agentfootprint 10.1.0 → 10.2.0

package/dist/esm/core/agent/findings/verificationRow.d.ts

@@ -0,0 +1,16 @@
+import type { ResultIdentity } from '../../../integrity/claim-binding/types.js';
+import { type ClaimVerificationRow } from './verificationTypes.js';
+/** Reuse receipt bounds; declared values have the compact binding-request cap. */
+export declare const VERIFICATION_LIMITS: Readonly<{
+    rowBytes: number;
+    valueBytes: 8192;
+    identityText: number;
+}>;
+/** A runtime-reserved claim occurrence cannot collide with a result occurrence. */
+export declare function claimIdentityOf(raw: ResultIdentity): string;
+/** Canonical claim tuple reader, shared with checkpoint lineage/counter checks. */
+export declare function readClaimIdentity(value: unknown): ResultIdentity;
+/** Validate the recorded protocol without evaluating whether its value agrees. */
+export declare function readClaimVerificationRow(raw: unknown): ClaimVerificationRow;
+/** Non-throwing checkpoint union guard; admission uses the same strict reader. */
+export declare function isClaimVerificationRow(raw: unknown): raw is ClaimVerificationRow;

package/dist/esm/core/agent/findings/verificationRow.js

@@ -0,0 +1,174 @@
+/**
+ * Strict saved claim-verification protocol. Role: validate and detach a recorded
+ * check, never reconstruct evidence or rerun its checker. Storage authenticity
+ * and caller authorization are the surrounding checkpoint owner's responsibility.
+ */
+import { copyJson, ownData } from '../../../lib/boundedJson.js';
+import { canonicalJson } from '../../../lib/canonicalJson.js';
+import { decodePresentIdentityField, encodeIdentityField, } from '../../../memory/identity/encode.js';
+import { comparableValueOf, participates } from '../../../integrity/assertion/types.js';
+import { BINDING_LIMITS, boundedText } from '../../../integrity/claim-binding/scope.js';
+import { validateCoverage } from '../../../integrity/claim-binding/admit.js';
+import { readResultIdentity } from '../../../integrity/claim-binding/capture.js';
+import { periodProblem } from '../coverage/period.js';
+import { STANDING_VALUES } from './types.js';
+import { VERIFICATION_UNVERIFIED_REASONS } from './verificationTypes.js';
+/** Reuse receipt bounds; declared values have the compact binding-request cap. */
+export const VERIFICATION_LIMITS = Object.freeze({
+    rowBytes: BINDING_LIMITS.resultBytes,
+    valueBytes: BINDING_LIMITS.scopeBytes,
+    identityText: BINDING_LIMITS.resultIdText + 'claim-verification'.length - 'claim-result'.length,
+});
+/** A runtime-reserved claim occurrence cannot collide with a result occurrence. */
+export function claimIdentityOf(raw) {
+    const identity = ownData(raw, ['namespace', 'runId', 'ordinal']);
+    if (!boundedText(identity.namespace) ||
+        !boundedText(identity.runId) ||
+        typeof identity.ordinal !== 'number' ||
+        !Number.isSafeInteger(identity.ordinal) ||
+        identity.ordinal < 1)
+        throw new TypeError('Invalid runtime claim identity.');
+    return `claim-verification/${encodeIdentityField(identity.namespace)}/${encodeIdentityField(identity.runId)}/${identity.ordinal}`;
+}
+/** Canonical claim tuple reader, shared with checkpoint lineage/counter checks. */
+export function readClaimIdentity(value) {
+    if (typeof value !== 'string' || value.length > VERIFICATION_LIMITS.identityText)
+        throw new TypeError('Invalid saved claim identity.');
+    const parts = value.split('/');
+    if (parts.length !== 4 || parts[0] !== 'claim-verification')
+        throw new TypeError('Invalid saved claim identity.');
+    const identity = {
+        namespace: decodePresentIdentityField(parts[1]),
+        runId: decodePresentIdentityField(parts[2]),
+        ordinal: Number(parts[3]),
+    };
+    if (value !== claimIdentityOf(identity))
+        throw new TypeError('Noncanonical saved claim identity.');
+    return Object.freeze(identity);
+}
+function integer(value, minimum) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;
+}
+function eligibleAssertion(raw) {
+    const assertion = ownData(raw, ['subject', 'predicate', 'value', 'stratum', 'provenance']);
+    const subject = ownData(assertion.subject, ['kind', 'id']);
+    const comparable = comparableValueOf(assertion.value);
+    if (subject.kind !== 'entity' ||
+        !boundedText(subject.id) ||
+        !boundedText(assertion.predicate) ||
+        assertion.stratum !== 'asserted' ||
+        typeof assertion.provenance !== 'string' ||
+        !Object.hasOwn(assertion, 'value') ||
+        !participates(assertion.value) ||
+        comparable === null ||
+        comparable === undefined ||
+        comparable === 'unknown')
+        throw new TypeError('Invalid eligible assertion.');
