agentfootprint 9.62.0 → 9.63.0

package/dist/integrity/disposition/lifecycle.js

@@ -9,8 +9,11 @@
  * Role:    a check is registered exactly when its preconditions exist on
  *          THIS agent (wire: always — every run calls the model;
  *          compose-invariant: a mount kernel is configured; dangling: at
- *          least one tool declared `argumentsFrom`). Registration is what
- *          makes silence auditable — an unregistered check is honest
+ *          least one tool declared `argumentsFrom`, which arms BOTH the
+ *          compose-seam dangling-reference check and the choice-seam
+ *          unsupported-argument check off the same declaration).
+ *          Registration is what makes silence auditable — an unregistered
+ *          check is honest
  *          absence, a registered one that never notes is the wiring rot
  *          `assertAlive` exists to name.
  *
@@ -27,7 +30,8 @@ const ledger_js_1 = require("./ledger.js");
 const check_js_1 = require("../invariant-violation/check.js");
 const wire_js_1 = require("../invariant-violation/wire.js");
 const check_js_2 = require("../dangling-reference/check.js");
-const check_js_3 = require("../unsupported-claim/check.js");
+const check_js_3 = require("../unsupported-argument/check.js");
+const check_js_4 = require("../unsupported-claim/check.js");
 /**
  * Start one run's ledger: register the present checks and, in dev posture,
  * prove each can still catch its own synthetic defect.
@@ -50,8 +54,9 @@ function beginIntegrityRun(present, posture) {
     //
     // Per check, deliberately, rather than one all-or-nothing block for the
     // case where the app armed none of them. The common shape in the field is
-    // PARTIAL: a consumer declares `argumentsFrom`, arms grounding, and never
-    // learns that the other two never ran. An all-or-nothing block goes quiet
+    // PARTIAL: a consumer declares `argumentsFrom`, arms the two checks that
+    // field carries, and never learns that the rest never ran. An
+    // all-or-nothing block goes quiet
     // the moment one check is armed, which is precisely when the remaining
     // blind spots start to matter.
     //
@@ -69,13 +74,14 @@ function beginIntegrityRun(present, posture) {
     };
     armed('invariant-violation', 'compose', present.composeInvariant === true);
     armed('dangling-reference', 'compose', present.dangling === true);
+    armed('unsupported-argument', 'choice', present.dangling === true);
     armed('unsupported-claim', 'claim', present.claim === true);
     if (posture !== 'dev')
         return ledger;
     // The canaries — one known-bad fixture per REGISTERED check, through the
     // REAL pure function. Epoch -1 marks them as no run iteration's business.
     //
-    // Registered, note, and no longer only armed. The three optional checks now
+    // Registered, note, and no longer only armed. The four optional checks now
     // file a row whether or not this run had a subject for them, and a
     // `not-applicable` row with no canary beside it is the exact ambiguity this
     // whole change set exists to remove: a checker that has ROTTED and a checker
@@ -107,9 +113,25 @@ function beginIntegrityRun(present, posture) {
         if (caught.length > 0)
             ledger.noteSynthetic('dangling-reference', 'compose', 'caught');
     }
+    {
+        // The choice-seam canary: an ARMED call carrying a value the corpus does
+        // not contain. The fixture's corpus deliberately says nothing that could
+        // match, so a check that still finds nothing is a check that cannot fire.
