npm - agentic-proofkit - Versions diffs - 0.1.91 - Mend

agentic-proofkit 0.1.91

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (73) hide show

package/ADOPTION.md +464 -0
package/LICENSE +21 -0
package/NON_CLAIMS.md +197 -0
package/README.md +265 -0
package/dist/agentic-proofkit +35 -0
package/dist/platform/darwin-arm64/agentic-proofkit +0 -0
package/dist/platform/darwin-x64/agentic-proofkit +0 -0
package/dist/platform/linux-arm64/agentic-proofkit +0 -0
package/dist/platform/linux-x64/agentic-proofkit +0 -0
package/docs/adoption-checklist-report-design.md +138 -0
package/docs/adoption-workflow-agent-envelope-design.md +67 -0
package/docs/adoption-workflow-authority-routes-design.md +76 -0
package/docs/adoption-workflow-contract-envelope-design.md +87 -0
package/docs/adoption-workflow-plan-design.md +97 -0
package/docs/agent-guidance-envelope-design.md +550 -0
package/docs/binding-partition-admission-design.md +127 -0
package/docs/bootstrap-agent-envelope-design.md +97 -0
package/docs/bootstrap-materialization-manifest-design.md +100 -0
package/docs/branch-authority-report-design.md +121 -0
package/docs/changed-path-set-agent-envelope-design.md +70 -0
package/docs/completion-criteria-report-design.md +132 -0
package/docs/custom-rule-boundary-design.md +56 -0
package/docs/deployment-evidence-admission-design.md +80 -0
package/docs/document-lifecycle-boundary-design.md +62 -0
package/docs/json-report-cli-adapter-design.md +83 -0
package/docs/migration-parity-admission-design.md +90 -0
package/docs/migration-plan-design.md +73 -0
package/docs/obligation-decision-agent-envelope-design.md +105 -0
package/docs/obligation-decision-state-design.md +100 -0
package/docs/package-runtime-dependency-admission-design.md +80 -0
package/docs/producer-policy-self-proof-design.md +142 -0
package/docs/project-structure-agent-envelope-design.md +121 -0
package/docs/project-structure-scaffold-design.md +89 -0
package/docs/proof-obligation-algebra-design.md +108 -0
package/docs/proof-receipt-admission-design.md +108 -0
package/docs/proofkit-contract-map.md +55 -0
package/docs/receipt-currentness-scope-admission-design.md +103 -0
package/docs/receipt-producer-admission-design.md +106 -0
package/docs/receipt-trust-class-admission-design.md +113 -0
package/docs/rendered-artifact-freshness-design.md +55 -0
package/docs/requirement-browser-view-design.md +229 -0
package/docs/requirement-proof-resolver-projection-design.md +97 -0
package/docs/requirement-proof-source-set-design.md +72 -0
package/docs/requirement-proof-view-design.md +138 -0
package/docs/requirement-source-admission-design.md +66 -0
package/docs/requirement-source-transition-design.md +66 -0
package/docs/requirement-source-view-design.md +51 -0
package/docs/scaffold-profile-plan-design.md +72 -0
package/docs/secret-shaped-json-scan-design.md +60 -0
package/docs/selective-evidence-obligation-decision-design.md +139 -0
package/docs/selective-evidence-producer-admission-design.md +106 -0
package/docs/selective-evidence-receipt-trust-class-design.md +100 -0
package/docs/selective-gate-evidence-agent-envelope-design.md +100 -0
package/docs/selective-gate-plan-agent-envelope-design.md +95 -0
package/docs/selective-planner-edge-coverage-design.md +89 -0
package/docs/spec-overview-claim-boundary-design.md +50 -0
package/docs/spec-proof-bundle-admission-design.md +105 -0
package/docs/specs/proofkit-consumer-infra-retirement/overview.md +44 -0
package/docs/specs/proofkit-consumer-infra-retirement/requirements.v1.json +175 -0
package/docs/specs/proofkit-package-boundary/overview.md +32 -0
package/docs/specs/proofkit-package-boundary/requirements.v1.json +121 -0
package/docs/specs/proofkit-receipt-authority/overview.md +35 -0
package/docs/specs/proofkit-receipt-authority/requirements.v1.json +121 -0
package/docs/specs/proofkit-spec-proof-core/overview.md +36 -0
package/docs/specs/proofkit-spec-proof-core/requirements.v1.json +148 -0
package/docs/witness-scheduler-plan-design.md +57 -0
package/docs/workspace-planning-agent-envelope-design.md +101 -0
package/docs/workspace-registry-admission-design.md +57 -0
package/package.json +54 -0
package/proofkit/cli-contract.v1.json +808 -0
package/proofkit/receipt-producer-policy.json +48 -0
package/proofkit/requirement-bindings.json +520 -0
package/proofkit/witness-plan.json +649 -0

