agentskeptic 5.0.0 → 6.0.1

package/dist/quickVerify/quickParamPointerPromotionGoldens.test.js

@@ -7,6 +7,9 @@ import { buildQuickContractEventsNdjson } from "./buildQuickContractEventsNdjson
 import { stableStringify } from "./canonicalJson.js";
 const root = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
 const dbPath = join(root, "test/fixtures/quick-param-pointer/pointer-promotion.sqlite");
+function readGolden(path) {
+    return readFileSync(path, "utf8").replace(/\r\n/g, "\n");
+}
 const promoLine = JSON.stringify({
     toolId: "aa.save",
     params: { contacts: { idid: "c_ok", name: "Alice", status: "active" } },
@@ -19,16 +22,16 @@ describe("quick param pointer promotion goldens", () => {
         });
         const row = report.units.find((u) => u.kind === "row");
         expect(row?.contractEligible).toBe(true);
-        expect(readFileSync(join(root, "test/golden/quick-param-pointer/v1/export.tools.json"), "utf8")).toBe(registryUtf8);
+        expect(readGolden(join(root, "test/golden/quick-param-pointer/v1/export.tools.json"))).toBe(registryUtf8);
         const events = buildQuickContractEventsNdjson({ workflowId: "quick-verify", exports: contractExports });
-        expect(readFileSync(join(root, "test/golden/quick-param-pointer/v1/contract.events.ndjson"), "utf8")).toBe(events);
-        expect(readFileSync(join(root, "test/golden/quick-param-pointer/v1/quick.stdout.promoted.jsonline"), "utf8")).toBe(quickReportToStdoutLine(report));
+        expect(readGolden(join(root, "test/golden/quick-param-pointer/v1/contract.events.ndjson"))).toBe(events);
+        expect(readGolden(join(root, "test/golden/quick-param-pointer/v1/quick.stdout.promoted.jsonline"))).toBe(quickReportToStdoutLine(report));
         const slice = {
             confidence: row?.confidence,
             reasonCodes: row?.reasonCodes,
             inference: row?.inference,
         };
-        expect(readFileSync(join(root, "test/golden/quick-param-pointer/v1/expected.unit-row-slice.json"), "utf8")).toBe(stableStringify(slice) + "\n");
+        expect(readGolden(join(root, "test/golden/quick-param-pointer/v1/expected.unit-row-slice.json"))).toBe(stableStringify(slice) + "\n");
     });
 });
 //# sourceMappingURL=quickParamPointerPromotionGoldens.test.js.map

package/dist/quickVerify/quickParamPointerPromotionGoldens.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"quickParamPointerPromotionGoldens.test.js","sourceRoot":"","sources":["../../src/quickVerify/quickParamPointerPromotionGoldens.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,4DAA4D,CAAC,CAAC;AACxF,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,CAAC;IACb,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;CACxE,CAAC,GAAG,IAAI,CAAC;AAEZ,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC;YACrE,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,sDAAsD,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACnG,YAAY,CACb,CAAC;QACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,2DAA2D,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACxG,MAAM,CACP,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,mEAAmE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAChH,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,UAAU,EAAE,GAAG,EAAE,UAAU;YAC3B,WAAW,EAAE,GAAG,EAAE,WAAW;YAC7B,SAAS,EAAE,GAAG,EAAE,SAAS;SAC1B,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,iEAAiE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAC9G,eAAe,CAAC,KAAK,CAAC,GAAG,IAAI,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"quickParamPointerPromotionGoldens.test.js","sourceRoot":"","sources":["../../src/quickVerify/quickParamPointerPromotionGoldens.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,4DAA4D,CAAC,CAAC;AAExF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC;AACD,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,CAAC;IACb,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;CACxE,CAAC,GAAG,IAAI,CAAC;AAEZ,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC;YACrE,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,sDAAsD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,8BAA8B,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,2DAA2D,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,mEAAmE,CAAC,CAAC,CAAC,CAAC,IAAI,CACtG,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;QACF,MAAM,KAAK,GAAG;YACZ,UAAU,EAAE,GAAG,EAAE,UAAU;YAC3B,WAAW,EAAE,GAAG,EAAE,WAAW;YAC7B,SAAS,EAAE,GAAG,EAAE,SAAS;SAC1B,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,iEAAiE,CAAC,CAAC,CAAC,CAAC,IAAI,CACpG,eAAe,CAAC,KAAK,CAAC,GAAG,IAAI,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/remediationConsumptionGuard.test.js

@@ -12,6 +12,8 @@ const PROPERTY_ACCESS_ALLOWLIST = new Set([
     "src/workflowTruthReport.ts",
     "src/runComparison.ts",
     "src/evidenceCompleteness.ts",
+    "src/failureSpine.ts",
+    "src/formatFailureSpineHuman.ts",
 ]);
 const propAccessRecommended = /\.(\s*)recommendedAction\b/;
 const propAccessSafe = /\.(\s*)automationSafe\b/;

package/dist/remediationConsumptionGuard.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"remediationConsumptionGuard.test.js","sourceRoot":"","sources":["../src/remediationConsumptionGuard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,0BAA0B;IAC1B,8BAA8B;IAC9B,+BAA+B;IAC/B,4BAA4B;IAC5B,sBAAsB;IACtB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAEjD,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAgB,EAAE;IAC5D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,uCAAuC,CAAC;QACvD,MAAM,OAAO,GAAG,oCAAoC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,SAAS,GACb,4GAA4G,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,WAAW,GACf,EAAE,CAAC,WAAW,EAAE,KAAK,wBAAwB;gBAC7C,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,UAAU,GAAG,4BAA4B,CAAC;QAChD,MAAM,OAAO,GAAG,wCAAwC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAyB,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"remediationConsumptionGuard.test.js","sourceRoot":"","sources":["../src/remediationConsumptionGuard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,0BAA0B;IAC1B,8BAA8B;IAC9B,+BAA+B;IAC/B,4BAA4B;IAC5B,sBAAsB;IACtB,6BAA6B;IAC7B,qBAAqB;IACrB,gCAAgC;CACjC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAEjD,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAgB,EAAE;IAC5D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,uCAAuC,CAAC;QACvD,MAAM,OAAO,GAAG,oCAAoC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,SAAS,GACb,4GAA4G,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,WAAW,GACf,EAAE,CAAC,WAAW,EAAE,KAAK,wBAAwB;gBAC7C,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,UAAU,GAAG,4BAA4B,CAAC;QAChD,MAAM,OAAO,GAAG,wCAAwC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAyB,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,WAAW,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/remediationMessage.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Sole user-visible rerun / remediation line text per RecommendedActionCode (SSOT).
+ */
+import type { RecommendedActionCode } from "./types.js";
+export declare function remediationMessageForRecommendedAction(code: RecommendedActionCode): string;
+//# sourceMappingURL=remediationMessage.d.ts.map