+        ledger.noteSynthetic('unsupported-argument', 'choice', 'minted');
+        const caught = (0, check_js_3.unsupportedArgumentsOf)([
+            {
+                toolName: 'canary_tool',
+                toolCallId: 'canary',
+                args: { id: 'canary-fabricated-id' },
+                argumentsFrom: ['canary_ground'],
+            },
+        ], { grounded: ['canary: this frame served no identifiers'], assistant: [] }, -1);
+        if (caught.length > 0)
+            ledger.noteSynthetic('unsupported-argument', 'choice', 'caught');
+    }
     {
         ledger.noteSynthetic('unsupported-claim', 'claim', 'minted');
-        const caught = (0, check_js_3.unsupportedClaimsOf)([{ answerField: 'canary', entity: 'canary-entity', field: 'canary-field' }], [
+        const caught = (0, check_js_4.unsupportedClaimsOf)([{ answerField: 'canary', entity: 'canary-entity', field: 'canary-field' }], [
             {
                 entity: 'canary-entity',
                 field: 'canary-field',

package/dist/integrity/disposition/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/integrity/disposition/lifecycle.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAEH,2CAAwE;AAGxE,8DAAwE;AACxE,4DAAkE;AAClE,6DAAsE;AACtE,4DAAoE;AAapE;;;GAGG;AACH,SAAgB,iBAAiB,CAC/B,OAA+B,EAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,6BAAiB,GAAE,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACjE,4CAA4C;IAC5C,EAAE;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,UAAU;IACV,EAAE;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,+BAA+B;IAC/B,EAAE;IACF,4EAA4E;IAC5E,+DAA+D;IAC/D,2EAA2E;IAC3E,gEAAgE;IAChE,sEAAsE;IACtE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,CAAC,IAAsB,EAAE,IAAmB,EAAE,OAAgB,EAAQ,EAAE;QACpF,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,KAAK,CAAC,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;IAC3E,KAAK,CAAC,oBAAoB,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE5D,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IAErC,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,mEAAmE;IACnE,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,aAAa;IACb,EAAE;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAC7B,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,EAChE,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EACtE,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvF,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAA,gCAAqB,EAClC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,aAAa,CAAC,EAAE,EAC3F,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAC1D,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAA,+BAAoB,EACjC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC3D,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,EAC1B,IAAI,GAAG,EAAE,EACT,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAA,8BAAmB,EAChC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAC3E;YACE;gBACE,MAAM,EAAE,eAAe;gBACvB,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC;aACd;SACF,EACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAC/B,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA1GD,8CA0GC"}
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/integrity/disposition/lifecycle.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AAEH,2CAAwE;AAGxE,8DAAwE;AACxE,4DAAkE;AAClE,6DAAsE;AACtE,+DAA0E;AAC1E,4DAAoE;AAqBpE;;;GAGG;AACH,SAAgB,iBAAiB,CAC/B,OAA+B,EAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,IAAA,6BAAiB,GAAE,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACjE,4CAA4C;IAC5C,EAAE;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,UAAU;IACV,EAAE;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,8DAA8D;IAC9D,kCAAkC;IAClC,uEAAuE;IACvE,+BAA+B;IAC/B,EAAE;IACF,4EAA4E;IAC5E,+DAA+D;IAC/D,2EAA2E;IAC3E,gEAAgE;IAChE,sEAAsE;IACtE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,CAAC,IAAsB,EAAE,IAAmB,EAAE,OAAgB,EAAQ,EAAE;QACpF,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,KAAK,CAAC,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;IAC3E,KAAK,CAAC,oBAAoB,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,sBAAsB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IACnE,KAAK,CAAC,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAE5D,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IAErC,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,2EAA2E;IAC3E,mEAAmE;IACnE,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,aAAa;IACb,EAAE;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAC7B,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,EAChE,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EACtE,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvF,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAA,gCAAqB,EAClC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,aAAa,CAAC,EAAE,EAC3F,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAC1D,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAA,+BAAoB,EACjC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC3D,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,EAC1B,IAAI,GAAG,EAAE,EACT,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,oBAAoB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,CAAC;QACC,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAA,iCAAsB,EACnC;YACE;gBACE,QAAQ,EAAE,aAAa;gBACvB,UAAU,EAAE,QAAQ;gBACpB,IAAI,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE;gBACpC,aAAa,EAAE,CAAC,eAAe,CAAC;aACjC;SACF,EACD,EAAE,QAAQ,EAAE,CAAC,0CAA0C,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EACzE,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,CAAC;QACC,MAAM,CAAC,aAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAA,8BAAmB,EAChC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAC3E;YACE;gBACE,MAAM,EAAE,eAAe;gBACvB,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC;aACd;SACF,EACD,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAC/B,CAAC,CAAC,CACH,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AA/HD,8CA+HC"}

package/dist/integrity/unsupported-argument/check.js

@@ -0,0 +1,195 @@
+"use strict";
+/**
+ * unsupported-argument — the model ACTED on a value nothing served, at the
+ * CHOICE seam.
+ *
+ * Pattern: pure function over (the calls, the frame they were chosen from);
+ *          the domain check.
+ * Role:    the decidable fragment of "did the model bind this reference to
+ *          something the run actually served?". The measured failure: on the
+ *          second turn of a triage conversation the window had dropped the
+ *          user message carrying the true entity id and kept the assistant's
+ *          own rendered answer. Asked for the status of "that machine", the
+ *          model resolved the reference out of its OWN prior prose, took a
+ *          truncated job-name fragment for a machine name, called the lookup
+ *          tool with it, got an honest "nothing found", and told the person
+ *          their protected machine had no backup record. Every shipped rail
+ *          passed honestly — the coverage envelope, the absence envelope and
+ *          the evidence gate all held, because every value in the answer
+ *          really WAS grounded. The defect was the REFERENT, bound wrong at
+ *          the argument, and the argument was the one seam with no check.
