@wowok/agent-mcp 3.4.1 → 3.4.3

package/dist/knowledge/guard-binding-verifier.js

@@ -1 +1 @@
-import{getGuardHostContext}from'./guard-host-context.js';function isIdentityQuery(a){const b=a['toLowerCase']();if(b['startsWith']('context')||b['includes']('signer'))return!![];return/order\.agent|permission\.(owner|admin)|named.?operator/['test'](b);}function children(a){if(Array['isArray'](a['nodes']))return a['nodes'];if(a['node'])return[a['node']];return[];}function walk(a,b){if(!a||typeof a!=='object')return;const d=a;b(d);for(const e of children(d))walk(e,b);}function deadNamespaces(a){switch(a){case'reward_claim':case'service_buy_guard':case'gen_passport':case'demand_present':case'treasury_external_deposit':case'treasury_external_withdraw':return['order.','progress.'];case'arbitration_usage':return['order.','arb.'];default:return[];}}function deadLegCode(a){switch(a){case'reward_claim':return'RC_NO_ORDER_ANCHOR';case'service_buy_guard':return'SB_NO_ORDER_STATE';case'gen_passport':return'GP_NO_ORDER_AT_ISSUANCE';case'arbitration_usage':return'AU_DEAD_CASE_SCOPES';default:return'BV_DEAD_NAMESPACE_LEG';}}function slotInComparison(a,b){let c=![];return walk(a,d=>{if(c)return;if(!Array['isArray'](d['nodes'])||d['nodes']['length']<0x2)return;if(!/logic_/['test'](d['type']??''))return;for(const e of d['nodes']){if(e?.['type']==='identifier'&&e['identifier']===b){c=!![];return;}}}),c;}export function verifyGuardBinding(a){const b=[],{host:c,root:d,facts:e}=a;if(!d)return b;if(c==='reward_claim'&&e?.['order_submission_declared']){}else{const f=deadNamespaces(c);if(f['length']>0x0){const g=[];walk(d,h=>{if(typeof h['query']==='string')for(const i of f){if(h['query']['startsWith'](i)&&!g['includes'](i))g['push'](i);}});if(g['length']>0x0){const h=getGuardHostContext(c);b['push']({'code':deadLegCode(c),'host':c,'level':'warning','detail':'Query\x20namespace(s)\x20'+g['map'](i=>'\x22'+i+'*\x22')['join'](',\x20')+'\x20cannot\x20resolve\x20in\x20the\x20'+(c+'\x20evaluation\x20context\x20('+(h?.['order_anchor']??'no\x20anchor')+')\x20—\x20these\x20legs\x20are\x20')+'structurally\x20dead\x20here;\x20under\x20an\x20AND\x20scope\x20they\x20brick\x20the\x20branch,\x20negated\x20they\x20'+'short-circuit\x20it.\x20See\x20guard-host-context.ts.'});}}}(c==='treasury_external_withdraw'||c==='treasury_external_deposit')&&e?.['amount_slot']!==undefined&&(!slotInComparison(d,e['amount_slot'])&&(c==='treasury_external_withdraw'?b['push']({'code':'TW_AMOUNT_UNBOUNDED','host':c,'level':'warning','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20appears\x20only\x20as\x20a\x20submission\x20source,\x20never\x20inside\x20a\x20'+'comparison\x20leg\x20—\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20up\x20to\x20the\x20full\x20balance\x20(the\x20'+'chain\x20debits\x20the\x20declared\x20number).\x20Non-open\x20venues\x20must\x20bound\x20the\x20slot.'}):b['push']({'code':'TD_AMOUNT_SLOT_SEMANTICS','host':c,'level':'info','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20is\x20unconstrained\x20—\x20the\x20depositor\x20sizes\x20the\x20credit\x20'+'(partial\x20deposit,\x20remainder\x20refunded;\x20whole\x20coin\x20when\x20the\x20identifier\x20is\x20omitted).\x20'+'Lower\x20stakes\x20than\x20the\x20withdraw\x20channel;\x20disclosure\x20only.'})));if(c==='machine_forward'&&e?.['declared_slots']){const i=e['declared_slots'],j=[];walk(d,k=>{if(!Array['isArray'](k['nodes'])||k['nodes']['length']<0x2)return;if(!/logic_/['test'](k['type']??''))return;for(const [l,m]of[[k['nodes'][0x0],k['nodes'][0x1]],[k['nodes'][0x1],k['nodes'][0x0]]]){if(typeof l?.['query']==='string'&&isIdentityQuery(l['query'])&&m?.['type']==='identifier'&&m['identifier']!==undefined){if(!i['includes'](m['identifier'])&&!j['includes'](m['identifier']))j['push'](m['identifier']);}}}),j['length']>0x0&&b['push']({'code':'MF_SLOT_IDENTITY_ANCHOR','host':c,'level':'critical','detail':'Identity\x20leg(s)\x20anchored\x20to\x20submission\x20slot(s)\x20'+j['join'](',\x20')+'\x20that\x20the\x20edge\x20does\x20not\x20'+('declare\x20(declared:\x20'+(i['join'](',\x20')||'none')+')\x20—\x20the\x20caller\x20controls\x20those\x20slots,\x20')+'so\x20the\x20identity\x20check\x20reads\x20attacker-chosen\x20data\x20(T10\x20hijack).\x20Anchor\x20to\x20the\x20edge\x27s\x20'+'task-binding\x20slot\x20instead.'});}if(c==='progress_submission'){let k=![];walk(d,l=>{if(typeof l['query']==='string'&&isIdentityQuery(l['query']))k=!![];}),!k&&b['push']({'code':'PS_IDENTITY_REQUIRED','host':c,'level':'info','detail':'No\x20identity\x20leg\x20on\x20this\x20attestation\x20guard\x20—\x20attestations\x20are\x20replayable\x20without\x20one.\x20'+'Acceptable\x20only\x20when\x20the\x20riding\x20edge\x20verifies\x20the\x20submitter\x20upstream.'});}{let l=![];walk(d,m=>{if(typeof m['query']==='string'&&m['query']['startsWith']('repository'))l=!![];}),l&&b['push']({'code':c==='repository_write'?'RW_QUOTE_GUARD_CARRY':'RQ_CARRY_OBLIGATION','host':c,'level':'info','detail':'This\x20tree\x20reads\x20repository\x20data\x20—\x20the\x20consuming\x20passport\x20must\x20declare\x20the\x20governing\x20'+'policy\x27s\x20quote_guard\x20in\x20its\x20impack\x20(QUOTE-GUARD\x20CARRY),\x20or\x20the\x20query\x20fails\x20closed\x20at\x20'+'evaluation\x20time.'});}if(c==='repository_write'){let m=![];walk(d,o=>{typeof o['query']==='string'&&/(sum_where|count_where|find_where)/['test'](o['query'])&&(m=!![]);}),m&&b['push']({'code':'RW_OPEN_WRITE_FEEDS_AGGREGATE','host':c,'level':e?.['open_write_aggregate_rows']===!![]?'critical':'warning','detail':'This\x20write\x20channel\x27s\x20guard\x20reads\x20repository\x20AGGREGATES\x20(row-set\x20sum\x20/\x20count\x20/\x20find)\x20—\x20'+'the\x20aggregate\x20is\x20forgeable\x20by\x20write\x20whenever\x20the\x20rows\x20feeding\x20it\x20can\x20be\x20written\x20through\x20'+'an\x20open\x20(unguarded)\x20channel,\x20and\x20every\x20decision\x20this\x20guard\x20derives\x20from\x20the\x20aggregate\x20is\x20'+'forged\x20with\x20it.\x20Verify\x20every\x20feeding\x20row\x20policy\x20carries\x20a\x20write_guard\x20binding\x20a\x20trusted\x20'+'writer\x20role\x20BEFORE\x20this\x20binding\x20goes\x20live'+(e?.['open_write_aggregate_rows']===!![]?';\x20host\x20facts\x20PROVE\x20at\x20least\x20one\x20feeding\x20row\x20is\x20openly\x20writable\x20—\x20treat\x20as\x20a\x20hard\x20block.':';\x20the\x20feeding\x20policies\x20could\x20not\x20be\x20proven\x20either\x20way\x20at\x20binding\x20time\x20—\x20disclosure.')});}return c==='demand_present'&&(e?.['demand_guard_count']??0x0)>0x1&&b['push']({'code':'DP_MULTI_GUARD_IS_OR','host':c,'level':'info','detail':e['demand_guard_count']+'\x20guards\x20registered\x20on\x20the\x20demand\x20—\x20the\x20presenter\x20passes\x20ANY\x20ONE\x20'+'of\x20them\x20(presenter-chosen\x20OR).\x20A\x20strict\x20gate\x20belongs\x20inside\x20EVERY\x20'+'guard\x20(or\x20one\x20guard),\x20not\x20across\x20the\x20list.'}),b;}export function auditGuardRelies(a){const b=[];if(a['child_count']<=0x0)return b;const c=a['from_host']!