@wowok/agent-mcp 3.4.3 → 3.4.4

package/dist/knowledge/baselines/rules/oracle.json

@@ -76,7 +76,7 @@
           "title": "Undisclosed chain limits (steps: ${uncovered_step_ids}) — the template promises what the chain cannot do",
           "description": "Steps the chain cannot enforce (no dispatch primitive, no location/ETA oracle, no debit/clawback, no insurance primitive, inverted arbitration-silence semantics) are only honest when the template SAYS SO. An undisclosed unresolvable step means a builder can ship a service that silently breaks the benchmark product's promise. This is the same class of defect the publish gate blocks on.",
           "scenario": "A buyer relies on a product behavior (on-time payout, rider insurance, buyer-favorable arbitration timeout) the escrow never implements",
-          "mitigation": "Add one English sole-truth build_note per missing step id whose wording hits the oracle step's disclosureProbe; the publish gate (oracle_disclosure_incomplete) lifts once disclosure_coverage = 1.",
+          "mitigation": "Add one English sole-truth build_note per missing step id whose wording hits the oracle step's disclosureProbe; the publish gate (oracle_disclosure_incomplete) lifts once disclosure_coverage = 1. Graded gate (2026-11-08): the gate ALSO blocks on gap_undisclosed steps of remedy/exception class — the same note must hit the step's gapPredicate probe; main/post-class gaps stay advisory.",
           "evidence": "disclosure_coverage=${disclosure_coverage}",
           "stakeholders": ["buyer", "merchant", "platform"]
         }

package/dist/knowledge/baselines/rules/oracle.json.good

@@ -0,0 +1,120 @@
+{
+  "comment": "Path-oracle rule pack (ORACLE, K3 target 1) — declarative thresholds over the coverage engine's facts (path-oracle/coverage.ts). Facts are computed per template whose product_ref has a registered oracle; rules only reference fact names. TWO gates read this pack differently: the PUBLISH gate ignores it entirely and blocks directly on disclosure completeness (oracleDisclosureBlockersFor), because an undisclosed unresolvable risk must never reach a buyer; the GENERATE gate (assertGenerateScanPassed) blocks on any HIGH finding, so ORACLE-GUARD-01 and ORACLE-INV-01 are generate blockers while ORACLE-PATH-01 (medium) and ORACLE-GUARD-02 (medium) are advisory. Levels/wording are retunable per rule via the judgment document; rules can be disabled (enabled=false, trace left) but never deleted or invented there.",
+  "facts": {
+    "product_ref": "The scanned template's product_ref (registry alignment key).",
+    "oracle_version": "Version of the product oracle the coverage was computed against.",
+    "path_coverage": "Ratio 0..1 — chain-relevant product steps whose footprint exists in the machine shape (or whose disclosure counts as handled) over all chain-relevant steps.",
+    "guard_coverage": "Ratio 0..1 — guard-key probe pass rate over structurally covered steps that carry a SAFETY guardKeyProbe (guardProbeKind absent or 'safety').",
+    "feature_guard_coverage": "Ratio 0..1 — guard-key probe pass rate over structurally covered steps whose guardKeyProbe is guardProbeKind 'feature' (a missing commercial leg, not a missing control surface). 1 when no feature probe is declared.",
+    "disclosure_coverage": "Ratio 0..1 — disclosure corpus hit rate over steps whose remedy is a disclosure (disclosure_only / unresolvable / semantics-inverted).",
+    "invariant_hit_count": "Number of product invariants whose mechanical violation predicate fired on this template.",
+    "invariant_hits": "Comma-joined ids of violated invariants (empty string when none).",
+    "na_redundant_count": "Steps marked not_applicable by the oracle yet shipping the footprint anyway (informational over-provision).",
+    "uncovered_count": "Number of chain-relevant steps NOT covered (missing / disclosure_missing / gap_undisclosed).",
+    "uncovered_step_ids": "Comma-joined ids of uncovered steps (empty string when none)."
