@xenosystem/agent-cli 0.5.17

package/ownership/evidence/PROPRIETARY-TOOLCHAIN-1/implementation-record.md

@@ -0,0 +1,53 @@
+# Toolchain Boundary Record: Current Xeno Build System
+
+## Identity
+
+- Component: TypeScript/Node development, test, analysis, bundling, packaging, native-build, and CI toolchain
+- Replacement milestone: PROPRIETARY-TOOLCHAIN-1
+- Repository and paths: CLI/SDK manifests and lockfiles, build/test configs, native build scripts, CI workflows, and generated compliance inventories
+- Record owner: Xeno engineering, final owner assignment pending
+- Audit date (UTC): 2026-07-12
+- Status: boundary inventory and anti-overclaim controls complete; P4 implementation not started
+
+## Current Boundary
+
+- Product target: P2.
+- P4 capability gate: false.
+- Generated CLI development graph at audit: 397 records, including 392 build-only and 5 external-runtime records.
+- Unique development package names at audit: 324.
+- Direct tool groups: TypeScript/type contracts, tsup/esbuild, TSX, Vite/Vitest/Rollup, ESLint/typescript-eslint, npm/lockfile tooling, and @yao-pkg/pkg.
+- Native and hosted boundaries: operating-system compilers/SDKs/linkers, Node/N-API headers, shell/PowerShell, and GitHub Actions remain external.
+- License review: seven installed development entries require review; no claim resolves those entries automatically.
+
+## Controls Added
+
+- `@yao-pkg/pkg@6.21.0` is exact and committed to the lockfile.
+- The cross-platform owned packaging orchestrator invokes the exact installed `@yao-pkg/pkg@6.21.0` entry point directly; release packaging does not use `npx` or download a moving package compiler.
+- Deterministic ZIP/TAR generation, checksums, target validation, and runtime-manifest orchestration are Xeno-owned control logic.
+- Optional Bun packaging requires a preinstalled executable and never downloads Bun in the build script.
+- `scripts/verify-toolchain-boundary.mjs` reconciles direct manifest requests to lockfile versions, generated development records, license-review entries, and the false P4 policy gate.
+- `npm run compliance:toolchain` writes and immediately verifies `docs/compliance/toolchain-boundary.json`.
+- Human-readable scope and exit criteria are in `docs/TOOLCHAIN_BOUNDARIES.md`.
+
+## P4 Replacement Scope
+
+P4 requires owned language parsing/type analysis/transpilation, bundling and source maps, test runtime/assertions/mocking/coverage, static analysis, package resolution/integrity/packing/publication, executable packaging, native build orchestration, and deterministic provenance. The accepted OS/compiler/SDK/hosted-CI boundary must be approved before implementation.
+
+## Verification Evidence
+
+- Toolchain boundary write/verify passes against the current lock, policy, ownership graph, and license inventory.
+- The packaging control path passes focused deterministic archive and PE-import tests, a clean Debian dual-target run, exact Windows cross-built execution, and same-environment byte comparison.
+- CLI build and TypeScript checks pass with the sibling SDK junction restored.
+- CLI compliance reports zero ownership violations; artifact-inclusive audit reports 927 records and zero violations.
+- These results prove classification, control-path behavior, and same-environment reproducibility only. They do not prove P4 or independent-environment byte reproducibility.
+- No release was published by this work.
+
+## Handoff
+
+- Phase 7 inventory and claim boundary complete: yes
+- P4 implementation complete: no
+- P4 evidence complete: no
+- P4 capability gate may be marked achieved: no
+- Ready to scope a separately funded compiler/toolchain program: yes
+- Counsel/public P4 approval: pending
+- Author/date: Codex implementation assistant, 2026-07-12

package/ownership/evidence/PROPRIETARY-TOOLCHAIN-1/provenance-review.md

@@ -0,0 +1,32 @@
+# Independent Provenance Review: Development Toolchain Boundary
+
+## Review Identity
+
+- Component: current Xeno development toolchain
+- Replacement milestone: PROPRIETARY-TOOLCHAIN-1
+- Boundary record: `ownership/evidence/PROPRIETARY-TOOLCHAIN-1/implementation-record.md`
+- Reviewer: pending independent reviewer
+- Review date (UTC): pending
+- Reviewer independent of implementation: pending
+
+## Current Evidence Status
+
+- [x] Direct tool requests reconcile to committed lockfile versions.
