agentfootprint 10.1.0 → 10.2.0

package/dist/esm/integrity/claim-binding/bindEvidence.js

@@ -0,0 +1,144 @@
+/** Exact evidence selection and eligibility, before the shared pair evaluator. */
+import { copyJson, ownData } from '../../lib/boundedJson.js';
+import { participates, comparableValueOf } from '../assertion/types.js';
+import { periodVerdict } from '../../core/agent/coverage/period.js';
+import { resultIdentityOf } from './capture.js';
+import { BINDING_LIMITS, boundedText, boundedResultId, queriedPeriodMatches, scopesMatch, ownConfigArray, } from './scope.js';
+import { bindingRuleOf, readEvidenceSnapshot } from './admit.js';
+const unverified = (reason) => ({ kind: 'unverified', reason });
+const isDoubt = (value) => value === null || value === 'unknown' || value === undefined;
+/**
+ * The model supplies only result/value/rule. Snapshot lineage, rule registry
+ * and intendedScope are runtime/app inputs. A bound pair is not a verdict.
+ * JSON-restored snapshots must originate from the caller's verified recording;
+ * this module validates shape and associations, not signatures or ownership.
+ */
+export function bindClaim(rawClaim, snapshot, rules, intendedScope) {
+    let claim;
+    try {
+        claim = ownData(copyJson(rawClaim, BINDING_LIMITS.scopeBytes, true), [
+            'result',
+            'value',
+            'rule',
+        ]);
+        if (!boundedResultId(claim.result) ||
+            !boundedText(claim.rule) ||
+            !Object.hasOwn(claim, 'value'))
+            return unverified('invalid-claim');
+    }
+    catch {
+        return unverified('invalid-claim');
+    }
+    let matchingRules;
+    try {
+        matchingRules = ownConfigArray(rules, BINDING_LIMITS.results)
+            .map(bindingRuleOf)
+            .filter((rule) => rule.id === claim.rule);
+    }
+    catch {
+        return unverified('invalid-rule');
+    }
+    if (matchingRules.length === 0)
+        return unverified('unknown-rule');
+    if (matchingRules.length !== 1)
+        return unverified('invalid-rule');
+    const rule = matchingRules[0];
+    if (rule === undefined)
+        return unverified('invalid-rule');
+    try {
+        const saved = readEvidenceSnapshot(snapshot);
+        const matches = saved.results.filter((result) => result.id === claim.result);
+        if (matches.length === 0)
+            return unverified('missing-result');
+        if (matches.length !== 1)
+            return unverified('ambiguous-result');
+        const result = matches[0];
+        if (result === undefined || result.id !== resultIdentityOf(result.identity))
+            return unverified('invalid-evidence');
+        if (result.identity.namespace !== saved.namespace ||
+            !saved.runIds.includes(result.identity.runId))
+            return unverified('foreign-result');
+        if (result.unavailable !== undefined)
+            return unverified(result.unavailable);
+        if (result.toolName !== rule.toolName)
+            return unverified('invalid-rule');
+        if (result.scopeDeclaration.id !== rule.scopeDeclaration.id ||
+            result.scopeDeclaration.version !== rule.scopeDeclaration.version)
+            return unverified('scope-version-mismatch');
+        if (result.scope === undefined)
+            return unverified('missing-scope');
+        const dimensions = rule.scopeDeclaration.dimensions.map((dimension) => dimension.name);
+        if (!dimensions.every(boundedText) ||
+            new Set(dimensions).size !== dimensions.length ||
+            dimensions.some((name) => !Object.hasOwn(result.scope, name)) ||
+            Object.keys(result.scope).some((name) => !dimensions.includes(name)))
+            return unverified('missing-scope');
+        if (result.periodDimension !== rule.scopeDeclaration.periodDimension)
+            return unverified('scope-version-mismatch');
+        if (intendedScope !== undefined && !scopesMatch(result.scope, intendedScope))
+            return unverified('scope-mismatch');
+        const entity = typeof rule.fact.entity === 'string'
+            ? rule.fact.entity
+            : result.scope[rule.fact.entity.scopeDimension];
+        if (!boundedText(entity) || !boundedText(rule.fact.field))
+            return unverified('invalid-rule');
+        if (!Array.isArray(result.facts))
+            return unverified('invalid-evidence');
+        const facts = result.facts.filter((fact) => fact.entity === entity && fact.field === rule.fact.field);
+        if (facts.length === 0)
+            return unverified('missing-fact');
+        if (facts.length !== 1)
+            return unverified('ambiguous-fact');
+        const fact = facts[0];
+        if (fact === undefined || !participates(fact.value) || !participates(claim.value))
+            return unverified('unasserted-value');
+        // Absence/doubt needs a separately authored absence rule in a later slice.
+        if (isDoubt(comparableValueOf(fact.value)) || isDoubt(comparableValueOf(claim.value)))
+            return unverified('unasserted-value');
+        if (result.period !== undefined) {
+            const verdict = periodVerdict(result.period);
+            if (verdict === 'unknown')
+                return unverified('coverage-unknown');
+            if (verdict !== 'covered')
+                return unverified('coverage-partial');
+        }
+        if (result.periodDimension !== undefined) {
+            if (result.period === undefined)
+                return unverified('coverage-undeclared');
+            if (!queriedPeriodMatches(result.scope[result.periodDimension], result.period))
+                return unverified('scope-mismatch');
+        }
+        if (rule.coverage === undefined || result.coverage === undefined)
+            return unverified('coverage-undeclared');
+        const completeness = rule.coverage({
+            scope: result.scope,
+            coverage: result.coverage,
+            ...(result.period !== undefined && { period: result.period }),
+        });
+        if (completeness === 'partial')
+            return unverified('coverage-partial');
+        if (completeness === 'stale')
+            return unverified('coverage-stale');
+        if (completeness !== 'complete')
+            return unverified('coverage-unknown');
+        const common = {
+            subject: { kind: 'entity', id: entity },
+            predicate: rule.fact.field,
+            stratum: 'asserted',
+        };
+        return copyJson({
+            kind: 'bound',
+            resultId: result.id,
+            rule: { id: rule.id, version: rule.version },
+            scope: result.scope,
+            coverage: result.coverage,
+            ...(result.period !== undefined && { period: result.period }),
+            evidence: { ...common, value: fact.value, provenance: `result ${result.id}` },
+            claim: { ...common, value: claim.value, provenance: `rule ${rule.id}` },
+        }, BINDING_LIMITS.resultBytes, true);
+    }
+    catch {
+        return unverified('invalid-evidence');
+    }
+}
+//# sourceMappingURL=bindEvidence.js.map

