agentskeptic 0.2.1 → 1.0.1

package/dist/decisionGate.assertSafe.test.js

@@ -0,0 +1,52 @@
+import { readFileSync, mkdtempSync, rmSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { DatabaseSync } from "node:sqlite";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { createDecisionGate } from "./decisionGate.js";
+import { DecisionUnsafeError } from "./decisionUnsafeError.js";
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+describe("DecisionGate.assertSafeForIrreversibleAction", () => {
+    /** Seeded SQLite under tmp — `examples/demo.db` is gitignored and absent on clean CI. */
+    let workDir;
+    let dbPath;
+    beforeAll(() => {
+        workDir = mkdtempSync(join(tmpdir(), "agentskeptic-assert-safe-"));
+        dbPath = join(workDir, "demo.db");
+        const sql = readFileSync(join(root, "examples", "seed.sql"), "utf8");
+        const db = new DatabaseSync(dbPath);
+        db.exec(sql);
+        db.close();
+    });
+    afterAll(() => {
+        rmSync(workDir, { recursive: true, force: true });
+    });
+    it("throws DecisionUnsafeError when DB does not match (wf_missing)", async () => {
+        const eventsPath = join(root, "examples", "events.ndjson");
+        const registryPath = join(root, "examples", "tools.json");
+        const lines = readFileSync(eventsPath, "utf8").split(/\r?\n/).filter((l) => l.trim().length > 0);
+        const gate = createDecisionGate({
+            workflowId: "wf_missing",
+            registryPath,
+            databaseUrl: dbPath,
+            projectRoot: root,
+            logStep: () => { },
+            truthReport: () => { },
+        });
+        for (const line of lines) {
+            const ev = JSON.parse(line);
+            if (ev.workflowId === "wf_missing") {
+                gate.appendRunEvent(ev);
+            }
+        }
+        await expect(gate.assertSafeForIrreversibleAction()).rejects.toSatisfy((e) => {
+            if (!(e instanceof DecisionUnsafeError))
+                return false;
+            if (e.trustDecision !== "unsafe")
+                return false;
+            return e.message.split("\n").length === 6;
+        });
+    });
+});
+//# sourceMappingURL=decisionGate.assertSafe.test.js.map

package/dist/decisionGate.assertSafe.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionGate.assertSafe.test.js","sourceRoot":"","sources":["../src/decisionGate.assertSafe.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAEjE,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,yFAAyF;IACzF,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IAEnB,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACnE,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,UAAU,EAAE,YAAY;YACxB,YAAY;YACZ,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;SACtB,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACvD,IAAI,EAAE,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAU,EAAE,EAAE;YACpF,IAAI,CAAC,CAAC,CAAC,YAAY,mBAAmB,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtD,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC/C,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/decisionGate.d.ts

@@ -0,0 +1,23 @@
+import { type OutcomeCertificateV1 } from "./outcomeCertificate.js";
+import type { VerificationPolicy, WorkflowResult } from "./types.js";
+export type CreateDecisionGateOptions = {
+    workflowId: string;
+    registryPath: string;
+    databaseUrl: string;
+    projectRoot?: string;
+    verificationPolicy?: VerificationPolicy;
+    logStep?: (line: object) => void;
+    truthReport?: (report: string) => void;
+};
+export type DecisionGate = {
+    appendRunEvent(value: unknown): void;
+    toNdjsonUtf8(): Buffer;
+    evaluate(): Promise<WorkflowResult>;
+    evaluateCertificate(): Promise<OutcomeCertificateV1>;
+    assertSafeForIrreversibleAction(): Promise<void>;
+};
+/**
+ * Runtime integration: buffer structured run events, evaluate against the registry + DB, assert before irreversible work.
+ */
+export declare function createDecisionGate(options: CreateDecisionGateOptions): DecisionGate;
+//# sourceMappingURL=decisionGate.d.ts.map

package/dist/decisionGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionGate.d.ts","sourceRoot":"","sources":["../src/decisionGate.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,yBAAyB,CAAC;AAKjC,OAAO,KAAK,EAA0C,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAW7G,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,YAAY,IAAI,MAAM,CAAC;IACvB,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrD,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,YAAY,CA+EnF"}

