archctx-contracts 0.1.5

package/fixtures/boundary/agent-job-expired.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": "archcontext.agent-job/v1",
+  "jobId": "agent_job.al0_expired",
+  "status": "expired",
+  "runnerPort": "fake-provider",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "main",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "fingerprint": "sha256:1212121212121212121212121212121212121212121212121212121212121212",
+  "trigger": {
+    "source": "checkpoint",
+    "reason": "stale queued job expired before execution"
+  },
+  "budget": {
+    "maxRunsPerTask": 0,
+    "maxRunsPerRepositoryPerDay": 0,
+    "maxRunsPerDay": 0
+  },
+  "inputDigest": "sha256:1313131313131313131313131313131313131313131313131313131313131313",
+  "promptTemplateDigest": "sha256:1414141414141414141414141414141414141414141414141414141414141414",
+  "stalePolicy": "advisory-only-on-stale",
+  "directMutationAllowed": false,
+  "queuedAt": "2026-06-25T00:00:00.000Z",
+  "updatedAt": "2026-06-25T00:00:00.000Z"
+}

package/fixtures/boundary/architecture-event-extension.json

@@ -0,0 +1,41 @@
+{
+  "schemaVersion": "archcontext.architecture-event/v1",
+  "eventId": "arch_event.al0_extension",
+  "eventType": "authority.contract.freeze",
+  "payloadVersion": "v1",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "main",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "baseDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "resultingDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "actor": {
+    "kind": "system",
+    "id": "schema-fixture"
+  },
+  "source": "manual",
+  "timestamp": "2026-06-25T00:00:00.000Z",
+  "idempotencyKey": "al0-extension-boundary",
+  "provenance": {
+    "producer": "contracts-test",
+    "command": "fixture",
+    "inputDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "payload": {
+    "kind": "authority-contract",
+    "subjectIds": ["adr.0040.hybrid-architecture-ledger"],
+    "summary": "Boundary fixture keeps forward-compatible data under extensions.",
+    "changesDigest": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+  },
+  "extensions": {
+    "futureField": "allowed only here"
+  }
+}

package/fixtures/boundary/architecture-node-extension.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "archcontext.node/v1",
+  "id": "interface.payment-api",
+  "kind": "interface",
+  "name": "Payment API",
+  "status": "active",
+  "summary": "Public boundary for payment facts.",
+  "extensions": {
+    "dev.archcontext.test": {
+      "owner": "contracts"
+    }
+  }
+}

package/fixtures/boundary/attestation-v2-error.json

@@ -0,0 +1,43 @@
+{
+  "schemaVersion": "archcontext.attestation/v2",
+  "attestationId": "att_20260620_error",
+  "challengeId": "chal_20260620_0001",
+  "installationId": 10001,
+  "repositoryId": 20002,
+  "pullRequestNumber": 42,
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "baseSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "mergeBaseSha": "cccccccccccccccccccccccccccccccccccccccc",
+  "headTreeOid": "tree_aaaaaaaa",
+  "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+  "modelDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "policyDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "codeFactsDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "reviewDigest": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "result": "error",
+  "errorCode": "CODEGRAPH_FAILED",
+  "execution": {
+    "trustLevel": "organization",
+    "source": "organization-runner-checkout",
+    "principalId": "runner_0001",
+    "publicKeyId": "key_runner_0001",
+    "runnerId": "runner_0001",
+    "workflowRef": "owner/repo/.github/workflows/archcontext-review.yml@refs/heads/main",
+    "runId": "1234567890",
+    "runAttempt": 1
+  },
+  "runtime": {
+    "version": "0.2.0",
+    "buildDigest": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+    "codeGraphVersion": "1.0.1",
+    "capabilitiesDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+  },
+  "nonce": "nonce_base64url_0001",
+  "startedAt": "2026-06-20T09:03:00Z",
+  "completedAt": "2026-06-20T09:04:00Z",
+  "expiresAt": "2026-06-20T09:15:00Z",
+  "signature": {
+    "algorithm": "ed25519",
+    "value": "base64url_signature"
+  }
+}

