operation_type']!=='use')return null;if(!a['has_impack_guard'])return null;return{'id':'R-PASS-07','level':'HIGH','category':'logic','title':'impack\x20Guard\x20failure\x20sets\x20overall\x20result=false;\x20non-impack\x20results\x20are\x20ignored','description':'During\x20verify(),\x20any\x20impack=true\x20Guard\x20failure\x20→\x20immediately\x20sets\x20result=false\x20and\x20returns.\x20Even\x20if\x20all\x20impack=false\x20Guards\x20pass,\x20they\x20do\x20not\x20affect\x20the\x20final\x20result.\x20This\x20may\x20mislead\x20users\x20into\x20thinking\x20non-impack\x20Guard\x20success\x20can\x20salvage\x20the\x20overall\x20result.','affected_stakeholders':['creator','consumer'],'scenario':'Multi-Guard\x20Passport\x20where\x20one\x20impack\x20Guard\x20fails\x20but\x20non-impack\x20Guards\x20pass','mitigation':'Only\x20configure\x20Guards\x20that\x20truly\x20affect\x20business\x20outcomes\x20as\x20impack=true.\x20Non-impack\x20Guards\x20are\x20for\x20logging/audit\x20only.\x20Audit\x20the\x20verify_guard\x20logic\x20of\x20impack\x20Guards\x20to\x20ensure\x20correctness.','evidence':'has_impack_guard='+a['has_impack_guard'],'related_move_error':'E_VERIFY_FAILED\x20(7,\x20indirect)','auto_fixable':![]};}},R_P_3_02={'id':'R-PASS-08','category':'logic','trigger':'relies\x20logic\x20error\x20(AND/OR\x20misuse)\x20causes\x20verification\x20logic\x20to\x20mismatch\x20intent','check':a=>{if(a['operation_type']!=='guard_add'&&a['operation_type']!=='verify')return null;if(!a['relies_map'])return null;const b=Object['values'](a['relies_map'])['filter'](c=>c['length']>0x0)['length'];if(b===0x0)return null;return{'id':'R-PASS-08','level':'HIGH','category':'logic','title':'relies\x20logic\x20error\x20(AND/OR\x20misuse)\x20causes\x20verification\x20logic\x20to\x20mismatch\x20intent','description':'Detected\x20'+b+'\x20Guard(s)\x20using\x20relies\x20dependencies.\x20relies_logic_and=true\x20(AND)\x20requires\x20all\x20dependencies\x20to\x20pass;\x20relies_logic_and=false\x20(OR)\x20requires\x20any\x20dependency\x20to\x20pass.\x20AND/OR\x20misuse\x20causes\x20verification\x20logic\x20to\x20diverge\x20from\x20business\x20intent\x20(e.g.\x20intent\x20is\x20\x22any\x20pass\x22\x20but\x20configured\x20as\x20AND,\x20forcing\x20all\x20dependencies\x20to\x20pass).','affected_stakeholders':['creator','guard_owner'],'scenario':'Guard\x20with\x20relies\x20on\x20multiple\x20dependencies,\x20but\x20logic\x20operator\x20misconfigured\x20at\x20Guard\x20level','mitigation':'Document\x20each\x20Guard\x27s\x20dependency\x20relationships\x20and\x20expected\x20logic.\x20AND\x20for\x20\x27all\x20must\x20satisfy\x27\x20scenarios\x20(multi-factor\x20auth);\x20OR\x20for\x20\x27any\x20satisfies\x27\x20scenarios\x20(multi-path\x20authorization).\x20Note:\x20relies_logic_and\x20is\x20returned\x20by\x20guard::relies()\x20of\x20the\x20Guard\x20object,\x20not\x20configured\x20at\x20the\x20Passport\x20layer.','evidence':'guards_with_relies='+b,'auto_fixable':![]};}},R_P_3_03={'id':'R-PASS-09','category':'knowledge','trigger':'Constant\x20sync\x20gap\x20—\x20MAX_GUARD_COUNT/MAX_SUBMISSION_SIZE\x20(RESOLVED)','check':a=>{if(a['constants_synced']===![])return{'id':'R-PASS-09','level':'MEDIUM','category':'knowledge','title':'Constant\x20sync\x20gap:\x20MAX_GUARD_COUNT/MAX_SUBMISSION_SIZE\x20not\x20synced','description':'Move-layer\x20MAX_GUARD_COUNT=20\x20/\x20MAX_SUBMISSION_SIZE=256\x20were\x20not\x20synced\x20to\x20SDK\x20onchain-constants.ts.