package/dist/decisionGate.js

@@ -0,0 +1,85 @@
+import path from "node:path";
+import { parseVerificationDatabaseUrl } from "./verificationDatabaseUrl.js";
+import { CLI_OPERATIONAL_CODES, runLevelIssue } from "./failureCatalog.js";
+import { buildOutcomeCertificateFromWorkflowResult, } from "./outcomeCertificate.js";
+import { verifyRunStateFromBufferedRunEvents } from "./verifyRunStateFromBufferedRunEvents.js";
+import { loadSchemaValidator } from "./schemaLoad.js";
+import { resolveVerificationPolicyInput } from "./verificationPolicy.js";
+import { TruthLayerError } from "./truthLayerError.js";
+import { trustDecisionFromCertificate } from "./trustDecision.js";
+import { formatDecisionBlockerForHumans } from "./decisionBlocker.js";
+import { DecisionUnsafeError } from "./decisionUnsafeError.js";
+const validateEvent = loadSchemaValidator("event");
+function verificationDatabaseFromUrl(databaseUrl, projectRoot) {
+    return parseVerificationDatabaseUrl(databaseUrl, projectRoot);
+}
+/**
+ * Runtime integration: buffer structured run events, evaluate against the registry + DB, assert before irreversible work.
+ */
+export function createDecisionGate(options) {
+    const projectRoot = path.resolve(options.projectRoot ?? process.cwd());
+    const registryPath = path.resolve(projectRoot, options.registryPath);
+    const verificationPolicy = resolveVerificationPolicyInput(options.verificationPolicy);
+    const database = verificationDatabaseFromUrl(options.databaseUrl, projectRoot);
+    const logStep = options.logStep ?? (() => { });
+    const truthReport = options.truthReport ?? (() => { });
+    const bufferedRunEvents = [];
+    const runLevelReasons = [];
+    const api = {};
+    api.appendRunEvent = (value) => {
+        if (typeof value !== "object" || value === null) {
+            runLevelReasons.push(runLevelIssue("MALFORMED_EVENT_LINE"));
+            return;
+        }
+        if (!validateEvent(value)) {
+            runLevelReasons.push(runLevelIssue("MALFORMED_EVENT_LINE"));
+            return;
+        }
+        const ev = value;
+        if (ev.workflowId !== options.workflowId) {
+            return;
+        }
+        bufferedRunEvents.push(ev);
+    };
+    api.toNdjsonUtf8 = () => {
+        const parts = [];
+        for (const ev of bufferedRunEvents) {
+            parts.push(`${JSON.stringify(ev)}\n`);
+        }
+        return Buffer.from(parts.join(""), "utf8");
+    };
+    api.evaluate = async () => {
+        if (!bufferedRunEvents.length && !runLevelReasons.length) {
+            throw new TruthLayerError(CLI_OPERATIONAL_CODES.CLI_USAGE, "DecisionGate.evaluate requires at least one buffered run event for the workflow.");
+        }
+        return verifyRunStateFromBufferedRunEvents({
+            workflowId: options.workflowId,
+            registryPath,
+            database,
+            projectRoot,
+            bufferedRunEvents,
+            runLevelReasons,
+            verificationPolicy,
+            logStep,
+            truthReport,
+        });
+    };
+    api.evaluateCertificate = async () => {
+        const result = await api.evaluate();
+        const certificate = buildOutcomeCertificateFromWorkflowResult(result, "contract_sql");
+        const validateCert = loadSchemaValidator("outcome-certificate-v1");
+        if (!validateCert(certificate)) {
+            throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
+        }
+        return certificate;
+    };
+    api.assertSafeForIrreversibleAction = async () => {
+        const certificate = await api.evaluateCertificate();
+        if (trustDecisionFromCertificate(certificate) !== "safe") {
+            const { lines } = formatDecisionBlockerForHumans(certificate);
+            throw new DecisionUnsafeError(certificate, lines);
+        }
+    };
+    return api;
+}
+//# sourceMappingURL=decisionGate.js.map