==a['to_host'];return b['push']({'code':'GR_CHILD_HOST_REAUDIT','host':'guard_relied','level':c?'warning':'info','detail':a['child_count']+'\x20relied\x20child\x20guard(s)\x20INHERIT\x20the\x20parent\x27s\x20host\x20context.\x20'+(c?'Host\x20change\x20'+(a['from_host']||'(unbound)')+'\x20→\x20'+a['to_host']+':\x20re-audit\x20EVERY\x20child\x20against\x20'+'the\x20new\x20host\x27s\x20signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel\x20(guard-host-context.ts,\x20'+('host\x20\x22'+a['to_host']+'\x22)\x20before\x20binding.'):'Binding\x20host\x20\x22'+a['to_host']+'\x22\x20unchanged\x20—\x20children\x20already\x20audited\x20for\x20this\x20context.')}),b['push']({'code':'GR_CLOSURE_CARRY','host':'guard_relied','level':'info','detail':'Every\x20passport\x20carrying\x20the\x20parent\x20must\x20carry\x20ALL\x20relied\x20children\x20first\x20(E_RELIES_GUARD_NOT_ADDED).\x20'+'Communicate\x20the\x20full\x20carry\x20closure\x20in\x20the\x20passport\x20build\x20steps.'+(a['logic_and']===![]?'\x20relies_logic_and\x20is\x20OR:\x20any\x20passing\x20child\x20satisfies\x20—\x20the\x20acceptance\x20surface\x20is\x20the\x20UNION\x20of\x20the\x20children.':'')}),b;}export function auditQuoteGuardCandidate(a){const b=[];if(a['immutable']===![])b['push']('mutable\x20(immutable\x20flag\x20false)');if(a['rep']===![])b['push']('rep\x20flag\x20false');if((a['relies_count']??0x0)>0x0)b['push']('carries\x20relies\x20(depth\x20must\x20be\x200)');if(b['length']===0x0)return[];return[{'code':'RQ_DEPENDED_ONLY','host':'repository_quote','level':'warning','detail':'Quote-guard\x20candidate\x20is\x20NOT\x20depended:\x20'+b['join'](';\x20')+'\x20—\x20quote-guard\x20binding\x20aborts\x20'+'(E_NEED_DEPENDENT_GUARD;\x20the\x20depended\x20shape\x20=\x20relies\x20empty\x20+\x20immutable\x20+\x20rep).\x20Rebuild\x20the\x20'+'guard\x20as\x20a\x20frozen\x20leaf\x20before\x20binding.'}];}
+import{getGuardHostContext}from'./guard-host-context.js';import{findRegistryDeadLegs}from'./publish-gate.js';function isIdentityQuery(a){const b=a['toLowerCase']();if(b['startsWith']('context')||b['includes']('signer'))return!![];return/order\.agent|permission\.(owner|admin)|named.?operator/['test'](b);}function children(a){if(Array['isArray'](a['nodes']))return a['nodes'];if(a['node'])return[a['node']];return[];}function walk(a,b){if(!a||typeof a!=='object')return;const d=a;b(d);for(const e of children(d))walk(e,b);}function deadNamespaces(a){switch(a){case'reward_claim':case'service_buy_guard':case'gen_passport':case'demand_present':case'treasury_external_deposit':case'treasury_external_withdraw':return['order.','progress.'];case'arbitration_usage':return['order.','arb.'];default:return[];}}function deadLegCode(a){switch(a){case'reward_claim':return'RC_NO_ORDER_ANCHOR';case'service_buy_guard':return'SB_NO_ORDER_STATE';case'gen_passport':return'GP_NO_ORDER_AT_ISSUANCE';case'arbitration_usage':return'AU_DEAD_CASE_SCOPES';default:return'BV_DEAD_NAMESPACE_LEG';}}function slotInComparison(a,b){let c=![];return walk(a,d=>{if(c)return;if(!Array['isArray'](d['nodes'])||d['nodes']['length']<0x2)return;if(!/logic_/['test'](d['type']??''))return;for(const e of d['nodes']){if(e?.['type']==='identifier'&&e['identifier']===b){c=!![];return;}}}),c;}export function verifyGuardBinding(a){const b=[],{host:c,root:d,facts:e}=a;if((e?.['declared_permission_indexes']?.['length']??0x0)>0x0){const h=e['declared_permission_indexes']['filter'](j=>j>=0x3e8)['filter']((j,k,l)=>l['indexOf'](j)===k)['sort']((i,j)=>i-j);if(h['length']>0x0){const i=e?.['host_permission_indexes']!==undefined||e?.['host_permission_entity_count']!==undefined,j=e?.['host_permission_entity_count']===0x0,k=new Set(e?.['host_permission_indexes']??[]),l=i?h['filter'](m=>j||!k['has'](m)):[];if(i&&l['length']>0x0)b['push']({'code':'PERM_INDEX_UNRESOLVED','host':c,'level':'critical','detail':'Edge\x20declares\x20permission\x20index(es)\x20['+l['join'](',\x20')+']\x20with\x20NO\x20entity\x20grant\x20on\x20the\x20'+'host\x20Permission\x20face'+(j?'\x20(entity_count\x20=\x200\x20—\x20the\x20face\x20is\x20EMPTY)':'')+'\x20—\x20no\x20one\x20can\x20execute\x20this\x20edge,\x20so\x20the\x20state\x20track\x20it\x20carries\x20is\x20structurally\x20'+'unreachable.\x20The\x20rex7\x20mainnet\x20o9\x20case\x20awarded\x200.10\x20and\x20the\x20buyer\x20could\x20never\x20push\x20the\x20'+'ArbRefund\x20relief\x20edge\x20(permission_index\x201002,\x20store\x20entity_count\x200):\x20the\x20winning\x20party\x20'+'was\x20locked\x20out\x20of\x20the\x20ruling\x27s\x20remedy.\x20Grant\x20at\x20least\x20one\x20entity\x20per\x20index\x20'+'(permission\x20op\x20\x22add\x20perm\x20by\x20index\x22)\x20BEFORE\x20this\x20binding\x20goes\x20live.'});else!i&&b['push']({'code':'PERM_INDEX_UNRESOLVED','host':c,'level':'warning','detail':'Edge\x20declares\x20permission\x20index(es)\x20['+h['join'](',\x20')+']\x20—\x20the\x20host\x27s\x20Permission\x20face\x20'+'could\x20NOT\x20be\x20read\x20at\x20binding\x20time\x20(host\x20unknown\x20or\x20entity\x20table\x20unreadable),\x20so\x20index\x20'+'reachability\x20is\x20UNVERIFIED.\x20If\x20the\x20host\x20store\x20has\x20no\x20Entity\x20granted\x20these\x20indexes,\x20the\x20'+'edge\x20is\x20un\x20drivable\x20and\x20the\x20track\x20it\x20carries\x20(e.g.\x20the\x20arbitration\x20relief\x20rail)\x20is\x20dead\x20'+'—\x20rex7\x20mainnet\x20o9\x20precedent:\x20ArbRefund\x20declared\x201002,\x20store\x20entity_count\x200,\x20the\x20buyer\x20could\x20'+'never\x20fire\x20the\x20won\x20ruling\x27s\x20refund\x20edge.\x20Verify\x20with\x20onchain_table\x20on\x20the\x20host\x20'+'Permission\x27s\x20perm\x20entries\x20before\x20the\x20binding\x20goes\x20live.'});}}if(!d)return b;{const m=findRegistryDeadLegs(d);m['length']>0x0&&b['push']({'code':'PG-GUARD-INTENT-01','host':c,'level':'critical','detail':'Guard\x20leg\x20query(es)\x20'+m['map'](n=>'\x22'+n+'\x22')['join'](',\x20')+'\x20are\x20NOT\x20in\x20the\x20chain\x20query\x20'+'registry\x20(their\x20namespace\x20is\x20known;\x20the\x20full\x20query\x20is\x20not)\x20—\x20these\x20legs\x20can\x20never\x20evaluate,\x20so\x20the\x20'+'branch\x20they\x20sit\x20in\x20is\x20structurally\x20dead:\x20under\x20AND\x20the\x20guard\x20rejects\x20forever,\x20negated\x20it\x20always\x20'+'passes.\x20Rebuild\x20the\x20guard\x20with\x20registered\x20queries\x20(see\x20chain-query-registry)\x20BEFORE\x20binding\x20—\x20'+'guards\x20are\x20immutable,\x20so\x20the\x20defect\x20goes\x20live\x20the\x20moment\x20this\x20bind\x20lands\x20(gf32\x20F-30\x20class)'});}const g=typeof a['guard_ref']==='string'&&a['guard_ref']['trim']()!==''?a['guard_ref']['trim']():undefined;if(c==='reward_claim'&&e?.['order_submission_declared']){}else{const n=deadNamespaces(c);if(n['length']>0x0){const o=[];walk(d,q=>{if(typeof q['query']==='string')for(const r of n){if(q['query']['startsWith'](r)&&!o['includes'](r))o['push'](r);}});if(o['length']>0x0){const p=getGuardHostContext(c);b['push']({'code':deadLegCode(c),'host':c,'level':'warning','detail':'Query\x20namespace(s)\x20'+o['map'](q=>'\x22'+q+'*\x22')['join'](',\x20')+'\x20cannot\x20resolve\x20in\x20the\x20'+(c+'\x20evaluation\x20context\x20('+(p?.