@zhivex-ai/harness 1.0.0-rc.7 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (170) hide show
  1. package/CHANGELOG.md +190 -0
  2. package/README.md +47 -62
  3. package/ROADMAP.md +15 -6
  4. package/SECURITY.md +1 -1
  5. package/benchmarks/README.md +48 -0
  6. package/benchmarks/baselines/context-navigation-2026-09-09.json +94 -0
  7. package/benchmarks/baselines/efficiency-2026-09-08.json +233 -0
  8. package/benchmarks/baselines/external-final-2026-09-08.json +588 -0
  9. package/benchmarks/baselines/external-intermediate-2026-09-08.json +116 -0
  10. package/benchmarks/baselines/external-matched-openai-2026-09-08.json +1922 -0
  11. package/benchmarks/baselines/external-matched-qwen-2026-09-08.json +1706 -0
  12. package/benchmarks/baselines/external-pilot-2026-09-08.json +439 -0
  13. package/benchmarks/baselines/external-qwen-flash-2026-09-08.json +1570 -0
  14. package/benchmarks/baselines/external-qwen-remediation-2026-09-09.json +1509 -0
  15. package/benchmarks/baselines/external-qwen-sdk-114-progress-2026-09-09.json +2509 -0
  16. package/benchmarks/baselines/external-sdk-upgrade-2026-09-08.json +564 -0
  17. package/benchmarks/baselines/external-verifier-recovery-2026-09-09.json +794 -0
  18. package/benchmarks/baselines/full-harness-review-2026-09-10.json +134 -0
  19. package/benchmarks/baselines/harness-audit-2026-09-09.json +136 -0
  20. package/benchmarks/baselines/harness-remediation-2026-09-09.json +160 -0
  21. package/benchmarks/baselines/oci-remediation-2026-09-10.json +535 -0
  22. package/benchmarks/baselines/rc14-holdout-2026-09-10.json +854 -0
  23. package/benchmarks/baselines/repair-architecture-audit-2026-09-09.json +75 -0
  24. package/benchmarks/baselines/time-to-safe-fix-live-expanded-2026-08-21.json +186 -0
  25. package/benchmarks/baselines/time-to-safe-fix-live-smoke-2026-08-21.json +186 -0
  26. package/contracts/public-api.json +25 -0
  27. package/contracts/security-controls.json +3 -2
  28. package/contracts/stable-api-signatures.json +58 -54
  29. package/dist/bounded-reads.d.ts +4 -0
  30. package/dist/change-envelope.d.ts +4 -4
  31. package/dist/cli-options.d.ts +2 -1
  32. package/dist/cli-profiles.d.ts +39 -0
  33. package/dist/cli-stream.d.ts +40 -40
  34. package/dist/cli.d.ts +38 -35
  35. package/dist/cli.js +6556 -4030
  36. package/dist/compaction.d.ts +12 -0
  37. package/dist/config.d.ts +6 -1
  38. package/dist/console-context.d.ts +26 -0
  39. package/dist/console-input.d.ts +28 -0
  40. package/dist/context-engineering.d.ts +5 -5
  41. package/dist/context-metrics.d.ts +11 -0
  42. package/dist/edit-contracts.d.ts +2 -2
  43. package/dist/execution-environment.d.ts +9 -5
  44. package/dist/harness.d.ts +52 -18
  45. package/dist/hostile-repository-demo.js +2942 -1088
  46. package/dist/index.d.ts +3 -3
  47. package/dist/index.js +4316 -2435
  48. package/dist/json-contracts.d.ts +292 -236
  49. package/dist/model-budget.d.ts +61 -0
  50. package/dist/operations.d.ts +82 -20
  51. package/dist/orchestration.d.ts +1 -0
  52. package/dist/providers.d.ts +5 -2
  53. package/dist/repair-controller.d.ts +72 -0
  54. package/dist/repair-progress.d.ts +40 -0
  55. package/dist/repair-verifier.d.ts +6 -0
  56. package/dist/replacement-edits.d.ts +9 -0
  57. package/dist/routing.d.ts +1 -1
  58. package/dist/run-interruption.d.ts +4 -0
  59. package/dist/runtime-checkpoints.d.ts +7 -0
  60. package/dist/runtime-diagnostics.d.ts +63 -0
  61. package/dist/runtime-policy.d.ts +36 -0
  62. package/dist/sessions.d.ts +1 -1
  63. package/dist/state-backup.d.ts +2 -2
  64. package/dist/task-memory.d.ts +36 -0
  65. package/dist/terminal-markdown.d.ts +12 -0
  66. package/dist/time-to-safe-fix.d.ts +19 -19
  67. package/dist/tool-registry.d.ts +4 -0
  68. package/dist/verify-historical-migrations.js +6987 -5140
  69. package/dist/workspace-mutation-lock.d.ts +5 -0
  70. package/dist/workspace.d.ts +39 -4
  71. package/dist/zhx.js +6556 -4030
  72. package/docs/CLI.md +89 -3
  73. package/docs/CONTEXT_ENGINEERING.md +160 -0
  74. package/docs/EXECUTION_ENVIRONMENTS.md +21 -0
  75. package/docs/EXTENSIBILITY.md +2 -2
  76. package/docs/GA_READINESS.md +13 -7
  77. package/docs/LIVE_CERTIFICATION.md +12 -2
  78. package/docs/RC13_SECURITY_REVIEW.md +28 -0
  79. package/docs/RC14_DELEGATED_SECURITY_DECISION.md +80 -0
  80. package/docs/RC14_SECURITY_REVIEW.md +40 -0
  81. package/docs/README.md +33 -0
  82. package/docs/RELEASE.md +4 -2
  83. package/docs/REPOSITORY_EDITING.md +47 -0
  84. package/docs/SECURITY_REVIEW_EVIDENCE.md +5 -3
  85. package/docs/THREAT_MODEL.md +3 -3
  86. package/docs/TIME_TO_SAFE_FIX.md +4 -4
  87. package/docs/ga-readiness.json +147 -16
  88. package/docs/reports/EFFICIENCY_REVIEW.md +156 -0
  89. package/docs/reports/EXTERNAL_COMPARISON.md +434 -0
  90. package/docs/reports/FULL_HARNESS_REVIEW_2026-09-10.md +200 -0
  91. package/docs/reports/GA_BUDGET_REMEDIATION_2026-09-19.md +38 -0
  92. package/docs/reports/GA_REPAIR_RECOVERY_2026-09-19.md +700 -0
  93. package/docs/reports/GA_VALIDATION_2026-09-19.md +111 -0