+    return assertion;
+}
+function validateResolved(row, claimIdentity) {
+    const resolved = ownData(row.resolved, [
+        'resultId',
+        'rule',
+        'scope',
+        'coverage',
+        'period',
+        'evidence',
+        'claim',
+    ]);
+    const rule = ownData(resolved.rule, ['id', 'version']);
+    const scope = ownData(copyJson(resolved.scope, BINDING_LIMITS.scopeBytes, true));
+    const resultIdentity = readResultIdentity(resolved.resultId);
+    if (resultIdentity.namespace !== claimIdentity.namespace ||
+        resolved.resultId !== row.declaredResult ||
+        !boundedText(rule.id) ||
+        rule.id !== row.declaredRule ||
+        !boundedText(rule.version) ||
+        Object.keys(scope).length === 0 ||
+        Object.keys(scope).length > BINDING_LIMITS.dimensions ||
+        !Object.keys(scope).every(boundedText))
+        throw new TypeError('Invalid verification association.');
+    validateCoverage(resolved.coverage);
+    if (Object.hasOwn(resolved, 'period') && periodProblem(resolved.period, 'camel') !== undefined)
+        throw new TypeError('Invalid verification period.');
+    const evidence = eligibleAssertion(resolved.evidence);
+    const claim = eligibleAssertion(resolved.claim);
+    if (canonicalJson(evidence.subject) !== canonicalJson(claim.subject) ||
+        evidence.predicate !== claim.predicate ||
+        evidence.provenance !== `result ${resolved.resultId}` ||
+        claim.provenance !== `rule ${rule.id}` ||
+        canonicalJson(claim.value) !== canonicalJson(row.declaredValue))
+        throw new TypeError('Invalid verification pair association.');
+}
+/** Validate the recorded protocol without evaluating whether its value agrees. */
+export function readClaimVerificationRow(raw) {
+    const detached = copyJson(raw, VERIFICATION_LIMITS.rowBytes, true);
+    const row = ownData(detached, [
+        'kind',
+        'claimId',
+        'declaredOn',
+        'standing',
+        'iteration',
+        'turn',
+        'checker',
+        'declaredResult',
+        'declaredRule',
+        'declaredValue',
+        'outcome',
+        'reason',
+        'resolved',
+    ]);
+    const checker = ownData(row.checker, ['id', 'version']);
+    const claimIdentity = readClaimIdentity(row.claimId);
+    if (row.kind !== 'claim-verification' ||
+        typeof row.standing !== 'string' ||
+        !STANDING_VALUES.includes(row.standing) ||
+        !integer(row.iteration, 0) ||
+        (Object.hasOwn(row, 'turn') && !integer(row.turn, 1)) ||
+        checker.id !== 'claim-pair' ||
+        checker.version !== 1 ||
+        !Object.hasOwn(row, 'declaredValue') ||
+        (Object.hasOwn(row, 'declaredResult') &&
+            (typeof row.declaredResult !== 'string' ||
+                row.declaredResult.length > BINDING_LIMITS.resultIdText)) ||
+        (Object.hasOwn(row, 'declaredRule') && !boundedText(row.declaredRule)))
+        throw new TypeError('Invalid claim-verification row.');
+    copyJson(row.declaredValue, VERIFICATION_LIMITS.valueBytes, true);
+    if (row.declaredOn !== 'answer') {
+        const at = ownData(row.declaredOn, ['toolCallId']);
+        if (!boundedText(at.toolCallId))
+            throw new TypeError('Invalid claim declaration location.');
+    }
+    if (row.outcome === 'unverified') {
+        if (typeof row.reason !== 'string' ||
+            !VERIFICATION_UNVERIFIED_REASONS.includes(row.reason) ||
+            Object.hasOwn(row, 'resolved') ||
+            (row.standing === 'noise' && row.reason !== 'ineligible-noise') ||
+            (row.reason === 'ineligible-noise' && row.standing !== 'noise') ||
+            (row.reason === 'missing-check' && Object.hasOwn(row, 'declaredRule')) ||
+            (!['missing-check', 'malformed-check', 'ineligible-noise'].includes(row.reason) &&
+                (!Object.hasOwn(row, 'declaredRule') ||
+                    (row.reason !== 'missing-result' && !Object.hasOwn(row, 'declaredResult')))))
+            throw new TypeError('Invalid unverified claim row.');
+    }
+    else {
+        if (row.standing === 'noise' ||
+            !((row.outcome === 'supported' &&
+                (row.reason === 'no-conflict' || row.reason === 'numeric-leniency')) ||
+                (row.outcome === 'contradicted' && row.reason === 'conflict')))
+            throw new TypeError('Invalid compared claim row.');
+        validateResolved(row, claimIdentity);
+    }
+    return detached;
+}
+/** Non-throwing checkpoint union guard; admission uses the same strict reader. */
+export function isClaimVerificationRow(raw) {
+    try {
+        readClaimVerificationRow(raw);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=verificationRow.js.map