['order_anchor']??'no\x20anchor')+')\x20—\x20these\x20legs\x20are\x20')+'structurally\x20dead\x20here;\x20under\x20an\x20AND\x20scope\x20they\x20brick\x20the\x20branch,\x20negated\x20they\x20'+'short-circuit\x20it.\x20See\x20guard-host-context.ts.'});}}}(c==='treasury_external_withdraw'||c==='treasury_external_deposit')&&e?.['amount_slot']!==undefined&&(!slotInComparison(d,e['amount_slot'])&&(c==='treasury_external_withdraw'?b['push']({'code':'TW_AMOUNT_UNBOUNDED','host':c,'level':'warning','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20appears\x20only\x20as\x20a\x20submission\x20source,\x20never\x20inside\x20a\x20'+'comparison\x20leg\x20—\x20the\x20withdrawal\x20size\x20is\x20caller-chosen\x20up\x20to\x20the\x20full\x20balance\x20(the\x20'+'chain\x20debits\x20the\x20declared\x20number).\x20Non-open\x20venues\x20must\x20bound\x20the\x20slot.'}):b['push']({'code':'TD_AMOUNT_SLOT_SEMANTICS','host':c,'level':'info','detail':'Amount\x20slot\x20'+e['amount_slot']+'\x20is\x20unconstrained\x20—\x20the\x20depositor\x20sizes\x20the\x20credit\x20'+'(partial\x20deposit,\x20remainder\x20refunded;\x20whole\x20coin\x20when\x20the\x20identifier\x20is\x20omitted).\x20'+'Lower\x20stakes\x20than\x20the\x20withdraw\x20channel;\x20disclosure\x20only.'})));if(c==='machine_forward'&&e?.['declared_slots']){const q=e['declared_slots'],r=[];walk(d,s=>{if(!Array['isArray'](s['nodes'])||s['nodes']['length']<0x2)return;if(!/logic_/['test'](s['type']??''))return;for(const [t,u]of[[s['nodes'][0x0],s['nodes'][0x1]],[s['nodes'][0x1],s['nodes'][0x0]]]){if(typeof t?.['query']==='string'&&isIdentityQuery(t['query'])&&u?.['type']==='identifier'&&u['identifier']!==undefined){if(!q['includes'](u['identifier'])&&!r['includes'](u['identifier']))r['push'](u['identifier']);}}}),r['length']>0x0&&b['push']({'code':'MF_SLOT_IDENTITY_ANCHOR','host':c,'level':'critical','detail':'Identity\x20leg(s)\x20anchored\x20to\x20submission\x20slot(s)\x20'+r['join'](',\x20')+'\x20that\x20the\x20edge\x20does\x20not\x20'+('declare\x20(declared:\x20'+(q['join'](',\x20')||'none')+')\x20—\x20the\x20caller\x20controls\x20those\x20slots,\x20')+'so\x20the\x20identity\x20check\x20reads\x20attacker-chosen\x20data\x20(T10\x20hijack).\x20Anchor\x20to\x20the\x20edge\x27s\x20'+'task-binding\x20slot\x20instead.'});}if(c==='progress_submission'){let s=![];walk(d,t=>{if(typeof t['query']==='string'&&isIdentityQuery(t['query']))s=!![];}),!s&&b['push']({'code':'PS_IDENTITY_REQUIRED','host':c,'level':'info','detail':'No\x20identity\x20leg\x20on\x20this\x20attestation\x20guard\x20—\x20attestations\x20are\x20replayable\x20without\x20one.\x20'+'Acceptable\x20only\x20when\x20the\x20riding\x20edge\x20verifies\x20the\x20submitter\x20upstream.'});}{let t=![];walk(d,u=>{if(typeof u['query']==='string'&&u['query']['startsWith']('repository'))t=!![];}),t&&b['push']({'code':c==='repository_write'?'RW_QUOTE_GUARD_CARRY':'RQ_CARRY_OBLIGATION','host':c,'level':'info','detail':'This\x20tree\x20reads\x20repository\x20data\x20—\x20the\x20consuming\x20passport\x20must\x20declare\x20the\x20governing\x20'+'policy\x27s\x20quote_guard\x20in\x20its\x20impack\x20(QUOTE-GUARD\x20CARRY),\x20or\x20the\x20query\x20fails\x20closed\x20at\x20'+'evaluation\x20time.'});}if(c==='repository_write'){let u=![];walk(d,v=>{typeof v['query']==='string'&&/(sum_where|count_where|find_where)/['test'](v['query'])&&(u=!![]);}),u&&b['push']({'code':'RW_OPEN_WRITE_FEEDS_AGGREGATE','host':c,'level':e?.['open_write_aggregate_rows']===!![]?'critical':'warning','detail':'This\x20write\x20channel\x27s\x20guard\x20reads\x20repository\x20AGGREGATES\x20(row-set\x20sum\x20/\x20count\x20/\x20find)\x20—\x20'+'the\x20aggregate\x20is\x20forgeable\x20by\x20write\x20whenever\x20the\x20rows\x20feeding\x20it\x20can\x20be\x20written\x20through\x20'+'an\x20open\x20(unguarded)\x20channel,\x20and\x20every\x20decision\x20this\x20guard\x20derives\x20from\x20the\x20aggregate\x20is\x20'+'forged\x20with\x20it.\x20Verify\x20every\x20feeding\x20row\x20policy\x20carries\x20a\x20write_guard\x20binding\x20a\x20trusted\x20'+'writer\x20role\x20BEFORE\x20this\x20binding\x20goes\x20live'+(e?.['open_write_aggregate_rows']===!![]?';\x20host\x20facts\x20PROVE\x20at\x20least\x20one\x20feeding\x20row\x20is\x20openly\x20writable\x20—\x20treat\x20as\x20a\x20hard\x20block.':';\x20the\x20feeding\x20policies\x20could\x20not\x20be\x20proven\x20either\x20way\x20at\x20binding\x20time\x20—\x20disclosure.')});}c==='demand_present'&&(e?.['demand_guard_count']??0x0)>0x1&&b['push']({'code':'DP_MULTI_GUARD_IS_OR','host':c,'level':'info','detail':e['demand_guard_count']+'\x20guards\x20registered\x20on\x20the\x20demand\x20—\x20the\x20presenter\x20passes\x20ANY\x20ONE\x20'+'of\x20them\x20(presenter-chosen\x20OR).\x20A\x20strict\x20gate\x20belongs\x20inside\x20EVERY\x20'+'guard\x20(or\x20one\x20guard),\x20not\x20across\x20the\x20list.'});if(c==='machine_forward'&&e?.['source_node']===''&&(e?.['pinned_node_names']?.['length']??0x0)>0x0){const v=e['pinned_node_names']['filter'](w=>w!=='');v['length']>0x0&&b['push']({'code':'MF_INIT_NODE_LITERAL_GATE','host':c,'level':'critical','detail':'This\x20forward\x20leaves\x20the\x20INIT\x20node\x20(source\x20\x22\x22\x20on\x20chain),\x20where\x20progress.current\x20is\x20the\x20'+('EMPTY\x20string\x20—\x20its\x20equality\x20leg(s)\x20pinning\x20['+v['map'](w=>'\x22'+w+'\x22')['join'](',\x20')+']\x20')+'are\x20ALWAYS\x20FALSE,\x20so\x20the\x20forward\x20can\x20never\x20fire:\x20the\x20first\x20order\x20strands\x20forever\x20'+'(nnd3-mn-261103\x20F-NND-02).\x20Delete\x20the\x20leg,\x20pin\x20\x22\x22\x20(the\x20init\x20node\x27s\x20actual\x20name),\x20or\x20'+'rebind\x20the\x20guard\x20to\x20a\x20non-init\x20source\x20forward.'});}if(g!==undefined)for(const w of b){if(w['guard']===undefined)w['guard']=g;}return b;}export function auditGuardRelies(a){const b=[];if(a['child_count']<=0x0)return b;const c=a['from_host']!==a['to_host'];return b['push']({'code':'GR_CHILD_HOST_REAUDIT','host':'guard_relied','level':c?'warning':'info','detail':a['child_count']+'\x20relied\x20child\x20guard(s)\x20INHERIT\x20the\x20parent\x27s\x20host\x20context.\x20'+(c?'Host\x20change\x20'+(a['from_host']||'(unbound)')+'\x20→\x20'+a['to_host']+':\x20re-audit\x20EVERY\x20child\x20against\x20'+'the\x20new\x20host\x27s\x20signer\x20/\x20order\x20anchor\x20/\x20submission\x20channel\x20(guard-host-context.ts,\x20'+('host\x20\x22'+a['to_host']+'\x22)\x20before\x20binding.'):'Binding\x20host\x20\x22'+a['to_host']+'\x22\x20unchanged\x20—\x20children\x20already\x20audited\x20for\x20this\x20context.')}),b['push']({'code':'GR_CLOSURE_CARRY','host':'guard_relied','level':'info','detail':'Every\x20passport\x20carrying\x20the\x20parent\x20must\x20carry\x20ALL\x20relied\x20children\x20first\x20(E_RELIES_GUARD_NOT_ADDED).\x20'+'Communicate\x20the\x20full\x20carry\x20closure\x20in\x20the\x20passport\x20build\x20steps.'+(a['logic_and']===![]?'\x20relies_logic_and\x20is\x20OR:\x20any\x20passing\x20child\x20satisfies\x20—\x20the\x20acceptance\x20surface\x20is\x20the\x20UNION\x20of\x20the\x20children.':'')}),b;}export function auditQuoteGuardCandidate(a){const b=[];if(a['immutable']===![])b['push']('mutable\x20(immutable\x20flag\x20false)');if(a['rep']===![])b['push']('rep\x20flag\x20false');if((a['relies_count']??0x0)>0x0)b['push']('carries\x20relies\x20(depth\x20must\x20be\x200)');if(b['length']===0x0)return[];return[{'code':'RQ_DEPENDED_ONLY','host':'repository_quote','level':'warning','detail':'Quote-guard\x20candidate\x20is\x20NOT\x20depended:\x20'+b['join'](';\x20')+'\x20—\x20quote-guard\x20binding\x20aborts\x20'+'(E_NEED_DEPENDENT_GUARD;\x20the\x20depended\x20shape\x20=\x20relies\x20empty\x20+\x20immutable\x20+\x20rep).\x20Rebuild\x20the\x20'+'guard\x20as\x20a\x20frozen\x20leaf\x20before\x20binding.'}];}