package/dist/remediationMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediationMessage.d.ts","sourceRoot":"","sources":["../src/remediationMessage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA2BxD,wBAAgB,sCAAsC,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAE1F"}

package/dist/remediationMessage.js

@@ -0,0 +1,30 @@
+/**
+ * Sole user-visible rerun / remediation line text per RecommendedActionCode (SSOT).
+ */
+const REMEDIATION_BY_CODE = {
+    none: "No further verification action is required for this outcome under the configured rules.",
+    manual_review: "Review the evidence completeness block and workflow truth report, then decide on a manual fix path.",
+    deduplicate: "Resolve duplicate or conflicting rows that matched the same verification key, then rerun verify.",
+    reconcile_downstream_state: "Fix downstream database or service state to match declared expectations, then rerun verify.",
+    correct_verification_inputs: "Correct registry, events, or tool parameters so expectations resolve, then rerun verify.",
+    improve_read_connectivity: "Restore read-only database or witness connectivity and credentials, then rerun verify.",
+    resolve_multi_effect_failures: "Align multi-effect registry coverage or split steps so each effect is verifiable, then rerun verify.",
+    align_tool_observations: "Align repeated tool observations so canonical params agree, then rerun verify.",
+    fix_event_ingest_and_steps: "Repair NDJSON event capture so each line is schema-valid tool_observed for this workflow, then rerun verify.",
+    fix_event_sequence_order: "Fix capture ordering or timestamps so the event sequence is coherent, then rerun verify.",
+    fix_run_context_controls: "Fix model/retrieval/control ordering so observations are fairly evaluated, then rerun verify.",
+    fix_cli_usage: "Fix CLI flags or paths (events, registry, database URL), then rerun verify.",
+    fix_registry_events_or_compare_files: "Align registry JSON with events and database, then rerun verify.",
+    fix_verification_database_connection: "Point verify at a reachable read-only database URL (not SQLite file mode for remote witnesses), then rerun verify.",
+    fix_saved_workflow_json: "Repair saved workflow JSON used for compare or replay, then rerun verify.",
+    fix_compare_workflow_inputs: "Fix compare inputs so both runs are compatible, then rerun compare.",
+    fix_execution_trace_structure: "Repair execution trace structure used for analysis, then retry.",
+    fix_verification_policy_and_hook: "Adjust verification policy timing or hooks, then rerun verify.",
+    fix_plan_document_and_patterns: "Fix plan document patterns referenced by plan-transition verification.",
+    fix_plan_transition_cli_and_refs: "Fix plan-transition CLI arguments and git refs, then rerun.",
+    upgrade_git_or_retry_git: "Upgrade git tooling or retry after git transient errors.",
+};
+export function remediationMessageForRecommendedAction(code) {
+    return REMEDIATION_BY_CODE[code] ?? REMEDIATION_BY_CODE.manual_review;
+}
+//# sourceMappingURL=remediationMessage.js.map

package/dist/remediationMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediationMessage.js","sourceRoot":"","sources":["../src/remediationMessage.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,mBAAmB,GAA0C;IACjE,IAAI,EAAE,yFAAyF;IAC/F,aAAa,EAAE,qGAAqG;IACpH,WAAW,EAAE,kGAAkG;IAC/G,0BAA0B,EAAE,6FAA6F;IACzH,2BAA2B,EAAE,0FAA0F;IACvH,yBAAyB,EAAE,wFAAwF;IACnH,6BAA6B,EAAE,sGAAsG;IACrI,uBAAuB,EAAE,gFAAgF;IACzG,0BAA0B,EAAE,8GAA8G;IAC1I,wBAAwB,EAAE,0FAA0F;IACpH,wBAAwB,EAAE,+FAA+F;IACzH,aAAa,EAAE,6EAA6E;IAC5F,oCAAoC,EAAE,kEAAkE;IACxG,oCAAoC,EAClC,oHAAoH;IACtH,uBAAuB,EAAE,2EAA2E;IACpG,2BAA2B,EAAE,qEAAqE;IAClG,6BAA6B,EAAE,iEAAiE;IAChG,gCAAgC,EAAE,gEAAgE;IAClG,8BAA8B,EAAE,wEAAwE;IACxG,gCAAgC,EAAE,6DAA6D;IAC/F,wBAAwB,EAAE,0DAA0D;CACrF,CAAC;AAEF,MAAM,UAAU,sCAAsC,CAAC,IAA2B;IAChF,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,aAAa,CAAC;AACxE,CAAC"}

package/dist/remediationWireSurfaceGuard.test.js

@@ -12,6 +12,8 @@ const ALLOWLIST = new Set([
     "src/workflowTruthReport.ts",
     "src/runComparison.ts",
     "src/evidenceCompleteness.ts",
+    "src/failureSpine.ts",
+    "src/formatFailureSpineHuman.ts",
 ]);
 function listProductionTsFiles(dir, out = []) {
     for (const ent of readdirSync(dir, { withFileTypes: true })) {

package/dist/remediationWireSurfaceGuard.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"remediationWireSurfaceGuard.test.js","sourceRoot":"","sources":["../src/remediationWireSurfaceGuard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAY,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,0BAA0B;IAC1B,8BAA8B;IAC9B,+BAA+B;IAC/B,4BAA4B;IAC5B,sBAAsB;IACtB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAgB,EAAE;IAC5D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"remediationWireSurfaceGuard.test.js","sourceRoot":"","sources":["../src/remediationWireSurfaceGuard.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAY,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,0BAA0B;IAC1B,8BAA8B;IAC9B,+BAA+B;IAC/B,4BAA4B;IAC5B,sBAAsB;IACtB,6BAA6B;IAC7B,qBAAqB;IACrB,gCAAgC;CACjC,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAgB,EAAE;IAC5D,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,qBAAqB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,SAAS;YAClD,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/schemaLoad.d.ts