package/dist/decisionGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionGate.js","sourceRoot":"","sources":["../src/decisionGate.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EACL,yCAAyC,GAE1C,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAEnD,SAAS,2BAA2B,CAAC,WAAmB,EAAE,WAAmB;IAC3E,OAAO,4BAA4B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAoBD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,8BAA8B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEtD,MAAM,iBAAiB,GAAe,EAAE,CAAC;IACzC,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,GAAG,GAAG,EAAkB,CAAC;IAE/B,GAAG,CAAC,cAAc,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,KAAiB,CAAC;QAC7B,IAAI,EAAE,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC;IAEF,GAAG,CAAC,YAAY,GAAG,GAAW,EAAE;QAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,GAAG,CAAC,QAAQ,GAAG,KAAK,IAA6B,EAAE;QACjD,IAAI,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,SAAS,EAC/B,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,mCAAmC,CAAC;YACzC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY;YACZ,QAAQ;YACR,WAAW;YACX,iBAAiB;YACjB,eAAe;YACf,kBAAkB;YAClB,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,GAAG,CAAC,mBAAmB,GAAG,KAAK,IAAmC,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,yCAAyC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,YAAY,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CACvB,qBAAqB,CAAC,8BAA8B,EACpD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC,CAC1C,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IAEF,GAAG,CAAC,+BAA+B,GAAG,KAAK,IAAmB,EAAE;QAC9D,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpD,IAAI,4BAA4B,CAAC,WAAW,CAAC,KAAK,MAAM,EAAE,CAAC;YACzD,MAAM,EAAE,KAAK,EAAE,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;YAC9D,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/decisionGate.persistBundle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decisionGate.persistBundle.test.d.ts.map

package/dist/decisionGate.persistBundle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionGate.persistBundle.test.d.ts","sourceRoot":"","sources":["../src/decisionGate.persistBundle.test.ts"],"names":[],"mappings":""}

package/dist/{withWorkflowVerification.persistBundle.test.js → decisionGate.persistBundle.test.js}