package/dist/knowledge/guard-bindings.js

@@ -1 +1 @@
-export const OWNER_RECEIVE_COGNITION='owner_receive\x20extracts\x20objects\x20RECEIVED\x20via\x20transfer\x20(Receiving<CoinWrapper<K>>\x20with\x20ANY\x20token\x20K,\x20'+'or\x20any\x20K:key+store\x20object\x20such\x20as\x20an\x20NFT)\x20and\x20sends\x20them\x20to\x20the\x20Permission\x20owner\x20—\x20it\x20never\x20touches\x20the\x20'+'object\x27s\x20balance\x20field.\x20The\x20balance\x20field\x27s\x20only\x20exits\x20are:\x20Reward\x20→\x20guard-gated\x20claim;\x20Treasury\x20→\x20'+'permission-gated\x20withdraw\x20/\x20guard-gated\x20external_withdraw.\x20receive(154)\x20is\x20what\x20joins\x20a\x20received\x20payment\x20'+'INTO\x20the\x20balance.';export const GUARD_BINDING_REGISTRY=[{'id':'reward.recipient.guard_identifier','object':'Reward','slot':'RewardGuard.recipient\x20=\x20Recipient::GuardIdentifier(identifier)','preset_kind':'recipient','submission_type':'address','asserted_at':'reward.move\x20L102-104\x20(is_identifier_address)','consumed_at':'reward.move\x20L154-156\x20(de_address\x20→\x20claim\x20payee)','neutral':'The\x20claim\x20payee\x20is\x20resolved\x20from\x20the\x20claimer\x27s\x20submission\x20for\x20this\x20identifier.','creator':'Design\x20lever:\x20dynamic\x20payee\x20—\x20the\x20guard\x20decides\x20who\x20gets\x20paid\x20(e.g.\x20reimbursement\x20to\x20the\x20address\x20the\x20'+'guard\x20derives,\x20proxy\x20claims).\x20Alternative\x20presets:\x20Entity\x20(fixed\x20payee)\x20or\x20Signer\x20(payer\x20=\x20the\x20tx\x20sender\x20who\x20passed\x20the\x20guard).','user':'Who\x20receives\x20the\x20reward\x20is\x20determined\x20by\x20the\x20submitted\x20address\x20for\x20this\x20slot\x20—\x20not\x20necessarily\x20you,\x20even\x20if\x20you\x20triggered\x20the\x20claim.','risk_hooks':['R-R-2-01']},{'id':'reward.amount.guard_u64_identifier','object':'Reward','slot':'RewardGuard.amount\x20=\x20Amount::GuardU64Identifier(identifier)','preset_kind':'amount','submission_type':'u64','asserted_at':'reward.move\x20L107-113\x20(submission\x20value\x20type\x20must\x20be\x20u64)','consumed_at':'reward.move\x20L165-168\x20(de_u64\x20→\x20claim\x20amount;\x20L174\x20asserts\x20amount\x20≤\x20balance)','neutral':'The\x20claim\x20amount\x20is\x20resolved\x20from\x20the\x20claimer\x27s\x20submission\x20for\x20this\x20identifier.','creator':'Design\x20lever:\x20credential-based\x20dynamic\x20amounts\x20(marketing:\x20submit\x20receipt\x20→\x20get\x20proportional\x20cashback;\x20'+'fund\x20recovery:\x20owner\x20escape\x20hatch\x20submits\x20the\x20FULL\x20remaining\x20balance\x20to\x20recover\x20100%).\x20'+'Alternative\x20preset:\x20Fixed(u64).','user':'You\x20claim\x20exactly\x20what\x20you\x20submit\x20(bounded\x20by\x20the\x20reward\x20balance)\x20—\x20check\x20whether\x20the\x20guard\x20validates\x20your\x20submitted\x20amount\x20against\x20other\x20evidence.','risk_hooks':['R-R-7-01']},{'id':'reward.expiration_time','object':'Reward','slot':'RewardGuard.expiration_time:\x20Option<u64>','preset_kind':'deadline','submission_type':'any','consumed_at':'reward.move\x20L147-150\x20(claim\x20asserts\x20clock\x20≤\x20expiration_time),\x20guard_add\x20L247-249','neutral':'Time\x20window\x20of\x20the\x20guard:\x20after\x20it\x20elapses\x20the\x20guard\x20no\x20longer\x20opens\x20(claim\x20aborts\x20E_GUARD_EXPIRED).','creator':'Dual\x20meaning\x20by\x20design:\x20for\x20MARKETING\x20guards\x20it\x20is\x20the\x20campaign\x20deadline;\x20for\x20an\x20OWNER\x20ESCAPE\x20guard\x20'+'(recipient=Signer,\x20amount=GuardU64Identifier)\x20it\x20is\x20the\x20FUND\x20LOCK\x20PERIOD\x20—\x20set\x20it\x20in\x20the\x20future\x20(e.g.\x2030\x20days)\x20'+'and\x20after\x20expiry\x20you\x20reclaim\x20the\x20residual\x20balance\x20by\x20submitting\x20the\x20full\x20amount\x20(R-R-7-01).','user':'This\x20is\x20your\x20claim\x20deadline\x20—\x20after\x20expiration_time\x20the\x20guard\x20cannot\x20be\x20claimed\x20and\x20is\x20swept\x20away\x20by\x20the\x20owner\x27s\x20expired-guard\x20cleanup.','risk_hooks':['R-R-4-01']},{'id':'reward.store_from_id','object':'Reward','slot':'RewardGuard.store_from_id:\x20Option<u8>','preset_kind':'source','submission_type':'address','asserted_at':'reward.move\x20L36-38\x20/\x20reward.ts\x20schema\x20(address-compatible\x20identifier)','consumed_at':'reward.move\x20L175-178\x20(de_address_compatible\x20→\x20Record.store_from_id;\x20an\x20absent\x20slot\x20persists\x20none,\x20which\x20matches\x20no\x20store_from_id\x20predicate)','neutral':'Each\x20claim\x20record\x20is\x20tagged\x20with\x20an\x20origin\x20object\x20address\x20submitted\x20at\x20claim\x20time.','creator':'Audit\x20lever:\x20tie\x20every\x20payout\x20to\x20its\x20campaign/repo/order\x20source\x20—\x20the\x20Record\x20table\x20then\x20answers\x20\x27what\x20did\x20this\x20campaign\x20actually\x20pay\x20out\x27.','user':'Your\x20claim\x20is\x20permanently\x20tagged\x20with\x20the\x20source\x20you\x20submitted\x20—\x20use\x20it\x20to\x20prove\x20your\x20payout\x20came\x20from\x20a\x20specific\x20campaign.'},{'id':'allocation.who.guard_identifier','object':'Allocation','slot':'Sharing.who\x20=\x20Recipient::GuardIdentifier(identifier)','preset_kind':'recipient','submission_type':'address','asserted_at':'allocation.move\x20L150-151\x20(is_identifier_address)','consumed_at':'allocation.move\x20L232-233\x20(de_address\x20→\x20payout\x20recipient)','neutral':'The\x20revenue-split\x20payee\x20is\x20resolved\x20from\x20the\x20alloc\x20caller\x27s\x20submission.','creator':'Design\x20lever:\x20dynamic\x20split\x20counterparties\x20—\x20e.g.\x20the\x20guard\x20derives\x20\x27the\x20order\x27s\x20actual\x20supplier\x27\x20from\x20evidence.\x20'+'Alternatives:\x20Entity\x20(fixed\x20payee)\x20or\x20Signer\x20(payer\x20=\x20whoever\x20executes\x20the\x20guard-gated\x20alloc).','user':'The\x20split\x20payee\x20comes\x20from\x20the\x20submission\x20resolved\x20at\x20alloc\x20time\x20—\x20verify\x20the\x20guard\x20logic\x20to\x20know\x20who\x20it\x20resolves\x20to.'