@@ -1,5 +1,5 @@
 import { type ValidateFunction } from "ajv/dist/2020.js";
 export declare function schemasDir(): string;
-export type SchemaValidatorName = "agent-run-record-v1" | "agent-run-record-v2" | "workflow-result-signature" | "event" | "execution-trace-view" | "tools-registry" | "workflow-engine-result" | "workflow-truth-report" | "workflow-result" | "workflow-result-v9" | "workflow-result-compare-input" | "run-comparison-report" | "registry-validation-result" | "cli-error-envelope" | "plan-validation-core" | "quick-verify-report" | "tools-registry-export" | "ci-lock-v1" | "assurance-manifest-v1" | "assurance-run-report-v1" | "assurance-output-v1" | "public-verification-report-v1" | "public-verification-report-v2" | "public-verification-report-v3" | "evidence-completeness-v1" | "outcome-certificate-v1" | "outcome-certificate-v2" | "compare-run-manifest-v1" | "regression-artifact-v1" | "bootstrap-pack-input-v1" | "openai-function-tool-call-item-v1" | "contract-manifest" | "local-run-history-index-v1" | "trust-decision-record-v1" | "trust-certificate-snapshot-v1" | "material-truth-v1" | "material-truth-v2" | "decision-evidence-bundle-manifest-v1" | "decision-evidence-human-layer-v1" | "decision-evidence-exit-v1" | "decision-evidence-attestation-v1" | "decision-evidence-next-action-v1" | "decision-bundle-validation-v1" | "activation-manifest-v1";
+export type SchemaValidatorName = "agent-run-record-v1" | "agent-run-record-v2" | "workflow-result-signature" | "event" | "execution-trace-view" | "tools-registry" | "workflow-engine-result" | "workflow-truth-report" | "workflow-result" | "workflow-result-v9" | "workflow-result-compare-input" | "run-comparison-report" | "registry-validation-result" | "cli-error-envelope" | "plan-validation-core" | "quick-verify-report" | "tools-registry-export" | "ci-lock-v1" | "assurance-manifest-v1" | "assurance-run-report-v1" | "assurance-output-v1" | "public-verification-report-v1" | "public-verification-report-v2" | "public-verification-report-v3" | "evidence-completeness-v1" | "outcome-certificate-v1" | "outcome-certificate-v2" | "outcome-certificate-v3" | "failure-spine-v1" | "compare-run-manifest-v1" | "regression-artifact-v1" | "bootstrap-pack-input-v1" | "openai-function-tool-call-item-v1" | "contract-manifest" | "local-run-history-index-v1" | "trust-decision-record-v1" | "trust-certificate-snapshot-v1" | "material-truth-v1" | "material-truth-v2" | "decision-evidence-bundle-manifest-v1" | "decision-evidence-human-layer-v1" | "decision-evidence-exit-v1" | "decision-evidence-attestation-v1" | "decision-evidence-next-action-v1" | "decision-bundle-validation-v1" | "activation-manifest-v1";
 export declare function loadSchemaValidator(name: SchemaValidatorName): ValidateFunction;
 //# sourceMappingURL=schemaLoad.d.ts.map

package/dist/schemaLoad.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemaLoad.d.ts","sourceRoot":"","sources":["../src/schemaLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AA6ClE,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAaD,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,qBAAqB,GACrB,2BAA2B,GAC3B,OAAO,GACP,sBAAsB,GACtB,gBAAgB,GAChB,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,+BAA+B,GAC/B,uBAAuB,GACvB,4BAA4B,GAC5B,oBAAoB,GACpB,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,YAAY,GACZ,uBAAuB,GACvB,yBAAyB,GACzB,qBAAqB,GACrB,+BAA+B,GAC/B,+BAA+B,GAC/B,+BAA+B,GAC/B,0BAA0B,GAC1B,wBAAwB,GACxB,wBAAwB,GACxB,yBAAyB,GACzB,wBAAwB,GACxB,yBAAyB,GACzB,mCAAmC,GACnC,mBAAmB,GACnB,4BAA4B,GAC5B,0BAA0B,GAC1B,+BAA+B,GAC/B,mBAAmB,GACnB,mBAAmB,GACnB,sCAAsC,GACtC,kCAAkC,GAClC,2BAA2B,GAC3B,kCAAkC,GAClC,kCAAkC,GAClC,+BAA+B,GAC/B,wBAAwB,CAAC;AA0C7B,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAuH/E"}
+{"version":3,"file":"schemaLoad.d.ts","sourceRoot":"","sources":["../src/schemaLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AA6ClE,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAaD,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,qBAAqB,GACrB,2BAA2B,GAC3B,OAAO,GACP,sBAAsB,GACtB,gBAAgB,GAChB,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,+BAA+B,GAC/B,uBAAuB,GACvB,4BAA4B,GAC5B,oBAAoB,GACpB,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,YAAY,GACZ,uBAAuB,GACvB,yBAAyB,GACzB,qBAAqB,GACrB,+BAA+B,GAC/B,+BAA+B,GAC/B,+BAA+B,GAC/B,0BAA0B,GAC1B,wBAAwB,GACxB,wBAAwB,GACxB,wBAAwB,GACxB,kBAAkB,GAClB,yBAAyB,GACzB,wBAAwB,GACxB,yBAAyB,GACzB,mCAAmC,GACnC,mBAAmB,GACnB,4BAA4B,GAC5B,0BAA0B,GAC1B,+BAA+B,GAC/B,mBAAmB,GACnB,mBAAmB,GACnB,sCAAsC,GACtC,kCAAkC,GAClC,2BAA2B,GAC3B,kCAAkC,GAClC,kCAAkC,GAClC,+BAA+B,GAC/B,wBAAwB,CAAC;AA0C7B,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAiI/E"}