package/dist/esm/integrity/claim-binding/bindEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindEvidence.js","sourceRoot":"","sources":["../../../../src/integrity/claim-binding/bindEvidence.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,cAAc,EACd,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGjE,MAAM,UAAU,GAAG,CAAC,MAAqB,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7F,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE,CAC1C,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,QAAiB,EACjB,QAA0B,EAC1B,KAAkC,EAClC,aAAuB;IAEvB,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE;YACnE,QAAQ;YACR,OAAO;YACP,MAAM;SACP,CAAC,CAAC;QACH,IACE,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YAE9B,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,aAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,aAAa,GAAG,cAAc,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC;aAC1D,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IAClE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxC,IACE,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAC7C,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAE7C,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;QACzE,IACE,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,IAAI,CAAC,gBAAgB,CAAC,EAAE;YACvD,MAAM,CAAC,gBAAgB,CAAC,OAAO,KAAK,IAAI,CAAC,gBAAgB,CAAC,OAAO;YAEjE,OAAO,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvF,IACE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9B,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;YAC9C,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAe,EAAE,IAAI,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEpE,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,gBAAgB,CAAC,eAAe;YAClE,OAAO,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC9C,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;YAC1E,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,MAAM,GACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;YAClC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAClB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAC/B,CAAC,IAAoB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CACnF,CAAC;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/E,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxC,2EAA2E;QAC3E,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnF,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACjE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC,qBAAqB,CAAC,CAAC;YAC1E,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;gBAC5E,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC9D,OAAO,UAAU,CAAC,qBAAqB,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,OAAO;YAAE,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClE,IAAI,YAAY,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,EAAE,EAAE,MAAM,EAAE;YAChD,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAC1B,OAAO,EAAE,UAAmB;SAC7B,CAAC;QACF,OAAO,QAAQ,CACb;YACE,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7D,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,MAAM,CAAC,EAAE,EAAE,EAAE;YAC7E,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE;SACxE,EACD,cAAc,CAAC,WAAW,EAC1B,IAAI,CACW,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/esm/integrity/claim-binding/capture.d.ts