  94. package/docs/reports/HARNESS_ARCHITECTURE_REVIEW_2026-09-09.md +202 -0
  95. package/docs/reports/HARNESS_AUDIT_2026-09-09.md +306 -0
  96. package/docs/reports/HARNESS_REMEDIATION_2026-09-09.md +74 -0
  97. package/docs/reports/HARNESS_REMEDIATION_2026-09-10.md +90 -0
  98. package/docs/reports/MODEL_COMPARISON_2026-09-09.md +184 -0
  99. package/docs/reports/QWEN_REMEDIATION_COMPARISON_2026-09-09.md +142 -0
  100. package/docs/reports/RC14_VALIDATION_2026-09-10.md +45 -0
  101. package/docs/reports/README.md +26 -0
  102. package/docs/reports/evidence/ga-budget-remediation-2026-09-19.json +133 -0
  103. package/docs/reports/evidence/ga-catalog-ablation-2026-09-19.json +699 -0
  104. package/docs/reports/evidence/ga-catalog-ablation-plan-2026-09-19.json +40 -0
  105. package/docs/reports/evidence/ga-catalog-observed-2026-09-19.json +985 -0
  106. package/docs/reports/evidence/ga-catalog-observed-plan-2026-09-19.json +28 -0
  107. package/docs/reports/evidence/ga-catalog-observed-status-2026-09-19.json +15 -0
  108. package/docs/reports/evidence/ga-complete-local-check-2026-09-19.json +47 -0
  109. package/docs/reports/evidence/ga-completion-reminder-2026-09-19.json +22 -0
  110. package/docs/reports/evidence/ga-fresh-cohort-plan-2026-09-19.json +54 -0
  111. package/docs/reports/evidence/ga-fresh-cohort-preparation-2026-09-19.json +242 -0
  112. package/docs/reports/evidence/ga-fresh-cohort-result-2026-09-19.json +4318 -0
  113. package/docs/reports/evidence/ga-local-validation-followup-2026-09-19.json +66 -0
  114. package/docs/reports/evidence/ga-node-consumers-2026-09-19.json +31 -0
  115. package/docs/reports/evidence/ga-package-content-validation-2026-09-19.json +22 -0
  116. package/docs/reports/evidence/ga-plan-completion-2026-09-19.json +39 -0
  117. package/docs/reports/evidence/ga-plan-reserve-2026-09-19.json +573 -0
  118. package/docs/reports/evidence/ga-plan-reserve-plan-2026-09-19.json +24 -0
  119. package/docs/reports/evidence/ga-plan-transition-2026-09-19.json +19 -0
  120. package/docs/reports/evidence/ga-private-verifier-plan-2026-09-19.json +24 -0
  121. package/docs/reports/evidence/ga-private-verifier-root-cause-2026-09-19.json +41 -0
  122. package/docs/reports/evidence/ga-published-sdk-2026-09-19.json +35 -0
  123. package/docs/reports/evidence/ga-python-checkout-imports-2026-09-19.json +95 -0
  124. package/docs/reports/evidence/ga-python-origin-delivery-2026-09-19.json +211 -0
  125. package/docs/reports/evidence/ga-python-origin-delivery-plan-2026-09-19.json +27 -0
  126. package/docs/reports/evidence/ga-qwen-patched-package-2026-09-19.json +1092 -0
  127. package/docs/reports/evidence/ga-qwen-patched-package-plan-2026-09-19.json +18 -0
  128. package/docs/reports/evidence/ga-qwen-published-2026-09-19.json +571 -0
  129. package/docs/reports/evidence/ga-qwen-published-plan-2026-09-19.json +18 -0
  130. package/docs/reports/evidence/ga-qwen-tool-choice-2026-09-19.json +85 -0
  131. package/docs/reports/evidence/ga-qwen-tool-choice-patched-2026-09-19.json +85 -0
  132. package/docs/reports/evidence/ga-recovery-development-2026-09-19.json +1066 -0
  133. package/docs/reports/evidence/ga-recovery-graded-development-2026-09-19.json +1313 -0
  134. package/docs/reports/evidence/ga-recovery-graded-v2-2026-09-19.json +1151 -0
  135. package/docs/reports/evidence/ga-recovery-v3-2026-09-19.json +3943 -0
  136. package/docs/reports/evidence/ga-recovery-v4-2026-09-19.json +1055 -0
  137. package/docs/reports/evidence/ga-recovery-v5-2026-09-19.json +1245 -0
  138. package/docs/reports/evidence/ga-recovery-v6-2026-09-19.json +699 -0
  139. package/docs/reports/evidence/ga-recovery-v7-2026-09-19.json +854 -0
  140. package/docs/reports/evidence/ga-recovery-v8-2026-09-19.json +596 -0
  141. package/docs/reports/evidence/ga-required-delivery-2026-09-19.json +25 -0
  142. package/docs/reports/evidence/ga-required-delivery-live-2026-09-19.json +1337 -0
  143. package/docs/reports/evidence/ga-required-delivery-live-plan-2026-09-19.json +25 -0
  144. package/docs/reports/evidence/ga-retained-candidate-grading-2026-09-19.json +30 -0
  145. package/docs/reports/evidence/ga-tool-selection-live-2026-09-19.json +559 -0
  146. package/docs/reports/evidence/ga-tool-selection-live-plan-2026-09-19.json +28 -0
  147. package/docs/reports/evidence/ga-tool-selection-recovery-2026-09-19.json +27 -0
  148. package/docs/reports/evidence/ga-validation-2026-09-19.json +236 -0
  149. package/docs/reports/evidence/ga-verifier-discovery-live-2026-09-19.json +1369 -0
  150. package/docs/reports/evidence/ga-verifier-discovery-plan-2026-09-19.json +29 -0
  151. package/docs/reports/evidence/ga-verifier-failure-identification-2026-09-19.json +30 -0
  152. package/docs/reports/evidence/ga-verifier-feedback-2026-09-19.json +65 -0
  153. package/docs/reports/evidence/ga-verifier-hints-live-2026-09-19.json +1297 -0
  154. package/docs/reports/evidence/ga-verifier-hints-plan-2026-09-19.json +27 -0
  155. package/docs/reports/evidence/ga-work-boundary-context-analysis-2026-09-19.json +113 -0
  156. package/docs/reports/evidence/ga-work-boundary-live-2026-09-19.json +301 -0