package/dist/schemaLoad.js

@@ -131,6 +131,14 @@ export function loadSchemaValidator(name) {
         case "outcome-certificate-v2":
             compileSchemaFile("evidence-completeness-v1", "evidence-completeness-v1.schema.json");
             return compileSchemaFile(name, "outcome-certificate-v2.schema.json");
+        case "failure-spine-v1":
+            ensureWorkflowTruthForWireRefs();
+            return compileSchemaFile(name, "failure-spine-v1.schema.json");
+        case "outcome-certificate-v3":
+            compileSchemaFile("evidence-completeness-v1", "evidence-completeness-v1.schema.json");
+            ensureWorkflowTruthForWireRefs();
+            compileSchemaFile("failure-spine-v1", "failure-spine-v1.schema.json");
+            return compileSchemaFile(name, "outcome-certificate-v3.schema.json");
         case "quick-verify-report":
             compileSchemaFile("evidence-completeness-v1", "evidence-completeness-v1.schema.json");
             ensureWorkflowEmittedDependencies();
@@ -158,8 +166,9 @@ export function loadSchemaValidator(name) {
             return compileSchemaFile(name, "compare-run-manifest-v1.schema.json");
         case "regression-artifact-v1":
             compileSchemaFile("evidence-completeness-v1", "evidence-completeness-v1.schema.json");
-            compileSchemaFile("outcome-certificate-v2", "outcome-certificate-v2.schema.json");
             ensureWorkflowTruthForWireRefs();
+            compileSchemaFile("failure-spine-v1", "failure-spine-v1.schema.json");
+            compileSchemaFile("outcome-certificate-v3", "outcome-certificate-v3.schema.json");
             compileSchemaFile("run-comparison-report", "run-comparison-report.schema.json");
             compileSchemaFile("execution-trace-view", "execution-trace-view.schema.json");
             return compileSchemaFile(name, "regression-artifact-v1.schema.json");
@@ -167,8 +176,9 @@ export function loadSchemaValidator(name) {
             compileSchemaFile("outcome-certificate-v1", "outcome-certificate-v1.schema.json");
             return compileSchemaFile(name, "public-verification-report-v2.schema.json");
         case "public-verification-report-v3":
-            compileSchemaFile("evidence-completeness-v1", "evidence-completeness-v1.schema.json");
-            compileSchemaFile("outcome-certificate-v2", "outcome-certificate-v2.schema.json");
+            // Must use loadSchemaValidator (not compileSchemaFile) so outcome-certificate-v3 cross-$refs
+            // (failure-spine-v1, workflow-truth fragments, evidence-completeness) register before compile.
+            loadSchemaValidator("outcome-certificate-v3");
             return compileSchemaFile(name, "public-verification-report-v3.schema.json");
         case "openai-function-tool-call-item-v1":
             return compileSchemaFile(name, "openai-function-tool-call-item-v1.schema.json");