},{'id':'allocation.mode_and_sharing','object':'Allocation','slot':'Sharing\x20{\x20mode:\x20Amount|Rate|Surplus|RateGross,\x20sharing:\x20u64\x20}','preset_kind':'amount','submission_type':'u64','asserted_at':'allocation.move\x20L224-256\x20(rate\x20invariants:\x20NET\x20Rate\x20and\x20RateGross\x20share\x20one\x20total_rate\x20counter;\x20without\x20Surplus\x20the\x20rates\x20must\x20sum\x20to\x20exactly\x2010000;\x20a\x20pure-RateGross\x20plan\x20also\x20caps\x20fix\x20+\x20rates\x20x\x20max)','consumed_at':'allocation.move\x20L280-405\x20(alloc:\x20Amount\x20splits\x20a\x20fixed\x20value\x20/\x20Rate\x20computes\x20basis\x20points\x20of\x20pool-fix\x20/\x20RateGross\x20computes\x20basis\x20points\x20of\x20the\x20full\x20pool\x20or\x20the\x20max\x20cap\x20/\x20Surplus\x20takes\x20the\x20remainder)','neutral':'How\x20much\x20each\x20sharing\x20entry\x20receives\x20from\x20an\x20allocated\x20payment.','creator':'Design\x20lever:\x20fixed\x20amounts\x20(Amount),\x20proportional\x20splits\x20on\x20the\x20net\x20pool\x20(Rate,\x20basis\x20points\x20over\x20pool-fix,\x20must\x20complete\x2010000\x20unless\x20a\x20Surplus\x20remainder\x20exists),\x20'+'proportional\x20splits\x20on\x20the\x20gross\x20pool\x20(RateGross,\x20basis\x20points\x20over\x20the\x20full\x20pool\x20or\x20max\x20cap\x20—\x20expresses\x20\x27fixed\x20fee\x20+\x20commission\x20on\x20the\x20order\x20total\x27),\x20'+'or\x20residual\x20beneficiary\x20(Surplus\x20—\x20exactly\x20one,\x20takes\x20what\x20is\x20left).','user':'Your\x20Rate/RateGross\x20sharing\x20is\x20in\x20basis\x20points\x20(3000\x20=\x2030%);\x20a\x20Surplus\x20entry\x20receives\x20whatever\x20the\x20other\x20entries\x20did\x20not\x20consume.'},{'id':'demand.service_identifier','object':'Demand','slot':'ServiceGuard.service_identifier:\x20Option<u8>','preset_kind':'service','submission_type':'address','consumed_at':'demand.move\x20L132-133\x20(de_address\x20→\x20the\x20service\x20being\x20presented)','neutral':'Which\x20service\x20a\x20presenter\x20is\x20presenting\x20for\x20is\x20resolved\x20from\x20their\x20passport\x20submission.','creator':'Design\x20lever:\x20qualification-gated\x20presentation\x20—\x20only\x20guards\x20that\x20resolve\x20to\x20approved\x20services\x20let\x20suppliers\x20present\x20'+'(e.g.\x20whitelist,\x20passport,\x20or\x20proof-of-capability\x20guards).','user':'You\x20may\x20only\x20present\x20the\x20service\x20your\x20submission\x20resolves\x20to\x20—\x20the\x20guard\x20defines\x20which\x20services\x20you\x20are\x20eligible\x20to\x20present.'},{'id':'treasury.deposit.identifier','object':'Treasury','slot':'AmountFromDepositGuard.identifier:\x20Option<u8>','preset_kind':'amount','submission_type':'number','asserted_at':'treasury.move\x20L138-141\x20(submission\x20value\x20type\x20must\x20be\x20a\x20number)','consumed_at':'treasury.move\x20L371-385\x20(de_number\x20→\x20deposit\x20amount;\x20excess\x20is\x20refunded\x20to\x20the\x20depositor)','neutral':'The\x20amount\x20actually\x20deposited\x20is\x20resolved\x20from\x20the\x20depositor\x27s\x20submission.','creator':'Design\x20lever:\x20guard-driven\x20external\x20inflow\x20—\x20outside\x20parties\x20deposit\x20against\x20a\x20guard\x20(e.g.\x20invoice-backed\x20payment:\x20'+'the\x20guard\x20validates\x20the\x20invoice,\x20the\x20submission\x20states\x20the\x20amount).','user':'You\x20deposit\x20the\x20amount\x20you\x20submit;\x20anything\x20beyond\x20it\x20is\x20transferred\x20back\x20to\x20you\x20in\x20the\x20same\x20call.'},{'id':'treasury.withdraw.identifier','object':'Treasury','slot':'AmountFromWithdrawGuard.identifier:\x20u8','preset_kind':'amount','submission_type':'number','consumed_at':'treasury.move\x20L409-410\x20(de_number\x20→\x20withdraw\x20amount,\x20asserted\x20≤\x20balance)','neutral':'The\x20amount\x20withdrawn\x20by\x20an\x20outside\x20party\x20is\x20resolved\x20from\x20their\x20submission.','creator':'Design\x20lever:\x20guard-driven\x20external\x20outflow\x20—\x20NOTE\x20this\x20is\x20a\x20PAYMENT\x20AUTHORIZATION:\x20whoever\x20satisfies\x20the\x20guard\x20can\x20'+'withdraw\x20up\x20to\x20the\x20balance.\x20Treat\x20the\x20guard\x20design\x20as\x20the\x20spending\x20boundary.','user':'You\x20receive\x20the\x20amount\x20you\x20submit\x20(bounded\x20by\x20the\x20treasury\x20balance).'},{'id':'treasury.store_from_id','object':'Treasury','slot':'AmountFrom{Deposit,Withdraw}Guard.store_from_id:\x20Option<u8>','preset_kind':'source','submission_type':'address','asserted_at':'treasury.move\x20L143-145\x20(is_identifier_address_compatible)','consumed_at':'treasury.move\x20L367-369\x20/\x20L412-414\x20(de_address_compatible\x20→\x20Record.store_from_id)','neutral':'Each\x20external\x20deposit/withdraw\x20record\x20is\x20tagged\x20with\x20a\x20submitted\x20origin\x20address.','creator':'Audit\x20lever:\x20reconcile\x20external\x20flows\x20against\x20their\x20origin\x20(invoice,\x20order,\x20campaign).','user':'Your\x20flow\x20is\x20permanently\x20tagged\x20with\x20the\x20source\x20you\x20submitted.'},{'id':'repository.id_from_submission','object':'Repository','slot':'PolicyGuard.id_from_submission:\x20Option<u8>','preset_kind':'row_key','submission_type':'address','asserted_at':'repository.move\x20L90-92\x20(is_identifier_address_compatible)','consumed_at':'repository.move\x20L346/L393\x20(submission_get\x20→\x20table\x20row\x20identity)','neutral':'Which\x20table\x20row\x20a\x20guarded\x20write\x20targets\x20is\x20resolved\x20from\x20the\x20writer\x27s\x20submission.','creator':'Design\x20lever:\x20dynamic\x20rows\x20—\x20or\x20pin\x20the\x20row\x20statically\x20via\x20PolicyRule.id_from\x20(which\x20then\x20takes\x20priority\x20over\x20this\x20slot).','user':'Your\x20write\x20lands\x20on\x20the\x20row\x20your\x20submitted\x20address\x20identifies.'},{'id':'repository.data_from_submission','object':'Repository','slot':'PolicyGuard.data_from_submission:\x20Option<u8>','preset_kind':'row_data','submission_type':'any','asserted_at':'repository.move\x20L93-96\x20(has_identifier\x20—\x20ANY\x20value\x20type\x20is\x20supported)','consumed_at':'repository.move\x20L350/L361/L215\x20(submission_get\x20→\x20the\x20value\x20written)','neutral':'The\x20value\x20written\x20into\x20the\x20row\x20IS\x20the\x20writer\x27s\x20submission\x20(any\x20type).','creator':'Design\x20lever:\x20the\x20guard\x20itself\x20becomes\x20the\x20data\x20format\x20—\x20reviews,\x20scores,\x20attestations\x20written\x20by\x20qualified\x20parties.\x20'+'The\x20write\x20policy\x27s\x20value_type\x20constrains\x20what\x20is\x20storable.','user':'What\x20you\x20submit\x20is\x20what\x20gets\x20stored\x20—\x20the\x20guard\x20decides\x20whether\x20your\x20data\x20qualifies,\x20not\x20the\x20object.'