+- [x] The generated development graph and review-required licenses are recorded.
+- [x] Audited release paths prohibit network-fallback `npx` resolution.
+- [x] Documentation explicitly rejects P4 and byte-reproducibility claims.
+- [ ] Non-Xeno language/type/bundle/test/lint/package tools have been replaced.
+- [ ] Accepted OS/compiler/SDK/CI boundaries have been approved.
+- [ ] Two clean environments produce byte-identical artifacts.
+- [ ] Signed provenance and independent tool-binary review are complete.
+- [ ] Counsel has approved the P4 ownership language.
+
+## Decision
+
+- Engineering boundary decision: accurate for current P2 work
+- P4 implementation decision: not approved or implemented
+- P4 capability gate may be marked achieved: no
+- Public P4/proprietary-toolchain claim approved: no
+- Required follow-up: approve platform boundaries, fund the compiler/toolchain program, replace each capability group, prove clean reproducibility, and complete independent/counsel review
+- Reviewer signature/date: pending
+- Counsel approval reference: pending

package/ownership/evidence/PROPRIETARY-UI-1/implementation-record.md

@@ -0,0 +1,96 @@
+# Clean-Room Implementation Record: Xeno Framework-Neutral UI
+
+## Identity
+
+- Component: Xeno-owned agent UI controller, semantic view model, and DOM renderer
+- Replacement milestone: PROPRIETARY-UI-1
+- Repository and paths: `xeno-agent-sdk/src/ui/`, `src/electron/setupAIHandlers.ts`, `src/context/ScreenCapture.ts`
+- Record owner: Xeno engineering, final owner assignment pending
+- Implementer(s): Codex implementation assistant; human accessibility and UI review pending
+- Contract author(s): Xeno engineering requirements in `switch-to-proprietary.md`
+- Started at (UTC): 2026-07-12
+- Candidate revision: `87ae64b55aa1b8c2e126294e717b229e0945db65` plus recorded working-tree changes
+- Status: engineering implementation and package removal complete; independent review and release-version approval pending
+
+## Frozen behavioral contract
+
+- Public API: renderer API version 1 exports `createAgentUiController`, `createAgentUiView`, `dispatchAgentUiAction`, and `mountAgentUi`.
+- State behavior: immutable snapshots project ordered messages, streaming text, tool execution, errors, token usage, processing state, and one current permission request.
+- Interaction behavior: multiline composition, Ctrl/Command+Enter submission, duplicate-send guard, cancellation, clearing, retry, permission request identity checks, focus, subscription, and explicit disposal.
+- Accessibility behavior: labelled region, polite status and log live regions, busy state, article/status/alert timeline roles, alert-dialog permission prompt, labelled controls, focus-visible styling, and reduced-motion handling.
+- Security and resource limits: DOM output uses created nodes and `textContent`; active URL schemes are rejected; tool details are bounded to 64 KiB; stale permission actions cannot resolve a newer prompt.
+- Host boundary: Electron package discovery is removed. IPC registration and desktop capture require explicit host adapters.
+- Intentional incompatibilities: former React components/hooks and hidden Electron auto-discovery are breaking changes reserved for the next major SDK release and documented in `docs/migrations/sdk-ui-v1.md`.