package/dist/schemaLoad.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemaLoad.js","sourceRoot":"","sources":["../src/schemaLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAyB,MAAM,kBAAkB,CAAC;AAClE,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,MAAM,eAAe,GAAG,UAA4F,CAAC;AAErH,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,mBAAmB,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAEzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,mBAAmB,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAEvD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,mBAAmB,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IAE7D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,IAAI,WAAW,GAAwC,IAAI,CAAC;AAE5D,SAAS,MAAM;IACb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAgDD,MAAM,cAAc,GAA2D,EAAE,CAAC;AAElF,SAAS,iBAAiB,CAAC,IAAyB,EAAE,IAAY;IAChE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,iCAAiC;IACxC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAClF,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;AAClF,CAAC;AAED,2FAA2F;AAC3F,SAAS,8BAA8B;IACrC,iCAAiC,EAAE,CAAC;IACpC,iBAAiB,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC1E,iBAAiB,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,8BAA8B;IACrC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAClF,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,uBAAuB;YAC1B,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,iBAAiB;YACpB,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAChE,KAAK,oBAAoB;YACvB,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACnE,KAAK,+BAA+B;YAClC,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,oBAAoB;YACvB,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACnE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,2BAA2B;YAC9B,OAAO,iBAAiB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QAC1E,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACtD,KAAK,sBAAsB;YACzB,OAAO,iBAAiB,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrE,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC/D,KAAK,uBAAuB;YAC1B,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,4BAA4B;YAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAC3E,KAAK,sBAAsB;YACzB,OAAO,iBAAiB,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrE,KAAK,0BAA0B;YAC7B,OAAO,iBAAiB,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACzE,KAAK,wBAAwB;YAC3B,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,qBAAqB;YACxB,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,uBAAuB;YAC1B,iBAAiB,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;YAClE,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,YAAY;YACf,OAAO,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QAC3D,KAAK,uBAAuB;YAC1B,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,yBAAyB;YAC5B,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,+BAA+B;YAClC,iCAAiC,EAAE,CAAC;YACpC,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iBAAiB,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;YACpE,iBAAiB,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;YAC5E,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,yBAAyB;YAC5B,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,wBAAwB;YAC3B,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,8BAA8B,EAAE,CAAC;YACjC,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;YAChF,iBAAiB,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;YAC9E,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,+BAA+B;YAClC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,+BAA+B;YAClC,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,mCAAmC;YACtC,OAAO,iBAAiB,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;QAClF,KAAK,yBAAyB;YAC5B,iBAAiB,CAAC,mCAAmC,EAAE,+CAA+C,CAAC,CAAC;YACxG,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,4BAA4B;YAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAC3E,KAAK,+BAA+B;YAClC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,0BAA0B;YAC7B,iBAAiB,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,CAAC;YAChG,OAAO,iBAAiB,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACzE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,sCAAsC;YACzC,OAAO,iBAAiB,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAC;QACrF,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,2BAA2B;YAC9B,OAAO,iBAAiB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QAC1E,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,+BAA+B;YAClC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"schemaLoad.js","sourceRoot":"","sources":["../src/schemaLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAyB,MAAM,kBAAkB,CAAC;AAClE,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,MAAM,eAAe,GAAG,UAA4F,CAAC;AAErH,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,mBAAmB,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAEzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,mBAAmB,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAEvD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,mBAAmB,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IAE7D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,IAAI,WAAW,GAAwC,IAAI,CAAC;AAE5D,SAAS,MAAM;IACb,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,eAAe,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAkDD,MAAM,cAAc,GAA2D,EAAE,CAAC;AAElF,SAAS,iBAAiB,CAAC,IAAyB,EAAE,IAAY;IAChE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,iCAAiC;IACxC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAClF,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;AAClF,CAAC;AAED,2FAA2F;AAC3F,SAAS,8BAA8B;IACrC,iCAAiC,EAAE,CAAC;IACpC,iBAAiB,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC1E,iBAAiB,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,8BAA8B;IACrC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAClF,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,uBAAuB;YAC1B,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,iBAAiB;YACpB,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAChE,KAAK,oBAAoB;YACvB,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACnE,KAAK,+BAA+B;YAClC,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,oBAAoB;YACvB,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACnE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,2BAA2B;YAC9B,OAAO,iBAAiB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QAC1E,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACtD,KAAK,sBAAsB;YACzB,OAAO,iBAAiB,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrE,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC/D,KAAK,uBAAuB;YAC1B,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,4BAA4B;YAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAC3E,KAAK,sBAAsB;YACzB,OAAO,iBAAiB,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACrE,KAAK,0BAA0B;YAC7B,OAAO,iBAAiB,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACzE,KAAK,wBAAwB;YAC3B,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,kBAAkB;YACrB,8BAA8B,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;QACjE,KAAK,wBAAwB;YAC3B,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,8BAA8B,EAAE,CAAC;YACjC,iBAAiB,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;YACtE,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,qBAAqB;YACxB,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iCAAiC,EAAE,CAAC;YACpC,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,uBAAuB;YAC1B,iBAAiB,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;YAClE,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,YAAY;YACf,OAAO,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QAC3D,KAAK,uBAAuB;YAC1B,OAAO,iBAAiB,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACtE,KAAK,yBAAyB;YAC5B,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,qBAAqB;YACxB,OAAO,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;QACpE,KAAK,+BAA+B;YAClC,iCAAiC,EAAE,CAAC;YACpC,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,iBAAiB,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;YACpE,iBAAiB,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;YAC5E,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,yBAAyB;YAC5B,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,wBAAwB;YAC3B,iBAAiB,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;YACtF,8BAA8B,EAAE,CAAC;YACjC,iBAAiB,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;YACtE,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,iBAAiB,CAAC,uBAAuB,EAAE,mCAAmC,CAAC,CAAC;YAChF,iBAAiB,CAAC,sBAAsB,EAAE,kCAAkC,CAAC,CAAC;YAC9E,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,KAAK,+BAA+B;YAClC,iBAAiB,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;YAClF,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,+BAA+B;YAClC,6FAA6F;YAC7F,+FAA+F;YAC/F,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;YAC9C,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,mCAAmC;YACtC,OAAO,iBAAiB,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;QAClF,KAAK,yBAAyB;YAC5B,iBAAiB,CAAC,mCAAmC,EAAE,+CAA+C,CAAC,CAAC;YACxG,OAAO,iBAAiB,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QACxE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,4BAA4B;YAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;QAC3E,KAAK,+BAA+B;YAClC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,0BAA0B;YAC7B,iBAAiB,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,CAAC;YAChG,OAAO,iBAAiB,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;QACzE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,mBAAmB;YACtB,OAAO,iBAAiB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;QAClE,KAAK,sCAAsC;YACzC,OAAO,iBAAiB,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAC;QACrF,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,2BAA2B;YAC9B,OAAO,iBAAiB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;QAC1E,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,kCAAkC;YACrC,OAAO,iBAAiB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;QACjF,KAAK,+BAA+B;YAClC,OAAO,iBAAiB,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;QAC9E,KAAK,wBAAwB;YAC3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/shareReport/postPublicVerificationReport.d.ts

@@ -1,4 +1,4 @@
-import type { OutcomeCertificateV1 } from "../outcomeCertificate.js";
+import type { OutcomeCertificateV3 } from "../outcomeCertificate.js";
 export type ShareReportEnvelope = {
     schemaVersion: 1;
     kind: "workflow";
@@ -11,8 +11,8 @@ export type ShareReportEnvelope = {
     quickReport: unknown;
     humanReportText: string;
 } | {
-    schemaVersion: 2;
-    certificate: OutcomeCertificateV1;
+    schemaVersion: 3;
+    certificate: OutcomeCertificateV3;
     cliVersion?: string;
     createdFrom?: string;
 };

package/dist/shareReport/postPublicVerificationReport.js

@@ -26,7 +26,7 @@ export async function postPublicVerificationReport(origin, envelope, fetchImpl =
     }
     try {
         const json = JSON.parse(text);
-        if ((json.schemaVersion !== 1 && json.schemaVersion !== 2) ||
+        if (json.schemaVersion !== 3 ||
             typeof json.id !== "string" ||
             typeof json.url !== "string") {
             return { ok: false, status: res.status, bodySnippet: text.slice(0, 200) };