+ *
+ * DECLARED, NEVER INFERRED — the `argumentsFrom` precedent, second use. A
+ * tool is this check's subject only because its author said its arguments
+ * come from another tool's results; a tool that declares nothing is never
+ * examined, which is the whole zero-delta story. One declaration now arms two
+ * seams: `dangling-reference` asks whether the ground is still in reach when
+ * the tool is OFFERED, this asks whether the value the model chose came from
+ * that ground when the tool is CALLED.
+ *
+ * ASSISTANT TEXT IS NOT GROUND, and that is the entire idea. The system
+ * prompt, the user's messages and every tool result are things the RUN put in
+ * front of the model. Its own earlier turns are things it wrote. A value whose
+ * only source is the model's own rendered prose has been re-derived from a
+ * rendering rather than read from evidence, and re-deriving is exactly how a
+ * truncated job name becomes a machine name.
+ *
+ * THE FENCES, stated because they are the check's honesty:
+ * - NON-STRINGS ARE NEVER CHECKED. Numbers, booleans and null are not
+ *   identifier-shaped, and substring-grounding them would accuse every
+ *   literal the model legitimately computed.
+ * - VALUES UNDER FOUR CHARACTERS ARE NEVER CHECKED. Below that, substring
+ *   matching is noise in both directions — 'up' and 'a1' land inside
+ *   unrelated words in any corpus.
+ * - SERVED ANYWHERE PASSES, case-insensitively. The value need only appear
+ *   inside SOME served string; see the README's stated leniency.
+ * - DECLARED VOCABULARY PASSES. A value the tool's own `inputSchema` lists in
+ *   an `enum` was served BY THE SCHEMA — the model read it off the tool
+ *   definition, not out of its own prose.
+ * Two states remain, and they file DIFFERENT messages because they call for
+ * different fixes: grounded only in the model's own prose (re-fetch the real
+ * ground), and grounded nowhere in the window at all (nothing served it).
+ *
+ * Detection only. Nothing here blocks, rewrites or delays a call.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unsupportedArgumentsOf = exports.declaredEnumValuesOf = void 0;
+/** Below this, substring matching says nothing. */
+const MIN_CHECKED_LENGTH = 4;
+/** Longest a single value is quoted at inside a message. */
+const MAX_QUOTED_CHARS = 80;
+/** Deepest a schema is walked for `enum` declarations. */
+const MAX_SCHEMA_DEPTH = 8;
+function clip(value) {
+    return value.length <= MAX_QUOTED_CHARS ? value : `${value.slice(0, MAX_QUOTED_CHARS - 1)}…`;
+}
+/** Every string leaf of an arguments object, with its dot-path. */
+function* stringLeaves(node, path) {
+    if (typeof node === 'string') {
+        yield { path, value: node };
+        return;
+    }
+    if (Array.isArray(node)) {
+        for (let i = 0; i < node.length; i++) {
+            yield* stringLeaves(node[i], path === '' ? String(i) : `${path}.${String(i)}`);
+        }
+        return;
+    }
+    if (node !== null && typeof node === 'object') {
+        for (const [key, value] of Object.entries(node)) {
+            yield* stringLeaves(value, path === '' ? key : `${path}.${key}`);
+        }
+    }
+}
+/**
+ * Best-effort: every string an `enum` array declares anywhere in a tool's
+ * `inputSchema`. Flat by design — a per-path map would be more precise, and on
+ * an accusation boundary the lenient direction is the safe one. An absent or
+ * non-object schema yields an empty set, which simply means no enum fence.
+ */
+function declaredEnumValuesOf(schema) {
+    const values = new Set();
+    const walk = (node, depth) => {
+        if (depth > MAX_SCHEMA_DEPTH || node === null || typeof node !== 'object')
+            return;
+        if (Array.isArray(node)) {
+            for (const item of node)
+                walk(item, depth + 1);
+            return;
+        }
+        const obj = node;
+        if (Array.isArray(obj.enum)) {
+            for (const declared of obj.enum)
+                if (typeof declared === 'string')
+                    values.add(declared);
+        }
+        for (const value of Object.values(obj))
+            walk(value, depth + 1);
+    };
+    walk(schema, 0);
+    return values;
+}
+exports.declaredEnumValuesOf = declaredEnumValuesOf;
+/**
+ * Check every armed call's identifier-like string arguments against the frame
+ * the model chose from.
