assertledger 1.0.0 → 1.1.1

package/dist/proof-planner/model.d.ts

@@ -0,0 +1,272 @@
+import * as z from "zod";
+export declare const PROOF_PLANNER_SCHEMA_VERSION: "1.0.0";
+export declare class ProofPlannerError extends Error {
+    readonly code: string;
+    constructor(code: string, detail?: string);
+}
+export declare const ASSURANCE_LEVELS: readonly ["P0", "P1", "P2", "P3", "P4", "P5"];
+export type AssuranceLevel = (typeof ASSURANCE_LEVELS)[number];
+export declare const SURFACE_ROLES: readonly ["product", "execution-context", "evaluation", "test", "proof-infrastructure", "documentation"];
+export type SurfaceRole = (typeof SURFACE_ROLES)[number];
+export declare const SURFACE_REACHES: readonly ["direct", "transitive"];
+export declare const SURFACE_RUNTIMES: readonly ["none", "build", "offline-analysis", "live"];
+export declare const BOUNDARIES: readonly ["protocol", "persistence", "replay", "analysis", "decision", "admission", "security", "public-api", "benchmark", "holdout"];
+export type Boundary = (typeof BOUNDARIES)[number];
+export declare const BEHAVIOR_CHANGES: readonly ["none", "suspected", "fix", "feature"];
+export declare const COVERAGES: readonly ["tested", "untested", "unknown"];
+export declare const CLAIM_KINDS: readonly ["behavior", "equivalence", "invariant", "compatibility", "empirical", "documentation"];
+export declare const CLAIM_CRITICALITIES: readonly ["low", "standard", "high", "critical"];
+export declare const CLAIM_SCOPES: readonly ["local", "component", "system"];
+export declare const PRODUCT_SIGNALS: readonly ["UNEXPECTED_BEHAVIOR", "UNPLANNED_IMPACT", "UNKNOWN_DEPENDENCY", "LIVE_RUNTIME_TOUCHED", "CORPUS_DIVERGENCE", "WITNESS_NOT_CAUSAL", "REGRESSION"];
+export declare const INFRASTRUCTURE_SIGNALS: readonly ["TIMEOUT", "ENVIRONMENT_FAILURE", "TOOLING_FAILURE"];
+export type ProductSignal = (typeof PRODUCT_SIGNALS)[number];
+export type InfrastructureSignal = (typeof INFRASTRUCTURE_SIGNALS)[number];
+export type SignalName = ProductSignal | InfrastructureSignal;
+export declare const ATTRIBUTION_BASES: readonly ["REPRODUCES_ON_BASELINE", "PASSES_ON_SAME_REVISION", "OUTSIDE_IMPACT", "INFRASTRUCTURE_ERROR_REPORTED", "DECLARED_ENVIRONMENT_FACTOR"];
+export type AttributionBasis = (typeof ATTRIBUTION_BASES)[number];
+/** What a piece of evidence is about. Surface roles map onto these subjects. */
+export declare const EVIDENCE_SUBJECTS: readonly ["product", "evaluation", "proof-infrastructure", "documentation"];
+export type EvidenceSubject = (typeof EVIDENCE_SUBJECTS)[number];
+export declare const EVIDENCE_WEIGHTS: readonly ["targeted", "broad", "ceremony"];
+export type EvidenceWeight = (typeof EVIDENCE_WEIGHTS)[number];
+/**
+ * What a piece of evidence stays valid for.
+ * - exact-revision: only the revision it was produced on.
+ * - surface-content: each scoped surface, while that surface, the test and proof-infrastructure
+ *   surfaces that exercise it, the baseline and (for every kind that is not documentation-only)
+ *   the runtime tree keep their digests. Without a scope it is revision-wide: exact-revision.
+ * - runtime-tree: any revision with the same baseline and runtime tree digest.