package/dist/shareReport/postPublicVerificationReport.js.map

@@ -1 +1 @@
-{"version":3,"file":"postPublicVerificationReport.js","sourceRoot":"","sources":["../../src/shareReport/postPublicVerificationReport.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,MAAM,CAAC;AA2B9B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAc,EACd,QAA6B,EAC7B,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,kCAAkC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0D,CAAC;QACvF,IACE,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAC5B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC"}
+{"version":3,"file":"postPublicVerificationReport.js","sourceRoot":"","sources":["../../src/shareReport/postPublicVerificationReport.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,MAAM,CAAC;AA2B9B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAc,EACd,QAA6B,EAC7B,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,kCAAkC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0D,CAAC;QACvF,IACE,IAAI,CAAC,aAAa,KAAK,CAAC;YACxB,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAC5B,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/standardVerifyWorkflowCli.d.ts

@@ -1,4 +1,4 @@
-import { type OutcomeCertificateV1 } from "./outcomeCertificate.js";
+import { type OutcomeCertificateV3 } from "./outcomeCertificate.js";
 import type { WorkflowResult } from "./types.js";
 /**
  * Run batch verification and validate emitted WorkflowResult against schema.
@@ -9,7 +9,7 @@ export declare function runBatchVerifyToValidatedResult(runVerify: () => Promise
 /** Validates engine `WorkflowResult`, builds public Outcome Certificate v1, validates certificate schema. */
 export declare function runBatchVerifyToValidatedCertificate(runVerify: () => Promise<WorkflowResult>): Promise<{
     workflowResult: WorkflowResult;
-    certificate: OutcomeCertificateV1;
+    certificate: OutcomeCertificateV3;
 }>;
 export type StandardVerifyWorkflowCliIo = {
     consoleLog: (line: string) => void;
@@ -21,7 +21,7 @@ export type StandardVerifyWorkflowCliIo = {
 /**
  * Print Outcome Certificate JSON to stdout and exit by `stateRelation` (same thresholds as legacy workflow status).
  */
-export declare function emitOutcomeCertificateCliAndExitByStateRelation(certificate: OutcomeCertificateV1, io: Pick<StandardVerifyWorkflowCliIo, "consoleLog" | "exit">): void;
+export declare function emitOutcomeCertificateCliAndExitByStateRelation(certificate: OutcomeCertificateV3, io: Pick<StandardVerifyWorkflowCliIo, "consoleLog" | "exit">): void;
 /** @internal Emit Outcome Certificate to stdout from an already-validated engine result (lock / bootstrap paths). */
 export declare function emitVerifyWorkflowCliJsonAndExitByStatus(result: WorkflowResult, io: Pick<StandardVerifyWorkflowCliIo, "consoleLog" | "exit">): void;
 /** Thrown after `io.exit(3)` when the process is still alive (e.g. tests mock `exit`). */
@@ -35,16 +35,16 @@ export declare function runStandardVerifyWorkflowCliToTerminalResult(options: {
     /** When set, used instead of `runVerify` + default contract certificate builder (e.g. LangGraph checkpoint trust). */
     runVerifyWithCertificate?: () => Promise<{
         workflowResult: WorkflowResult;
-        certificate: OutcomeCertificateV1;
+        certificate: OutcomeCertificateV3;
     }>;
-    maybeWriteBundle?: (result: WorkflowResult, certificate: OutcomeCertificateV1) => void;
+    maybeWriteBundle?: (result: WorkflowResult, certificate: OutcomeCertificateV3) => void;
     /** When set, human stderr is deferred until after a successful POST to this origin. */
     shareReportOrigin?: string;
     io?: Partial<StandardVerifyWorkflowCliIo>;
     /** When true, prefix stderr human output with `truth_check_verdict:` (agentskeptic check). */
     truthCheckInvoked?: boolean;
 }): Promise<{
-    certificate: OutcomeCertificateV1;
+    certificate: OutcomeCertificateV3;
     workflowResult: WorkflowResult;
 }>;
 /**
@@ -53,7 +53,7 @@ export declare function runStandardVerifyWorkflowCliToTerminalResult(options: {
  */
 export declare function runStandardVerifyWorkflowCliFlow(options: {
     runVerify: () => Promise<WorkflowResult>;
-    maybeWriteBundle?: (result: WorkflowResult, certificate: OutcomeCertificateV1) => void;
+    maybeWriteBundle?: (result: WorkflowResult, certificate: OutcomeCertificateV3) => void;
     /** When set, human stderr is deferred until after a successful POST to this origin. */
     shareReportOrigin?: string;
     io?: Partial<StandardVerifyWorkflowCliIo>;

package/dist/standardVerifyWorkflowCli.js

@@ -22,7 +22,7 @@ export async function runBatchVerifyToValidatedResult(runVerify) {
 export async function runBatchVerifyToValidatedCertificate(runVerify) {
     const workflowResult = await runBatchVerifyToValidatedResult(runVerify);
     const certificate = buildOutcomeCertificateFromWorkflowResult(workflowResult, "contract_sql");
-    const validateCert = loadSchemaValidator("outcome-certificate-v2");
+    const validateCert = loadSchemaValidator("outcome-certificate-v3");
     if (!validateCert(certificate)) {
         throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
     }
@@ -85,7 +85,7 @@ export async function runStandardVerifyWorkflowCliToTerminalResult(options) {
             if (!validateWf(workflowResult)) {
                 throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateWf.errors ?? []));
             }
-            const validateCert = loadSchemaValidator("outcome-certificate-v2");
+            const validateCert = loadSchemaValidator("outcome-certificate-v3");
             if (!validateCert(certificate)) {
                 throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
             }
@@ -121,7 +121,7 @@ export async function runStandardVerifyWorkflowCliToTerminalResult(options) {
     const origin = options.shareReportOrigin;
     if (origin !== undefined) {
         const shareRes = await postPublicVerificationReport(origin, {
-            schemaVersion: 2,
+            schemaVersion: 3,
             certificate,
         });
         if (!shareRes.ok) {