@@ -0,0 +1,25 @@
+import type { CapturedDispatch, EvidenceSnapshot, ResultEvidence, ResultIdentity, ReturnedEvidence, ScopeDeclaration } from './types.js';
+export declare function resultIdentityOf(identity: ResultIdentity): string;
+/** Decode only canonical runtime result occurrences; no lookup or authority is inferred. */
+export declare function readResultIdentity(raw: unknown): ResultIdentity;
+/** Capture selected scope now; a later mutation of args cannot change it. */
+export declare function captureDispatch(identity: ResultIdentity, tool: {
+    readonly toolName: string;
+    readonly toolCallId: string;
+    readonly iteration: number;
+}, executedArgs: unknown, declaration: ScopeDeclaration): CapturedDispatch;
+/** Preserve the returned reading before any async result rule can mutate it. */
+export declare function captureReturnedEvidence(dispatch: CapturedDispatch, original: unknown): ReturnedEvidence;
+/**
+ * returned is the return-time copy from that invocation. served is
+ * the final model-facing payload AFTER all governance, placement and caps.
+ * Visibility is a trusted adapter decision; equality alone grants no access.
+ * Rewrites need a future explicit association, and are unavailable here.
+ */
+export declare function finalizeEvidence(dispatch: CapturedDispatch, returned: ReturnedEvidence, served: unknown, access: {
+    readonly completed: boolean;
+    readonly resultVisible: boolean;
+    readonly scopeVisible: boolean;
+}): ResultEvidence;
+/** Freeze the caller's completed evidence universe at the declaration moment. */
+export declare function evidenceSnapshot(namespace: string, verifiedRunIds: readonly string[], results: readonly ResultEvidence[]): EvidenceSnapshot;