+  },
+  "rules": [
+    {
+      "rule_id": "ORACLE-PATH-01",
+      "dimension": "path",
+      "trigger": "path_coverage below 0.6 — the template covers under 60% of the product's chain-relevant order path",
+      "cases": [
+        {
+          "when": { "field": "path_coverage", "op": "lt", "value": 0.6 },
+          "level": "medium",
+          "title": "Product-path coverage ${path_coverage} — the product_ref claim outruns the machine (uncovered: ${uncovered_step_ids})",
+          "description": "The template implements ${path_coverage} of the registered product oracle's chain-relevant steps (K3 target 1). Every uncovered step is a real-world order path with no on-chain landing: buyers of the benchmark product (${product_ref}) get behavior the machine cannot reproduce. This finding is ADVISORY on the publish path (business scope is the merchant's call) but is the input to the template FIX list.",
+          "scenario": "A merchant adopts the template believing it replicates the benchmark product end-to-end",
+          "mitigation": "Work the uncovered step ids in order: expressible misses get FIX-EDGE (add the edge + guard + scanner twin), disclosure misses get FIX-DISCLOSURE (a sole-truth build_note), commercial-semantics conflicts get ESCALATE (ruling record).",
+          "evidence": "path_coverage=${path_coverage}, uncovered=${uncovered_step_ids}",
+          "stakeholders": ["merchant", "buyer"]
+        }
+      ]
+    },
+    {
+      "rule_id": "ORACLE-GUARD-01",
+      "dimension": "guard",
+      "trigger": "guard_coverage below 0.9 — covered paths whose SAFETY guard surface misses the oracle's guard-key expectation",
+      "cases": [
+        {
+          "when": { "field": "guard_coverage", "op": "lt", "value": 0.9 },
+          "level": "high",
+          "title": "Guard coverage ${guard_coverage} — some covered paths exist but their guard surface does not match the oracle",
+          "description": "Structurally covered steps carry a guardKeyProbe expectation: the mapped edge (or node) must bind the guard key the product relies on (evidence gate, window gate, ruling gate). A miss means the EDGE exists but rides 'world-executable' — any eligible signer can advance it without the product's control surface (F-17 family). Only SAFETY probes score here; a missing optional commercial leg scores under ORACLE-GUARD-02 instead, so this rule never blocks template_generate over an unshipped feature.",
+          "scenario": "An order advances along a path the oracle expects to be evidence-gated, with no gate mounted",
+          "mitigation": "For each partial step, mount the missing guard key on the mapped forward (or node) per the oracle step's commercialSemantics; re-scan until guard_coverage = 1.",
+          "evidence": "guard_coverage=${guard_coverage}",
+          "stakeholders": ["merchant", "buyer", "fulfiller"]
+        }
+      ]
+    },
+    {
+      "rule_id": "ORACLE-GUARD-02",
+      "dimension": "guard",
+      "trigger": "feature_guard_coverage below 1 — a covered path is missing an extra leg for a commercial capability the chain can already express",
+      "cases": [
+        {
+          "when": { "field": "feature_guard_coverage", "op": "lt", "value": 1 },
+          "level": "medium",
+          "title": "Feature guard coverage ${feature_guard_coverage} — an expressible commercial leg is not mounted",
+          "description": "The mapped edge is correctly gated; what is absent is an EXTRA leg for a capability the chain already expresses but the catalog has not shipped (the new-expression backlog). This is a product-scope gap, not a safety hole: the buyer is never left unprotected, only without an optional remedy the benchmark product offers. ADVISORY — it never blocks template_generate, and it must never be silenced by deleting the probe, because the probe IS the work order.",
+          "scenario": "A merchant adopts the template believing it replicates an optional commercial behavior of the benchmark product (a punctuality payout, a tiered compensation ladder) that no leg implements",