package/fixtures/boundary/check-delivery-dead-letter.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "archcontext.check-delivery/v1",
+  "deliveryId": "delivery_dead_letter",
+  "challengeId": "chal_20260620_0001",
+  "checkRunId": null,
+  "checkName": "ArchContext / Organization Runner",
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "status": "DEAD_LETTER",
+  "attemptCount": 5,
+  "nextAttemptAt": null,
+  "lastErrorCode": "CHALLENGE_SUPERSEDED",
+  "createdAt": "2026-06-20T09:00:00Z",
+  "updatedAt": "2026-06-20T09:30:00Z"
+}

package/fixtures/boundary/evidence-binding-context-only.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "archcontext.evidence-binding/v1",
+  "bindingId": "binding.evidence.al0.context-only",
+  "evidenceId": "evidence.al0.boundary-import",
+  "target": {
+    "kind": "event",
+    "id": "arch_event.al0_contract_freeze"
+  },
+  "bindingReason": "change-cursor",
+  "authorityEffect": "context-only",
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "provenance": {
+    "producer": "runtime-daemon",
+    "command": "checkpoint",
+    "inputDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "extensions": {
+    "note": "context-only evidence cannot promote recommendation enforcement"
+  }
+}

package/fixtures/boundary/practice-disabled-overlay.json

@@ -0,0 +1,59 @@
+{
+  "schemaVersion": "archcontext.practice/v1",
+  "id": "compatibility.disabled-overlay",
+  "revision": 1,
+  "status": "disabled",
+  "title": "Disabled overlay boundary fixture",
+  "summary": "Disabled overlay tombstones keep a reason and explicit overlay mode.",
+  "category": "compatibility",
+  "tags": ["fixture"],
+  "appliesTo": {
+    "repositoryKinds": ["application"],
+    "languages": [],
+    "frameworks": [],
+    "pathGlobs": ["**/*"],
+    "nodeKinds": ["module"]
+  },
+  "triggers": {
+    "candidateTerms": ["fixture"],
+    "pressureSignals": ["fixture"],
+    "structuralPredicates": ["fixture"]
+  },
+  "evidencePolicy": {
+    "minimumStrengthForRecommendation": "heuristic",
+    "minimumStrengthForCheckpoint": "observed",
+    "minimumStrengthForEnforcement": "observed",
+    "requiredKindsForEnforcement": ["diff"],
+    "maxEnforcementWhenOnlyHeuristic": "advisory"
+  },
+  "guidance": {
+    "questions": ["Fixture?"],
+    "preferred": ["Use explicit disable tombstones."],
+    "avoid": ["Silent deletion."]
+  },
+  "checks": [],
+  "enforcement": {
+    "default": "advisory",
+    "promotableTo": "checkpoint",
+    "repoOptInRequired": true
+  },
+  "provenance": {
+    "sourceKind": "archcontext-native",
+    "sourceRefs": [
+      {
+        "sourceId": "archcontext.spec"
+      }
+    ],
+    "curator": "archcontext-maintainers",
+    "reviewedAt": "2026-06-23"
+  },
+  "lifecycle": {
+    "introducedAt": "2026-06-23",
+    "reviewAfter": "2027-06-23",
+    "supersedes": [],
+    "disabledWithReason": "Boundary fixture for explicit disable overlays."
+  },
+  "overlay": {
+    "mode": "disable"
+  }
+}

package/fixtures/boundary/recommendation-deferred.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "archcontext.recommendation/v2",
+  "recommendationId": "rec.al0.deferred",
+  "runId": "rec_run.al0_contract",
+  "fingerprint": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  "subject": "constraint.payment-boundary",
+  "status": "deferred",
+  "confidence": "low",
+  "enforcement": "advisory",
+  "risk": "high",
+  "uncertainty": "high",
+  "evidenceBindingIds": ["binding.evidence.al0.context-only"],
+  "explanation": ["Deferred because evidence remains context-only and cannot promote enforcement."],
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "updatedAt": "2026-06-25T00:00:00.000Z",
+  "extensions": {
+    "deferUntil": "2026-07-01T00:00:00.000Z"
+  }
+}