  157. package/docs/reports/evidence/ga-work-boundary-live-plan-2026-09-19.json +84 -0
  158. package/docs/reports/evidence/ga-work-budget-planning-2026-09-19.json +32 -0
  159. package/docs/reports/evidence/ga-working-context-2026-09-19.json +22 -0
  160. package/docs/reports/evidence/rc14-delegated-security-review-2026-09-20.json +81 -0
  161. package/docs/reports/evidence/rc14-ga-gate-2026-09-20.json +18 -0
  162. package/docs/reports/evidence/rc14-representative-2026-09-20.json +509 -0
  163. package/docs/reports/evidence/rc14-security-regressions-2026-09-20.json +64 -0
  164. package/docs/reports/evidence/security-current-2026-09-19.json +91 -0
  165. package/docs/reports/evidence/security-remediation-2026-09-19.json +97 -0
  166. package/evaluations/repair-controller-experiment.json +24 -0
  167. package/evaluations/representative-assembly-matrix.json +63 -0
  168. package/evaluations/representative-matrix.json +2219 -2
  169. package/fixtures/contracts/v1/init.json +19 -0
  170. package/package.json +25 -16
@@ -0,0 +1,27 @@
1
+ {
2
+ "kind": "verifier-hints-development-diagnostic",
3
+ "classification": "known development case; not holdout or GA acceptance",
4
+ "baseline": "ga-required-delivery",
5
+ "qwenVersion": "0.14.4",
6
+ "repetitions": 1,
7
+ "control": "unchanged mini-SWE-agent",
8
+ "limits": {
9
+ "steps": 24,
10
+ "outputPerTurn": 2048,
11
+ "inputTokens": 100000,
12
+ "outputTokens": 16000,
13
+ "timeoutSeconds": 300,
14
+ "memoryMb": 2048,
15
+ "cpus": 2
16
+ },
17
+ "change": "Sanitized output marker telemetry only; no runtime, model, prompt or budget change",
18
+ "sources": {
19
+ "src/config.ts": "67ed44b55505ff8dd94f60ba89c33c217759cd7c79de45ccda369f248309cdff",
20
+ "src/harness.ts": "1d305078e3c56c24bb659c34aac37c96bf11a4e60af6607bb4b9d65964e84791",
21
+ "src/repair-controller.ts": "41f1f09032131306f3284edbf105930577504af0bf764ba98a105c4eee70a1e7",
22
+ "scripts/swebench/zhivex-driver.ts": "3d1c143b4c2a1438a1249db8cc10c70a80cbd1c9e3ed44317230795b7a9be2b4",
23
+ "bun.lock": "dbabdf161b3dba306f475c81f37e5ab1620fb98052127bb3ed2a0a0cb611ede4",
24
+ "scripts/swebench/telemetry.ts": "2c0b4828db3a108184df6d47276d7d3dbb6cf291126b40fc38d33f4b29101bc2"
25
+ },
26
+ "stopRule": "One matched pair only; no automatic retry after completion"
27
+ }
@@ -0,0 +1,113 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "work-boundary-context-analysis",
4
+ "sourceResultSha256": "3ffb87536f05a72ddc594cf8b7e2fcdccec0ccb87c5518489a27a37903300c1f",
5
+ "instanceId": "django__django-10914",
6
+ "calls": [
7
+ {
8
+ "call": 1,
9
+ "inputTokens": 4782,
10
+ "cumulativeInputTokens": 4782,
11
+ "toolResultCharacters": 0,
12
+ "toolDefinitionCharacters": 9375,
13
+ "requestedTools": [
14
+ "search_files"
15
+ ]
16
+ },
17
+ {
18
+ "call": 2,
19
+ "inputTokens": 7268,
20
+ "cumulativeInputTokens": 12050,
21
+ "toolResultCharacters": 5330,
22
+ "toolDefinitionCharacters": 9375,
23
+ "requestedTools": [
24
+ "read_files"
25
+ ]
26
+ },
27
+ {
28
+ "call": 3,
29
+ "inputTokens": 9722,
30
+ "cumulativeInputTokens": 21772,
31
+ "toolResultCharacters": 12775,
32
+ "toolDefinitionCharacters": 9375,
33
+ "requestedTools": [
34
+ "read_files"
35
+ ]
36
+ },
37
+ {
38
+ "call": 4,
39
+ "inputTokens": 12742,
40
+ "cumulativeInputTokens": 34514,
41
+ "toolResultCharacters": 21896,
42
+ "toolDefinitionCharacters": 9375,
43
+ "requestedTools": [
44
+ "run_environment_shell"
45
+ ]
46
+ },
47
+ {
48
+ "call": 5,
49
+ "inputTokens": 13711,
50
+ "cumulativeInputTokens": 48225,
51
+ "toolResultCharacters": 24378,
52
+ "toolDefinitionCharacters": 9375,
53
+ "requestedTools": [
54
+ "run_environment_shell"
55
+ ]
56
+ },
57
+ {
58
+ "call": 6,
59
+ "inputTokens": 14162,
60
+ "cumulativeInputTokens": 62387,
61
+ "toolResultCharacters": 25201,
62
+ "toolDefinitionCharacters": 9375,
63
+ "requestedTools": [
64
+ "repair_plan"
65
+ ]
66
+ },
67
+ {
68
+ "call": 7,
69
+ "inputTokens": 15033,
70
+ "cumulativeInputTokens": 77420,
71
+ "toolResultCharacters": 26875,
72
+ "toolDefinitionCharacters": 9375,
73
+ "requestedTools": [
74
+ "run_environment_shell"
75
+ ]
76
+ },
77
+ {
78
+ "call": 8,
79
+ "inputTokens": 6948,
80
+ "cumulativeInputTokens": 84368,
81
+ "toolResultCharacters": 2719,
82
+ "toolDefinitionCharacters": 9375,
83
+ "requestedTools": [
84
+ "run_environment_shell"
85
+ ]
86
+ },
87
+ {
88
+ "call": 9,
89
+ "inputTokens": 9154,
90
+ "cumulativeInputTokens": 93522,
91
+ "toolResultCharacters": 11583,
92
+ "toolDefinitionCharacters": 9375,
93
+ "requestedTools": [
94
+ "inspect_environment_patch"
95
+ ]
96
+ }
97
+ ],
98
+ "compactions": [
99
+ {
100
+ "beforeStep": 8,
101
+ "estimatedTokensBefore": 10044,
102
+ "estimatedTokensAfter": 3142
103
+ }
104
+ ],
105
+ "observations": [
106
+ "First recorded plan request occurred at call 6 after cumulative 62387 input tokens.",
107
+ "Only recorded compaction occurred before step 8, reducing SDK estimated message tokens from 10044 to 3142.",
108
+ "Tool definitions contributed 9375 characters on each of the nine measured calls.",
109
+ "No imported or retained candidate entries were present."