+ */
+export declare const EVIDENCE_BINDINGS: readonly ["exact-revision", "surface-content", "runtime-tree"];
+export type EvidenceBinding = (typeof EVIDENCE_BINDINGS)[number];
+export declare const EVIDENCE_VERIFICATIONS: readonly ["executed", "attested"];
+export declare const EvidenceKindIdSchema: z.ZodString;
+export declare const SurfaceSchema: z.ZodObject<{
+    id: z.ZodString;
+    role: z.ZodEnum<{
+        documentation: "documentation";
+        evaluation: "evaluation";
+        "execution-context": "execution-context";
+        product: "product";
+        "proof-infrastructure": "proof-infrastructure";
+        test: "test";
+    }>;
+    reach: z.ZodEnum<{
+        direct: "direct";
+        transitive: "transitive";
+    }>;
+    runtime: z.ZodEnum<{
+        build: "build";
+        live: "live";
+        none: "none";
+        "offline-analysis": "offline-analysis";
+    }>;
+    boundaries: z.ZodArray<z.ZodEnum<{
+        admission: "admission";
+        analysis: "analysis";
+        benchmark: "benchmark";
+        decision: "decision";
+        holdout: "holdout";
+        persistence: "persistence";
+        protocol: "protocol";
+        "public-api": "public-api";
+        replay: "replay";
+        security: "security";
+    }>>;
+    behaviorChange: z.ZodEnum<{
+        feature: "feature";
+        fix: "fix";
+        none: "none";
+        suspected: "suspected";
+    }>;
+    coverage: z.ZodEnum<{
+        tested: "tested";
+        unknown: "unknown";
+        untested: "untested";
+    }>;
+    environmentSensitive: z.ZodBoolean;
+    contentDigest: z.ZodOptional<z.ZodString>;
+    exercises: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type Surface = z.infer<typeof SurfaceSchema>;
+export declare const ChangeImpactSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"1.0.0">;
+    revision: z.ZodObject<{
+        id: z.ZodString;
+        baseline: z.ZodString;
+        runtimeTreeDigest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    surfaces: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        role: z.ZodEnum<{
+            documentation: "documentation";
+            evaluation: "evaluation";
+            "execution-context": "execution-context";
+            product: "product";
+            "proof-infrastructure": "proof-infrastructure";
+            test: "test";
+        }>;
+        reach: z.ZodEnum<{
+            direct: "direct";
+            transitive: "transitive";
+        }>;
+        runtime: z.ZodEnum<{
+            build: "build";
+            live: "live";
+            none: "none";
+            "offline-analysis": "offline-analysis";
+        }>;
+        boundaries: z.ZodArray<z.ZodEnum<{
+            admission: "admission";
+            analysis: "analysis";
+            benchmark: "benchmark";
+            decision: "decision";
+            holdout: "holdout";
+            persistence: "persistence";
+            protocol: "protocol";
+            "public-api": "public-api";
+            replay: "replay";
+            security: "security";
+        }>>;
+        behaviorChange: z.ZodEnum<{
+            feature: "feature";
+            fix: "fix";
+            none: "none";
+            suspected: "suspected";
+        }>;
+        coverage: z.ZodEnum<{
+            tested: "tested";
+            unknown: "unknown";
+            untested: "untested";
+        }>;
+        environmentSensitive: z.ZodBoolean;
+        contentDigest: z.ZodOptional<z.ZodString>;
+        exercises: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    analysis: z.ZodObject<{
+        method: z.ZodEnum<{
+            declared: "declared";
+            "static-graph": "static-graph";
+        }>;
+        completeness: z.ZodEnum<{
+            complete: "complete";
+            partial: "partial";
+            unknown: "unknown";
+        }>;
+        uncertainty: z.ZodEnum<{
+            high: "high";
+            low: "low";
+            medium: "medium";
+        }>;
+        unknowns: z.ZodArray<z.ZodObject<{
+            description: z.ZodString;
+            surfaces: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>;
+        omittedSurfaceCount: z.ZodInt;
+    }, z.core.$strict>;
+    reversibility: z.ZodEnum<{
+        costly: "costly";
+        irreversible: "irreversible";
+        reversible: "reversible";
+        trivial: "trivial";
+    }>;
+    causalWitness: z.ZodEnum<{
+        available: "available";
+        feasible: "feasible";
+        infeasible: "infeasible";
+        "not-applicable": "not-applicable";
+    }>;
+}, z.core.$strict>;
+export type ChangeImpact = z.infer<typeof ChangeImpactSchema>;
+export declare const AssuranceClaimSchema: z.ZodObject<{
+    id: z.ZodString;
+    statement: z.ZodString;
+    kind: z.ZodEnum<{
+        behavior: "behavior";
+        compatibility: "compatibility";
+        documentation: "documentation";
+        empirical: "empirical";
+        equivalence: "equivalence";
+        invariant: "invariant";
