assertledger 1.0.0 → 1.1.0

package/examples/evidence-export/consumer.mjs

@@ -0,0 +1,35 @@
+import { readFile } from "node:fs/promises";
+import { AssertLedger } from "assertledger";
+
+// A minimal external consumer. It applies its own obligations to an AssertLedger evidence export
+// and writes nothing back: AssertLedger results stay the same whatever it decides.
+const exportPath = process.argv[2];
+if (exportPath === undefined) {
+  console.error("Usage: node consumer.mjs <evidence-export.json>");
+  process.exitCode = 64;
+} else {
+  const evidence = JSON.parse(await readFile(exportPath, "utf8"));
+  const replay = new AssertLedger().replayEvidenceExport(evidence);
+  const reasons = [];
+  let decision;
+  if (!replay.valid) {
+    decision = "REJECT";
+    reasons.push("EXPORT_REPLAY_INVALID");
+  } else if (evidence.result.detection !== "OBSERVED") {
+    decision = "IGNORE";
+    reasons.push(`DETECTION_${evidence.result.detection}`);
+  } else {
+    const required = ["CONTROL_WITHOUT_CANDIDATE", "REFERENCE_PASS", "NEUTRAL_PASS"];
+    for (const control of required) {
+      const executed = evidence.controls.executed.find((item) => item.control === control);
+      if (executed?.status !== "EXECUTED") reasons.push(`CONTROL_NOT_EXECUTED_${control}`);
+    }
+    if (evidence.scope.gitRevisions !== "RECORDED") reasons.push("GIT_REVISIONS_NOT_RECORDED");
+    if (evidence.authenticity.status !== "ATTESTED") reasons.push("EVIDENCE_UNAUTHENTICATED");
+    // This consumer admits unauthenticated local evidence only as advisory.
+    decision = reasons.length === 0 ? "ACCEPT" : "DEGRADE";
+  }
+  process.stdout.write(
+    `${JSON.stringify({ decision, reasons, sourceArtifactDigest: evidence.sourceArtifactDigest ?? null })}\n`,
+  );
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "assertledger",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Verify that regression tests detect a declared bug, with deterministic verdicts and replayable evidence.",
   "type": "module",
   "private": false,
@@ -50,7 +50,7 @@
     "!benchmarks/**/RESULT-*.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.build.json",
+    "build": "tsc -p tsconfig.build.json && tsx scripts/write-build-info.ts",
     "check": "pnpm run format:check && pnpm run lint && pnpm run check:schemas && pnpm run check:conformance && pnpm run typecheck && pnpm run test",
     "smoke:package": "pnpm run build && pnpm run check:schemas && pnpm run check:conformance && tsx scripts/smoke-package.ts",
     "check:conformance": "tsx scripts/check-conformance-v1.ts",

package/schemas/evidence-export-replay-result.v1.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "valid": {
+      "$ref": "#/$defs/__schema0"
+    },
+    "schemaValid": {
+      "$ref": "#/$defs/__schema1"
+    },
+    "sourceManifestValid": {
+      "$ref": "#/$defs/__schema2"
+    },
+    "exportDigestValid": {
+      "$ref": "#/$defs/__schema3"
+    },
+    "semanticsValid": {
+      "$ref": "#/$defs/__schema4"
+    }
+  },
+  "required": [
+    "valid",
+    "schemaValid",
+    "sourceManifestValid",
+    "exportDigestValid",
+    "semanticsValid"
+  ],
+  "additionalProperties": false,
+  "title": "AssertLedger evidence export replay result",
+  "description": "Independent schema, source, digest, and semantic replay verdicts for an export.",
+  "$defs": {
+    "__schema0": {
+      "type": "boolean"
+    },
+    "__schema1": {
+      "type": "boolean"
+    },
+    "__schema2": {
+      "type": "boolean"
+    },
+    "__schema3": {
+      "type": "boolean"
+    },
+    "__schema4": {
+      "type": "boolean"
+    }
+  },
+  "$id": "https://testforge.dev/schemas/evidence-export-replay-result.v1.json"
+}