package/dist/esm/integrity/claim-binding/capture.js

@@ -0,0 +1,143 @@
+/**
+ * Internal dispatch/return/delivery receipt boundary, not mounted in the Agent.
+ * The eventual runtime adapter reserves a namespace/run/ordinal before await,
+ * captures at actual execute, then finalizes against the authorized served value.
+ */
+import { decodePresentIdentityField, encodeIdentityField } from '../../memory/identity/encode.js';
+import { copyJson } from '../../lib/boundedJson.js';
+import { canonicalJson } from '../../lib/canonicalJson.js';
+import { readSemantics, semanticsForModel, coverageOfSemantics, periodOfSemantics, } from '../../lib/semantics/envelope.js';
+import { claimRowsOf } from '../unsupported-claim/ledger.js';
+import { BINDING_LIMITS, boundedText, executedScope, scopeDeclarationOf } from './scope.js';
+export function resultIdentityOf(identity) {
+    if (!boundedText(identity.namespace) ||
+        !boundedText(identity.runId) ||
+        !Number.isSafeInteger(identity.ordinal) ||
+        identity.ordinal < 1)
+        throw new Error('Invalid runtime result identity.');
+    return `claim-result/${encodeIdentityField(identity.namespace)}/${encodeIdentityField(identity.runId)}/${identity.ordinal}`;
+}
+/** Decode only canonical runtime result occurrences; no lookup or authority is inferred. */
+export function readResultIdentity(raw) {
+    if (typeof raw !== 'string' || raw.length > BINDING_LIMITS.resultIdText)
+        throw new TypeError('Invalid saved result identity.');
+    const parts = raw.split('/');
+    if (parts.length !== 4 || parts[0] !== 'claim-result')
+        throw new TypeError('Invalid saved result identity.');
+    const identity = Object.freeze({
+        namespace: decodePresentIdentityField(parts[1]),
+        runId: decodePresentIdentityField(parts[2]),
+        ordinal: Number(parts[3]),
+    });
+    if (resultIdentityOf(identity) !== raw)
+        throw new TypeError('Noncanonical saved result identity.');
+    return identity;
+}
+/** Capture selected scope now; a later mutation of args cannot change it. */
+export function captureDispatch(identity, tool, executedArgs, declaration) {
+    declaration = scopeDeclarationOf(declaration);
+    const id = resultIdentityOf(identity);
+    if (!boundedText(tool.toolName) ||
+        !boundedText(tool.toolCallId) ||
+        !Number.isSafeInteger(tool.iteration) ||
+        tool.iteration < 0)
+        throw new Error('Invalid tool identity.');
+    const common = {
+        identity: { ...identity },
+        id,
+        toolName: tool.toolName,
+        toolCallId: tool.toolCallId,
+        iteration: tool.iteration,
+        scopeDeclaration: { id: declaration.id, version: declaration.version },
+        ...(declaration.periodDimension !== undefined && {
+            periodDimension: declaration.periodDimension,
+        }),
+    };
+    try {
+        return copyJson({ ...common, scope: executedScope(executedArgs, declaration) }, BINDING_LIMITS.scopeBytes * 2, true);
+    }
+    catch {
+        return copyJson({ ...common, unavailable: 'missing-scope' }, BINDING_LIMITS.scopeBytes * 2, true);
+    }
+}
+/** Preserve the returned reading before any async result rule can mutate it. */
+export function captureReturnedEvidence(dispatch, original) {
+    try {
+        const semantics = readSemantics(copyJson(original, BINDING_LIMITS.resultBytes, true));
+        if (semantics === undefined)
+            throw new Error('No recognized evidence.');
+        return Object.freeze({ resultId: dispatch.id, semantics });
+    }
+    catch {
+        return Object.freeze({ resultId: dispatch.id, unavailable: 'invalid-evidence' });
+    }
+}
+/**
+ * returned is the return-time copy from that invocation. served is
+ * the final model-facing payload AFTER all governance, placement and caps.
+ * Visibility is a trusted adapter decision; equality alone grants no access.
+ * Rewrites need a future explicit association, and are unavailable here.
+ */
+export function finalizeEvidence(dispatch, returned, served, access) {
+    const unavailable = (reason) => copyJson({
+        identity: dispatch.identity,
+        id: dispatch.id,
+        toolName: dispatch.toolName,
+        toolCallId: dispatch.toolCallId,
+        iteration: dispatch.iteration,
+        scopeDeclaration: dispatch.scopeDeclaration,
+        unavailable: reason,
+    }, BINDING_LIMITS.scopeBytes * 2, true);
+    if (dispatch.id !== resultIdentityOf(dispatch.identity))
+        return unavailable('invalid-evidence');
+    if (access.completed !== true)
+        return unavailable('incomplete-result');
+    if (access.resultVisible !== true || access.scopeVisible !== true)
+        return unavailable('withheld-evidence');
+    if (dispatch.unavailable !== undefined)
+        return unavailable(dispatch.unavailable);
+    if (returned.resultId !== dispatch.id)
+        return unavailable('unassociated-result');
+    if (returned.unavailable !== undefined)
+        return unavailable(returned.unavailable);
+    try {
+        const raw = copyJson(returned.semantics, BINDING_LIMITS.resultBytes, true);
+        const semantics = readSemantics(raw);
+        if (semantics === undefined)
+            return unavailable('invalid-evidence');
+        const model = typeof served === 'string'
+            ? JSON.parse(served.length <= BINDING_LIMITS.resultBytes ? served : '')
+            : served;
+        const allowed = copyJson(model, BINDING_LIMITS.resultBytes, true);
+        const projection = copyJson(semanticsForModel(semantics), BINDING_LIMITS.resultBytes, true);
+        if (canonicalJson(allowed) !== canonicalJson(projection))
+            return unavailable('unassociated-result');
+        const period = periodOfSemantics(semantics);
+        return copyJson({
+            ...dispatch,
+            facts: claimRowsOf(semantics, {
+                toolName: dispatch.toolName,
+                toolCallId: dispatch.toolCallId,
+                iteration: dispatch.iteration,
+            }),
+            ...((semantics.coverage !== undefined || period !== undefined) && {
+                coverage: coverageOfSemantics(semantics),
+            }),
+            ...(period !== undefined && { period }),
+        }, BINDING_LIMITS.resultBytes, true);
+    }
+    catch {
+        return unavailable('invalid-evidence');
+    }
+}
+/** Freeze the caller's completed evidence universe at the declaration moment. */
+export function evidenceSnapshot(namespace, verifiedRunIds, results) {
+    if (!boundedText(namespace) ||
+        verifiedRunIds.length > BINDING_LIMITS.results ||
+        !verifiedRunIds.every(boundedText) ||
+        new Set(verifiedRunIds).size !== verifiedRunIds.length ||
+        results.length > BINDING_LIMITS.results)
+        throw new Error('Invalid evidence snapshot boundary.');
+    return copyJson({ version: 1, namespace, runIds: verifiedRunIds, results }, BINDING_LIMITS.snapshotBytes, true);
+}
+//# sourceMappingURL=capture.js.map