@@ -7,14 +7,15 @@ import { DatabaseSync } from "node:sqlite";
 import { describe, expect, it, beforeAll, afterAll } from "vitest";
 import { normalizeSpkiPemForSidecar } from "./workflowResultSignature.js";
 import { loadCorpusRun, resolveCorpusRootReal } from "./debugCorpus.js";
-import { withWorkflowVerification } from "./pipeline.js";
+import { createDecisionGate } from "./decisionGate.js";
+import { writeRunBundleFromDecisionGate } from "./agentRunBundle.js";
 import { verifyRunBundleSignature } from "./verifyRunBundleSignature.js";
 const root = join(fileURLToPath(import.meta.url), "..", "..");
-describe("withWorkflowVerification persistBundle", () => {
+describe("DecisionGate run bundle write", () => {
     let workDir;
     let dbPath;
     beforeAll(() => {
-        workDir = mkdtempSync(join(tmpdir(), "etl-wfv-persist-"));
+        workDir = mkdtempSync(join(tmpdir(), "etl-dg-persist-"));
         dbPath = join(workDir, "demo.db");
         const sql = readFileSync(join(root, "examples", "seed.sql"), "utf8");
         const db = new DatabaseSync(dbPath);
@@ -34,19 +35,24 @@ describe("withWorkflowVerification persistBundle", () => {
         const runId = "hook_run";
         const outDir = join(bundleParent, runId);
         try {
-            const result = await withWorkflowVerification({
+            const gate = createDecisionGate({
                 workflowId: wfId,
                 registryPath,
-                dbPath,
+                databaseUrl: dbPath,
+                projectRoot: root,
                 truthReport: () => { },
-                persistBundle: { outDir },
-            }, (observeStep) => {
-                for (const ev of events) {
-                    observeStep(ev);
-                }
             });
+            for (const ev of events) {
+                gate.appendRunEvent(ev);
+            }
+            const result = await gate.evaluate();
             expect(result.steps.length).toBe(1);
             expect(result.steps[0].status).toBe("verified");
+            writeRunBundleFromDecisionGate({
+                outDir,
+                eventsNdjson: gate.toNdjsonUtf8(),
+                workflowResult: result,
+            });
             const loaded = loadCorpusRun(resolveCorpusRootReal(bundleParent), runId);
             expect(loaded.loadStatus).toBe("ok");
             const written = readFileSync(join(outDir, "events.ndjson"), "utf8").trim().split(/\r?\n/);
@@ -57,7 +63,7 @@ describe("withWorkflowVerification persistBundle", () => {
             rmSync(bundleParent, { recursive: true, force: true });
         }
     });
-    it("persistBundle with ed25519PrivateKeyPemPath writes v2 bundle verifiable by verifyRunBundleSignature", async () => {
+    it("ed25519PrivateKeyPemPath writes v2 bundle verifiable by verifyRunBundleSignature", async () => {
         const eventsPath = join(root, "examples", "events.ndjson");
         const registryPath = join(root, "examples", "tools.json");
         const wfId = "wf_complete";
@@ -74,16 +80,22 @@ describe("withWorkflowVerification persistBundle", () => {
         writeFileSync(keyPath, privatePem, "utf8");
         writeFileSync(pubPath, normalizeSpkiPemForSidecar(publicPem), "utf8");
         try {
-            await withWorkflowVerification({
+            const gate = createDecisionGate({
                 workflowId: wfId,
                 registryPath,
-                dbPath,
+                databaseUrl: dbPath,
+                projectRoot: root,
                 truthReport: () => { },
-                persistBundle: { outDir, ed25519PrivateKeyPemPath: keyPath },
-            }, (observeStep) => {
-                for (const ev of events) {
-                    observeStep(ev);
-                }
+            });
+            for (const ev of events) {
+                gate.appendRunEvent(ev);
+            }
+            const result = await gate.evaluate();
+            writeRunBundleFromDecisionGate({
+                outDir,
+                eventsNdjson: gate.toNdjsonUtf8(),
+                workflowResult: result,
+                ed25519PrivateKeyPemPath: keyPath,
             });
             const loaded = loadCorpusRun(resolveCorpusRootReal(bundleParent), runId);
             expect(loaded.loadStatus).toBe("ok");
@@ -101,4 +113,4 @@ describe("withWorkflowVerification persistBundle", () => {
         }
     });
 });
-//# sourceMappingURL=withWorkflowVerification.persistBundle.test.js.map
+//# sourceMappingURL=decisionGate.persistBundle.test.js.map

package/dist/decisionGate.persistBundle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionGate.persistBundle.test.js","sourceRoot":"","sources":["../src/decisionGate.persistBundle.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9D,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IAEnB,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,aAAa,CAAC;QAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAE/G,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;gBAC9B,UAAU,EAAE,IAAI;gBAChB,YAAY;gBACZ,WAAW,EAAE,MAAM;gBACnB,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;aACtB,CAAC,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEjD,8BAA8B,CAAC;gBAC7B,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;gBACjC,cAAc,EAAE,MAAM;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1F,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,aAAa,CAAC;QAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAE/G,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,aAAa,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QACjF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACjD,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3C,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,kBAAkB,CAAC;gBAC9B,UAAU,EAAE,IAAI;gBAChB,YAAY;gBACZ,WAAW,EAAE,MAAM;gBACnB,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;aACtB,CAAC,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,8BAA8B,CAAC;gBAC7B,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;gBACjC,cAAc,EAAE,MAAM;gBACtB,wBAAwB,EAAE,OAAO;aAClC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,aAAa,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBAAE,OAAO;YACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,cAAc,CAAC,aAAa,KAAK,CAAC;gBAAE,OAAO;YACtD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/E,0BAA0B,CAC3B,CAAC;YAEF,MAAM,EAAE,GAAG,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/decisionUnsafeError.d.ts