package/fixtures/boundary/review-challenge-v2-organization.json

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "archcontext.review-challenge/v2",
+  "challengeId": "chal_20260620_org",
+  "installationId": 10001,
+  "repositoryId": 20002,
+  "pullRequestNumber": 42,
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "baseSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "nonce": "nonce_base64url_org",
+  "requiredTrust": "organization",
+  "policyProfileId": "policy.organization",
+  "createdAt": "2026-06-20T09:00:00Z",
+  "expiresAt": "2026-06-20T09:15:00Z",
+  "status": "LEASED"
+}

package/fixtures/boundary/runner-identity-organization-scope.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "archcontext.runner-identity/v1",
+  "runnerId": "runner_org_0001",
+  "installationId": 10001,
+  "repositoryIds": [],
+  "scope": {
+    "kind": "organization"
+  },
+  "workflowRef": "owner/repo/.github/workflows/archcontext-review.yml@refs/heads/main",
+  "publicKeyId": "key_runner_org_0001",
+  "publicKeyFingerprint": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
+  "status": "active",
+  "createdAt": "2026-06-20T09:00:00Z",
+  "rotatedAt": null,
+  "revokedAt": null
+}

package/fixtures/invalid/adapter-fidelity-reverse-sync.json

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": "archcontext.adapter-fidelity/v1",
+  "id": "adapter-fidelity.native-sot",
+  "direction": "export-first",
+  "importScope": "initialization-only",
+  "nativeIsSourceOfTruth": false,
+  "reverseSync": "allowed",
+  "protectedNativeFields": ["evidence", "verification", "constraint", "intervention"]
+}

package/fixtures/invalid/agent-job-direct-mutation.json

@@ -0,0 +1,32 @@
+{
+  "schemaVersion": "archcontext.agent-job/v1",
+  "jobId": "agent_job.invalid_direct_mutation",
+  "status": "queued",
+  "runnerPort": "codex",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "main",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "fingerprint": "sha256:1212121212121212121212121212121212121212121212121212121212121212",
+  "trigger": {
+    "source": "checkpoint",
+    "reason": "invalid direct mutation"
+  },
+  "budget": {
+    "maxRunsPerTask": 1,
+    "maxRunsPerRepositoryPerDay": 3
+  },
+  "inputDigest": "sha256:1313131313131313131313131313131313131313131313131313131313131313",
+  "promptTemplateDigest": "sha256:1414141414141414141414141414141414141414141414141414141414141414",
+  "stalePolicy": "cancel-on-head-change",
+  "directMutationAllowed": true,
+  "queuedAt": "2026-06-25T00:00:00.000Z",
+  "updatedAt": "2026-06-25T00:00:00.000Z"
+}

package/fixtures/invalid/architecture-event-source-body-field.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": "archcontext.architecture-event/v1",
+  "eventId": "arch_event.invalid_source_body",
+  "eventType": "authority.contract.freeze",
+  "payloadVersion": "v1",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "main",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "baseDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "resultingDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "actor": {
+    "kind": "daemon",
+    "id": "archctxd.local"
+  },
+  "source": "apply_update",
+  "timestamp": "2026-06-25T00:00:00.000Z",
+  "idempotencyKey": "invalid-source-body",
+  "provenance": {
+    "producer": "archctx",
+    "command": "archctx apply",
+    "inputDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "payload": {
+    "kind": "authority-contract",
+    "subjectIds": ["adr.0040.hybrid-architecture-ledger"],
+    "summary": "Invalid event includes source body.",
+    "changesDigest": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+  },
+  "sourceBody": "private code"
+}

package/fixtures/invalid/architecture-snapshot-unknown-mode.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": "archcontext.architecture-snapshot/v1",
+  "snapshotId": "arch_snapshot.invalid_mode",
+  "repository": {
+    "repositoryId": "repo.archcontext",
+    "storageRepositoryId": "storage-repo.archcontext"
+  },
+  "worktree": {
+    "workspaceId": "workspace.main",
+    "storageWorkspaceId": "storage-workspace.main",
+    "branch": "main",
+    "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+  },
+  "sourceMode": "sql-only",
+  "eventCursor": {
+    "lastEventId": "arch_event.al0_contract_freeze",
+    "lastEventHash": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+  },
+  "graphDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+  "projectionDigest": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
+  "entityCount": 12,
+  "relationCount": 8,
+  "constraintCount": 4,
+  "inputDigests": {
+    "modelDigest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "createdAt": "2026-06-25T00:00:00.000Z"
+}