package/dist/esm/integrity/claim-binding/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../../src/integrity/claim-binding/capture.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAU5F,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,IACE,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAEpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,gBAAgB,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,mBAAmB,CACnF,QAAQ,CAAC,KAAK,CACf,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,YAAY;QACrE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;QACnD,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,KAAK,EAAE,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,GAAG;QACpC,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,QAAwB,EACxB,IAA4F,EAC5F,YAAqB,EACrB,WAA6B;IAE7B,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtC,IACE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3B,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,CAAC;QAElB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE;QACzB,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,gBAAgB,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE;QACtE,GAAG,CAAC,WAAW,CAAC,eAAe,KAAK,SAAS,IAAI;YAC/C,eAAe,EAAE,WAAW,CAAC,eAAe;SAC7C,CAAC;KACH,CAAC;IACF,IAAI,CAAC;QACH,OAAO,QAAQ,CACb,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,EAC9D,cAAc,CAAC,UAAU,GAAG,CAAC,EAC7B,IAAI,CACe,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CACb,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAC3C,cAAc,CAAC,UAAU,GAAG,CAAC,EAC7B,IAAI,CACe,CAAC;IACxB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,QAA0B,EAC1B,QAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAA0B,EAC1B,QAA0B,EAC1B,MAAe,EACf,MAIC;IAED,MAAM,WAAW,GAAG,CAAC,MAAqC,EAAkB,EAAE,CAC5E,QAAQ,CACN;QACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,WAAW,EAAE,MAAM;KACpB,EACD,cAAc,CAAC,UAAU,GAAG,CAAC,EAC7B,IAAI,CACa,CAAC;IACtB,IAAI,QAAQ,CAAC,EAAE,KAAK,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI;QAC/D,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACpE,MAAM,KAAK,GACT,OAAO,MAAM,KAAK,QAAQ;YACxB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5F,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC;YACtD,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,QAAQ,CACb;YACE,GAAG,QAAQ;YACX,KAAK,EAAE,WAAW,CAAC,SAAS,EAAE;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC;YACF,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,IAAI;gBAChE,QAAQ,EAAE,mBAAmB,CAAC,SAAS,CAAC;aACzC,CAAC;YACF,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC,EACD,cAAc,CAAC,WAAW,EAC1B,IAAI,CACa,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,cAAiC,EACjC,OAAkC;IAElC,IACE,CAAC,WAAW,CAAC,SAAS,CAAC;QACvB,cAAc,CAAC,MAAM,GAAG,cAAc,CAAC,OAAO;QAC9C,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM;QACtD,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,OAAO;QAEvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,QAAQ,CACb,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,EAC1D,cAAc,CAAC,aAAa,EAC5B,IAAI,CACe,CAAC;AACxB,CAAC"}

package/dist/esm/integrity/claim-binding/scope.d.ts

@@ -0,0 +1,23 @@
+import type { DeclaredPeriod } from '../../core/agent/coverage/period.js';
+import type { ScopeDeclaration } from './types.js';
+export declare const BINDING_LIMITS: Readonly<{
+    text: 512;
+    resultIdText: 3104;
+    dimensions: 16;
+    path: 16;
+    scopeBytes: 8192;
+    resultBytes: number;
+    snapshotBytes: number;
+    results: 256;
+}>;
+export declare function boundedText(value: unknown): value is string;
+export declare function boundedResultId(value: unknown): value is string;
+/** Shallow descriptor-only admission for authored arrays containing callbacks. */
+export declare function ownConfigArray(value: unknown, maximum: number): readonly unknown[];
+/** Inspect authored configuration without evaluating getters or inherited fields. */
+export declare function scopeDeclarationOf(raw: unknown): ScopeDeclaration;
+export declare function executedScope(args: unknown, declaration: ScopeDeclaration): Readonly<Record<string, unknown>>;
+/** Exact declared dimensions; no inferred subset, defaults or currency conversion. */
+export declare function scopesMatch(evidence: Readonly<Record<string, unknown>>, intended: unknown): boolean;
+/** The existing period/instant owners decide validity and temporal equivalence. */
+export declare function queriedPeriodMatches(scopeValue: unknown, period: DeclaredPeriod): boolean;