},{'id':'arbitration.vote_weight.guard_identifier','object':'Arbitration','slot':'VotingGuard.vote_weight\x20=\x20VoteValue::GuardIdentifier(identifier)','preset_kind':'vote_weight','submission_type':'number','asserted_at':'arbitration.move\x20L125-126\x20(submission\x20value\x20type\x20must\x20be\x20a\x20number)','consumed_at':'arbitration.move\x20L288-289\x20(de_number\x20→\x20ballot\x20weight)','neutral':'Each\x20voter\x27s\x20ballot\x20weight\x20is\x20resolved\x20from\x20their\x20own\x20submission.','creator':'Design\x20lever:\x20stake/role-weighted\x20voting\x20—\x20the\x20guard\x20derives\x20the\x20weight\x20(e.g.\x20token-balance\x20tier,\x20credential\x20level).\x20'+'Alternative\x20preset:\x20FixedValue(u32)\x20for\x20flat-weight\x20open\x20voting\x20(an\x20EMPTY\x20voting_guard\x20is\x20NOT\x20open\x20voting\x20—\x20'+'plain\x20votes\x20then\x20hard-require\x20the\x20vote\x20permission\x20358,\x20admin-only\x20by\x20default,\x20and\x20disputes\x20dead-lock;\x20R-ARB-VOTE-LOCK,\x20crs9-F-36).','user':'The\x20number\x20you\x20submit\x20IS\x20your\x20vote\x27s\x20weight\x20—\x20the\x20guard\x20defines\x20what\x20qualifies\x20you\x20to\x20claim\x20that\x20weight.'},{'id':'arbitration.usage_guard','object':'Arbitration','slot':'usage_guard:\x20Option<address>','preset_kind':'evidence','submission_type':'any','consumed_at':'arbitration.move\x20L314\x20/\x20L320-321\x20(checked\x20when\x20dispute\x20filing\x20reaches\x20the\x20package-internal\x20channels\x20at\x20L313-316\x20/\x20L318-325,\x20which\x20are\x20only\x20reachable\x20through\x20the\x20Service-bound\x20filing\x20entries):\x20the\x20no-passport\x20channel\x20requires\x20the\x20usage_guard\x20to\x20be\x20None;\x20the\x20passport\x20channel\x20verifies\x20it\x20in\x20the\x20same\x20transaction','neutral':'Who\x20may\x20OPEN\x20a\x20dispute\x20at\x20this\x20arbitration\x20—\x20disputants\x20must\x20satisfy\x20this\x20guard.','creator':'Design\x20lever:\x20qualification\x20gate\x20for\x20disputants\x20(reputation/kyc/holding\x20guards)\x20—\x20keeps\x20frivolous\x20disputes\x20out.\x20'+'Set\x20to\x20None\x20for\x20open\x20access.','user':'To\x20open\x20a\x20dispute\x20at\x20this\x20arbitration\x20you\x20must\x20pass\x20its\x20usage_guard;\x20without\x20a\x20passport\x20the\x20arbitration\x20refuses\x20disputes\x20outright.'},{'id':'machine.forward.retained_submission','object':'MachineForward','slot':'ForwardGuard.retained_submission:\x20vector<u8>','preset_kind':'evidence','submission_type':'any','asserted_at':'machine.move\x20L80-81\x20(has_submissions\x20—\x20every\x20id\x20must\x20be\x20a\x20submission\x20slot\x20of\x20the\x20guard)','consumed_at':'progress.move\x20L471-474\x20(submissions_get\x20→\x20values\x20stored\x20into\x20the\x20session\x20history)','neutral':'Progressing\x20along\x20this\x20forward\x20REQUIRES\x20submitting\x20these\x20guard\x20slots;\x20the\x20submitted\x20values\x20are\x20persisted\x20into\x20the\x20workflow\x20session\x20history.','creator':'Design\x20lever:\x20evidence-carrying\x20workflow\x20steps\x20—\x20the\x20step\x20cannot\x20advance\x20without\x20the\x20proof,\x20and\x20the\x20proof\x20is\x20'+'permanently\x20recorded\x20in\x20the\x20session\x20(auditable\x20trail,\x20usable\x20later\x20by\x20downstream\x20guards/arb).','user':'You\x20cannot\x20advance\x20this\x20step\x20without\x20submitting\x20the\x20required\x20evidence\x20—\x20and\x20what\x20you\x20submit\x20becomes\x20part\x20of\x20the\x20on-chain\x20record.'}];export const GUARD_BINDINGS_VERSION='1.0.0';export function getGuardBindingsByObject(a){return GUARD_BINDING_REGISTRY['filter'](c=>c['object']===a);}export function getGuardBinding(a){return GUARD_BINDING_REGISTRY['find'](c=>c['id']===a);}export function summarizeGuardBinding(a){return'['+a['object']+']\x20'+a['slot']+'\x20—\x20creator:\x20'+a['creator']['split']('\x20—\x20')[0x0]+'\x20|\x20user:\x20'+a['user'];}
+export const OWNER_RECEIVE_COGNITION='owner_receive\x20extracts\x20objects\x20RECEIVED\x20via\x20transfer\x20(Receiving<CoinWrapper<K>>\x20with\x20ANY\x20token\x20K,\x20'+'or\x20any\x20K:key+store\x20object\x20such\x20as\x20an\x20NFT)\x20and\x20sends\x20them\x20to\x20the\x20Permission\x20owner\x20—\x20it\x20never\x20touches\x20the\x20'+'object\x27s\x20balance\x20field.\x20The\x20balance\x20field\x27s\x20only\x20exits\x20are:\x20Reward\x20→\x20guard-gated\x20claim;\x20Treasury\x20→\x20'+'permission-gated\x20withdraw\x20/\x20guard-gated\x20external_withdraw.\x20receive(154)\x20is\x20what\x20joins\x20a\x20received\x20payment\x20'+'INTO\x20the\x20balance.';export const GUARD_BINDING_REGISTRY=[{'id':'reward.recipient.guard_identifier','object':'Reward','slot':'RewardGuard.recipient\x20=\x20Recipient::GuardIdentifier(identifier)','preset_kind':'recipient','submission_type':'address','asserted_at':'reward.move\x20L102-104\x20(is_identifier_address)','consumed_at':'reward.move\x20L154-156\x20(de_address\x20→\x20claim\x20payee)','neutral':'The\x20claim\x20payee\x20is\x20resolved\x20from\x20the\x20claimer\x27s\x20submission\x20for\x20this\x20identifier.','creator':'Design\x20lever:\x20dynamic\x20payee\x20—\x20the\x20guard\x20decides\x20who\x20gets\x20paid\x20(e.g.\x20reimbursement\x20to\x20the\x20address\x20the\x20'+'guard\x20derives,\x20proxy\x20claims).\x20Alternative\x20presets:\x20Entity\x20(fixed\x20payee)\x20or\x20Signer\x20(payer\x20=\x20the\x20tx\x20sender\x20who\x20passed\x20the\x20guard).','user':'Who\x20receives\x20the\x20reward\x20is\x20determined\x20by\x20the\x20submitted\x20address\x20for\x20this\x20slot\x20—\x20not\x20necessarily\x20you,\x20even\x20if\x20you\x20triggered\x20the\x20claim.','risk_hooks':['R-R-2-01']},{'id':'reward.amount.guard_u64_identifier','object':'Reward','slot':'RewardGuard.amount\x20=\x20Amount::GuardU64Identifier(identifier)','preset_kind':'amount','submission_type':'u64','asserted_at':'reward.move\x20L107-113\x20(submission\x20value\x20type\x20must\x20be\x20u64)','consumed_at':'reward.move\x20L165-168\x20(de_u64\x20→\x20claim\x20amount;\x20L174\x20asserts\x20amount\x20≤\x20balance)','neutral':'The\x20claim\x20amount\x20is\x20resolved\x20from\x20the\x20claimer\x27s\x20submission\x20for\x20this\x20identifier.','creator':'Design\x20lever:\x20credential-based\x20dynamic\x20amounts\x20(marketing:\x20submit\x20receipt\x20→\x20get\x20proportional\x20cashback;\x20'+'fund\x20recovery:\x20owner\x20escape\x20hatch\x20submits\x20the\x20FULL\x20remaining\x20balance\x20to\x20recover\x20100%).\x20'+'Alternative\x20preset:\x20Fixed(u64).','user':'You\x20claim\x20exactly\x20what\x20you\x20submit\x20(bounded\x20by\x20the\x20reward\x20balance)\x20—\x20check\x20whether\x20the\x20guard\x20validates\x20your\x20submitted\x20amount\x20against\x20other\x20evidence.','risk_hooks':['R-R-7-01']},{'id':'reward.expiration_time','object':'Reward','slot':'RewardGuard.expiration_time:\x20Option<u64>','preset_kind':'deadline','submission_type':'any','consumed_at':'reward.move\x20L147-150\x20(claim\x20asserts\x20clock\x20≤\x20expiration_time),\x20guard_add\x20L247-249','neutral':'Time\x20window\x20of\x20the\x20guard:\x20after\x20it\x20elapses\x20the\x20guard\x20no\x20longer\x20opens\x20(claim\x20aborts\x20E_GUARD_EXPIRED).','creator':'Dual\x20meaning\x20by\x20design:\x20for\x20MARKETING\x20guards\x20it\x20is\x20the\x20campaign\x20deadline;\x20for\x20an\x20OWNER\x20ESCAPE\x20guard\x20'+'(recipient=Signer,\x20amount=GuardU64Identifier)\x20it\x20is\x20the\x20FUND\x20LOCK\x20PERIOD\x20—\x20set\x20it\x20in\x20the\x20future\x20(e.g.