@@ -0,0 +1,8 @@
+import type { OutcomeCertificateV1 } from "./outcomeCertificate.js";
+import type { TrustDecision } from "./trustDecision.js";
+export declare class DecisionUnsafeError extends Error {
+    readonly trustDecision: TrustDecision;
+    readonly certificate: OutcomeCertificateV1;
+    constructor(certificate: OutcomeCertificateV1, lines: string[]);
+}
+//# sourceMappingURL=decisionUnsafeError.d.ts.map

package/dist/decisionUnsafeError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionUnsafeError.d.ts","sourceRoot":"","sources":["../src/decisionUnsafeError.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;gBAE/B,WAAW,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE;CAM/D"}

package/dist/decisionUnsafeError.js

@@ -0,0 +1,12 @@
+import { trustDecisionFromCertificate } from "./trustDecision.js";
+export class DecisionUnsafeError extends Error {
+    trustDecision;
+    certificate;
+    constructor(certificate, lines) {
+        super(lines.join("\n"));
+        this.name = "DecisionUnsafeError";
+        this.certificate = certificate;
+        this.trustDecision = trustDecisionFromCertificate(certificate);
+    }
+}
+//# sourceMappingURL=decisionUnsafeError.js.map

package/dist/decisionUnsafeError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionUnsafeError.js","sourceRoot":"","sources":["../src/decisionUnsafeError.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,aAAa,CAAgB;IAC7B,WAAW,CAAuB;IAE3C,YAAY,WAAiC,EAAE,KAAe;QAC5D,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/discovery-payload-v1.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "identityOneLiner": "State verification engine: read-only SQL checks that database state matches expectations from structured tool activity (not arbitrary logs)—not proof of execution",
+  "identityOneLiner": "Read-only checks at verify time—not color.",
   "llmBranch": "main",
   "links": {
     "site": "https://agentskeptic.com/",
@@ -11,110 +11,218 @@
     "repo": "https://github.com/jwekavanagh/agentskeptic",
     "npm": "https://www.npmjs.com/package/agentskeptic",
     "llmsRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/llms.txt",
-    "llmsBlob": "https://github.com/jwekavanagh/agentskeptic/blob/main/llms.txt"
+    "llmsBlob": "https://github.com/jwekavanagh/agentskeptic/blob/main/llms.txt",
+    "integratorVerificationSsotRaw": "https://raw.githubusercontent.com/jwekavanagh/agentskeptic/refs/heads/main/docs/integrator-verification.md"
   },
   "appendix": {
     "slug": "/database-truth-vs-traces",
-    "visitorProblemAnswer": "Teams ship agent and automation workflows where traces, tool responses, and success flags look green while the database row is missing, stale, or wrong. AgentSkeptic compares structured tool activity to read-only SQL against your SQLite or Postgres at verification time and reports whether observed state matched expectations derived from what the workflow claimed—not whether the step narrative read as successful.\n\nUse it when you need persisted rows checked against declared tool parameters before customer-facing actions, compliance evidence, or CI gates.",
+    "visitorProblemAnswer": "Traces say success. Your data often disagrees. Read-only checks at verify time compare tool claims to stored state—before you ship or bill.",
     "intentPhrases": [
-      "green trace wrong database row agent workflow",
-      "trace says success but CRM row missing",
-      "read-only SQL check after LangGraph or automation run",
-      "structured tool activity NDJSON verification",
-      "ROW_ABSENT inconsistent workflow result"
+      "trace v data",
+      "read-only verify",
+      "ROW_ABSENT"
     ],
     "notFor": [
-      "unstructured log search as verification",
-      "proof that a specific HTTP request caused a write",
-      "non-SQL systems without a queryable mirror"
+      "logs",
+      "HTTP proof",
+      "no store"
     ],
     "relatedQueries": [
-      "green LangGraph trace postgres row missing",
-      "how to verify AI agent wrote to postgres",
-      "CI passed but database inconsistent side effect",
-      "compare tool parameters to sql row verification",
-      "agent run record workflow result json"
+      "langgraph",
+      "agent verify",
+      "trace data"
     ],
-    "demandMoments": [
-      "Green LangGraph or agent trace but wrong or missing Postgres row",
-      "OpenAI-style tool loop reported success; CRM or SQLite state does not match",