package/dist/esm/integrity/claim-binding/scope.js

@@ -0,0 +1,149 @@
+/** Authored scope projection over the arguments actually delivered to execute. */
+import { copyJson, ownData } from '../../lib/boundedJson.js';
+import { canonicalJson } from '../../lib/canonicalJson.js';
+import { compareInstants, instantOf } from '../../core/time/instant.js';
+import { periodProblem } from '../../core/agent/coverage/period.js';
+export const BINDING_LIMITS = Object.freeze({
+    text: 512,
+    resultIdText: 3104,
+    dimensions: 16,
+    path: 16,
+    scopeBytes: 8192,
+    resultBytes: 256 * 1024,
+    snapshotBytes: 1024 * 1024,
+    results: 256,
+});
+export function boundedText(value) {
+    return typeof value === 'string' && value.trim() !== '' && value.length <= BINDING_LIMITS.text;
+}
+export function boundedResultId(value) {
+    return (typeof value === 'string' &&
+        value.startsWith('claim-result/') &&
+        value.length <= BINDING_LIMITS.resultIdText);
+}
+/** Shallow descriptor-only admission for authored arrays containing callbacks. */
+export function ownConfigArray(value, maximum) {
+    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+        throw new Error('Expected a plain configuration array.');
+    const length = Object.getOwnPropertyDescriptor(value, 'length')?.value;
+    if (typeof length !== 'number' ||
+        !Number.isSafeInteger(length) ||
+        length > maximum ||
+        Reflect.ownKeys(value).length !== length + 1)
+        throw new Error('Invalid configuration array.');
+    const items = [];
+    for (let index = 0; index < length; index++) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!descriptor?.enumerable || !('value' in descriptor))
+            throw new Error('Expected dense configuration data.');
+        items.push(descriptor.value);
+    }
+    return Object.freeze(items);
+}
+/** Inspect authored configuration without evaluating getters or inherited fields. */
+export function scopeDeclarationOf(raw) {
+    const source = ownData(raw, ['id', 'version', 'dimensions', 'periodDimension']);
+    const sourceDimensions = ownConfigArray(source.dimensions, BINDING_LIMITS.dimensions);
+    if (!boundedText(source.id) || !boundedText(source.version) || sourceDimensions.length === 0)
+        throw new Error('Invalid scope declaration.');
+    const names = new Set();
+    const dimensions = sourceDimensions.map((rawDimension) => {
+        const dimension = ownData(rawDimension, ['name', 'argumentPath', 'default', 'normalize']);
+        const path = copyJson(dimension.argumentPath, BINDING_LIMITS.scopeBytes, true);
+        if (!boundedText(dimension.name) ||
+            names.has(dimension.name) ||
+            !Array.isArray(path) ||
+            path.length === 0 ||
+            path.length > BINDING_LIMITS.path ||
+            !path.every(boundedText) ||
+            (Object.hasOwn(dimension, 'normalize') && typeof dimension.normalize !== 'function'))
+            throw new Error('Invalid scope dimension.');
+        names.add(dimension.name);
+        return Object.freeze({
+            name: dimension.name,
+            argumentPath: path,
+            ...(Object.hasOwn(dimension, 'default') && {
+                default: copyJson(dimension.default, BINDING_LIMITS.scopeBytes, true),
+            }),
+            ...(typeof dimension.normalize === 'function' && {
+                normalize: dimension.normalize,
+            }),
+        });
+    });
+    if (Object.hasOwn(source, 'periodDimension') &&
+        (!boundedText(source.periodDimension) || !names.has(source.periodDimension)))
+        throw new Error('Invalid period dimension.');
+    return Object.freeze({
+        id: source.id,
+        version: source.version,
+        dimensions: Object.freeze(dimensions),
+        ...(typeof source.periodDimension === 'string' && { periodDimension: source.periodDimension }),
+    });
+}
+/** Own data properties only: inherited names and accessors supply no scope. */
+function argumentAt(args, path) {
+    if (path.length === 0 || path.length > BINDING_LIMITS.path || !path.every(boundedText))
+        throw new Error('Invalid scope path.');
+    let cursor = args;
+    for (const key of path) {
+        if (cursor === null || typeof cursor !== 'object')
+            return undefined;
+        const descriptor = Object.getOwnPropertyDescriptor(cursor, key);
+        if (descriptor === undefined) {
+            if (key in cursor)
+                throw new Error('Inherited scope is not executed own-data.');
+            return undefined;
+        }
+        if (!descriptor.enumerable || !('value' in descriptor))
+            throw new Error('Scope requires own data.');
+        cursor = descriptor.value;
+    }
+    return cursor;
+}
+export function executedScope(args, declaration) {
+    declaration = scopeDeclarationOf(declaration);
+    const scope = {};
+    for (const dimension of declaration.dimensions) {
+        if (!boundedText(dimension.name) || Object.hasOwn(scope, dimension.name))
+            throw new Error('Invalid scope dimension.');
+        let value = argumentAt(args, dimension.argumentPath);
+        if (value === undefined && Object.hasOwn(dimension, 'default'))
+            value = dimension.default;
+        if (value === undefined)
+            throw new Error('Required scope is missing.');
+        // Detach BEFORE invoking an authored normalizer: it cannot mutate dispatch.
+        value = copyJson(value, BINDING_LIMITS.scopeBytes, true);
+        if (dimension.normalize !== undefined)
+            value = dimension.normalize(value);
+        Object.defineProperty(scope, dimension.name, {
+            value: copyJson(value, BINDING_LIMITS.scopeBytes, true),
+            enumerable: true,
+        });
+    }
+    if (declaration.periodDimension !== undefined &&
+        !Object.hasOwn(scope, declaration.periodDimension))
+        throw new Error('The period dimension is missing.');
+    return copyJson(scope, BINDING_LIMITS.scopeBytes, true);
+}
+/** Exact declared dimensions; no inferred subset, defaults or currency conversion. */
+export function scopesMatch(evidence, intended) {
+    const expected = ownData(copyJson(intended, BINDING_LIMITS.scopeBytes, true));
+    return canonicalJson(evidence) === canonicalJson(expected);
+}
+/** The existing period/instant owners decide validity and temporal equivalence. */
+export function queriedPeriodMatches(scopeValue, period) {
+    const query = ownData(scopeValue, ['from', 'to']);
+    if (periodProblem({ queried: query, held: 'unknown' }, 'camel') !== undefined)
+        return false;
+    const from = instantOf(query.from, 'lenient');
+    const to = instantOf(query.to, 'lenient');
+    const actualFrom = instantOf(period.queried.from, 'lenient');
+    const actualTo = instantOf(period.queried.to, 'lenient');
+    return (from !== undefined &&
+        to !== undefined &&
+        actualFrom !== undefined &&
+        actualTo !== undefined &&
+        compareInstants(from, actualFrom) === 0 &&
+        compareInstants(to, actualTo) === 0);
+}
+//# sourceMappingURL=scope.js.map