+ *
+ * @param calls the ARMED tool calls of one response — a caller filters by
+ *   `argumentsFrom` before calling; nothing here re-decides who is a subject.
+ * @param corpus the exact request this response was assembled from, split into
+ *   what the run served and what the model itself wrote.
+ * @param epoch the run iteration, stamped on every witness.
+ */
+function unsupportedArgumentsOf(calls, corpus, epoch) {
+    const findings = [];
+    if (calls.length === 0)
+        return findings;
+    const served = corpus.grounded.map((text) => text.toLowerCase());
+    const written = corpus.assistant.map((text) => text.toLowerCase());
+    const frame = `frame this call was assembled from: ${String(served.length)} served string(s) ` +
+        `(system prompt, user messages, tool results) and ${String(written.length)} assistant turn(s)`;
+    for (const call of calls) {
+        const subject = { kind: 'tool', id: call.toolName };
+        const declared = new Set([...(call.declaredEnums ?? [])].map((v) => v.toLowerCase()));
+        const grounds = call.argumentsFrom.join(' or ');
+        const refetch = grounds.length > 0
+            ? `call ${grounds} again and use a value it returns`
+            : 're-read the value from the tool that serves it';
+        for (const leaf of stringLeaves(call.args, '')) {
+            const value = leaf.value.trim();
+            if (value.length < MIN_CHECKED_LENGTH)
+                continue;
+            const needle = value.toLowerCase();
+            if (declared.has(needle))
+                continue;
+            if (served.some((text) => text.includes(needle)))
+                continue;
+            const selfReferenced = written.some((text) => text.includes(needle));
+            const witnesses = [
+                {
+                    subject,
+                    predicate: leaf.path,
+                    value: leaf.value,
+                    epoch,
+                    stratum: 'asserted',
+                    provenance: `tool call ${call.toolCallId}: argument '${leaf.path}' as the model chose it`,
+                },
+                {
+                    subject,
+                    predicate: leaf.path,
+                    value: selfReferenced
+                        ? 'served by nothing — present only in the model’s own earlier answer'
+                        : 'served by nothing in the window the model saw',
+                    epoch,
+                    stratum: 'asserted',
+                    provenance: frame,
+                },
+            ];
+            findings.push({
+                kind: 'unsupported-argument',
+                seam: 'choice',
+                subjects: [subject],
+                // The dot-path IS the discriminator: two arguments of one call are two
+                // defects, and without it the second collapses into the first (the
+                // `unsupported-claim` per-field lesson, same substrate rule).
+                predicate: leaf.path,
+                witnesses,
+                epoch,
+                message: selfReferenced
+                    ? `'${call.toolName}' was called with ${leaf.path} = "${clip(value)}", and the only ` +
+                        `place that value appears in the frame the model chose from is the model’s own ` +
+                        `earlier answer. Rendered text is not evidence — a value re-read out of prose can ` +
+                        `be a fragment of something else entirely. To ground it, ${refetch}. Nothing here ` +
+                        `blocked the call.`
+                    : `'${call.toolName}' was called with ${leaf.path} = "${clip(value)}", and that value ` +
+                        `appears nowhere in the frame the model chose from — not in the instructions, not ` +
+                        `in any message from the user, not in any tool result. Nothing served it, so ` +
+                        `nothing in this run can say what it refers to. To ground it, ${refetch}. Nothing ` +
+                        `here blocked the call.`,
+            });
+        }
+    }
+    return findings;
+}
+exports.unsupportedArgumentsOf = unsupportedArgumentsOf;
+//# sourceMappingURL=check.js.map