+
+## Normative and permitted inputs
+
+| Source | Revision/date | Purpose | Terms reviewed by | Evidence path |
+| --- | --- | --- | --- | --- |
+| Xeno proprietary migration specification | 2026-07-12 | UI ownership, package removal, compatibility, and release constraints | Engineering; counsel pending | `switch-to-proprietary.md` |
+| Existing Xeno-owned UI behavior and types | candidate working tree | Product behavior to preserve without copying third-party implementation | Engineering | removed `src/ui/*` React components and focused tests |
+| HTML DOM and accessibility platform contracts | accessed 2026-07-12 | DOM creation, events, roles, live regions, labels, and focus | Engineering | public web-platform and WAI-ARIA documentation |
+| Xeno AgentLoop callback and permission contracts | candidate working tree | Streaming, tool, token, cancellation, and permission projection | Engineering | `src/core/agent-loop.ts`, `src/security/permissions.ts` |
+
+## Contributor source-exposure disclosure
+
+| Contributor | Inspected replaced source? | Date/range | Separation or review decision | Counsel reference |
+| --- | --- | --- | --- | --- |
+| Codex implementation assistant | No React or Electron implementation source was inspected. Xeno-owned prior components, Xeno contracts, and public platform behavior were used. | 2026-07-12 | Independent UI, accessibility, and provenance review required | Pending |
+| Human contributors | Disclosure not yet collected | Pending | Must be completed before capability approval | Pending |
+
+## Implementation log
+
+| Date (UTC) | Decision | Contract/source basis | Author | Evidence path |
+| --- | --- | --- | --- | --- |
+| 2026-07-12 | Replace hook state with an observable controller and immutable snapshots | Phase 4 deliverable 1 | Codex implementation assistant | `src/ui/controller.ts` |
+| 2026-07-12 | Version the semantic renderer contract independently from host frameworks | Phase 4 deliverable 2 | Codex implementation assistant | `src/ui/types.ts`, `src/ui/view-model.ts` |
+| 2026-07-12 | Provide a safe owned DOM renderer with coalesced frame updates | Phase 4 exit gate | Codex implementation assistant | `src/ui/dom-renderer.ts`, `src/ui/styles.ts` |
+| 2026-07-12 | Remove React components, hook, peer, types, lock edges, and build externals | Phase 4 deliverables 4-5 | Codex implementation assistant | package, lock, source, bundle, and ownership audit |
+| 2026-07-12 | Replace hidden Electron package discovery with explicit host injection | framework-neutral host boundary | Codex implementation assistant | `setupAIHandlers.ts`, `ScreenCapture.ts` |
+| 2026-07-12 | Publish the next-major migration contract | versioned migration requirement | Codex implementation assistant | `docs/migrations/sdk-ui-v1.md` |
+| 2026-07-12 | Forbid React, React DOM, and Electron reintroduction in SDK/CLI policy | ownership regression gate | Codex implementation assistant | ownership policy revision 7 |
+| 2026-07-12 | Grow the multiline composer to a bounded 144 px height while preserving plain Enter editing and Ctrl/Command+Enter submission | browser interaction contract | Codex implementation assistant | `src/ui/dom-renderer.ts`, browser audit fixture |
+| 2026-07-12 | Preserve permission-dialog DOM/focus for an unchanged request, focus the first decision, and restore the prior composer focus after resolution | alert-dialog keyboard accessibility contract | Codex implementation assistant | `src/ui/dom-renderer.ts`, fake-DOM and real-browser tests |
+| 2026-07-12 | Add a dependency-free real-browser evidence runner with fresh screenshot integrity checks | automated desktop/narrow layout and accessibility evidence | Codex implementation assistant | `scripts/run-ui-browser-smoke.mjs`, `docs/compliance/ui-browser-smoke.json` |
+
+## AI assistance
+
+- Models/tools used: OpenAI Codex coding agent, local PowerShell, TypeScript, tsup, Node test runner, and installed Google Chrome 150 in headless audit mode.
+- Prompt or retained prompt-summary path: active Xeno proprietary migration goal and `switch-to-proprietary.md`.
+- Confirmation that no third-party source entered the prompt: no React or Electron implementation source was supplied or inspected; public platform contracts and Xeno-owned behavior were used.
+- Human review performed: pending.
+
+## Verification evidence
+
+- Focused tests: 7/7 pass across controller projection, accessible semantic view, permission identity, cancel/retry, markdown URL safety, multiline DOM interaction, explicit IPC injection, and desktop-capture injection.
+- Full SDK regression: 501 passed, 2 platform-dependent skips, 0 failures.
+- Type verification: source and test TypeScript checks pass.
+- Build/package: `dist/ui/index.js` is 17,037 bytes and `dist/ui/index.d.ts` is 12,673 bytes; release package smoke passes.