package/dist/esm/integrity/claim-binding/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../src/integrity/claim-binding/scope.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAIpE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,GAAG;IACT,YAAY,EAAE,IAAI;IAClB,UAAU,EAAE,EAAE;IACd,IAAI,EAAE,EAAE;IACR,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,GAAG,GAAG,IAAI;IACvB,aAAa,EAAE,IAAI,GAAG,IAAI;IAC1B,OAAO,EAAE,GAAG;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,YAAY,CAC5C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAe;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAgB,CAAC;IAClF,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,OAAO;QAChB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;QAE5C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAkB,EAAE;QACvE,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/E,IACE,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,IAAI;YACjC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YACxB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,UAAU,CAAC;YAEpF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,YAAY,EAAE,IAAyB;YACvC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC;aACtE,CAAC;YACF,GAAG,CAAC,OAAO,SAAS,CAAC,SAAS,KAAK,UAAU,IAAI;gBAC/C,SAAS,EAAE,SAAS,CAAC,SAAqD;aAC3E,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IACE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACxC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE5E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;KAC/F,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,IAAa,EAAE,IAAuB;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,WAA6B;IAE7B,WAAW,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC;QAC1F,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvE,4EAA4E;QAC5E,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE;YAC3C,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC;YACvD,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IACE,WAAW,CAAC,eAAe,KAAK,SAAS;QACzC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAsC,CAAC;AAC/F,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CACzB,QAA2C,EAC3C,QAAiB;IAEjB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,UAAmB,EAAE,MAAsB;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAc,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,EAAY,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,EAAE,KAAK,SAAS;QAChB,UAAU,KAAK,SAAS;QACxB,QAAQ,KAAK,SAAS;QACtB,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;QACvC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CACpC,CAAC;AACJ,CAAC"}