\x2030\x20days)\x20'+'and\x20after\x20expiry\x20you\x20reclaim\x20the\x20residual\x20balance\x20by\x20submitting\x20the\x20full\x20amount\x20(R-R-7-01).','user':'This\x20is\x20your\x20claim\x20deadline\x20—\x20after\x20expiration_time\x20the\x20guard\x20cannot\x20be\x20claimed\x20and\x20is\x20swept\x20away\x20by\x20the\x20owner\x27s\x20expired-guard\x20cleanup.','risk_hooks':['R-R-4-01']},{'id':'reward.store_from_id','object':'Reward','slot':'RewardGuard.store_from_id:\x20Option<u8>','preset_kind':'source','submission_type':'address','asserted_at':'reward.move\x20L36-38\x20/\x20reward.ts\x20schema\x20(address-compatible\x20identifier)','consumed_at':'reward.move\x20L175-178\x20(de_address_compatible\x20→\x20Record.store_from_id;\x20an\x20absent\x20slot\x20persists\x20none,\x20which\x20matches\x20no\x20store_from_id\x20predicate)','neutral':'Each\x20claim\x20record\x20is\x20tagged\x20with\x20an\x20origin\x20object\x20address\x20submitted\x20at\x20claim\x20time.','creator':'Audit\x20lever:\x20tie\x20every\x20payout\x20to\x20its\x20campaign/repo/order\x20source\x20—\x20the\x20Record\x20table\x20then\x20answers\x20\x27what\x20did\x20this\x20campaign\x20actually\x20pay\x20out\x27.','user':'Your\x20claim\x20is\x20permanently\x20tagged\x20with\x20the\x20source\x20you\x20submitted\x20—\x20use\x20it\x20to\x20prove\x20your\x20payout\x20came\x20from\x20a\x20specific\x20campaign.'},{'id':'allocation.who.guard_identifier','object':'Allocation','slot':'Sharing.who\x20=\x20Recipient::GuardIdentifier(identifier)','preset_kind':'recipient','submission_type':'address','asserted_at':'allocation.move\x20L150-151\x20(is_identifier_address)','consumed_at':'allocation.move\x20L232-233\x20(de_address\x20→\x20payout\x20recipient)','neutral':'The\x20revenue-split\x20payee\x20is\x20resolved\x20from\x20the\x20alloc\x20caller\x27s\x20submission.','creator':'Design\x20lever:\x20dynamic\x20split\x20counterparties\x20—\x20e.g.\x20the\x20guard\x20derives\x20\x27the\x20order\x27s\x20actual\x20supplier\x27\x20from\x20evidence.\x20'+'Alternatives:\x20Entity\x20(fixed\x20payee)\x20or\x20Signer\x20(payer\x20=\x20whoever\x20executes\x20the\x20guard-gated\x20alloc).','user':'The\x20split\x20payee\x20comes\x20from\x20the\x20submission\x20resolved\x20at\x20alloc\x20time\x20—\x20verify\x20the\x20guard\x20logic\x20to\x20know\x20who\x20it\x20resolves\x20to.'},{'id':'allocation.mode_and_sharing','object':'Allocation','slot':'Sharing\x20{\x20mode:\x20Amount|Rate|Surplus|RateGross,\x20sharing:\x20u64\x20}','preset_kind':'amount','submission_type':'u64','asserted_at':'allocation.move\x20L224-256\x20(rate\x20invariants:\x20NET\x20Rate\x20and\x20RateGross\x20share\x20one\x20total_rate\x20counter;\x20without\x20Surplus\x20the\x20rates\x20must\x20sum\x20to\x20exactly\x2010000;\x20a\x20pure-RateGross\x20plan\x20also\x20caps\x20fix\x20+\x20rates\x20x\x20max)','consumed_at':'allocation.move\x20L280-405\x20(alloc:\x20Amount\x20splits\x20a\x20fixed\x20value\x20/\x20Rate\x20computes\x20basis\x20points\x20of\x20pool-fix\x20/\x20RateGross\x20computes\x20basis\x20points\x20of\x20the\x20full\x20pool\x20or\x20the\x20max\x20cap\x20/\x20Surplus\x20takes\x20the\x20remainder)','neutral':'How\x20much\x20each\x20sharing\x20entry\x20receives\x20from\x20an\x20allocated\x20payment.','creator':'Design\x20lever:\x20fixed\x20amounts\x20(Amount),\x20proportional\x20splits\x20on\x20the\x20net\x20pool\x20(Rate,\x20basis\x20points\x20over\x20pool-fix,\x20must\x20complete\x2010000\x20unless\x20a\x20Surplus\x20remainder\x20exists),\x20'+'proportional\x20splits\x20on\x20the\x20gross\x20pool\x20(RateGross,\x20basis\x20points\x20over\x20the\x20full\x20pool\x20or\x20max\x20cap\x20—\x20expresses\x20\x27fixed\x20fee\x20+\x20commission\x20on\x20the\x20order\x20total\x27),\x20'+'or\x20residual\x20beneficiary\x20(Surplus\x20—\x20exactly\x20one,\x20takes\x20what\x20is\x20left).','user':'Your\x20Rate/RateGross\x20sharing\x20is\x20in\x20basis\x20points\x20(3000\x20=\x2030%);\x20a\x20Surplus\x20entry\x20receives\x20whatever\x20the\x20other\x20entries\x20did\x20not\x20consume.'},{'id':'demand.service_identifier','object':'Demand','slot':'ServiceGuard.service_identifier:\x20Option<u8>','preset_kind':'service','submission_type':'address','consumed_at':'demand.move\x20L132-133\x20(de_address\x20→\x20the\x20service\x20being\x20presented)','neutral':'Which\x20service\x20a\x20presenter\x20is\x20presenting\x20for\x20is\x20resolved\x20from\x20their\x20passport\x20submission.','creator':'Design\x20lever:\x20qualification-gated\x20presentation\x20—\x20only\x20guards\x20that\x20resolve\x20to\x20approved\x20services\x20let\x20suppliers\x20present\x20'+'(e.g.\x20whitelist,\x20passport,\x20or\x20proof-of-capability\x20guards).','user':'You\x20may\x20only\x20present\x20the\x20service\x20your\x20submission\x20resolves\x20to\x20—\x20the\x20guard\x20defines\x20which\x20services\x20you\x20are\x20eligible\x20to\x20present.'},{'id':'treasury.deposit.identifier','object':'Treasury','slot':'AmountFromDepositGuard.identifier:\x20Option<u8>','preset_kind':'amount','submission_type':'number','asserted_at':'treasury.move\x20L138-141\x20(submission\x20value\x20type\x20must\x20be\x20a\x20number)','consumed_at':'treasury.move\x20L371-385\x20(de_number\x20→\x20deposit\x20amount;\x20excess\x20is\x20refunded\x20to\x20the\x20depositor)','neutral':'The\x20amount\x20actually\x20deposited\x20is\x20resolved\x20from\x20the\x20depositor\x27s\x20submission.','creator':'Design\x20lever:\x20guard-driven\x20external\x20inflow\x20—\x20outside\x20parties\x20deposit\x20against\x20a\x20guard\x20(e.g.\x20invoice-backed\x20payment:\x20'+'the\x20guard\x20validates\x20the\x20invoice,\x20the\x20submission\x20states\x20the\x20amount).','user':'You\x20deposit\x20the\x20amount\x20you\x20submit;\x20anything\x20beyond\x20it\x20is\x20transferred\x20back\x20to\x20you\x20in\x20the\x20same\x20call.'},{'id':'treasury.withdraw.identifier','object':'Treasury','slot':'AmountFromWithdrawGuard.identifier:\x20u8','preset_kind':'amount','submission_type':'number','consumed_at':'treasury.move\x20L409-410\x20(de_number\x20→\x20withdraw\x20amount,\x20asserted\x20≤\x20balance)','neutral':'The\x20amount\x20withdrawn\x20by\x20an\x20outside\x20party\x20is\x20resolved\x20from\x20their\x20submission.','creator':'Design\x20lever:\x20guard-driven\x20external\x20outflow\x20—\x20NOTE\x20this\x20is\x20a\x20PAYMENT\x20AUTHORIZATION:\x20whoever\x20satisfies\x20the\x20guard\x20can\x20'+'withdraw\x20up\x20to\x20the\x20balance.\x20Treat\x20the\x20guard\x20design\x20as\x20the\x20spending\x20boundary.','user':'You\x20receive\x20the\x20amount\x20you\x20submit\x20(bounded\x20by\x20the\x20treasury\x20balance).'