package/dist/esm/core/agent/findings/verificationRow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationRow.js","sourceRoot":"","sources":["../../../../../src/core/agent/findings/verificationRow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAExF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,+BAA+B,EAA6B,MAAM,wBAAwB,CAAC;AAEpG,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,cAAc,CAAC,WAAW;IACpC,UAAU,EAAE,cAAc,CAAC,UAAU;IACrC,YAAY,EAAE,cAAc,CAAC,YAAY,GAAG,oBAAoB,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM;CAChG,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAAmB;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,IACE,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAEpB,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,OAAO,sBAAsB,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,mBAAmB,CACzF,QAAQ,CAAC,KAAK,CACf,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,CAAC,YAAY;QAC9E,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,oBAAoB;QACzD,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,KAAK,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;IACF,IAAI,KAAK,KAAK,eAAe,CAAC,QAAQ,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ;QACzB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC;QACjC,SAAS,CAAC,OAAO,KAAK,UAAU;QAChC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;QACxC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QAClC,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC;QAC9B,UAAU,KAAK,IAAI;QACnB,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,SAAS;QAExB,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA4B,EAAE,aAA6B;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;QACrC,UAAU;QACV,MAAM;QACN,OAAO;QACP,UAAU;QACV,QAAQ;QACR,UAAU;QACV,OAAO;KACR,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,IACE,cAAc,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS;QACpD,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,cAAc;QACxC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,YAAY;QAC5B,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,UAAU;QACrD,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QAEtC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS;QAC5F,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,IACE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAChE,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACtC,QAAQ,CAAC,UAAU,KAAK,UAAU,QAAQ,CAAC,QAAQ,EAAE;QACrD,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAE,EAAE;QACtC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;QAE/D,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;AAClE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE;QAC5B,MAAM;QACN,SAAS;QACT,YAAY;QACZ,UAAU;QACV,WAAW;QACX,MAAM;QACN,SAAS;QACT,gBAAgB;QAChB,cAAc;QACd,eAAe;QACf,SAAS;QACT,QAAQ;QACR,UAAU;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,IAAI,KAAK,oBAAoB;QACjC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,CAAE,eAAqC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9D,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1B,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,EAAE,KAAK,YAAY;QAC3B,OAAO,CAAC,OAAO,KAAK,CAAC;QACrB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC;QACpC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC;YACnC,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;gBACrC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEtE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACjC,IACE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,CAAE,+BAAqD,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC;YAC9B,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,CAAC;YAC/D,CAAC,GAAG,CAAC,MAAM,KAAK,kBAAkB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC/D,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;oBAClC,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAEhF,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,CAAC,CACC,CAAC,GAAG,CAAC,OAAO,KAAK,WAAW;gBAC1B,CAAC,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;gBACtE,CAAC,GAAG,CAAC,OAAO,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAC9D;YAED,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAgC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,CAAC;QACH,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/findings/verificationState.d.ts