package/dist/esm/integrity/claim-binding/types.d.ts

@@ -0,0 +1,99 @@
+/** Internal evidence-binding ports. No public configuration or recorded row. */
+import type { Assertion } from '../assertion/types.js';
+import type { ClaimLedgerRow } from '../unsupported-claim/check.js';
+import type { Coverage } from '../../core/agent/coverage/types.js';
+import type { DeclaredPeriod } from '../../core/agent/coverage/period.js';
+import type { ToolSemantics } from '../../lib/semantics/types.js';
+export interface ScopeDimension {
+    readonly name: string;
+    readonly argumentPath: readonly string[];
+    /** An explicitly authored tool default; never inferred from a schema. */
+    readonly default?: unknown;
+    /** Author-owned normalization, coupled to the declaration version. */
+    readonly normalize?: (value: unknown) => unknown;
+}
+export interface ScopeDeclaration {
+    readonly id: string;
+    readonly version: string;
+    readonly dimensions: readonly ScopeDimension[];
+    /** Dimension holding the executed absolute { from, to } read interval. */
+    readonly periodDimension?: string;
+}
+export interface ResultIdentity {
+    /** Trusted unique recording namespace, retained by a later replay adapter. */
+    readonly namespace: string;
+    readonly runId: string;
+    /** Runtime reserves this before awaiting dispatch; provider IDs are separate. */
+    readonly ordinal: number;
+}
+export declare const BINDING_REASONS: readonly ["invalid-claim", "unknown-rule", "invalid-rule", "missing-result", "ambiguous-result", "foreign-result", "incomplete-result", "withheld-evidence", "unassociated-result", "invalid-evidence", "missing-scope", "scope-mismatch", "scope-version-mismatch", "missing-fact", "ambiguous-fact", "unasserted-value", "coverage-undeclared", "coverage-partial", "coverage-unknown", "coverage-stale"];
+export type BindingReason = (typeof BINDING_REASONS)[number];
+export interface CapturedDispatch {
+    readonly identity: ResultIdentity;
+    readonly id: string;
+    readonly toolName: string;
+    readonly toolCallId: string;
+    readonly iteration: number;
+    readonly scopeDeclaration: {
+        readonly id: string;
+        readonly version: string;
+    };
+    readonly scope?: Readonly<Record<string, unknown>>;
+    readonly periodDimension?: string;
+    readonly unavailable?: BindingReason;
+}
+export interface EvidenceBoundary {
+    readonly scope: Readonly<Record<string, unknown>>;
+    readonly coverage: Coverage;
+    readonly period?: DeclaredPeriod;
+}
+export interface ResultEvidence extends CapturedDispatch {
+    /** No raw result, arguments or facts survive an unavailable association. */
+    readonly facts?: readonly ClaimLedgerRow[];
+    readonly coverage?: Coverage;
+    readonly period?: DeclaredPeriod;
+}
+/** Private return-time copy, captured before awaiting result governance. */
+export interface ReturnedEvidence {
+    readonly resultId: string;
+    readonly semantics?: ToolSemantics;
+    readonly unavailable?: 'invalid-evidence';
+}
+export interface EvidenceSnapshot {
+    readonly version: 1;
+    readonly namespace: string;
+    /** Runtime-owned verified lineage; never supplied by a model declaration. */
+    readonly runIds: readonly string[];
+    readonly results: readonly ResultEvidence[];
+}
+export interface ClaimBindingRule {
+    readonly id: string;
+    readonly version: string;
+    readonly toolName: string;
+    readonly scopeDeclaration: ScopeDeclaration;
+    readonly fact: {
+        readonly entity: string | {
+            readonly scopeDimension: string;
+        };
+        readonly field: string;
+    };
+    /** Completeness must be explicitly checked by the author, never from prose. */
+    readonly coverage?: (boundary: EvidenceBoundary) => 'complete' | 'partial' | 'unknown' | 'stale';
+}
+export type ClaimBinding = {
+    readonly kind: 'unverified';
+    readonly reason: BindingReason;
+} | {
+    /** Binding means eligible comparator inputs, not agreement or a badge. */
+    readonly kind: 'bound';
+    readonly resultId: string;
+    readonly rule: {
+        readonly id: string;
+        readonly version: string;
+    };
+    readonly scope: Readonly<Record<string, unknown>>;
+    readonly coverage: Coverage;
+    readonly period?: DeclaredPeriod;
+    readonly evidence: Assertion;
+    readonly claim: Assertion;
+};

package/dist/esm/integrity/claim-binding/types.js

@@ -0,0 +1,23 @@
+export const BINDING_REASONS = Object.freeze([
+    'invalid-claim',
+    'unknown-rule',
+    'invalid-rule',
+    'missing-result',
+    'ambiguous-result',
+    'foreign-result',
+    'incomplete-result',
+    'withheld-evidence',
+    'unassociated-result',
+    'invalid-evidence',
+    'missing-scope',
+    'scope-mismatch',
+    'scope-version-mismatch',
+    'missing-fact',
+    'ambiguous-fact',
+    'unasserted-value',
+    'coverage-undeclared',
+    'coverage-partial',
+    'coverage-unknown',
+    'coverage-stale',
+]);
+//# sourceMappingURL=types.js.map