+          "mitigation": "Land the emission the step's commercialSemantics names — mount the guard template on the mapped forward and fill its parameters — then re-scan; feature_guard_coverage returns to 1 when the leg ships. A merchant who does not want the behavior discloses its absence in a build_note instead; nobody removes the probe.",
+          "evidence": "feature_guard_coverage=${feature_guard_coverage}",
+          "stakeholders": ["merchant", "buyer"]
+        }
+      ]
+    },
+    {
+      "rule_id": "ORACLE-DISC-01",
+      "dimension": "disclosure",
+      "trigger": "disclosure_coverage below 1 — a disclosure-required step (disclosure_only / unresolvable / semantics-inverted) is undisclosed",
+      "cases": [
+        {
+          "when": { "field": "disclosure_coverage", "op": "lt", "value": 1 },
+          "level": "critical",
+          "title": "Undisclosed chain limits (steps: ${uncovered_step_ids}) — the template promises what the chain cannot do",
+          "description": "Steps the chain cannot enforce (no dispatch primitive, no location/ETA oracle, no debit/clawback, no insurance primitive, inverted arbitration-silence semantics) are only honest when the template SAYS SO. An undisclosed unresolvable step means a builder can ship a service that silently breaks the benchmark product's promise. This is the same class of defect the publish gate blocks on.",
+          "scenario": "A buyer relies on a product behavior (on-time payout, rider insurance, buyer-favorable arbitration timeout) the escrow never implements",
+          "mitigation": "Add one English sole-truth build_note per missing step id whose wording hits the oracle step's disclosureProbe; the publish gate (oracle_disclosure_incomplete) lifts once disclosure_coverage = 1. Graded gate (2026-11-08): the gate ALSO blocks on gap_undisclosed steps of remedy/exception class — the same note must hit the step's gapPredicate probe; main/post-class gaps stay advisory.",
+          "evidence": "disclosure_coverage=${disclosure_coverage}",
+          "stakeholders": ["buyer", "merchant", "platform"]
+        }
+      ]
+    },
+    {
+      "rule_id": "ORACLE-INV-01",
+      "dimension": "invariant",
+      "trigger": "a product invariant's mechanical violation predicate fired (${invariant_hits})",
+      "cases": [
+        {
+          "when": { "field": "invariant_hit_count", "op": "gt", "value": 0 },
+          "level": "critical",
+          "title": "Product invariant violated (${invariant_hits}) — commercial semantics conflict with the shipped shape",
+          "description": "The template's economics or edge set contradict a real product's non-negotiable rule (e.g. capacity-shortage cancels must be free: kill_fee_bps > 0 with no CancelForNoCapacity edge transfers the platform's fulfillment failure to the buyer). These are commercial-semantics DEFECTS, not chain limits — the FIX is zero-chain-change and the invariant record names it.",
+          "scenario": "A buyer pays a penalty for a failure the platform caused",
+          "mitigation": "Apply the invariant's prescribed fix (per the oracle's invariants table), then re-scan; invariant_hit_count must return to 0 before the template claims the product_ref.",
+          "evidence": "invariant_hits=${invariant_hits}",
+          "stakeholders": ["buyer", "merchant", "platform"]
+        }
+      ]
+    },
+    {
+      "rule_id": "ORACLE-NA-01",
+      "dimension": "hygiene",
+      "trigger": "a step the oracle marks not_applicable ships its footprint anyway (over-provision)",
+      "cases": [
+        {
+          "when": { "field": "na_redundant_count", "op": "gt", "value": 0 },
+          "level": "info",
+          "title": "Redundant provision of a not-applicable step (${na_redundant_count}) — informational",
+          "description": "The oracle marks the step 'chain semantics eliminate it', yet the machine shape carries the footprint. Usually harmless over-provision; occasionally a sign the oracle's NA verdict needs review.",
+          "scenario": "Catalog hygiene review",
+          "mitigation": "No action required; verify the oracle's not_applicable verdict still holds for the shipped shape.",
+          "evidence": "na_redundant_count=${na_redundant_count}",
+          "stakeholders": ["merchant"]
+        }
+      ]
+    }
+  ]
+}