@@ -0,0 +1,39 @@
+import type { EvidenceSnapshot, ResultEvidence, ResultIdentity } from '../../../integrity/claim-binding/types.js';
+export interface ClaimVerificationState {
+    readonly version: 1;
+    readonly evidence: EvidenceSnapshot;
+    readonly nextResultOrdinal: number;
+    readonly nextClaimOrdinal: number;
+    /** Sticky refusal: older receipts remain; later evidence is not substituted. */
+    readonly limited?: true;
+}
+/**
+ * Read only after the checkpoint's owner/namespace authority is established.
+ * The caller MUST derive largestClaimOrdinal from its validated claim rows;
+ * this carrier does not contain those rows and cannot infer their maximum.
+ * Stage commits clone changed state. At entry, admit the tracked raw value
+ * and publish this detached carrier before the batch; subsequent raw reads
+ * can reuse its immutable evidence. A live scope proxy is not that identity.
+ */
+export declare function readVerificationState(raw: unknown, largestClaimOrdinal: number): ClaimVerificationState;
+/** Called only when opted in. No randomness is consumed at module load. */
+export declare function createVerificationState(runId: string, namespaceSource?: () => string): ClaimVerificationState;
+/** A resume keeps its namespace/counters, including when a process reuses runId. */
+export declare function continueVerificationState(state: ClaimVerificationState, runId: string): ClaimVerificationState;
+/** Publish the returned state before awaiting execution, even if it later fails. */
+export declare function reserveResultIdentity(state: ClaimVerificationState, runId: string): {
+    readonly state: ClaimVerificationState;
+    readonly identity: ResultIdentity;
+    readonly id: string;
+};
+/** One occurrence, not a text key. The caller publishes state before evaluation. */
+export declare function reserveClaimIdentity(state: ClaimVerificationState, runId: string): {
+    readonly state: ClaimVerificationState;
+    readonly ordinal: number;
+    readonly id: string;
+};
+/**
+ * Retain only a finalized, previously reserved receipt. Capacity refusal is
+ * sticky and never replaces an earlier result; the writer reports the limit.
+ */
+export declare function retainVerificationEvidence(state: ClaimVerificationState, receipt: ResultEvidence): ClaimVerificationState;