110
+ ],
111
+ "interpretation": "Context repetition is measurable, but this single failed run does not prove a different compaction threshold improves correctness.",
112
+ "nextValidation": "Run the complete local check required for release preparation; preserve failed development evidence without revising formal acceptance criteria."
113
+ }
@@ -0,0 +1,301 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "known-task-work-boundary-development-validation",
4
+ "classification": "One predeclared development rerun; not fresh holdout or GA certification",
5
+ "implementationCommit": "a6d6540acada0dc57aeae82fac7852f2b7cb0246",
6
+ "instanceId": "django__django-10914",
7
+ "preflight": "passed",
8
+ "sourcesUnchanged": true,
9
+ "limits": {
10
+ "steps": 24,
11
+ "outputPerTurn": 2048,
12
+ "inputTokens": 100000,
13
+ "outputTokens": 16000,
14
+ "timeoutSeconds": 300,
15
+ "memoryMb": 2048,
16
+ "cpus": 2
17
+ },
18
+ "grading": {
19
+ "gradingStatus": "completed",
20
+ "resolved": false,
21
+ "gradingMethod": "empty-patch-no-solution"
22
+ },
23
+ "patchSha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
24
+ "changedPaths": [],
25
+ "result": {
26
+ "status": "failed",
27
+ "failure": "INPUT_TOKEN_BUDGET",
28
+ "phase": "agent",
29
+ "inputTokens": 93522,
30
+ "outputTokens": 1275,
31
+ "usageComplete": true,
32
+ "modelCalls": 9,
33
+ "toolCalls": 9,
34
+ "approvals": 4,
35
+ "repairProgress": {
36
+ "repeatedResults": 0,
37
+ "suppressedResults": 0,
38
+ "blockedBroadCalls": 0,
39
+ "enteredClosure": true,
40
+ "phase": "explore",
41
+ "blockedPhaseCalls": 0,
42
+ "planRecorded": true
43
+ },
44
+ "terminalDiagnostic": {
45
+ "code": "EXECUTION_FAILED",
46
+ "category": "execution",
47
+ "failureType": "budget",
48
+ "retryable": false,
49
+ "chain": [
50
+ {
51
+ "validationCode": null,
52
+ "verifierExitCode": null,
53
+ "providerReason": null,
54
+ "validationIssues": [],
55
+ "status": null,
56
+ "errorClass": "Object",
57
+ "providerHints": [],
58
+ "fingerprint": "064591d1d6249f6eadfb2800eddbdfe8576a334f23f5e1215117dc19107f21f4",
59
+ "reason": "budget"
60
+ }
61
+ ]
62
+ },
63
+ "thrownDiagnostic": {
64
+ "code": "EXECUTION_FAILED",
65
+ "category": "execution",
66
+ "failureType": "budget",
67
+ "retryable": false,
68
+ "chain": [
69
+ {
70
+ "validationCode": null,
71
+ "verifierExitCode": null,
72
+ "providerReason": null,
73
+ "validationIssues": [],
74
+ "status": null,
75
+ "errorClass": "HarnessExecutionError",
76
+ "providerHints": [],
77
+ "fingerprint": "064591d1d6249f6eadfb2800eddbdfe8576a334f23f5e1215117dc19107f21f4",
78
+ "reason": "budget"
79
+ },
80
+ {
81
+ "validationCode": null,
82
+ "verifierExitCode": null,
83
+ "providerReason": null,
84
+ "validationIssues": [],
85
+ "status": null,
86
+ "errorClass": "Error",
87
+ "providerHints": [],
88
+ "fingerprint": "064591d1d6249f6eadfb2800eddbdfe8576a334f23f5e1215117dc19107f21f4",
89
+ "reason": "budget"
90
+ }
91
+ ]
92
+ },
93
+ "turns": [
94
+ {
95
+ "index": 1,
96
+ "status": "completed",
97
+ "finishReason": "tool-calls",
98
+ "requestedTools": [
99
+ "search_files"
100
+ ],
101
+ "inputTokens": 4782,
102
+ "outputTokens": 61,
103
+ "cachedInputTokens": 0,
104
+ "requestCharacters": 8416,
105
+ "tools": [
106
+ {
107
+ "name": "search_files",
108
+ "isError": false,
109
+ "characters": 5170
110
+ }
111
+ ]
112
+ },
113
+ {
114
+ "index": 2,
115
+ "status": "completed",
116
+ "finishReason": "tool-calls",
117
+ "requestedTools": [
118
+ "read_files"
119
+ ],
120
+ "inputTokens": 7268,
121
+ "outputTokens": 107,
122
+ "cachedInputTokens": 4096,
123
+ "requestCharacters": 13958,
124
+ "tools": [
125
+ {
126
+ "name": "read_files",
127
+ "isError": false,
128
+ "characters": 7287
129
+ }
130
+ ]
131
+ },
132
+ {
133
+ "index": 3,
134
+ "status": "completed",
135
+ "finishReason": "tool-calls",
136
+ "requestedTools": [
137
+ "read_files"
138
+ ],
139
+ "inputTokens": 9722,
140
+ "outputTokens": 138,
141
+ "cachedInputTokens": 6144,
142
+ "requestCharacters": 21753,
143
+ "tools": [
144
+ {
145
+ "name": "read_files",
146
+ "isError": false,
147
+ "characters": 8963
148
+ }
149
+ ]
150
+ },
151
+ {
152
+ "index": 4,
153
+ "status": "waiting_approval",
154
+ "finishReason": "tool-calls",
155
+ "requestedTools": [
156
+ "run_environment_shell"
157
+ ],
158
+ "inputTokens": 12742,
159
+ "outputTokens": 168,
160
+ "cachedInputTokens": 9216,
161
+ "requestCharacters": 31305,
162
+ "tools": []
163
+ },
164
+ {
165
+ "index": 5,
166
+ "status": "waiting_approval",
167
+ "finishReason": "tool-calls",
168
+ "requestedTools": [
169
+ "run_environment_shell"
170
+ ],
171
+ "inputTokens": 13711,
172
+ "outputTokens": 79,
173
+ "cachedInputTokens": 11648,
174