package/dist/integrity/unsupported-argument/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/integrity/unsupported-argument/check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;;;AA8BH,mDAAmD;AACnD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,0DAA0D;AAC1D,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC;AAC/F,CAAC;AAED,mEAAmE;AACnE,QAAQ,CAAC,CAAC,YAAY,CAAC,IAAa,EAAE,IAAY;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC3E,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,MAAe;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,KAAa,EAAQ,EAAE;QAClD,IAAI,KAAK,GAAG,gBAAgB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO;QAClF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,IAAI;gBAAE,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC;AAChB,CAAC;AAhBD,oDAgBC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CACpC,KAAgC,EAChC,MAAoB,EACpB,KAAa;IAEb,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GACT,uCAAuC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB;QAChF,oDAAoD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;IAEjG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,QAAQ,OAAO,mCAAmC;YACpD,CAAC,CAAC,gDAAgD,CAAC;QAEvD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB;gBAAE,SAAS;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACnC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAE,SAAS;YAC3D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAErE,MAAM,SAAS,GAAgB;gBAC7B;oBACE,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK;oBACL,OAAO,EAAE,UAAU;oBACnB,UAAU,EAAE,aAAa,IAAI,CAAC,UAAU,eAAe,IAAI,CAAC,IAAI,yBAAyB;iBAC1F;gBACD;oBACE,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,KAAK,EAAE,cAAc;wBACnB,CAAC,CAAC,oEAAoE;wBACtE,CAAC,CAAC,+CAA+C;oBACnD,KAAK;oBACL,OAAO,EAAE,UAAU;oBACnB,UAAU,EAAE,KAAK;iBAClB;aACF,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,OAAO,CAAC;gBACnB,uEAAuE;gBACvE,mEAAmE;gBACnE,8DAA8D;gBAC9D,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,SAAS;gBACT,KAAK;gBACL,OAAO,EAAE,cAAc;oBACrB,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,qBAAqB,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB;wBACnF,gFAAgF;wBAChF,mFAAmF;wBACnF,2DAA2D,OAAO,iBAAiB;wBACnF,mBAAmB;oBACrB,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,qBAAqB,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB;wBACrF,mFAAmF;wBACnF,8EAA8E;wBAC9E,gEAAgE,OAAO,YAAY;wBACnF,wBAAwB;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AA5ED,wDA4EC"}

package/dist/lib/trace-toolpack/traceToolpack.js

@@ -456,7 +456,7 @@ function buildRunOverview(artifacts, index) {
  *     compile HERE, rather than becoming a value the tool's enum silently
  *     rejects at run time.
  *   - the honesty gate. `ContextErrorKind` names five defect classes;
- *     `src/integrity/` ships three checks. Offering the other two in the
+ *     `src/integrity/` ships four checks. Offering the fifth in the
  *     schema enum invites a query whose only possible answer is a negative
  *     verdict about a class nothing in the library could have filed — the
  *     tool telling a model "no duplicate-execution errors" when nothing on
@@ -466,7 +466,7 @@ function buildRunOverview(artifacts, index) {
  */
 const CONTEXT_ERROR_KIND_CHECKS = {
     'invariant-violation': 'src/integrity/invariant-violation (write + wire)',
-    'unsupported-argument': false,
+    'unsupported-argument': 'src/integrity/unsupported-argument (choice)',
     'dangling-reference': 'src/integrity/dangling-reference (compose)',
     'duplicate-execution': false,
     'unsupported-claim': 'src/integrity/unsupported-claim (claim)',
@@ -758,12 +758,14 @@ function buildFindContextErrors(artifacts, index, reader, opts) {
         name: 'find_context_errors',
         description: 'What did this run CONTRADICT ITSELF about? Lists the Context Integrity findings the ' +
             'library already caught — an invariant violated, an offered action whose inputs left ' +
-            'scope, a claim the record does not support — each with the step it was filed at and the ' +
+            'scope, an argument nothing served, a claim the record does not support — each with the ' +
+            'step it was filed at and the ' +
             'exact drill that opens the state behind it. Call it EARLY when an answer looks wrong: a ' +
             'contradiction the library already caught beats re-deriving one. Reads only; nothing is ' +
             're-checked or re-judged. When no finding evidence was captured it says so plainly rather ' +
-            `than reporting a clean run. The finding type also names ${UNFILABLE_CONTEXT_ERROR_KINDS.map((kind) => `'${kind}'`).join(' and ')}, and no check in this build files them — this tool cannot report on ` +
-            'those classes at all, so its silence about them is not evidence. ' +
+            `than reporting a clean run. The finding type also names ${UNFILABLE_CONTEXT_ERROR_KINDS.map((kind) => `'${kind}'`).join(' and ')}, and no check in this build files ${UNFILABLE_CONTEXT_ERROR_KINDS.length === 1 ? 'it' : 'them'} — this tool cannot report on ` +
+            `that class${UNFILABLE_CONTEXT_ERROR_KINDS.length === 1 ? '' : 'es'} at all, so its ` +
+            'silence about it is not evidence. ' +
             `Bounded by limit (default ${FINDINGS_DEFAULT}, hard cap ${types_js_2.TOOLPACK_HARD_CAPS.contextErrorsMax}).`,
         inputSchema: {
             type: 'object',