package/dist/esm/core/agent/findings/verificationState.js

@@ -0,0 +1,143 @@
+/**
+ * Private, immutable evidence carrier for the explicit findings verifier.
+ * Role: reservation and bounded retention; no schema, events or Agent wiring.
+ * The checkpoint owner authenticates provenance and supplies the ledger's
+ * largest claim ordinal. Shape validation alone never authorizes a record.
+ */
+import { appendEvidenceSnapshot, readEvidenceSnapshot, } from '../../../integrity/claim-binding/admit.js';
+import { resultIdentityOf } from '../../../integrity/claim-binding/capture.js';
+import { BINDING_LIMITS, boundedText } from '../../../integrity/claim-binding/scope.js';
+import { ownData } from '../../../lib/boundedJson.js';
+import { claimIdentityOf } from './verificationRow.js';
+const positiveOrdinal = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+/**
+ * Read only after the checkpoint's owner/namespace authority is established.
+ * The caller MUST derive largestClaimOrdinal from its validated claim rows;
+ * this carrier does not contain those rows and cannot infer their maximum.
+ * Stage commits clone changed state. At entry, admit the tracked raw value
+ * and publish this detached carrier before the batch; subsequent raw reads
+ * can reuse its immutable evidence. A live scope proxy is not that identity.
+ */
+export function readVerificationState(raw, largestClaimOrdinal) {
+    const source = ownData(raw, [
+        'version',
+        'evidence',
+        'nextResultOrdinal',
+        'nextClaimOrdinal',
+        'limited',
+    ]);
+    if (source.version !== 1 ||
+        !positiveOrdinal(source.nextResultOrdinal) ||
+        !positiveOrdinal(source.nextClaimOrdinal) ||
+        !Number.isSafeInteger(largestClaimOrdinal) ||
+        largestClaimOrdinal < 0 ||
+        source.nextClaimOrdinal <= largestClaimOrdinal ||
+        (Object.hasOwn(source, 'limited') && source.limited !== true))
+        throw new Error('Invalid findings verification carrier.');
+    const evidence = readEvidenceSnapshot(source.evidence);
+    if (evidence.runIds.length === 0)
+        throw new Error('Verification carrier requires its recorded run lineage.');
+    const ordinals = new Set();
+    for (const result of evidence.results) {
+        if (result.identity.namespace !== evidence.namespace ||
+            !evidence.runIds.includes(result.identity.runId) ||
+            result.identity.ordinal >= source.nextResultOrdinal ||
+            ordinals.has(result.identity.ordinal))
+            throw new Error('Invalid verification receipt lineage or ordinal.');
+        ordinals.add(result.identity.ordinal);
+    }
+    return Object.freeze({
+        version: 1,
+        evidence,
+        nextResultOrdinal: source.nextResultOrdinal,
+        nextClaimOrdinal: source.nextClaimOrdinal,
+        ...(source.limited === true && { limited: true }),
+    });
+}
+/** Called only when opted in. No randomness is consumed at module load. */
+export function createVerificationState(runId, namespaceSource = () => globalThis.crypto.randomUUID()) {
+    const namespace = namespaceSource();
+    if (!boundedText(runId) || !boundedText(namespace))
+        throw new Error('Invalid verification recording identity.');
+    return readVerificationState({
+        version: 1,
+        evidence: { version: 1, namespace, runIds: [runId], results: [] },
+        nextResultOrdinal: 1,
+        nextClaimOrdinal: 1,
+    }, 0);
+}
+const limited = (state) => state.limited === true ? state : Object.freeze({ ...state, limited: true });
+/** A resume keeps its namespace/counters, including when a process reuses runId. */
+export function continueVerificationState(state, runId) {
+    if (!boundedText(runId))
+        throw new Error('Invalid verification run identity.');
+    if (state.evidence.runIds.includes(runId))
+        return state;
+    if (state.evidence.runIds.length >= BINDING_LIMITS.results)
+        throw new Error('Verification run lineage capacity exhausted.');
+    try {
+        const evidence = readEvidenceSnapshot({
+            ...state.evidence,
+            runIds: [...state.evidence.runIds, runId],
+        });
+        return Object.freeze({ ...state, evidence });
+    }
+    catch {
+        // Identity cannot be reserved for an unrecorded run. The input is an
+        // admitted carrier; adding one bounded run can exceed only its budget.
+        // Refuse this continuation rather than evicting old lineage or evidence.
+        throw new Error('Verification run lineage capacity exhausted.');
+    }
+}
+/** Publish the returned state before awaiting execution, even if it later fails. */
+export function reserveResultIdentity(state, runId) {
+    state = continueVerificationState(state, runId);
+    const ordinal = state.nextResultOrdinal;
+    if (!positiveOrdinal(ordinal) || ordinal === Number.MAX_SAFE_INTEGER)
+        throw new Error('Verification result identity capacity exhausted.');
+    const identity = Object.freeze({ namespace: state.evidence.namespace, runId, ordinal });
+    return Object.freeze({
+        state: Object.freeze({ ...state, nextResultOrdinal: ordinal + 1 }),
+        identity,
+        id: resultIdentityOf(identity),
+    });
+}
+/** One occurrence, not a text key. The caller publishes state before evaluation. */
+export function reserveClaimIdentity(state, runId) {
+    state = continueVerificationState(state, runId);
+    const ordinal = state.nextClaimOrdinal;
+    if (!positiveOrdinal(ordinal) || ordinal === Number.MAX_SAFE_INTEGER)
+        throw new Error('Verification claim identity capacity exhausted.');
+    return Object.freeze({
+        state: Object.freeze({ ...state, nextClaimOrdinal: ordinal + 1 }),
+        ordinal,
+        id: claimIdentityOf({ namespace: state.evidence.namespace, runId, ordinal }),
+    });
+}
+/**
+ * Retain only a finalized, previously reserved receipt. Capacity refusal is
+ * sticky and never replaces an earlier result; the writer reports the limit.
+ */
+export function retainVerificationEvidence(state, receipt) {
+    if (state.limited === true)
+        return state;
+    const singleton = readEvidenceSnapshot({ ...state.evidence, results: [receipt] });
+    const admitted = singleton.results[0];
+    if (admitted.identity.namespace !== state.evidence.namespace ||
+        !state.evidence.runIds.includes(admitted.identity.runId) ||
+        admitted.identity.ordinal >= state.nextResultOrdinal ||
+        state.evidence.results.some((prior) => prior.identity.ordinal === admitted.identity.ordinal))
+        throw new Error('Verification receipt was not uniquely reserved in this recording.');
+    if (state.evidence.results.length >= BINDING_LIMITS.results)
+        return limited(state);
+    try {
+        const evidence = appendEvidenceSnapshot(state.evidence, singleton);
+        return Object.freeze({ ...state, evidence });
+    }
+    catch {
+        // Both the carrier and individual receipt were already admitted. Their
+        // combined bytes exceed the snapshot cap; preserve the earlier snapshot.
+        return limited(state);
+    }
+}
+//# sourceMappingURL=verificationState.js.map