+ "requestCharacters": 34726,
175
+ "tools": [
176
+ {
177
+ "name": "run_environment_shell",
178
+ "isError": false,
179
+ "characters": 2313,
180
+ "phaseLatencies": {
181
+ "commandAndAttestationMs": 2194.504708,
182
+ "workspaceExportMs": 5862.171,
183
+ "totalMs": 9878.8425,
184
+ "sessionCreationMs": 1821.721209
185
+ },
186
+ "exitCode": 0,
187
+ "timedOut": false
188
+ }
189
+ ]
190
+ },
191
+ {
192
+ "index": 6,
193
+ "status": "completed",
194
+ "finishReason": "tool-calls",
195
+ "requestedTools": [
196
+ "repair_plan"
197
+ ],
198
+ "inputTokens": 14162,
199
+ "outputTokens": 373,
200
+ "cachedInputTokens": 12288,
201
+ "requestCharacters": 36135,
202
+ "tools": [
203
+ {
204
+ "name": "run_environment_shell",
205
+ "isError": false,
206
+ "characters": 654,
207
+ "phaseLatencies": {
208
+ "commandAndAttestationMs": 414.635292,
209
+ "totalMs": 2310.597208,
210
+ "sessionCreationMs": 1790.499709
211
+ },
212
+ "exitCode": 2,
213
+ "timedOut": false
214
+ }
215
+ ]
216
+ },
217
+ {
218
+ "index": 7,
219
+ "status": "waiting_approval",
220
+ "finishReason": "tool-calls",
221
+ "requestedTools": [
222
+ "run_environment_shell"
223
+ ],
224
+ "inputTokens": 15033,
225
+ "outputTokens": 146,
226
+ "cachedInputTokens": 13312,
227
+ "requestCharacters": 40289,
228
+ "tools": [
229
+ {
230
+ "name": "repair_plan",
231
+ "isError": false,
232
+ "characters": 1515
233
+ }
234
+ ]
235
+ },
236
+ {
237
+ "index": 8,
238
+ "status": "waiting_approval",
239
+ "finishReason": "tool-calls",
240
+ "requestedTools": [
241
+ "run_environment_shell"
242
+ ],
243
+ "inputTokens": 6948,
244
+ "outputTokens": 191,
245
+ "cachedInputTokens": 3328,
246
+ "requestCharacters": 16013,
247
+ "tools": [
248
+ {
249
+ "name": "run_environment_shell",
250
+ "isError": false,
251
+ "characters": 2550,
252
+ "phaseLatencies": {
253
+ "commandAndAttestationMs": 2091.037125,
254
+ "workspaceExportMs": 5824.962375,
255
+ "totalMs": 9777.678042,
256
+ "sessionCreationMs": 1861.627292
257
+ },
258
+ "exitCode": 0,
259
+ "timedOut": false
260
+ },
261
+ {
262
+ "name": "run_environment_shell",
263
+ "isError": false,
264
+ "characters": 8695,
265
+ "phaseLatencies": {
266
+ "commandAndAttestationMs": 461.195083,
267
+ "totalMs": 2606.546167,
268
+ "sessionCreationMs": 2026.411041
269
+ },
270
+ "exitCode": 1,
271
+ "timedOut": false
272
+ }
273
+ ]
274
+ },
275
+ {
276
+ "index": 9,
277
+ "status": "completed",
278
+ "finishReason": "tool-calls",
279
+ "requestedTools": [
280
+ "inspect_environment_patch"
281
+ ],
282
+ "inputTokens": 9154,
283
+ "outputTokens": 12,
284
+ "cachedInputTokens": 5120,
285
+ "requestCharacters": 3490,
286
+ "tools": [
287
+ {
288
+ "name": "inspect_environment_patch",
289
+ "isError": false,
290
+ "characters": 210
291
+ }
292
+ ]
293
+ }
294
+ ]
295
+ },
296
+ "notes": [
297
+ "Exactly one model attempt; no retry after failure.",
298
+ "Postprocessing initially rejected an empty patch in changed_paths; grading was resumed from the stored terminal result without model calls.",
299
+ "Plan recorded and closure entered are observed; no successful delivery or fresh-holdout improvement is claimed."
300
+ ]
301
+ }
@@ -0,0 +1,84 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "known-task-development-plan",
4
+ "implementationCommit": "a6d6540acada0dc57aeae82fac7852f2b7cb0246",
5
+ "instanceId": "django__django-10914",
6
+ "selection": "First of the three prior work-budget failures in original manifest order",
7
+ "attempts": 1,
8
+ "provider": "qwen",
9
+ "model": "qwen3.8-flash",
10
+ "rules": [
11
+ "Native preflight before paid call",
12
+ "Same prepared image and limits as original cohort",
13
+ "No retries or source edits during run",
14
+ "Independent grading of imported patch",
15
+ "Prior holdout remains unchanged; this is development evidence"
16
+ ],
17
+ "sources": {
18
+ "src/bounded-reads.ts": "9807bb460894be3279c5425af19863d1c6e419a1582ba6910ec7e7fc35703ed6",
19
+ "src/capabilities.ts": "56fdb60a2f6e1d33b2dc26d38b6d2709807e491ba1268d47b97876c2c0591d65",
20
+ "src/change-envelope.ts": "9047ec978c9e5117965b8093ec961d855f97bbc2c3accdc79b74cfe6a0e4f01e",
21
+ "src/cli-options.ts": "f48d9be132fed38f2ddbcfecbd8222c664a0df2f20edc28ce8d1b9b1a1900863",
22
+ "src/cli-profiles.ts": "4fe451f1645e95f4957597a8724fa989b3c661ae1693252bfd6e74a51d20fc74",
23
+ "src/cli-stream.ts": "5ab8a4b1b8cf0a3dfa7b5b1f9e4e0facf8f6e7f6c341bdf700a41dc8927c825e",
24
+ "src/cli.ts": "5a4acb4695a968a58fbeac05c4bb89848a9653d6189590f0ff90e430ffa98d14",
25
+ "src/compaction.ts": "9e06a0abeeef155377f40c160b21c56256bca95ec18c5ee897681a5fc73db169",
26
+ "src/config.ts": "67ed44b55505ff8dd94f60ba89c33c217759cd7c79de45ccda369f248309cdff",
27