package/fixtures/invalid/attestation-v2-finding-field.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": "archcontext.attestation/v2",
+  "attestationId": "att_bad_finding",
+  "challengeId": "chal_20260620_0001",
+  "installationId": 10001,
+  "repositoryId": 20002,
+  "pullRequestNumber": 42,
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "baseSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "mergeBaseSha": "cccccccccccccccccccccccccccccccccccccccc",
+  "headTreeOid": "tree_aaaaaaaa",
+  "worktreeDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+  "modelDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "policyDigest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "codeFactsDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "reviewDigest": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "result": "pass",
+  "execution": {
+    "trustLevel": "developer",
+    "source": "clean-commit-worktree",
+    "principalId": "device_0001",
+    "publicKeyId": "key_device_0001"
+  },
+  "runtime": {
+    "version": "0.2.0",
+    "buildDigest": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
+    "codeGraphVersion": "1.0.1",
+    "capabilitiesDigest": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
+  },
+  "nonce": "nonce_base64url_0001",
+  "startedAt": "2026-06-20T09:03:00Z",
+  "completedAt": "2026-06-20T09:04:00Z",
+  "expiresAt": "2026-06-20T09:15:00Z",
+  "signature": {
+    "algorithm": "ed25519",
+    "value": "base64url_signature"
+  },
+  "finding": "private finding body"
+}

package/fixtures/invalid/check-delivery-legacy-check-name.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "archcontext.check-delivery/v1",
+  "deliveryId": "delivery_bad_legacy",
+  "challengeId": "chal_20260620_0001",
+  "checkRunId": "check_legacy",
+  "checkName": "ArchContext / Legacy Architecture Review",
+  "headSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "status": "PENDING",
+  "attemptCount": 0,
+  "nextAttemptAt": null,
+  "lastErrorCode": null,
+  "createdAt": "2026-06-20T09:00:00Z",
+  "updatedAt": "2026-06-20T09:00:00Z"
+}

package/fixtures/invalid/cloud-egress-envelope-private-field.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "archcontext.cloud-egress/v1",
+  "requestId": "req_bad_private_field",
+  "category": "github.pull-head",
+  "method": "GET",
+  "host": "api.github.com",
+  "pathTemplate": "/repos/{owner}/{repo}/pulls/{pull_number}/files",
+  "statusCode": 200,
+  "latencyMs": 42,
+  "recordedAt": "2026-06-20T09:00:00Z",
+  "patch": "@@ private diff"
+}

package/fixtures/invalid/compatibility-illegal-reason.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "archcontext.compatibility/v1",
+  "id": "compatibility.bad",
+  "status": "active",
+  "kind": "external-contract",
+  "protects": {
+    "type": "internal-api",
+    "id": "interface.legacy"
+  },
+  "consumers": ["module.internal"],
+  "legacyPaths": ["src/legacy.ts"],
+  "reason": "just in case",
+  "owner": "module.legacy",
+  "introducedAt": "2026-06-19T00:00:00Z",
+  "reviewAt": "2026-08-01T00:00:00Z",
+  "removalConditions": ["none"]
+}

package/fixtures/invalid/evidence-binding-summary-substring-authority.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "archcontext.evidence-binding/v1",
+  "bindingId": "binding.invalid.summary-substring",
+  "evidenceId": "evidence.al0.boundary-import",
+  "target": {
+    "kind": "practice",
+    "id": "modularity.respect-dependency-direction"
+  },
+  "bindingReason": "summary-substring",
+  "authorityEffect": "complete-eligible",
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "provenance": {
+    "producer": "practice-engine",
+    "command": "matchPracticesForTask",
+    "inputDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+  }
+}

package/fixtures/invalid/evidence-item-source-body-field.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": "archcontext.evidence-item/v2",
+  "evidenceId": "evidence.invalid.source-body",
+  "kind": "import-edge-added",
+  "strength": "observed",
+  "polarity": "positive",
+  "origin": "codegraph",
+  "subject": "relation.module-api-imports-runtime",
+  "selector": {
+    "kind": "relation",
+    "id": "relation.module-api-imports-runtime"
+  },
+  "summary": "Invalid evidence includes source body.",
+  "coverage": {
+    "level": "partial",
+    "scope": "changed-paths"
+  },
+  "supports": ["recommendation"],
+  "provenance": {
+    "producer": "codegraph-adapter",
+    "command": "codegraph explore",
+    "inputDigest": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "sourceBody": "private code"
+}