package/dist/esm/core/agent/findings/verificationState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationState.js","sourceRoot":"","sources":["../../../../../src/core/agent/findings/verificationState.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAMxF,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAWvD,MAAM,eAAe,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC1D,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAY,EACZ,mBAA2B;IAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,SAAS;QACT,UAAU;QACV,mBAAmB;QACnB,kBAAkB;QAClB,SAAS;KACV,CAAC,CAAC;IACH,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1C,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACzC,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;QAC1C,mBAAmB,GAAG,CAAC;QACvB,MAAM,CAAC,gBAAgB,IAAI,mBAAmB;QAC9C,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;QAE7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IACE,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAChD,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB;YACnD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAErC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ;QACR,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,kBAAgC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;IAEpE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAC1B;QACE,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACjE,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;KACpB,EACD,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAA6B,EAA0B,EAAE,CACxE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9E,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CACvC,KAA6B,EAC7B,KAAa;IAEb,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO;QACxD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,GAAG,KAAK,CAAC,QAAQ;YACjB,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,KAA6B,EAC7B,KAAa;IAMb,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACxC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,gBAAgB;QAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QAClE,QAAQ;QACR,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAClC,KAA6B,EAC7B,KAAa;IAEb,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,gBAAgB;QAClE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO;QACP,EAAE,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KAC7E,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAA6B,EAC7B,OAAuB;IAEvB,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,oBAAoB,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS;QACxD,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,iBAAiB;QACpD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAE5F,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/findings/verificationTypes.d.ts