+- Dependency proof: React, React DOM, React types, and Electron are absent from package metadata, lock graph, installed graph, source runtime imports, UI bundle, and generated ownership reports.
+- Ownership proof: SDK ownership audit reports 0 violations after policy revision 7.
+- Source hashes:
+  - `controller.ts`: `c9a5344d94fc6ef16f741cc3d5b8da85a28cee364b4364702ace28b8834aa0d0`
+  - `view-model.ts`: `383e137272f231cf2d3eea13fffd45e7e9aac8ee2b0b3c17d91dc2e89da82916`
+  - `dom-renderer.ts`: `3c1aa9c75b08842a934d6ce17ea8f80276d402cb4b64467b824332d1fddb0b48`
+  - `types.ts`: `c127a4e06d7cba5e2a1459334ee934adf0edf86c3b41fcc8192f2bd445c4bb0c`
+  - `markdown.ts`: `ec4d45a21b3b27b2ffb149a398c504584b6e66adc5648bbd11395032b0692819`
+  - `styles.ts`: `5819fb44aa8aef3551c5ec0a225244f82a0e57aa6c74ea1b15431cb79bff548f`
+- Consumer scan: no first-party imports of the former React UI were found in the SDK, CLI, Hub, or xeno-use trees.
+- Automated browser QA: Google Chrome 150 passes 15 desktop and 16 narrow/mobile-breakpoint checks covering labelled/live semantics, viewport containment, document overflow, bounded multiline growth, plain Enter editing, Ctrl+Enter submission, permission dialog description/focus/restore, WCAG AA text contrast, 40 px control targets, timeline/composer separation, and mobile stacking. The report is `docs/compliance/ui-browser-smoke.json`.
+- Screenshot evidence: desktop `ui-browser-desktop.png` is 1280x800 with SHA-256 `f82a80ce5b3e29acae0b446a7119ff2b6ff0b07eeabe19cba3d84e5189d8d217`; narrow/mobile-breakpoint `ui-browser-mobile.png` is 500x844 with SHA-256 `538f8ec9bc04c515e87c421dffc3ea840d2fe24a11d433409b5839f8ff587a55`. The runner removes prior screenshots and rejects missing, stale-dimension, clipped-viewport, or failed-check evidence.
+- Browser evidence boundary: the in-app browser binding was unavailable, so the audit used the installed system browser. Automated Chrome evidence does not represent human Electron, physical mobile-device, high-contrast-mode, or screen-reader approval.
+
+## Open legal or provenance questions
+
+- Independent accessibility and DOM security review is pending.
+- Human Electron desktop, physical mobile-device, high-contrast, keyboard, and screen-reader smoke is pending.
+- Contributor disclosures and counsel disposition are pending.
+- The package version for the breaking UI and explicit host-injection migration must be approved before publication.
+
+## Handoff
+
+- Engineering implementation complete: yes
+- Evidence complete: no
+- Capability gate may be marked achieved: no
+- Ready for independent provenance review: after human visual/accessibility smoke and contributor disclosure collection
+- Author/date: Codex implementation assistant, 2026-07-12

package/ownership/evidence/PROPRIETARY-UI-1/provenance-review.md

@@ -0,0 +1,46 @@
+# Independent Provenance Review: Xeno Framework-Neutral UI
+
+## Review identity
+
+- Component: Xeno-owned agent UI controller, semantic view model, DOM renderer, and explicit host adapters
+- Replacement milestone: PROPRIETARY-UI-1
+- Implementation record path: `ownership/evidence/PROPRIETARY-UI-1/implementation-record.md`
+- Candidate revision: `87ae64b55aa1b8c2e126294e717b229e0945db65` plus recorded working-tree changes
+- Reviewer: pending
+- Domain reviewer (required): pending accessibility/browser security reviewer
+- Review date (UTC): pending
+- Reviewer independent of implementation: pending
+
+## Evidence checks
+
+- [ ] Behavioral contract predates or is independent from implementation work.
+- [ ] Normative and public sources are listed with revisions and evidence paths.
+- [ ] Contributor source-exposure disclosures are complete.