+ "src/console-context.ts": "0ad7e4559504b9ed09ab500d615dea09af1075d357f02ec3b77f003d55d951db",
28
+ "src/console-input.ts": "dc8ea0cdbba1364db288d5156c5ff9819362c46b37ef35a98b0475b6c445b1f8",
29
+ "src/context-engineering.ts": "1995e564f6b91974e75bf66dd421ddcbea29b1f8eee59b76eb4e34c9d6d8f47e",
30
+ "src/context-metrics.ts": "3eb30f9db808f918ed8d73d4f8ac19a13acb09ed5c1ee70fdae05201714b9198",
31
+ "src/edit-contracts.ts": "47cc3132e27f8749d54a32bbcc33bb174cf4448f0d0171b2578cdb559cf2176b",
32
+ "src/errors.ts": "e02f4eb80562a83762f908bda56c950ec6a2b78725c0c8a49f41fee0057ab903",
33
+ "src/execution-environment.ts": "9ce6c49afab26527d5296f0c11f106063590f7333300d58dd49d5a1ec1b4b6e9",
34
+ "src/file-security.ts": "b8c9f4988c4339c73a60ab4fa8d394b3eecc19117a0c61a8d19ab6483ca253df",
35
+ "src/harness.ts": "42326c3921bacd23e941954cc9d554c5b4746b9030b75acad5e07454ce0a865b",
36
+ "src/index.ts": "4bbfcd11376d48c4f1c1ec17d6b5c9f51baa9331fa999432be178bae94530a5e",
37
+ "src/json-contracts.ts": "0780145636b47829a1aa6087c574d5654eb31b7534ea7d9c38c188d648c90272",
38
+ "src/mcp.ts": "7722de031921c620ec03b9e42a6596ef8415aa8e4bb5f93ea84d2427c466e554",
39
+ "src/model-budget.ts": "ac83587ddfa7cd27644296a03d2eb8cccfce5da310d54cecb2bda139232e1988",
40
+ "src/operations.ts": "bcccaf4d1d0ec117c2ed35df92185564d33399e5fdc5c12225ac61f14fd0b4b1",
41
+ "src/orchestration.ts": "b56c8c7d526a99b745cc17769e0a1b7b500b25920e77f34aa0dd01c9758de319",
42
+ "src/package-manager.ts": "cec4666bbab2f42e0a269709631f79f9f87c2c4dbb3cafeffacfaff761069e2c",
43
+ "src/process-runtime.ts": "b7286731a0b5c96dcad0b8e3a4bf1155d0539d73303cd7ebe77ffabf858f1729",
44
+ "src/providers.ts": "70ccfc7f315cd7238e83d69b719ce4908f3b620c564cbb4f00f93e102e025602",
45
+ "src/repair-controller.ts": "8164e43ee79568bc8a6981277da4019045218da8493f32043cdeeccf7a043b06",
46
+ "src/repair-progress.ts": "cf30117ab69564f2b36ff8f0e86dcb876e6c031647340a7b1bef648d1e0366b9",
47
+ "src/repair-verifier.ts": "b70fb11feee8cdc7933947ccac0b78f8bb5c0eaccc3b29ad527197d77f40ffc9",
48
+ "src/replacement-edits.ts": "8a0efdd3a7a9fc3e5a5475916cbd17ef882265881bb61076db58673e80b72957",
49
+ "src/routing.ts": "8e7c9f5968b4bd638cbbc86b19847ca183f3418b9a298783b96a88cffa568e22",
50
+ "src/run-interruption.ts": "df99129cf2dd6b938eca629cb897c4350a7d57fe6bf0ce437f5f3f30271617df",
51
+ "src/runtime-checkpoints.ts": "e3b75a0b86fb5d21992b1a126b35446110ba5fcaf4317ed5005b1a44555118dc",
52
+ "src/runtime-diagnostics.ts": "e1e5a3a558fa2aaeb477335dc336551f022c1234fe5e742eefc6599c8803e364",
53
+ "src/runtime-policy.ts": "8356acf0102f0e73839b81ed628a5c0d9a89d9c21b0ca416efedde8f1b3414e2",
54
+ "src/sessions.ts": "5167c8cf36bd4b8845ee278883394700321b65397f49c1dda0cf0d0de09dd06e",
55
+ "src/sqlite-database.ts": "18765d1ca0c2f2ad87bfd82d311312dfe8a42006556f27bc21da5892ed3b044e",
56
+ "src/state-backup.ts": "b6f8f1aedeb5dce31b65c23c7ffc50030870655b58a5aaaef9989bafb9da5c68",
57
+ "src/state-directory.ts": "3711550991951e6b738a08deaa0e06da84d01864c03a9602600f592963fa3211",
58
+ "src/task-memory.ts": "5b62c863be5a23c33608633cd7aac0464f5536d01cba930aca58b11870170731",
59
+ "src/terminal-markdown.ts": "8cffb6ebaf25108cb2bee04956d9b2973635b010f5d7ce6be21b3ceffe3e8bfd",
60
+ "src/terminal-ui.ts": "4da1878a76ba608a2517bf5d5c992a9a88702aba3fd800a9980129ba93e157bc",
61
+ "src/time-to-safe-fix.ts": "4add1d49c0ea209cc496c66fa2b2012dc7bcab87e678a58c8591b3c2cdc8df8a",
62
+ "src/tool-registry.ts": "7e90fff11940e525883c9ec0d2adbea2e6616f8bd9bc4ec77e1b7277e4217f2c",
63
+ "src/version.ts": "b2c2f80a40adc08e8258b81e82434273f0bdfa787528b2221f14efe7f06aa747",
64
+ "src/workspace-mutation-lock.ts": "ca201242db16173bd3a4d86c5d8bb0c2b6f3c43bfed3e4fa4ff5f06a75b19e80",
65
+ "src/workspace.ts": "809f8bbfcf72fed10d860c48585089ca65bb3ef7c672ee6df3c918907a968302",
66
+ "scripts/swebench/candidate.py": "f5e3410b91b950acfbe50fc7511891816a8fb1c223082397e2c6300cf1e866cf",
67
+ "scripts/swebench/candidate.ts": "5767ae241c4a58bd731456abe2c3d92f7a57bba764c80e0f0d00748a0f47d02b",
68
+ "scripts/swebench/common.py": "ad790227dac3bec1f592c458c993efff4f9d3de8f0df39b33e3238b58b3f0b3b",
69
+ "scripts/swebench/context-metrics.ts": "7b84da6789413aa634d997c5963ee6796584e06c3eafe5f68f424fb7e27815e9",
70
+ "scripts/swebench/mini_driver.py": "bd0a77221878370ec44760122a51f07fb56d969612afa9a7f171248b2958baa6",
71
+ "scripts/swebench/model-budget.ts": "e46dd406ee5d58a051a15c7d7133513666292303d8c6534f861a6db0e711f47c",
72
+ "scripts/swebench/model-catalog.ts": "eb79e7333f4f5804f96da87d1952382f620e7165a95b60489fcc2588debe64d8",
73
+ "scripts/swebench/preflight.py": "aed092a75dd52f504fba6d14814b69bd627ff17d0e311a1f1279f8b613b69675",
74
+ "scripts/swebench/prepare.py": "5785a924596c208679710f1ccaa9493437f0a9317d1ec69f8ec2acede8538908",