package/proofkit/witness-plan.json ADDED Viewed

@@ -0,0 +1,649 @@
+{
+  "schemaVersion": 1,
+  "schedulerPlanId": "proofkit.self-hosting.witness-plan",
+  "vocabulary": {
+    "artifactKinds": [
+      "npm-package-artifact",
+      "report"
+    ],
+    "credentialClasses": [
+      "none"
+    ],
+    "environmentClasses": [
+      "local-go"
+    ],
+    "environmentClassPolicies": [
+      {
+        "environmentClass": "local-go",
+        "networkPolicies": [
+          "external",
+          "none"
+        ],
+        "credentialClasses": [
+          "none"
+        ],
+        "cachePolicies": [
+          "disabled",
+          "read-only",
+          "write-local"
+        ]
+      }
+    ],
+    "parallelGroups": [
+      "local-go-static",
+      "package-artifact",
+      "self-hosting-package-gate",
+      "self-hosting-receipt"
+    ],
+    "nonCacheableCredentialClasses": [],
+    "maxTimeoutMs": 600000
+  },
+  "commands": [
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.ci-receipt-anchor",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "self:receipt"
+      ],
+      "environment": {
+        "inherit": "allowlist",
+        "allowlist": [
+          "GITHUB_ACTIONS",
+          "GITHUB_REPOSITORY",
+          "GITHUB_RUN_ATTEMPT",
+          "GITHUB_RUN_ID",
+          "GITHUB_SERVER_URL",
+          "GITHUB_SHA"
+        ],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/ci-provenance.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-proof-receipt-admission-report.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-proof-receipts.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-receipt-producer-admission-report.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-receipt-producer-admission.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-spec-proof-bundle-admission-report.json",
+          "required": true
+        },
+        {
+          "kind": "report",
+          "path": "artifacts/proofkit/self-hosting-spec-proof-bundle.json",
+          "required": true
+        }
+      ],
+      "parallelGroup": "self-hosting-receipt",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.go-fmt",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "go:fmt"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "local-go-static",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.go-test",
+      "cwd": ".",
+      "argv": [
+        "go",
+        "test",
+        "./..."
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "local-go-static",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.go-vet",
+      "cwd": ".",
+      "argv": [
+        "go",
+        "vet",
+        "./..."
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "local-go-static",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.package-artifact",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "package:artifact"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [
+        {
+          "kind": "report",
+          "path": "artifacts/package/npm-pack.json",
+          "required": true
+        },
+        {
+          "kind": "npm-package-artifact",
+          "path": "artifacts/package/*.tgz",
+          "required": true
+        }
+      ],
+      "parallelGroup": "package-artifact",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.package-gate",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "check"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "external",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "self-hosting-package-gate",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.go-staticcheck",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "go:staticcheck"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "none",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "local-go-static",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    },
+    {
+      "schemaVersion": 1,
+      "id": "proofkit.go-vulncheck",
+      "cwd": ".",
+      "argv": [
+        "npm",
+        "run",
+        "go:vulncheck"
+      ],
+      "environment": {
+        "inherit": "none",
+        "allowlist": [],
+        "classes": [
+          "local-go"
+        ]
+      },
+      "timeoutMs": 600000,
+      "networkPolicy": "external",
+      "credentialClass": "none",
+      "cachePolicy": "disabled",
+      "expectedArtifacts": [],
+      "parallelGroup": "local-go-static",
+      "exitCodePolicy": {
+        "kind": "zero",
+        "successCodes": [
+          0
+        ]
+      }
+    }
+  ],
+  "policies": [
+    {
+      "commandId": "proofkit.ci-receipt-anchor",
+      "inputSelectors": [
+        ".github/workflows/ci.yml",
+        "artifacts/package/*.tgz",
+        "artifacts/package/npm-pack.json",
+        "go.mod",
+        "go.sum",
+        "package.json",
+        "proofkit/receipt-producer-policy.json",
+        "proofkit/requirement-bindings.json",
+        "proofkit/witness-plan.json",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [
+        "artifacts/proofkit/ci-provenance.json",