+- [ ] No copied source, comments, tests, identifiers, non-normative constants, or distinctive internal structure were found.
+- [ ] Controller lifecycle, permission restoration, and callback restoration are independently reviewed.
+- [ ] DOM rendering has no HTML injection or active-URL bypass.
+- [ ] Accessibility roles, names, focus, keyboard behavior, live regions, contrast, and reduced motion pass human review.
+- [ ] Desktop and mobile visual smoke passes in supported browser/Electron hosts.
+- [ ] React, React DOM, React types, and Electron package edges are absent from source, lock, bundle, package, and installed graph.
+- [ ] Migration/versioning and first-party consumer disposition are approved.
+- [ ] Licenses, trademarks, platform terms, and public ownership language have an explicit disposition.
+
+## Verification summary
+
+| Gate | Evidence | Result | Notes |
+| --- | --- | --- | --- |
+| Controller and semantic contract | focused Node tests | engineering pass | streaming, tools, cancel, retry, permission identity, and disposal covered |
+| DOM interaction and accessibility structure | owned in-memory DOM fixture | engineering pass | browser screenshot and screen-reader review pending |
+| Framework/runtime removal | package, lock, source, bundle, installed graph, ownership reports | engineering pass | React/React DOM/Electron absent |
+| SDK regression | full Node suite | engineering pass | 501 pass, 2 platform skips, 0 failures |
+| Package surface | build, dry-run, release smoke | engineering pass | UI bundle 16.01 KiB; clean package smoke passes |
+| Migration | next-major migration guide | engineering pass | release/version owner approval pending |
+
+## Decision
+
+- Engineering provenance decision: needs-review
+- Capability gate may be marked achieved: no
+- Public clean-room/proprietary claim approved by this review: no
+- Required follow-up: run human browser/Electron desktop and mobile visual/accessibility smoke, collect contributor disclosures, assign an independent reviewer, approve the breaking release version, and attach counsel disposition.
+- Reviewer signature/date: pending
+- Counsel approval reference: pending

package/ownership/ownership-policy.json

@@ -0,0 +1,232 @@
+{
+  "$schema": "./ownership-policy.schema.json",
+  "schemaVersion": 1,
+  "policyId": "xeno-agent-proprietary-v1",
+  "policyRevision": 12,
+  "canonicalLocation": "xeno-agent-sdk/ownership/ownership-policy.json",
+  "mirrorLocations": [
+    "xeno-agent-cli/apps/xeno-agent-cli/ownership/ownership-policy.json"
+  ],
+  "targetLevel": "P2",
+  "enforcedLevel": "pre-P1",
+  "xenoPackagePrefixes": [
+    "@xeno-corporation/"
+  ],
+  "repositories": {
+    "sdk": {
+      "label": "@xenosystem/agent-sdk",
+      "manifestPaths": [
+        "package.json"
+      ],
+      "sourceRoots": [
+        "src"
+      ],
+      "reportDirectory": "docs/compliance"
+    },
+    "cli": {
+      "label": "@xenosystem/agent-cli",
+      "manifestPaths": [
+        "package.json",
+        "apps/xeno-agent-cli/package.json"
+      ],
+      "sourceRoots": [
+        "apps/xeno-agent-cli/src",
+        "src"
+      ],
+      "additionalOwnedSourceRoots": [
+        "../xeno-agent-sdk/src"
+      ],
+      "reportDirectory": "docs/compliance"
+    }
+  },
+  "runtimeComponents": [
+    {
+      "name": "chalk",
+      "classification": "temporary-runtime",
+      "license": "MIT",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "xeno-ansi",
+      "expiresAtMilestone": "PROPRIETARY-ANSI-1",
+      "allowedThrough": "pre-P1"
+    },
+    {
+      "name": "microsoft-mxc-native-assets",
+      "classification": "external-runtime",
+      "license": "MIT",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "release-certified-platform-containment-adapter",
+      "expiresAtMilestone": "never",
+      "artifactPathPrefixes": ["native/mxc/"]
+    },
+    {
+      "name": "undici",
+      "classification": "external-runtime",
+      "license": "MIT",
+      "usedBy": ["cli"],
+      "replacement": "standalone-runtime-network-boundary",
+      "expiresAtMilestone": "PROPRIETARY-RUNTIME-1",
+      "allowedThrough": "P2"
+    }
+  ],
+  "builtinComponents": [
+    {
+      "name": "node:sqlite",
+      "classification": "external-runtime",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "standalone-runtime-decision",