-      "CI passed on workflow logs; database side effect never showed up",
-      "Need a gate before production: read-only verification, not more log volume",
-      "Green dashboards still happen when an AI agent writes wrong CRM data and you need read-only SQL before you trust the row.",
-      "When automation reports success while database records disagree with declared tool parameters until read-only verification, treat trace color as non-authoritative.",
-      "Debugging Postgres after a LangGraph run requires row-level truth at verification time beyond trace completion flags alone for customer-facing data.",
-      "When a Stripe webhook returns OK you still need the ledger database row to match before finance treats settlement as final and read-only SQL verifies persisted state.",
-      "CI can stay green on workflow logs while the database side effect is missing until a read-only gate surfaces ROW_ABSENT before production."
+    "problemIndex": [
+      {
+        "moment": "Green trace, bad data",
+        "primaryRoute": "/guides/trace-green-postgres-row-missing",
+        "relatedRoutes": [
+          "/integrate",
+          "/database-truth-vs-traces"
+        ]
+      },
+      {
+        "moment": "Tool ok, CRM wrong",
+        "primaryRoute": "/guides/tool-loop-success-crm-state-wrong",
+        "relatedRoutes": [
+          "/integrate",
+          "/pricing"
+        ]
+      },
+      {
+        "moment": "CI green, no write",
+        "primaryRoute": "/guides/ci-green-logs-row-absent",
+        "relatedRoutes": [
+          "/guides/ci-green-missing-database-side-effect",
+          "/integrate"
+        ]
+      },
+      {
+        "moment": "Pre-prod read-only gate",
+        "primaryRoute": "/guides/pre-production-read-only-sql-gate",
+        "relatedRoutes": [
+          "/integrate",
+          "/pricing"
+        ]
+      },
+      {
+        "moment": "AI CRM data wrong",
+        "primaryRoute": "/guides/ai-agent-wrong-crm-data",
+        "relatedRoutes": [
+          "/database-truth-vs-traces"
+        ]
+      },
+      {
+        "moment": "Params vs store",
+        "primaryRoute": "/guides/automation-success-database-mismatch",
+        "relatedRoutes": [
+          "/integrate"
+        ]
+      },
+      {
+        "moment": "LangGraph data check",
+        "primaryRoute": "/guides/debug-postgres-after-langgraph",
+        "relatedRoutes": [
+          "/guides/verify-langgraph-workflows",
+          "/integrate"
+        ]
+      },
+      {
+        "moment": "Webhook vs ledger",
+        "primaryRoute": "/guides/stripe-webhook-database-alignment",
+        "relatedRoutes": [
+          "/pricing"
+        ]
+      },
+      {
+        "moment": "CI green, no effect",
+        "primaryRoute": "/guides/scenario-ci-green-side-effect-missing",
+        "relatedRoutes": [
+          "/guides/ci-green-missing-database-side-effect",
+          "/integrate"
+        ]
+      }
     ],
     "indexableGuides": [
       {
-        "path": "/guides/verify-langgraph-workflows",
-        "navLabel": "LangGraph workflows and your database",
-        "problemAnchor": "LangGraph runs produce structured tool parameters; traces and success flags do not prove the Postgres or SQLite row exists with the values your graph implied at verification time."
+        "path": "/guides/ai-agent-wrong-crm-data",
+        "navLabel": "ai-agent-wrong-crm-data",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/ai-agent-wrong-crm-data — read-only SQL verification context."
       },
       {
-        "path": "/guides/trace-green-postgres-row-missing",
-        "navLabel": "Green trace, missing Postgres row",
-        "problemAnchor": "Green LangGraph or agent trace but wrong or missing Postgres row"
+        "path": "/guides/automation-success-database-mismatch",
+        "navLabel": "automation-success-database-mismatch",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/automation-success-database-mismatch — read-only SQL verification context."
       },
       {
-        "path": "/guides/tool-loop-success-crm-state-wrong",
-        "navLabel": "Tool loop success, CRM state wrong",
-        "problemAnchor": "OpenAI-style tool loop reported success; CRM or SQLite state does not match"
+        "path": "/guides/buyer-ci-enforcement-metering",
+        "navLabel": "buyer-ci-enforcement-metering",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/buyer-ci-enforcement-metering — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/buyer-commercial-boundary",