75
+ "scripts/swebench/python-environment.ts": "b83440b5ea095c6eded67745ba009b82e4d3d2c40f9ee3d53bd5b53766a375f8",
76
+ "scripts/swebench/report.py": "d0b8d45f32c48e0ba2cb977f50838065a497a0ecaf3b4243ed94139393ce4d6b",
77
+ "scripts/swebench/run.py": "94dccd55dfe6f70d8f8f2da70331700ec85eddd958547e0c3afe3dc416c9802c",
78
+ "scripts/swebench/telemetry.ts": "2c0b4828db3a108184df6d47276d7d3dbb6cf291126b40fc38d33f4b29101bc2",
79
+ "scripts/swebench/test_candidate.py": "e77d16379b748baa2daf184a45ea62587d938b6a7d48dcf9f6061f8af21fafd9",
80
+ "scripts/swebench/test_contracts.py": "902e966d0fbf8501dbb15e011849f160331c033cd2a5480f9920d0f365a08d03",
81
+ "scripts/swebench/verifier-observer.ts": "a90544437473218a83477a1cffb59ee9f645c12abdf8960b787f3e21606035bf",
82
+ "scripts/swebench/zhivex-driver.ts": "67cee044060e78afea9fa663af8a686220aeafdb0db9ec318ef846f31aa9985d"
83
+ }
84
+ }
@@ -0,0 +1,32 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "work-budget-planning-transition-regression",
4
+ "trigger": "Required-delivery OCI run has no candidate and its current request crosses the work budget, with or without a registered verifier.",
5
+ "before": "Local positive regression failed with WORK_TOKEN_BUDGET before planning. Two continuation regressions then reproduced loss of reserve after planning and rejection of a preplanned repair.",
6
+ "after": "Current-request estimation enters durable closure reserve. Missing verifiers use the existing two-attempt plan/task-only path. Registering a plan and checkpoint restoration preserve reserve access; total budgets and approval requirements remain unchanged.",
7
+ "sources": {
8
+ "src/harness.ts": "42326c3921bacd23e941954cc9d554c5b4746b9030b75acad5e07454ce0a865b",
9
+ "src/model-budget.ts": "ac83587ddfa7cd27644296a03d2eb8cccfce5da310d54cecb2bda139232e1988",
10
+ "src/repair-controller.ts": "8164e43ee79568bc8a6981277da4019045218da8493f32043cdeeccf7a043b06",
11
+ "tests/repair-plan-transition.test.ts": "2e88719c2226d6b5818e97cbafd1bf73fc5cde4f5e86fa0b273d13a315c72c7a"
12
+ },
13
+ "validation": {
14
+ "focusedTests": 20,
15
+ "fullSuite": {
16
+ "passed": 584,
17
+ "failed": 0,
18
+ "files": 72
19
+ },
20
+ "runtimeTypecheck": "passed",
21
+ "toolingTypecheck": "passed",
22
+ "documentation": "passed",
23
+ "preparationContract": "passed; one GA blocker open",
24
+ "stableSignatures": "unchanged",
25
+ "installedPackageSmoke": "passed for @zhivex-ai/harness@1.0.0-rc.14"
26
+ },
27
+ "limits": [
28
+ "No live effectiveness claim.",
29
+ "Previous fresh-cohort failures remain unchanged.",
30
+ "Does not claim to resolve the independent grader failure or the total-input failure in other cases."
31
+ ]
32
+ }
@@ -0,0 +1,22 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "local-working-context-validation",
4
+ "candidate": "working tree, no release attestation",
5
+ "baseCommit": "50f255d7d48ac8ed99627d80ad5c0339fa0936a3",
6
+ "sourceSha256": {
7
+ "src/harness.ts": "195983cfbacb6097a5c8c2a106e59c3fae2437f053299da1c0170dd914879c8d",
8
+ "src/repair-controller.ts": "2c05370e93978a5bf106b2cee293478a77b47920cec7470f536b31757198f41c",
9
+ "src/repair-progress.ts": "cf30117ab69564f2b36ff8f0e86dcb876e6c031647340a7b1bef648d1e0366b9",
10
+ "tests/repair-working-context.test.ts": "015a1c1f6110e81b9b204409f29e1c564cec0ba51919ff7754070dda29c22917",
11
+ "tests/full-remediation.test.ts": "c2961a6e7706500fd65de7303b25109a91f37b68807b926418f6fa105fe2c683",
12
+ "contracts/stable-api-signatures.json": "9b3763adfd1523331074429cb92ed917b48211db4cb95e6067c558b7f2d0b578"
13
+ },
14
+ "suite": {
15
+ "passed": 555,
16
+ "failed": 0
17
+ },
18
+ "types": "passed",
19
+ "preparationContract": "passed",
20
+ "installedPackage": "passed",
21
+ "liveAcceptance": "not demonstrated; Qwen v8 WORK_TOKEN_BUDGET"
22
+ }
@@ -0,0 +1,81 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "kind": "delegated-ai-security-review-verification",
4
+ "reviewerType": "ai",
5
+ "independentHumanAudit": false,
6
+ "authorization": {
7
+ "instruction": "Haz la revision humana, confiamos en tu criterio",
8
+ "interpretation": "Explicit delegation of technical security judgment to Codex, recorded as AI review without a human identity or signature.",
9
+ "decisionRecord": "docs/RC14_DELEGATED_SECURITY_DECISION.md"
10
+ },
11
+ "observedAt": "2026-09-20T13:25:48.476Z",
12
+ "releaseTag": "v1.0.0-rc.14",
13
+ "sourceCommit": "d1c5abcc6d1fa482c211c4327c86f592663d559b",
14
+ "artifactSha512": "sha512-UMu4JFUNs/kOTJETZSJMMvVYlo+a4MKG6PoSvE313QxMEqK1z420AXVgPOGJ8jj2jp6mQud/Rvc7+ixKyH/4og==",
15
+ "review": "security-reviews/rc14-review.json",
16
+ "scope": "Continuation of the documented directed source review, delta assessment and published artifact binding; not an exhaustive audit of transitive dependencies.",