\x20Would\x20cause\x20SDK-layer\x20pre-validation\x20gaps\x20or\x20constant\x20drift.','affected_stakeholders':['system'],'scenario':'Constant\x20sync\x20drift\x20between\x20Move\x20/\x20SDK\x20/\x20MCP','mitigation':'Add\x20MAX_GUARD_COUNT_PASSPORT=20\x20and\x20MAX_SUBMISSION_SIZE_PASSPORT=256\x20to\x20onchain-constants.ts','evidence':'constants_synced=false','resolved':![],'auto_fixable':!![]};return{'id':'R-PASS-09','level':'MEDIUM','category':'knowledge','title':'Constant\x20sync\x20gap\x20(RESOLVED)','description':'Historical\x20issue:\x20Move-layer\x20MAX_GUARD_COUNT=20\x20/\x20MAX_SUBMISSION_SIZE=256\x20were\x20previously\x20not\x20synced\x20to\x20SDK.\x20Fixed\x20via\x20onchain-constants.ts\x20L278/L291\x20(ONCHAIN_CONSTANTS\x20object)\x20+\x20L387/L392\x20(named\x20exports).\x20SDK\x20passport.ts\x20imports\x20and\x20re-exports\x20these\x20two\x20constants\x20from\x20the\x20top,\x20no\x20longer\x20has\x20local\x20definitions.','affected_stakeholders':['system'],'scenario':'Constant\x20sync\x20drift\x20between\x20Move\x20/\x20SDK\x20/\x20MCP\x20(historical,\x20now\x20resolved)','mitigation':'Synced\x20via\x20MAX_GUARD_COUNT_PASSPORT\x20/\x20MAX_SUBMISSION_SIZE_PASSPORT.\x20No\x20further\x20action\x20required.','evidence':'constants_synced='+(a['constants_synced']??!![])+',\x20MAX_GUARD_COUNT_PASSPORT='+MAX_GUARD_COUNT_PASSPORT+',\x20MAX_SUBMISSION_SIZE_PASSPORT='+MAX_SUBMISSION_SIZE_PASSPORT,'resolved':!![],'auto_fixable':![]};}},R_P_4_01={'id':'R-PASS-10','category':'knowledge','trigger':'Passport\x20Knowledge\x20layer\x20completely\x20missing\x20(RESOLVED,\x207/7)','check':a=>{if(a['knowledge_files_present']===![])return{'id':'R-PASS-10','level':'CRITICAL','category':'knowledge','title':'Passport\x20Knowledge\x20layer\x20completely\x20missing\x20(0/7)','description':'Passport\x20has\x20no\x20dedicated\x20files\x20under\x20knowledge/\x20directory.\x20AI\x20Agent\x20cannot\x20access\x20Passport\x20knowledge\x20via\x20passport-context.ts\x20aggregation,\x20causing\x20Passport\x20operations\x20to\x20lack\x20risk\x20pre-checks,\x20confirmation\x20gates,\x20translation\x20rules,\x20etc.','affected_stakeholders':['system'],'scenario':'AI\x20Agent\x20attempts\x20Passport\x20operation\x20without\x20knowledge\x20layer','mitigation':'Create\x207\x20files:\x20passport-{risk,confirm,translation,templates,context,puzzle,ledger}.ts','evidence':'knowledge_files_present=false','resolved':![],'auto_fixable':!![]};return{'id':'R-PASS-10','level':'CRITICAL','category':'knowledge','title':'Passport\x20Knowledge\x20layer\x20completely\x20missing\x20(RESOLVED,\x207/7)','description':'Historical\x20issue:\x20Passport\x20previously\x20had\x20no\x20dedicated\x20files\x20under\x20knowledge/\x20(0/7).