+      "expiresAtMilestone": "PROPRIETARY-RUNTIME-1",
+      "allowedThrough": "P2"
+    }
+  ],
+  "platformBoundaries": [
+    {
+      "name": "node>=20",
+      "classification": "external-runtime",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "standalone-runtime-decision",
+      "expiresAtMilestone": "PROPRIETARY-RUNTIME-1",
+      "allowedThrough": "P2"
+    },
+    {
+      "name": "windows-kernel32",
+      "classification": "platform-api",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "operating-system-boundary",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "posix-libc",
+      "classification": "platform-api",
+      "usedBy": ["sdk", "cli"],
+      "replacement": "operating-system-boundary",
+      "expiresAtMilestone": "never"
+    }
+  ],
+  "developmentPolicy": {
+    "classification": "build-only"
+  },
+  "cleanRoomProtocol": {
+    "guide": "ownership/CLEAN_ROOM_CONTRIBUTOR_GUIDE.md",
+    "implementationRecordTemplate": "ownership/templates/clean-room-implementation-record.md",
+    "provenanceReviewTemplate": "ownership/templates/provenance-review.md",
+    "status": "engineering-draft",
+    "counselApprovalRequired": true
+  },
+  "testOracles": [
+    {
+      "name": "node:zlib",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-deflate",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "libwebp",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-vp8-webp",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "libvpx",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-vp8-webp",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "Pillow",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "ImageMagick",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "libpng-PNGSuite",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "libjpeg-turbo-testimages",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "libwebp-test-data",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    },
+    {
+      "name": "W3C-SVG-test-suite",
+      "classification": "test-oracle",
+      "usedBy": ["sdk"],
+      "replacement": "xeno-owned-media",
+      "expiresAtMilestone": "never"
+    }
+  ],
+  "forbiddenPackages": [
+    "@napi-rs/canvas",
+    "electron",
+    "node-addon-api",
+    "node-pty",
+    "react",
+    "react-dom"
+  ],
+  "capabilityGates": [
+    {
+      "id": "owned-ansi",
+      "requiredFor": "P1",
+      "achieved": false,
+      "evidence": "PROPRIETARY-ANSI-1"
+    },
+    {
+      "id": "owned-command-runtime",
+      "requiredFor": "P1",
+      "achieved": false,
+      "evidence": "PROPRIETARY-COMMAND-1"
+    },
+    {
+      "id": "owned-pty",
+      "requiredFor": "P1",
+      "achieved": false,
+      "evidence": "PROPRIETARY-PTY-1"
+    },
+    {
+      "id": "owned-framework-neutral-ui",
+      "requiredFor": "P2",
+      "achieved": false,
+      "evidence": "PROPRIETARY-UI-1"
+    },
+    {
+      "id": "owned-media-parity",
+      "requiredFor": "P2",
+      "achieved": false,
+      "evidence": "PROPRIETARY-MEDIA-1"
+    },
+    {
+      "id": "owned-standalone-runtime",
+      "requiredFor": "P3",
+      "achieved": false,
+      "evidence": "PROPRIETARY-RUNTIME-1"
+    },
+    {
+      "id": "owned-development-toolchain",
+      "requiredFor": "P4",
+      "achieved": false,
+      "evidence": "PROPRIETARY-TOOLCHAIN-1"
+    }
+  ]
+}

package/ownership/ownership-policy.schema.json

@@ -0,0 +1,192 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://xenostudio.ai/schemas/ownership-policy-v1.json",
+  "title": "Xeno ownership policy",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "policyId",
+    "policyRevision",
+    "canonicalLocation",
+    "targetLevel",
+    "enforcedLevel",
+    "xenoPackagePrefixes",
+    "repositories",
+    "runtimeComponents",
+    "builtinComponents",
+    "platformBoundaries",
+    "developmentPolicy",
+    "cleanRoomProtocol",
+    "forbiddenPackages",
+    "capabilityGates"
+  ],
+  "properties": {
+    "$schema": { "type": "string" },
+    "schemaVersion": { "const": 1 },
+    "policyId": { "type": "string", "minLength": 1 },
+    "policyRevision": { "type": "integer", "minimum": 1 },
+    "canonicalLocation": { "type": "string", "minLength": 1 },
+    "mirrorLocations": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "uniqueItems": true
+    },
+    "targetLevel": { "enum": ["P1", "P2", "P3", "P4"] },