package/dist/trustDecision.d.ts

@@ -1,8 +1,13 @@
-import type { OutcomeCertificateV1 } from "./outcomeCertificate.js";
+import type { OutcomeCertificateHighStakesReliance, OutcomeCertificateRunKind, OutcomeCertificateStateRelation, OutcomeCertificateV3 } from "./outcomeCertificate.js";
 /** Sole operator-facing trust enum for high-stakes gating. */
 export type TrustDecision = "safe" | "unsafe" | "unknown";
+export declare function trustDecisionFromRelianceFields(params: {
+    runKind: OutcomeCertificateRunKind;
+    stateRelation: OutcomeCertificateStateRelation;
+    highStakesReliance: OutcomeCertificateHighStakesReliance;
+}): TrustDecision;
 /**
  * Derive trust from Outcome Certificate v1 (normative: quick_preview is never high-stakes safe).
  */
-export declare function trustDecisionFromCertificate(certificate: OutcomeCertificateV1): TrustDecision;
+export declare function trustDecisionFromCertificate(certificate: OutcomeCertificateV3): TrustDecision;
 //# sourceMappingURL=trustDecision.d.ts.map

package/dist/trustDecision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trustDecision.d.ts","sourceRoot":"","sources":["../src/trustDecision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,8DAA8D;AAC9D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,oBAAoB,GAAG,aAAa,CAK7F"}
+{"version":3,"file":"trustDecision.d.ts","sourceRoot":"","sources":["../src/trustDecision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EACzB,+BAA+B,EAC/B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,8DAA8D;AAC9D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,OAAO,EAAE,yBAAyB,CAAC;IACnC,aAAa,EAAE,+BAA+B,CAAC;IAC/C,kBAAkB,EAAE,oCAAoC,CAAC;CAC1D,GAAG,aAAa,CAKhB;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,oBAAoB,GAAG,aAAa,CAM7F"}

package/dist/trustDecision.js

@@ -1,13 +1,20 @@
-/**
- * Derive trust from Outcome Certificate v1 (normative: quick_preview is never high-stakes safe).
- */
-export function trustDecisionFromCertificate(certificate) {
-    if (certificate.runKind === "quick_preview")
+export function trustDecisionFromRelianceFields(params) {
+    if (params.runKind === "quick_preview")
         return "unknown";
-    if (certificate.highStakesReliance === "permitted")
+    if (params.highStakesReliance === "permitted")
         return "safe";
-    if (certificate.stateRelation === "does_not_match")
+    if (params.stateRelation === "does_not_match")
         return "unsafe";
     return "unknown";
 }
+/**
+ * Derive trust from Outcome Certificate v1 (normative: quick_preview is never high-stakes safe).
+ */
+export function trustDecisionFromCertificate(certificate) {
+    return trustDecisionFromRelianceFields({
+        runKind: certificate.runKind,
+        stateRelation: certificate.stateRelation,
+        highStakesReliance: certificate.highStakesReliance,
+    });
+}
 //# sourceMappingURL=trustDecision.js.map

package/dist/trustDecision.js.map

@@ -1 +1 @@
-{"version":3,"file":"trustDecision.js","sourceRoot":"","sources":["../src/trustDecision.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAiC;IAC5E,IAAI,WAAW,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,WAAW,CAAC,kBAAkB,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,WAAW,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,QAAQ,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"trustDecision.js","sourceRoot":"","sources":["../src/trustDecision.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,+BAA+B,CAAC,MAI/C;IACC,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,MAAM,CAAC,kBAAkB,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,MAAM,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,QAAQ,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAiC;IAC5E,OAAO,+BAA+B,CAAC;QACrC,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAC,CAAC;AACL,CAAC"}

package/dist/verify/batchVerifyTelemetrySubcommand.js

@@ -208,7 +208,7 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
             const shareOrigin = parsedBatch.shareReportOrigin;
             if (shareOrigin !== undefined) {
                 const shareRes = await postPublicVerificationReport(shareOrigin, {
-                    schemaVersion: 2,
+                    schemaVersion: 3,
                     certificate,
                 });
                 if (!shareRes.ok) {
@@ -329,7 +329,7 @@ export async function runBatchVerifyWithTelemetrySubcommand(batchArgs, opts) {
                         throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateWf.errors ?? []));
                     }
                     const certificate = buildOutcomeCertificateLangGraphCheckpointTrustFromWorkflowResult(workflowResult);
-                    const validateCert = loadSchemaValidator("outcome-certificate-v2");
+                    const validateCert = loadSchemaValidator("outcome-certificate-v3");
                     if (!validateCert(certificate)) {
                         throw new TruthLayerError(CLI_OPERATIONAL_CODES.WORKFLOW_RESULT_SCHEMA_INVALID, JSON.stringify(validateCert.errors ?? []));
                     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentskeptic",
-  "version": "5.0.0",
+  "version": "6.0.1",
   "description": "Structured tool activity vs downstream state at verify time: SQL (SQLite, Postgres, MySQL), HTTP witnesses, supported vector indexes, MongoDB documents, and S3-compatible objects when configured—deterministic verdict artifacts (see verification-state-stores.md).",
   "license": "MIT",
   "type": "module",