+        "navLabel": "buyer-commercial-boundary",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/buyer-commercial-boundary — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/buyer-trust-production-implications",
+        "navLabel": "buyer-trust-production-implications",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/buyer-trust-production-implications — read-only SQL verification context."
       },
       {
         "path": "/guides/ci-green-logs-row-absent",
-        "navLabel": "CI green logs, row absent",
-        "problemAnchor": "CI passed on workflow logs; database side effect never showed up"
+        "navLabel": "ci-green-logs-row-absent",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/ci-green-logs-row-absent — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/ci-green-missing-database-side-effect",
+        "navLabel": "ci-green-missing-database-side-effect",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/ci-green-missing-database-side-effect — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/debug-postgres-after-langgraph",
+        "navLabel": "debug-postgres-after-langgraph",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/debug-postgres-after-langgraph — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/first-run-verification",
+        "navLabel": "first-run-verification",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/first-run-verification — read-only SQL verification context."
       },
       {
         "path": "/guides/pre-production-read-only-sql-gate",
-        "navLabel": "Pre-production read-only SQL gate",
-        "problemAnchor": "Need a gate before production: read-only verification, not more log volume"
+        "navLabel": "pre-production-read-only-sql-gate",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/pre-production-read-only-sql-gate — read-only SQL verification context."
       },
       {
-        "path": "/guides/ai-agent-wrong-crm-data",
-        "navLabel": "AI agent wrong CRM data read-only check",
-        "problemAnchor": "Green dashboards still happen when an AI agent writes wrong CRM data"
+        "path": "/guides/scenario-agent-crm-silent-drift",
+        "navLabel": "scenario-agent-crm-silent-drift",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/scenario-agent-crm-silent-drift — read-only SQL verification context."
       },
       {
-        "path": "/guides/automation-success-database-mismatch",
-        "navLabel": "Automation success vs database mismatch",
-        "problemAnchor": "When automation reports success while database records disagree with declared tool parameters until read-only verification"
+        "path": "/guides/scenario-ci-green-side-effect-missing",
+        "navLabel": "scenario-ci-green-side-effect-missing",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/scenario-ci-green-side-effect-missing — read-only SQL verification context."
       },
       {
-        "path": "/guides/debug-postgres-after-langgraph",
-        "navLabel": "Debug Postgres after LangGraph runs",
-        "problemAnchor": "Debugging Postgres after a LangGraph run requires row-level truth at verification time beyond trace completion flags alone"
+        "path": "/guides/scenario-green-trace-row-missing",
+        "navLabel": "scenario-green-trace-row-missing",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/scenario-green-trace-row-missing — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/scenario-preprod-gate-before-ship",
+        "navLabel": "scenario-preprod-gate-before-ship",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/scenario-preprod-gate-before-ship — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/scenario-stripe-webhook-ledger-mismatch",
+        "navLabel": "scenario-stripe-webhook-ledger-mismatch",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/scenario-stripe-webhook-ledger-mismatch — read-only SQL verification context."
       },
       {
         "path": "/guides/stripe-webhook-database-alignment",
-        "navLabel": "Stripe webhook OK vs database alignment",
-        "problemAnchor": "When a Stripe webhook returns OK you still need the ledger database row to match before finance treats settlement as final"
+        "navLabel": "stripe-webhook-database-alignment",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/stripe-webhook-database-alignment — read-only SQL verification context."
       },
       {
-        "path": "/guides/ci-green-missing-database-side-effect",