+        "artifacts/proofkit/self-hosting-proof-receipt-admission-report.json",
+        "artifacts/proofkit/self-hosting-proof-receipts.json",
+        "artifacts/proofkit/self-hosting-receipt-producer-admission-report.json",
+        "artifacts/proofkit/self-hosting-receipt-producer-admission.json",
+        "artifacts/proofkit/self-hosting-spec-proof-bundle-admission-report.json",
+        "artifacts/proofkit/self-hosting-spec-proof-bundle.json"
+      ],
+      "resourceReads": [
+        "resource.proofkit.package-artifacts",
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [
+        "resource.proofkit.local-artifacts"
+      ],
+      "exclusiveLocks": [],
+      "sideEffectClass": "local_write",
+      "deterministicOutput": false,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting receipt output includes current timestamp and admitted CI environment metadata.",
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.go-fmt",
+      "inputSelectors": [
+        "cmd",
+        "internal",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [],
+      "exclusiveLocks": [],
+      "sideEffectClass": "none",
+      "deterministicOutput": true,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.go-test",
+      "inputSelectors": [
+        "cmd",
+        "go.mod",
+        "go.sum",
+        "internal",
+        "proofkit/cli-contract.v1.json",
+        "proofkit/requirement-bindings.json",
+        "proofkit/witness-plan.json",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [],
+      "exclusiveLocks": [],
+      "sideEffectClass": "none",
+      "deterministicOutput": true,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.go-vet",
+      "inputSelectors": [
+        "cmd",
+        "go.mod",
+        "internal",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [],
+      "exclusiveLocks": [],
+      "sideEffectClass": "none",
+      "deterministicOutput": true,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.package-artifact",
+      "inputSelectors": [
+        "ADOPTION.md",
+        "LICENSE",
+        "NON_CLAIMS.md",
+        "README.md",
+        "cmd",
+        "docs",
+        "go.mod",
+        "internal",
+        "package.json",
+        "proofkit"
+      ],
+      "outputSelectors": [
+        "artifacts/package/*.tgz",
+        "artifacts/package/npm-pack.json"
+      ],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [
+        "resource.proofkit.local-artifacts",
+        "resource.proofkit.package-artifacts"
+      ],
+      "exclusiveLocks": [],
+      "sideEffectClass": "local_write",
+      "deterministicOutput": false,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval.",
+        "The full package gate includes networked vulnerability database lookup through govulncheck."
+      ]
+    },
+    {
+      "commandId": "proofkit.package-gate",
+      "inputSelectors": [
+        ".github/workflows/ci.yml",
+        "ADOPTION.md",
+        "LICENSE",
+        "NON_CLAIMS.md",
+        "README.md",
+        "cmd",
+        "docs",
+        "go.mod",
+        "internal",
+        "package.json",
+        "proofkit",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [
+        "artifacts/package/npm-pack.json",
+        "artifacts/proofkit/*.json"
+      ],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [
+        "resource.proofkit.local-artifacts"
+      ],
+      "exclusiveLocks": [],
+      "sideEffectClass": "local_write",
+      "deterministicOutput": false,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.go-staticcheck",
+      "inputSelectors": [
+        "cmd",
+        "go.mod",
+        "go.sum",
+        "internal",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [],
+      "exclusiveLocks": [],
+      "sideEffectClass": "none",
+      "deterministicOutput": true,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    },
+    {
+      "commandId": "proofkit.go-vulncheck",
+      "inputSelectors": [
+        "cmd",
+        "go.mod",
+        "go.sum",
+        "internal",
+        "scripts/validate-self-hosting-receipts.go"
+      ],
+      "outputSelectors": [],
+      "resourceReads": [
+        "resource.proofkit.source"
+      ],
+      "resourceWrites": [],
+      "exclusiveLocks": [],
+      "sideEffectClass": "network",
+      "deterministicOutput": false,
+      "cacheAdmissionRefs": [],
+      "retryPolicy": {
+        "kind": "none",
+        "maxAttempts": 1
+      },
+      "cancellationPolicy": {
+        "kind": "cooperative",
+        "graceMs": 5000
+      },
+      "timeoutPolicy": {
+        "kind": "bounded",
+        "timeoutMs": 600000
+      },
+      "nonClaims": [
+        "Govulncheck may consult the Go vulnerability database and local module caches.",
+        "Self-hosting witness policy does not prove producer authentication or merge approval."
+      ]
+    }
+  ],
+  "nonClaims": [
+    "Local-go environment policy does not claim cross-platform package publication readiness.",
+    "Self-hosting witness plan does not authenticate producers, execute CI, publish packages, or approve merge."
+  ]
+}