@@ -0,0 +1,55 @@
+import type { ClaimBinding } from '../../../integrity/claim-binding/types.js';
+import type { ClaimPairEvaluation } from '../../../integrity/unsupported-claim/evaluate.js';
+import type { DeclaredOn, Standing } from './types.js';
+export declare const VERIFICATION_UNVERIFIED_REASONS: readonly ["invalid-claim", "unknown-rule", "invalid-rule", "missing-result", "ambiguous-result", "foreign-result", "incomplete-result", "withheld-evidence", "unassociated-result", "invalid-evidence", "missing-scope", "scope-mismatch", "scope-version-mismatch", "missing-fact", "ambiguous-fact", "unasserted-value", "coverage-undeclared", "coverage-partial", "coverage-unknown", "coverage-stale", "missing-check", "malformed-check", "ineligible-noise", "assertion-mismatch", "retention-limit", "evidence-unavailable", "claim-nonparticipating", "doubt-against-value", "both-doubt"];
+export type ClaimVerificationUnverifiedReason = (typeof VERIFICATION_UNVERIFIED_REASONS)[number];
+export type ClaimVerificationReason = ClaimVerificationUnverifiedReason | ClaimPairEvaluation;
+/** The model may cite a rule, never provide scope or resolved evidence. */
+export interface FindingClaimRequest {
+    readonly value: unknown;
+    readonly check?: {
+        readonly rule: string;
+    };
+}
+/** A legacy full assertion adds identity, not authority to choose evidence. */
+export interface FullFindingClaimRequest extends FindingClaimRequest {
+    readonly subject: {
+        readonly kind: string;
+        readonly id: string;
+    };
+    readonly predicate: string;
+}
+export type ClaimVerificationAssociation = Omit<Extract<ClaimBinding, {
+    kind: 'bound';
+}>, 'kind'>;
+interface ClaimVerificationBase {
+    readonly kind: 'claim-verification';
+    /** Runtime-reserved declaration occurrence, not a provider tool id. */
+    readonly claimId: string;
+    readonly declaredOn: DeclaredOn;
+    readonly standing: Standing;
+    readonly iteration: number;
+    readonly turn?: number;
+    readonly checker: {
+        readonly id: 'claim-pair';
+        readonly version: 1;
+    };
+    readonly declaredResult?: string;
+    readonly declaredRule?: string;
+    /** The literal bounded JSON declaration, never replaced by a resolved value. */
+    readonly declaredValue: unknown;
+}
+export type ClaimVerificationRow = ClaimVerificationBase & ({
+    readonly outcome: 'supported';
+    readonly reason: 'no-conflict' | 'numeric-leniency';
+    readonly resolved: ClaimVerificationAssociation;
+} | {
+    readonly outcome: 'contradicted';
+    readonly reason: 'conflict';
+    readonly resolved: ClaimVerificationAssociation;
+} | {
+    readonly outcome: 'unverified';
+    readonly reason: ClaimVerificationUnverifiedReason;
+    readonly resolved?: never;
+});
+export {};

package/dist/esm/core/agent/findings/verificationTypes.js

@@ -0,0 +1,20 @@
+/**
+ * Internal typed-finding protocol: model declarations and library checks stay
+ * separate. A supported row concerns only its resolved rule and executed scope;
+ * it is not verification of arbitrary prose or an entire answer.
+ * Role: plain data shared by the pure writer and the strict saved-row reader.
+ */
+import { BINDING_REASONS } from '../../../integrity/claim-binding/types.js';
+export const VERIFICATION_UNVERIFIED_REASONS = Object.freeze([
+    ...BINDING_REASONS,
+    'missing-check',
+    'malformed-check',
+    'ineligible-noise',
+    'assertion-mismatch',
+    'retention-limit',
+    'evidence-unavailable',
+    'claim-nonparticipating',
+    'doubt-against-value',
+    'both-doubt',
+]);
+//# sourceMappingURL=verificationTypes.js.map

package/dist/esm/core/agent/findings/verificationTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationTypes.js","sourceRoot":"","sources":["../../../../../src/core/agent/findings/verificationTypes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAK5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,GAAG,eAAe;IAClB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,qBAAqB;IACrB,YAAY;CACJ,CAAC,CAAC"}

package/dist/esm/core/agent/outputEnforcement.js

@@ -36,6 +36,7 @@
 import { fnv1a } from '../slots/helpers.js';
 import { applyOutputSchema } from '../outputSchema.js';
 import { SCHEMA_CHECK_FRAME_PREFIX } from '../../lib/saidByPerson.js';
+import { formatToolArgIssues, streamedToolArgIssues } from './toolArgsValidation.js';
 /**
  * Append one row to the run's output-attempt ledger.
  *
@@ -133,6 +134,10 @@ export function readSchemaToolAnswer(response) {
     const call = response.toolCalls.find((tc) => tc.name === SCHEMA_TOOL_NAME);
     if (!call)
         return undefined;
+    // A fixed non-JSON refusal follows the existing output-attempt/retry path.
+    // Even a parser accepting {} must never validate an SDK repair as an answer.
+    if (call.argumentsFailure !== undefined)
+        return formatToolArgIssues(call.name, streamedToolArgIssues(call.argumentsFailure));
     return JSON.stringify(call.args);
 }
 /**