-        "navLabel": "CI green but missing database side effect",
-        "problemAnchor": "CI can stay green on workflow logs while the database side effect is missing until a read-only gate surfaces ROW_ABSENT before production"
+        "path": "/guides/tool-loop-success-crm-state-wrong",
+        "navLabel": "tool-loop-success-crm-state-wrong",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/tool-loop-success-crm-state-wrong — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/trace-green-postgres-row-missing",
+        "navLabel": "trace-green-postgres-row-missing",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/trace-green-postgres-row-missing — read-only SQL verification context."
+      },
+      {
+        "path": "/guides/verify-langgraph-workflows",
+        "navLabel": "verify-langgraph-workflows",
+        "problemAnchor": "Markdown-backed discovery surface content for /guides/verify-langgraph-workflows — read-only SQL verification context."
       }
     ],
     "indexableExamples": [
+      {
+        "path": "/examples/langgraph-checkpoint-trust",
+        "navLabel": "langgraph-checkpoint-trust",
+        "problemAnchor": "Markdown-backed discovery surface content for /examples/langgraph-checkpoint-trust — read-only SQL verification context.",
+        "embedKey": "langgraph_checkpoint_trust"
+      },
       {
         "path": "/examples/wf-complete",
-        "navLabel": "Bundled verified workflow (wf_complete)",
-        "problemAnchor": "Bundled wf_complete demo: read-only SQL matched the expected contacts row under the packaged registry at verification time.",
+        "navLabel": "wf-complete",
+        "problemAnchor": "Markdown-backed discovery surface content for /examples/wf-complete — read-only SQL verification context.",
         "embedKey": "wf_complete"
       },
       {
         "path": "/examples/wf-missing",
-        "navLabel": "Bundled inconsistent workflow (wf_missing)",
-        "problemAnchor": "Bundled wf_missing demo: ROW_ABSENT when structured tool activity implied a row read-only SQL did not find at verification time.",
+        "navLabel": "wf-missing",
+        "problemAnchor": "Markdown-backed discovery surface content for /examples/wf-missing — read-only SQL verification context.",
         "embedKey": "wf_missing"
       }
     ],
     "shareableTerminalDemo": {
-      "title": "Pasteable terminal proof (bundled demo)",
-      "transcript": "### Success (`wf_complete`)\n\nworkflow_id: wf_complete\nworkflow_status: complete\ntrust: TRUSTED: Every step matched the database under the configured verification rules.\nsteps:\n  - seq=0 tool=crm.upsert_contact result=Matched the database.\n\n{\n  \"schemaVersion\": 15,\n  \"workflowId\": \"wf_complete\",\n  \"status\": \"complete\",\n  \"steps\": [{ \"seq\": 0, \"toolId\": \"crm.upsert_contact\", \"status\": \"verified\" }]\n}\n\n### Failure (`wf_missing`)\n\nworkflow_id: wf_missing\nworkflow_status: inconsistent\nsteps:\n  - seq=0 tool=crm.upsert_contact result=Expected row is missing from the database (the log implies a write that is not present).\n    reference_code: ROW_ABSENT\n\n{\n  \"schemaVersion\": 15,\n  \"workflowId\": \"wf_missing\",\n  \"status\": \"inconsistent\",\n  \"steps\": [\n    {\n      \"seq\": 0,\n      \"toolId\": \"crm.upsert_contact\",\n      \"status\": \"missing\",\n      \"reasons\": [{ \"code\": \"ROW_ABSENT\" }]\n    }\n  ]\n}"
+      "title": "Bundled terminal proof",
+      "transcript": "### Success (`wf_complete`)\n\nworkflow_id: wf_complete\nworkflow_status: complete\ntrust: TRUSTED: Every step matched the database under the configured verification rules.\nsteps:\n  - seq=0 tool=crm.upsert_contact result=Matched the database.\n\n{\n  \"schemaVersion\": 15,\n  \"workflowId\": \"wf_complete\",\n  \"status\": \"complete\",\n  \"steps\": [{ \"seq\": 0, \"toolId\": \"crm.upsert_contact\", \"status\": \"verified\" }]\n}\n\n### Failure (`wf_missing`)\n\nworkflow_id: wf_missing\nworkflow_status: inconsistent\nsteps:\n  - seq=0 tool=crm.upsert_contact result:Expected row is missing from the database (the log implies a write that is not present).\n    reference_code: ROW_ABSENT\n\n{\n  \"schemaVersion\": 15,\n  \"workflowId\": \"wf_missing\",\n  \"status\": \"inconsistent\",\n  \"steps\": [\n    {\n      \"seq\": 0,\n      \"toolId\": \"crm.upsert_contact\",\n      \"status\": \"missing\",\n      \"reasons\": [{ \"code\": \"ROW_ABSENT\" }]\n    }\n  ]\n}"
     }
   }
 }