+    "enforcedLevel": { "enum": ["pre-P1", "P1", "P2", "P3", "P4"] },
+    "xenoPackagePrefixes": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "type": "string", "minLength": 1 },
+      "uniqueItems": true
+    },
+    "repositories": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["label", "manifestPaths", "sourceRoots", "reportDirectory"],
+        "properties": {
+          "label": { "type": "string", "minLength": 1 },
+          "manifestPaths": {
+            "type": "array",
+            "minItems": 1,
+            "items": { "type": "string", "minLength": 1 },
+            "uniqueItems": true
+          },
+          "sourceRoots": {
+            "type": "array",
+            "minItems": 1,
+            "items": { "type": "string", "minLength": 1 },
+            "uniqueItems": true
+          },
+          "additionalOwnedSourceRoots": {
+            "type": "array",
+            "minItems": 1,
+            "items": { "type": "string", "minLength": 1 },
+            "uniqueItems": true
+          },
+          "reportDirectory": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "runtimeComponents": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/component" }
+    },
+    "builtinComponents": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/component" }
+    },
+    "platformBoundaries": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/platformBoundary" }
+    },
+    "developmentPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["classification"],
+      "properties": {
+        "classification": { "const": "build-only" }
+      }
+    },
+    "cleanRoomProtocol": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "guide",
+        "implementationRecordTemplate",
+        "provenanceReviewTemplate",
+        "status",
+        "counselApprovalRequired"
+      ],
+      "properties": {
+        "guide": { "type": "string", "minLength": 1 },
+        "implementationRecordTemplate": { "type": "string", "minLength": 1 },
+        "provenanceReviewTemplate": { "type": "string", "minLength": 1 },
+        "status": { "enum": ["engineering-draft", "counsel-approved"] },
+        "counselApprovalRequired": { "type": "boolean" }
+      }
+    },
+    "testOracles": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/component" }
+    },
+    "forbiddenPackages": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "uniqueItems": true
+    },
+    "capabilityGates": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "requiredFor", "achieved", "evidence"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "requiredFor": { "enum": ["P1", "P2", "P3", "P4"] },
+          "achieved": { "type": "boolean" },
+          "evidence": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "classification": {
+      "enum": [
+        "xeno-owned",
+        "platform-api",
+        "external-runtime",
+        "build-only",
+        "test-oracle",
+        "temporary-runtime",
+        "forbidden"
+      ]
+    },
+    "component": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "classification", "usedBy", "replacement", "expiresAtMilestone"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "classification": { "$ref": "#/$defs/classification" },
+        "license": { "type": "string" },
+        "usedBy": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 },
+          "uniqueItems": true
+        },
+        "replacement": { "type": "string", "minLength": 1 },
+        "expiresAtMilestone": { "type": "string", "minLength": 1 },
+        "allowedThrough": { "enum": ["pre-P1", "P1", "P2", "P3"] },
+        "artifactPathPrefixes": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 },
+          "uniqueItems": true
+        }
+      }
+    },
+    "platformBoundary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "classification", "usedBy", "replacement", "expiresAtMilestone"],
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "classification": { "$ref": "#/$defs/classification" },
+        "usedBy": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "type": "string", "minLength": 1 },
+          "uniqueItems": true
+        },
+        "replacement": { "type": "string", "minLength": 1 },
+        "expiresAtMilestone": { "type": "string", "minLength": 1 },
+        "allowedThrough": { "enum": ["pre-P1", "P1", "P2", "P3"] }
+      }
+    }
+  }
+}