\x20Fixed\x20by\x20adding\x207\x20files:\x20passport-{risk,confirm,translation,templates,context,puzzle,ledger}.ts.\x20AI\x20Agent\x20can\x20now\x20access\x20Passport\x20knowledge\x20via\x20passport-context.ts\x20aggregation.','affected_stakeholders':['system'],'scenario':'AI\x20Agent\x20attempts\x20Passport\x20operation\x20(historical\x20gap,\x20now\x20resolved)','mitigation':'7\x20knowledge\x20files\x20created.\x20No\x20further\x20action\x20required.','evidence':'knowledge_files_present='+(a['knowledge_files_present']??!![]),'resolved':!![],'auto_fixable':![]};}},R_P_4_02={'id':'R-PASS-11','category':'operational','trigger':'No\x20event\x20emission\x20—\x20Passport\x20creation/verify\x20history\x20cannot\x20be\x20tracked\x20via\x20events','check':a=>{if(a['operation_type']!=='create'&&a['operation_type']!=='verify')return null;return{'id':'R-PASS-11','level':'MEDIUM','category':'operational','title':'No\x20event\x20emission\x20—\x20Passport\x20creation/verify\x20history\x20cannot\x20be\x20tracked\x20via\x20events','description':'Passport\x20structurally\x20has\x200\x20event\x20emissions\x20(unlike\x20Order\x20which\x20emits\x20NewOrderEvent).\x20Passport\x20creation,\x20Guard\x20addition,\x20verify,\x20and\x20other\x20operations\x20cannot\x20be\x20tracked\x20via\x20the\x20Wow\x20event\x20system.\x20Auditors\x20must\x20proactively\x20query\x20object\x20state\x20(query_objects\x20with\x20ObjectType.Passport).','affected_stakeholders':['system','consumer'],'scenario':'Auditor\x20attempts\x20to\x20reconstruct\x20Passport\x20lifecycle\x20from\x20events','mitigation':'Proactively\x20fetch\x20Passport\x20state\x20via\x20query\x20interfaces\x20(ObjectPassportSchema).\x20Downstream\x20consumers\x20should\x20record\x20their\x20own\x20business\x20events\x20and\x20correlate\x20them\x20with\x20Passport\x20object\x20addresses.','evidence':'0\x20events\x20in\x20passport.move','auto_fixable':![]};}},R_P_4_03={'id':'R-PASS-12','category':'operational','trigger':'result_for_permission\x20lazy-loads\x20impack\x20field','check':a=>{if(a['operation_type']!=='use')return null;return{'id':'R-PASS-12','level':'LOW','category':'operational','title':'result_for_permission\x20lazy-loads\x20impack\x20field','description':'The\x20Passport.impack\x20field\x20(vector<address>)\x20is\x20NOT\x20populated\x20at\x20verify()\x20time;\x20it\x20is\x20lazily\x20loaded\x20only\x20on\x20the\x20first\x20call\x20to\x20result_for_permission().\x20This\x20means\x20querying\x20ObjectPassport.impack_guard\x20after\x20verify\x20but\x20before\x20result_for_permission\x20is\x20called\x20may\x20return\x20an\x20empty\x20array.','affected_stakeholders':['consumer','system'],'scenario':'Consumer\x20queries\x20impack_guard\x20list\x20before\x20result_for_permission\x20is\x20called','mitigation':'Document\x20the\x20lazy-loading\x20behavior.\x20To\x20get\x20the\x20impack\x20list\x20immediately,\x20call\x20result_for_permission()\x20explicitly.\x20Note:\x20this\x20function\x20checks\x20result=true\x20(E_VERIFY_FAILED\x20if\x20false).','evidence':'impack\x20field\x20lazy-filled\x20in\x20result_for_permission()','auto_fixable':![]};}},R_P_5_01={'id':'R-PASS-13','category':'lifecycle','trigger':'destroy\x20must\x20occur\x20before\x20freeze\x20—\x20frozen\x20object\x20cannot\x20be\x20destroyed','check':a=>{if(a['operation_type']!