package/dist/esm/core/agent/outputEnforcement.js.map

@@ -1 +1 @@
-{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAoDtE;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,+EAA+E;AAC/E,4EAA4E;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,4CAA4C;AAC5C,iHAAiH;AACjH,mFAAmF;AACnF;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,yBAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAoCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}
+{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAoDrF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,+EAA+E;AAC/E,4EAA4E;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,4CAA4C;AAC5C,iHAAiH;AACjH,mFAAmF;AACnF;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,yBAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAoCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/stages/toolCalls.js

@@ -88,7 +88,7 @@ import { withUnsettledRows } from '../findings/unsettled.js';
 import { sourceClockRow, sourceClocksOf } from '../../time/rows.js';
 import { evidenceFromHistory, exemptFromRun, } from '../evidence/evidenceIndex.js';
 import { noteRepeatedCall, repeatedCallLedgers } from '../repeatedCall.js';
-import { formatToolArgIssues, validateToolArgs, } from '../toolArgsValidation.js';
+import { formatToolArgIssues, streamedToolArgIssues, validateToolArgs, } from '../toolArgsValidation.js';
 import { safeStringify } from '../validators.js';
 import { capToolResult } from '../toolResultCap.js';
 import { applyResultCeiling } from '../resultCeiling.js';
@@ -3131,7 +3131,19 @@ export function buildToolCallsHandler(deps) {
                 }
                 // Tool-args validation (#9) and the inputs layer's refusals share one
                 // flag: the call is refused for its ARGUMENTS and lands in one shape.
-                let argsRejected = false;
+                let argsRejected = tc.argumentsFailure !== undefined;
+                if (!denied && tc.argumentsFailure !== undefined) {
+                    const issues = streamedToolArgIssues(tc.argumentsFailure);
+                    typedEmit(scope, 'agentfootprint.validation.args_invalid', {
+                        toolName: tc.name,
+                        toolCallId: tc.id,
+                        iteration,
+                        issues,
+                        enforced: true,
+                    });
+                    error = true;
+                    result = formatToolArgIssues(tc.name, issues);
+                }
                 // A check-in that tripped in a batch whose one human question was the
                 // inputs layer's ask (`oneQuestionAsked`) — refused, never asked.
                 let checkInRefused = false;
@@ -3146,9 +3158,11 @@ export function buildToolCallsHandler(deps) {
                 // the layer NOT mounted — any call whose tool declares rules (fail
                 // closed). Neither applies to a tool that declares nothing — and
                 // neither awaits for one (`unmountedRules` answers it synchronously).
-                const unmounted = unmountedRules(tool, tc.name);
+                const unmounted = argsRejected ? undefined : unmountedRules(tool, tc.name);
                 warnUnmountedToolPeriod(tool, tc.name);
-                const rulesRefusal = resolution?.refused ?? (unmounted === undefined ? undefined : await unmounted);
+                const rulesRefusal = argsRejected
+                    ? undefined
+                    : resolution?.refused ?? (unmounted === undefined ? undefined : await unmounted);
                 if (!denied && rulesRefusal !== undefined) {
                     argsRejected = true;
                     error = true;
@@ -4241,6 +4255,9 @@ export function buildToolCallsHandler(deps) {
                     toolCallId: tc.id,
                     toolName: tc.name,
                     ...(layerNote !== '' && { toolChars: deliveredResult.length }),
+                    ...(tc.argumentsFailure !== undefined && {
+                        toolArgumentsFailure: { ...tc.argumentsFailure },
+                    }),
                 });
                 // ── Dynamic ReAct wiring ───────────────────────────────
                 //