package/fixtures/invalid/explorer-projection-write-field.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "archcontext.explorer-projection/v1",
+  "generatedAt": "2026-06-20T00:00:00.000Z",
+  "repository": {
+    "repositoryId": "repo.local",
+    "headSha": "abc123",
+    "worktreeDigest": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+  },
+  "nodes": [],
+  "relations": [],
+  "verification": [],
+  "pressure": [],
+  "interventions": [],
+  "capabilities": {
+    "readOnly": true,
+    "mutationMode": "forbidden",
+    "egress": "none",
+    "tokenRequired": true
+  },
+  "mutationEndpoint": "/changesets/apply"
+}

package/fixtures/invalid/investigation-report-direct-mutation.json

@@ -0,0 +1,38 @@
+{
+  "schemaVersion": "archcontext.investigation-report/v1",
+  "reportId": "investigation_report.invalid_direct_mutation",
+  "jobId": "agent_job.al0_investigate",
+  "status": "succeeded",
+  "findings": [
+    {
+      "findingId": "finding.boundary-import",
+      "hypothesis": "Invalid report asks to mutate directly.",
+      "evidenceBindingIds": ["binding.evidence.al0.boundary-import"],
+      "unknowns": [],
+      "falsifier": "A declared relation allowing this dependency exists at the same HEAD.",
+      "proposedDelta": {
+        "candidateChangeId": "candidate_change.al0.boundary-import",
+        "kind": "node-materially-changed",
+        "target": {
+          "kind": "node",
+          "id": "module.checkout"
+        },
+        "stateDimension": "target-state",
+        "changeKind": "materially_changed",
+        "subjectSelectorIds": ["subject.path.src-checkout-service"],
+        "mappingIds": ["mapping.checkout-service"],
+        "ambiguityIds": [],
+        "evidenceIds": ["evidence.al0.boundary-import"],
+        "confidence": "medium",
+        "heuristic": true,
+        "summary": "Invalid report asks to mutate directly.",
+        "digest": "sha256:1515151515151515151515151515151515151515151515151515151515151515"
+      },
+      "proposedDeltaDigest": "sha256:1515151515151515151515151515151515151515151515151515151515151515",
+      "confidence": "medium"
+    }
+  ],
+  "outputDigest": "sha256:1616161616161616161616161616161616161616161616161616161616161616",
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "directMutationAllowed": true
+}

package/fixtures/invalid/investigation-report-missing-proposed-delta.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "archcontext.investigation-report/v1",
+  "reportId": "investigation_report.invalid_missing_delta",
+  "jobId": "agent_job.al0_investigate",
+  "status": "succeeded",
+  "findings": [
+    {
+      "findingId": "finding.boundary-import",
+      "hypothesis": "Invalid report omits the typed proposed delta.",
+      "evidenceBindingIds": ["binding.evidence.al0.boundary-import"],
+      "unknowns": [],
+      "falsifier": "A declared relation allowing this dependency exists at the same HEAD.",
+      "confidence": "medium"
+    }
+  ],
+  "outputDigest": "sha256:1616161616161616161616161616161616161616161616161616161616161616",
+  "createdAt": "2026-06-25T00:00:00.000Z",
+  "directMutationAllowed": false
+}

package/fixtures/invalid/node-unknown-field.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "archcontext.node/v1",
+  "id": "module.subscription",
+  "kind": "module",
+  "name": "Subscription",
+  "status": "active",
+  "summary": "Owns subscription lifecycle.",
+  "responsibilities": ["create-subscription"],
+  "unexpected": true
+}

package/fixtures/invalid/notification-event-code-field.json

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "archcontext.notification-event/v1",
+  "eventId": "notification.review-complete",
+  "prUrl": "https://github.com/ancienttwo/arch-context/pull/12",
+  "result": "pass",
+  "riskLevel": "low",
+  "commitSha": "abc1234",
+  "runtimeVersion": "archctx/1.1.0",
+  "occurredAt": "2026-06-19T00:00:00Z",
+  "code": "console.log('leak')"
+}