=='destroy'&&a['operation_type']!=='freezen')return null;if(a['is_frozen'])return{'id':'R-PASS-13','level':'INFO','category':'lifecycle','title':'destroy\x20must\x20occur\x20before\x20freeze\x20—\x20frozen\x20object\x20cannot\x20be\x20destroyed','description':'Passport\x20is\x20frozen\x20(becomes\x20immutable\x20after\x20freeze_object).\x20destroy()\x20needs\x20to\x20receive\x20self:\x20Passport\x20by\x20value,\x20but\x20a\x20frozen\x20object\x20can\x20no\x20longer\x20be\x20received\x20by\x20value.\x20To\x20destroy,\x20the\x20operation\x20must\x20happen\x20before\x20freeze.','affected_stakeholders':['creator'],'scenario':'Creator\x20attempts\x20to\x20destroy\x20a\x20frozen\x20Passport','mitigation':'Document\x20the\x20workflow:\x20destroy\x20and\x20freezen\x20are\x20mutually\x20exclusive\x20terminal\x20operations.\x20Freeze\x20=\x20permanent\x20retention;\x20destroy\x20=\x20resource\x20release.','evidence':'is_frozen='+a['is_frozen'],'auto_fixable':![]};return{'id':'R-PASS-13','level':'INFO','category':'lifecycle','title':'destroy\x20must\x20occur\x20before\x20freeze\x20—\x20workflow\x20reminder','description':'destroy\x20and\x20freezen\x20are\x20two\x20terminal\x20operations\x20for\x20Passport.\x20destroy\x20releases\x20resources\x20(object::delete);\x20freezen\x20permanently\x20retains\x20(transfer::freeze_object).\x20The\x20two\x20are\x20mutually\x20exclusive:\x20after\x20freeze,\x20destroy\x20is\x20not\x20allowed;\x20after\x20destroy,\x20freeze\x20is\x20not\x20allowed.','affected_stakeholders':['creator'],'scenario':'Creator\x20choosing\x20between\x20destroy\x20and\x20freezen','mitigation':'Use\x20freezen\x20to\x20permanently\x20retain\x20verification\x20records\x20(for\x20audit);\x20use\x20destroy\x20for\x20one-time\x20verification\x20(to\x20release\x20gas\x20storage\x20fees).','evidence':'operation='+a['operation_type'],'auto_fixable':![]};}},R_P_5_02={'id':'R-PASS-14','category':'logic','trigger':'Depended\x20Guard\x20cannot\x20have\x20its\x20own\x20dependencies\x20—\x20restricts\x20complex\x20verification\x20logic','check':a=>{if(!a['has_transitive_relies'])return null;return{'id':'R-PASS-14','level':'LOW','category':'logic','title':'Depended\x20Guard\x20cannot\x20have\x20its\x20own\x20dependencies\x20—\x20restricts\x20complex\x20verification\x20logic','description':'Passport\x27s\x20relies\x20mechanism\x20forbids\x20transitive\x20dependencies:\x20a\x20relied-upon\x20Guard\x20cannot\x20have\x20its\x20own\x20relies.\x20This\x20means\x20\x27A\x20depends\x20on\x20B,\x20B\x20depends\x20on\x20C\x27\x20chain\x20verification\x20cannot\x20be\x20modeled.\x20Complex\x20verification\x20logic\x20must\x20be\x20flattened\x20to\x20single-layer\x20dependencies\x20or\x20split\x20into\x20multiple\x20Passports.','affected_stakeholders':['creator','guard_owner'],'scenario':'Designer\x20attempts\x20to\x20model\x20transitive\x20Guard\x20dependencies','mitigation':'Accept\x20the\x20design\x20constraint.