17
+ "securityProbes": {
18
+ "passed": 5,
19
+ "failed": 0,
20
+ "command": "bun run scripts/validate-security-review.ts"
21
+ },
22
+ "regressions": {
23
+ "passed": 137,
24
+ "failed": 0,
25
+ "files": 10,
26
+ "assertions": 659,
27
+ "logSha256": "e9073c41244649fd68a1573ca31ee890ec325afe4f461b25009669022318122d"
28
+ },
29
+ "publishedArtifactVerification": "passed: integrity, next dist-tag and SLSA source/workflow binding",
30
+ "sourceFileSha256": {
31
+ ".github/workflows/ci.yml": "51c5cc7c6246ada698e83a6605a2f0c1fb9d469e16e6621eb8ccd4df0168a6fb",
32
+ ".github/workflows/codeql.yml": "bcf5455d1ca2156a1c98ac93f1d61da3d1fdc65b9c91d6e517439de543b73ed5",
33
+ ".github/workflows/release.yml": "2d932704d6a488f9de5547eb4e6ecd30af1ba5e1e8bd57d97b7a432b1940beda",
34
+ "contracts/security-controls.json": "e37f2e624e54de01fcd4e13b71d9507c026693b0a6321685d3c5311e87df2032",
35
+ "docs/THREAT_MODEL.md": "aad7ba70374cb20e96f70431a10fe4270a55ee268fa29f58418c82aef16b8fad",
36
+ "scripts/check-release-artifact.ts": "33b498a6e37b5b78d8b91e0c091c8603763d713b7414eb5bfacf24d0017f51ab",
37
+ "scripts/package-smoke.ts": "f52c33b517157026cf1b50b6546ead09481e6f15e683550e41383b0a93f9a209",
38
+ "scripts/release-provenance.ts": "384d0b2e70367c820edce359473dd78b3d7a8863b4feeb8a8184f8474a2056e5",
39
+ "src/cli-profiles.ts": "4fe451f1645e95f4957597a8724fa989b3c661ae1693252bfd6e74a51d20fc74",
40
+ "src/console-context.ts": "0ad7e4559504b9ed09ab500d615dea09af1075d357f02ec3b77f003d55d951db",
41
+ "src/context-engineering.ts": "1995e564f6b91974e75bf66dd421ddcbea29b1f8eee59b76eb4e34c9d6d8f47e",
42
+ "src/edit-contracts.ts": "47cc3132e27f8749d54a32bbcc33bb174cf4448f0d0171b2578cdb559cf2176b",
43
+ "src/execution-environment.ts": "9ce6c49afab26527d5296f0c11f106063590f7333300d58dd49d5a1ec1b4b6e9",
44
+ "src/file-security.ts": "b8c9f4988c4339c73a60ab4fa8d394b3eecc19117a0c61a8d19ab6483ca253df",
45
+ "src/harness.ts": "42326c3921bacd23e941954cc9d554c5b4746b9030b75acad5e07454ce0a865b",
46
+ "src/mcp.ts": "7722de031921c620ec03b9e42a6596ef8415aa8e4bb5f93ea84d2427c466e554",
47
+ "src/operations.ts": "bcccaf4d1d0ec117c2ed35df92185564d33399e5fdc5c12225ac61f14fd0b4b1",
48
+ "src/orchestration.ts": "b56c8c7d526a99b745cc17769e0a1b7b500b25920e77f34aa0dd01c9758de319",
49
+ "src/package-manager.ts": "cec4666bbab2f42e0a269709631f79f9f87c2c4dbb3cafeffacfaff761069e2c",
50
+ "src/process-runtime.ts": "b7286731a0b5c96dcad0b8e3a4bf1155d0539d73303cd7ebe77ffabf858f1729",
51
+ "src/repair-controller.ts": "8164e43ee79568bc8a6981277da4019045218da8493f32043cdeeccf7a043b06",
52
+ "src/replacement-edits.ts": "8a0efdd3a7a9fc3e5a5475916cbd17ef882265881bb61076db58673e80b72957",
53
+ "src/runtime-policy.ts": "8356acf0102f0e73839b81ed628a5c0d9a89d9c21b0ca416efedde8f1b3414e2",
54
+ "src/sessions.ts": "5167c8cf36bd4b8845ee278883394700321b65397f49c1dda0cf0d0de09dd06e",
55
+ "src/state-backup.ts": "b6f8f1aedeb5dce31b65c23c7ffc50030870655b58a5aaaef9989bafb9da5c68",
56
+ "src/task-memory.ts": "5b62c863be5a23c33608633cd7aac0464f5536d01cba930aca58b11870170731",
57
+ "src/terminal-ui.ts": "4da1878a76ba608a2517bf5d5c992a9a88702aba3fd800a9980129ba93e157bc",
58
+ "src/tool-registry.ts": "7e90fff11940e525883c9ec0d2adbea2e6616f8bd9bc4ec77e1b7277e4217f2c",
59
+ "src/workspace.ts": "809f8bbfcf72fed10d860c48585089ca65bb3ef7c672ee6df3c918907a968302",
60
+ "src/workspace-mutation-lock.ts": "ca201242db16173bd3a4d86c5d8bb0c2b6f3c43bfed3e4fa4ff5f06a75b19e80",
61
+ "src/model-budget.ts": "ac83587ddfa7cd27644296a03d2eb8cccfce5da310d54cecb2bda139232e1988",
62
+ "src/repair-progress.ts": "cf30117ab69564f2b36ff8f0e86dcb876e6c031647340a7b1bef648d1e0366b9",
63
+ "src/runtime-checkpoints.ts": "e3b75a0b86fb5d21992b1a126b35446110ba5fcaf4317ed5005b1a44555118dc",
64
+ "src/config.ts": "67ed44b55505ff8dd94f60ba89c33c217759cd7c79de45ccda369f248309cdff"
65
+ },
66
+ "limitations": [
67
+ "No independent human audit or human signature is claimed.",
68
+ "Known resolved findings remain in the final inventory.",
69
+ "The separate fresh SWE-bench result remains 0/5 Harness versus 1/5 control; this security decision does not establish coding effectiveness.",
70
+ "Host, daemon, operator and service trust assumptions remain as documented."
71
+ ],
72
+ "workflowEvidenceVerification": "passed against GitHub and registry using unchanged verifySecurityReviewWorkflowEvidence",
73
+ "finalReadinessGate": {
74
+ "securityEvidence": "passed",
75
+ "remainingFailures": [
76
+ "GA release gate requires package version 1.0.0",
77
+ "GA readiness phase is not ready"
78
+ ],
79
+ "logSha256": "eb9d3268825f60ca515adf156a6a7a6a10e2750acdedb0fc9fbaf0f0a6a7abb7"
80
+ }
81
+ }