package/schemas/failure-spine-v1.schema.json

@@ -0,0 +1,38 @@
+{
+  "$id": "https://agentskeptic.com/schemas/failure-spine-v1.schema.json",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "FailureSpineV1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "trustDecision",
+    "summary",
+    "actionableFailure",
+    "primaryCodes",
+    "rerunGuidance",
+    "source"
+  ],
+  "properties": {
+    "schemaVersion": { "type": "integer", "const": 1 },
+    "trustDecision": {
+      "type": "string",
+      "enum": ["safe", "unsafe", "unknown"]
+    },
+    "summary": { "type": "string", "minLength": 1, "maxLength": 2048 },
+    "actionableFailure": {
+      "$ref": "https://agentskeptic.com/schemas/workflow-truth-report.schema.json#/$defs/actionableFailure"
+    },
+    "primaryCodes": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 24,
+      "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+    },
+    "rerunGuidance": { "type": "string", "minLength": 1, "maxLength": 512 },
+    "source": {
+      "type": "string",
+      "enum": ["workflow", "quick", "ineligible_langgraph"]
+    }
+  }
+}

package/schemas/openapi-commercial-v1.in.yaml

@@ -12,7 +12,7 @@ info:
     url: __CONTRACT_URL__
     version: __CONTRACT_VERSION__
     manifestSha256: __CONTRACT_SHA__
-  description: "__IDENTITY_ONE_LINER__\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n\nEvery path in this document returns an `x-request-id` response header on all status codes (echo a valid client `x-request-id` when supplied; otherwise server-generated). Non-2xx JSON bodies follow RFC 7807-style Problem Details (`type`, `title`, `status`, `detail`, optional `code`, `instance`) unless noted; `POST /api/v1/usage/reserve` denials additionally include legacy `allowed`, `code`, `message`, and optional `upgrade_url` for backward compatibility.\n\n**Breaking (agentskeptic 5.x):** Hosted enforcement ingestion uses `schema_version` 3 with `outcome_certificate` (Outcome Certificate v2 inner JSON). Legacy `schema_version` 2 payloads with `outcome_certificate_v1` are rejected. `POST /api/v1/funnel/verify-outcome` requires `schema_version` 3 and `evidence_gap_primary`. `POST /api/public/verification-reports` accepts envelope `schemaVersion` 3 only.\n"
+  description: "__IDENTITY_ONE_LINER__\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n\nEvery path in this document returns an `x-request-id` response header on all status codes (echo a valid client `x-request-id` when supplied; otherwise server-generated). Non-2xx JSON bodies follow RFC 7807-style Problem Details (`type`, `title`, `status`, `detail`, optional `code`, `instance`) unless noted; `POST /api/v1/usage/reserve` denials additionally include legacy `allowed`, `code`, `message`, and optional `upgrade_url` for backward compatibility.\n\n**Breaking (agentskeptic 5.x):** Hosted enforcement ingestion uses `schema_version` 3 with `outcome_certificate` (Outcome Certificate v3 inner JSON, including `failureSpine`). Legacy `schema_version` 2 payloads with `outcome_certificate_v1` are rejected. `POST /api/v1/funnel/verify-outcome` requires `schema_version` 3 and `evidence_gap_primary`. `POST /api/public/verification-reports` accepts envelope `schemaVersion` 3 only. **HTTP 4xx/5xx** responses are **not** `failure-spine-v1` and are **not** Outcome Certificate-shaped; operational CLI errors use `cli-error-envelope` on stderr only.\n"
 externalDocs:
   description: "First-run integration guide"
   url: __DISTRIBUTION_INTEGRATE_URL__

package/schemas/openapi-commercial-v1.yaml

@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 info:
   title: AgentSkeptic commercial license API
-  version: "5.0.0"
+  version: "6.0.1"
   contact:
     url: https://agentskeptic.com
   x-agentskeptic-distribution:
@@ -12,7 +12,7 @@ info:
     url: https://agentskeptic.com/contract/v1.json
     version: "1.0.1"
     manifestSha256: "c5f23ec43576716c4b9a13e752cd2962a78bb4b4da1f9e521f911e15dfd80268"
-  description: "Read-only checks at verify time—not color.\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n\nEvery path in this document returns an `x-request-id` response header on all status codes (echo a valid client `x-request-id` when supplied; otherwise server-generated). Non-2xx JSON bodies follow RFC 7807-style Problem Details (`type`, `title`, `status`, `detail`, optional `code`, `instance`) unless noted; `POST /api/v1/usage/reserve` denials additionally include legacy `allowed`, `code`, `message`, and optional `upgrade_url` for backward compatibility.\n\n**Breaking (agentskeptic 5.x):** Hosted enforcement ingestion uses `schema_version` 3 with `outcome_certificate` (Outcome Certificate v2 inner JSON). Legacy `schema_version` 2 payloads with `outcome_certificate_v1` are rejected. `POST /api/v1/funnel/verify-outcome` requires `schema_version` 3 and `evidence_gap_primary`. `POST /api/public/verification-reports` accepts envelope `schemaVersion` 3 only.\n"
+  description: "Read-only checks at verify time—not color.\n\nMachine-readable contract for license preflight used by the published npm CLI.\nBase URL is your deployed app origin (same as NEXT_PUBLIC_APP_URL).\n\nEvery path in this document returns an `x-request-id` response header on all status codes (echo a valid client `x-request-id` when supplied; otherwise server-generated). Non-2xx JSON bodies follow RFC 7807-style Problem Details (`type`, `title`, `status`, `detail`, optional `code`, `instance`) unless noted; `POST /api/v1/usage/reserve` denials additionally include legacy `allowed`, `code`, `message`, and optional `upgrade_url` for backward compatibility.\n\n**Breaking (agentskeptic 5.x):** Hosted enforcement ingestion uses `schema_version` 3 with `outcome_certificate` (Outcome Certificate v3 inner JSON, including `failureSpine`). Legacy `schema_version` 2 payloads with `outcome_certificate_v1` are rejected. `POST /api/v1/funnel/verify-outcome` requires `schema_version` 3 and `evidence_gap_primary`. `POST /api/public/verification-reports` accepts envelope `schemaVersion` 3 only. **HTTP 4xx/5xx** responses are **not** `failure-spine-v1` and are **not** Outcome Certificate-shaped; operational CLI errors use `cli-error-envelope` on stderr only.\n"
 externalDocs:
   description: "First-run integration guide"
   url: https://agentskeptic.com/integrate