\x20For\x20chain\x20verification,\x20flatten\x20all\x20dependency\x20Guards\x20into\x20a\x20single-layer\x20AND\x20dependency,\x20or\x20use\x20Machine\x20workflows\x20to\x20model\x20multi-stage\x20verification.','evidence':'has_transitive_relies='+a['has_transitive_relies'],'auto_fixable':![]};}},R_P_5_03={'id':'R-PASS-15','category':'operational','trigger':'verify_guard\x20is\x20a\x20native\x20function\x20—\x20verification\x20logic\x20is\x20opaque','check':a=>{if(a['operation_type']!=='verify')return null;return{'id':'R-PASS-15','level':'INFO','category':'operational','title':'verify_guard\x20is\x20a\x20native\x20function\x20—\x20verification\x20logic\x20is\x20opaque','description':'guard::verify_guard(passport,\x20guard,\x20submission,\x20impack)\x20is\x20a\x20native\x20function;\x20its\x20internal\x20implementation\x20is\x20not\x20visible\x20in\x20Move\x20source\x20code.\x20The\x20verification\x20logic\x20(how\x20submission\x20is\x20parsed,\x20how\x20Guard\x20table\x20is\x20matched,\x20how\x20result\x20is\x20returned)\x20is\x20implemented\x20by\x20the\x20Wow\x20runtime.\x20Developers\x20cannot\x20fully\x20understand\x20verification\x20details\x20by\x20reading\x20Move\x20source\x20code.','affected_stakeholders':['creator','guard_owner'],'scenario':'Developer\x20attempts\x20to\x20debug\x20verify()\x20failure','mitigation':'Document\x20native\x20behavior:\x20verify_guard\x20verifies\x20submission\x20item-by-item\x20per\x20Guard.table\x20config;\x20types\x20must\x20match.\x20Returns\x20false\x20on\x20failure\x20(does\x20not\x20abort).\x20To\x20debug,\x20test\x20each\x20Guard\x27s\x20submission\x20individually.','evidence':'guard::verify_guard\x20is\x20native','auto_fixable':![]};}},ALL_RULES=[R_P_1_01,R_P_1_02,R_P_1_03,R_P_2_01,R_P_2_02,R_P_2_03,R_P_3_01,R_P_3_02,R_P_3_03,R_P_4_01,R_P_4_02,R_P_4_03,R_P_5_01,R_P_5_02,R_P_5_03];export const PASSPORT_RISK_VERSION='1.0.0';export function getAllRiskRules(){return[...ALL_RULES];}export function getRiskRulesCount(){return ALL_RULES['length'];}export function getRiskRulesByCategory(a){return ALL_RULES['filter'](b=>b['category']===a);}export function assessPassportRisks(a){const b=[];for(const j of ALL_RULES){const k=j['check'](a);if(k)b['push'](k);}const c={'CRITICAL':0x4,'HIGH':0x3,'MEDIUM':0x2,'LOW':0x1,'INFO':0x0},d=b['length']===0x0?'LOW':b['reduce']((l,m)=>c[m['level']]>c[l]?m['level']:l,'INFO'),e={},f={};for(const l of b){e[l['category']]=(e[l['category']]??0x0)+0x1,f[l['level']]=(f[l['level']]??0x0)+0x1;}const g={};for(const m of b){for(const n of m['affected_stakeholders']){if(!g[n])g[n]=[];g[n]['push'](m['id']+':\x20'+m['mitigation']);}}const h=b['filter'](o=>o['level']==='CRITICAL'&&!o['resolved']),i=b['filter'](o=>(o['level']==='CRITICAL'||o['level']==='HIGH')&&!o['resolved']);return{'summary':'Assessed\x20'+b['length']+'\x20risk(s)\x20across\x20'+Object['keys'](e)['length']+'\x20categories','risks':b,'overall_risk':d,'risks_by_category':e,'risks_by_level':f,'stakeholder_advice':g,'needs_human_review':i['length']>0x0,'blocks_publish':h['length']>0x0};}export{PASSPORT_ERROR_CODES};