},{'id':'treasury.store_from_id','object':'Treasury','slot':'AmountFrom{Deposit,Withdraw}Guard.store_from_id:\x20Option<u8>','preset_kind':'source','submission_type':'address','asserted_at':'treasury.move\x20L143-145\x20(is_identifier_address_compatible)','consumed_at':'treasury.move\x20L367-369\x20/\x20L412-414\x20(de_address_compatible\x20→\x20Record.store_from_id)','neutral':'Each\x20external\x20deposit/withdraw\x20record\x20is\x20tagged\x20with\x20a\x20submitted\x20origin\x20address.','creator':'Audit\x20lever:\x20reconcile\x20external\x20flows\x20against\x20their\x20origin\x20(invoice,\x20order,\x20campaign).','user':'Your\x20flow\x20is\x20permanently\x20tagged\x20with\x20the\x20source\x20you\x20submitted.'},{'id':'repository.id_from_submission','object':'Repository','slot':'PolicyGuard.id_from_submission:\x20Option<u8>','preset_kind':'row_key','submission_type':'address','asserted_at':'repository.move\x20L90-92\x20(is_identifier_address_compatible)','consumed_at':'repository.move\x20L346/L393\x20(submission_get\x20→\x20table\x20row\x20identity)','neutral':'Which\x20table\x20row\x20a\x20guarded\x20write\x20targets\x20is\x20resolved\x20from\x20the\x20writer\x27s\x20submission.','creator':'Design\x20lever:\x20dynamic\x20rows\x20—\x20or\x20pin\x20the\x20row\x20statically\x20via\x20PolicyRule.id_from\x20(which\x20then\x20takes\x20priority\x20over\x20this\x20slot).','user':'Your\x20write\x20lands\x20on\x20the\x20row\x20your\x20submitted\x20address\x20identifies.'},{'id':'repository.data_from_submission','object':'Repository','slot':'PolicyGuard.data_from_submission:\x20Option<u8>','preset_kind':'row_data','submission_type':'any','asserted_at':'repository.move\x20L93-96\x20(has_identifier\x20—\x20ANY\x20value\x20type\x20is\x20supported)','consumed_at':'repository.move\x20L350/L361/L215\x20(submission_get\x20→\x20the\x20value\x20written)','neutral':'The\x20value\x20written\x20into\x20the\x20row\x20IS\x20the\x20writer\x27s\x20submission\x20(any\x20type).','creator':'Design\x20lever:\x20the\x20guard\x20itself\x20becomes\x20the\x20data\x20format\x20—\x20reviews,\x20scores,\x20attestations\x20written\x20by\x20qualified\x20parties.\x20'+'The\x20write\x20policy\x27s\x20value_type\x20constrains\x20what\x20is\x20storable.','user':'What\x20you\x20submit\x20is\x20what\x20gets\x20stored\x20—\x20the\x20guard\x20decides\x20whether\x20your\x20data\x20qualifies,\x20not\x20the\x20object.'},{'id':'arbitration.vote_weight.guard_identifier','object':'Arbitration','slot':'VotingGuard.vote_weight\x20=\x20VoteValue::GuardIdentifier(identifier)','preset_kind':'vote_weight','submission_type':'number','asserted_at':'arbitration.move\x20L125-126\x20(submission\x20value\x20type\x20must\x20be\x20a\x20number)','consumed_at':'arbitration.move\x20L288-289\x20(de_number\x20→\x20ballot\x20weight)','neutral':'Each\x20voter\x27s\x20ballot\x20weight\x20is\x20resolved\x20from\x20their\x20own\x20submission.','creator':'Design\x20lever:\x20stake/role-weighted\x20voting\x20—\x20the\x20guard\x20derives\x20the\x20weight\x20(e.g.\x20token-balance\x20tier,\x20credential\x20level).\x20'+'Alternative\x20preset:\x20FixedValue(u32)\x20for\x20flat-weight\x20open\x20voting\x20(an\x20EMPTY\x20voting_guard\x20is\x20NOT\x20open\x20voting\x20—\x20'+'plain\x20votes\x20then\x20hard-require\x20the\x20vote\x20permission\x20358,\x20admin-only\x20by\x20default,\x20and\x20disputes\x20dead-lock;\x20R-ARB-VOTE-LOCK,\x20crs9-F-36).\x20'+'WHO\x20may\x20vote\x20is\x20a\x20separate\x20axis\x20from\x20weight:\x20a\x20closed\x20venue\x20restricts\x20the\x20universe\x20with\x20tpl_voting_guard_party_only\x20'+'(parties\x20+\x20venue\x20panel);\x20an\x20always-true\x20guard\x20(tpl_voting_guard_open_vote)\x20declares\x20a\x20PUBLIC\x20venue.','user':'The\x20number\x20you\x20submit\x20IS\x20your\x20vote\x27s\x20weight\x20—\x20the\x20guard\x20defines\x20what\x20qualifies\x20you\x20to\x20claim\x20that\x20weight.'},{'id':'arbitration.usage_guard','object':'Arbitration','slot':'usage_guard:\x20Option<address>','preset_kind':'evidence','submission_type':'any','consumed_at':'arbitration.move\x20L314\x20/\x20L320-321\x20(checked\x20when\x20dispute\x20filing\x20reaches\x20the\x20package-internal\x20channels\x20at\x20L313-316\x20/\x20L318-325,\x20which\x20are\x20only\x20reachable\x20through\x20the\x20Service-bound\x20filing\x20entries):\x20the\x20no-passport\x20channel\x20requires\x20the\x20usage_guard\x20to\x20be\x20None;\x20the\x20passport\x20channel\x20verifies\x20it\x20in\x20the\x20same\x20transaction','neutral':'Who\x20may\x20OPEN\x20a\x20dispute\x20at\x20this\x20arbitration\x20—\x20disputants\x20must\x20satisfy\x20this\x20guard.','creator':'Design\x20lever:\x20qualification\x20gate\x20for\x20disputants\x20(reputation/kyc/holding\x20guards)\x20—\x20keeps\x20frivolous\x20disputes\x20out.\x20'+'Set\x20to\x20None\x20for\x20open\x20access.','user':'To\x20open\x20a\x20dispute\x20at\x20this\x20arbitration\x20you\x20must\x20pass\x20its\x20usage_guard;\x20without\x20a\x20passport\x20the\x20arbitration\x20refuses\x20disputes\x20outright.'},{'id':'machine.forward.retained_submission','object':'MachineForward','slot':'ForwardGuard.retained_submission:\x20vector<u8>','preset_kind':'evidence','submission_type':'any','asserted_at':'machine.move\x20L80-81\x20(has_submissions\x20—\x20every\x20id\x20must\x20be\x20a\x20submission\x20slot\x20of\x20the\x20guard)','consumed_at':'progress.move\x20L471-474\x20(submissions_get\x20→\x20values\x20stored\x20into\x20the\x20session\x20history)','neutral':'Progressing\x20along\x20this\x20forward\x20REQUIRES\x20submitting\x20these\x20guard\x20slots;\x20the\x20submitted\x20values\x20are\x20persisted\x20into\x20the\x20workflow\x20session\x20history.','creator':'Design\x20lever:\x20evidence-carrying\x20workflow\x20steps\x20—\x20the\x20step\x20cannot\x20advance\x20without\x20the\x20proof,\x20and\x20the\x20proof\x20is\x20'+'permanently\x20recorded\x20in\x20the\x20session\x20(auditable\x20trail,\x20usable\x20later\x20by\x20downstream\x20guards/arb).','user':'You\x20cannot\x20advance\x20this\x20step\x20without\x20submitting\x20the\x20required\x20evidence\x20—\x20and\x20what\x20you\x20submit\x20becomes\x20part\x20of\x20the\x20on-chain\x20record.'}];export const GUARD_BINDINGS_VERSION='1.0.0';export function getGuardBindingsByObject(a){return GUARD_BINDING_REGISTRY['filter'](c=>c['object']===a);}export function getGuardBinding(a){return GUARD_BINDING_REGISTRY['find'](c=>c['id']===a);}export function summarizeGuardBinding(a){return'['+a['object']+']\x20'+a['slot']+'\x20—\x20creator:\x20'+a['creator']['split']('\x20—\x20')[0x0]+'\x20|\x20user:\x20'+a['user'];}

package/dist/knowledge/guard-design-patterns.d.ts

@@ -35,4 +35,4 @@ export declare function suggestPatternForRequirement(requirement: string): {
     best: GuardDesignPattern;
     alternatives: GuardDesignPattern[];
 };
-export declare const GUARD_DESIGN_PATTERNS_VERSION = 19;
+export declare const GUARD_DESIGN_PATTERNS_VERSION = 21;