+    }>;
+    criticality: z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        low: "low";
+        standard: "standard";
+    }>;
+    scope: z.ZodEnum<{
+        component: "component";
+        local: "local";
+        system: "system";
+    }>;
+    surfaces: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type AssuranceClaim = z.infer<typeof AssuranceClaimSchema>;
+export declare const ProofSignalSchema: z.ZodObject<{
+    id: z.ZodString;
+    revision: z.ZodString;
+    baseline: z.ZodOptional<z.ZodString>;
+    runtimeTreeDigest: z.ZodOptional<z.ZodString>;
+    signal: z.ZodEnum<{
+        CORPUS_DIVERGENCE: "CORPUS_DIVERGENCE";
+        ENVIRONMENT_FAILURE: "ENVIRONMENT_FAILURE";
+        LIVE_RUNTIME_TOUCHED: "LIVE_RUNTIME_TOUCHED";
+        REGRESSION: "REGRESSION";
+        TIMEOUT: "TIMEOUT";
+        TOOLING_FAILURE: "TOOLING_FAILURE";
+        UNEXPECTED_BEHAVIOR: "UNEXPECTED_BEHAVIOR";
+        UNKNOWN_DEPENDENCY: "UNKNOWN_DEPENDENCY";
+        UNPLANNED_IMPACT: "UNPLANNED_IMPACT";
+        WITNESS_NOT_CAUSAL: "WITNESS_NOT_CAUSAL";
+    }>;
+    surfaces: z.ZodArray<z.ZodString>;
+    exercisesImpactedSurfaces: z.ZodEnum<{
+        no: "no";
+        unknown: "unknown";
+        yes: "yes";
+    }>;
+    attribution: z.ZodArray<z.ZodEnum<{
+        DECLARED_ENVIRONMENT_FACTOR: "DECLARED_ENVIRONMENT_FACTOR";
+        INFRASTRUCTURE_ERROR_REPORTED: "INFRASTRUCTURE_ERROR_REPORTED";
+        OUTSIDE_IMPACT: "OUTSIDE_IMPACT";
+        PASSES_ON_SAME_REVISION: "PASSES_ON_SAME_REVISION";
+        REPRODUCES_ON_BASELINE: "REPRODUCES_ON_BASELINE";
+    }>>;
+    detail: z.ZodString;
+}, z.core.$strict>;
+export type ProofSignal = z.infer<typeof ProofSignalSchema>;
+export declare const EvidenceKindSpecSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodString;
+    weight: z.ZodEnum<{
+        broad: "broad";
+        ceremony: "ceremony";
+        targeted: "targeted";
+    }>;
+    binding: z.ZodEnum<{
+        "exact-revision": "exact-revision";
+        "runtime-tree": "runtime-tree";
+        "surface-content": "surface-content";
+    }>;
+    subjects: z.ZodArray<z.ZodEnum<{
+        documentation: "documentation";
+        evaluation: "evaluation";
+        product: "product";
+        "proof-infrastructure": "proof-infrastructure";
+    }>>;
+    verification: z.ZodEnum<{
+        attested: "attested";
+        executed: "executed";
+    }>;
+    semanticsVersion: z.ZodInt;
+}, z.core.$strict>;
+export type EvidenceKindSpec = z.infer<typeof EvidenceKindSpecSchema>;
+export declare function subjectOfRole(role: SurfaceRole): EvidenceSubject;
+export declare function levelIndex(level: AssuranceLevel): number;
+export declare function levelAt(index: number): AssuranceLevel;
+/** Ordinal (UTF-16 code unit) comparison; never locale-dependent. */
+export declare function compareOrdinal(left: string, right: string): number;
+export declare function sortedUnique<T extends string>(values: Iterable<T>): T[];
+//# sourceMappingURL=model.d.ts.map

package/dist/proof-planner/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/proof-planner/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,eAAO,MAAM,4BAA4B,EAAG,OAAgB,CAAC;AAE7D,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAIxC;CACF;AAED,eAAO,MAAM,gBAAgB,YAAI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,aAAa,YACxB,SAAS,EACT,mBAAmB,EACnB,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,eAAe,CACP,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,eAAO,MAAM,eAAe,YAAI,QAAQ,EAAE,YAAY,CAAU,CAAC;AACjE,eAAO,MAAM,gBAAgB,YAAI,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAU,CAAC;AACvF,eAAO,MAAM,UAAU,YACrB,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,WAAW,EACX,SAAS,CACD,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,eAAO,MAAM,gBAAgB,YAAI,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AACjF,eAAO,MAAM,SAAS,YAAI,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAEpE,eAAO,MAAM,WAAW,YACtB,UAAU,EACV,aAAa,EACb,WAAW,EACX,eAAe,EACf,WAAW,EACX,eAAe,CACP,CAAC;AACX,eAAO,MAAM,mBAAmB,YAAI,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AACpF,eAAO,MAAM,YAAY,YAAI,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAEtE,eAAO,MAAM,eAAe,YAC1B,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,CACJ,CAAC;AACX,eAAO,MAAM,sBAAsB,YACjC,SAAS,EACT,qBAAqB,EACrB,iBAAiB,CACT,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,oBAAoB,CAAC;AAC9D,eAAO,MAAM,iBAAiB,YAC5B,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,EAChB,+BAA+B,EAC/B,6BAA6B,CACrB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,YAC5B,SAAS,EACT,YAAY,EACZ,sBAAsB,EACtB,eAAe,CACP,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AACjE,eAAO,MAAM,gBAAgB,YAAI,UAAU,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAC3E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,YAAI,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAChG,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AACjE,eAAO,MAAM,sBAAsB,YAAI,UAAU,EAAE,UAAU,CAAU,CAAC;AAcxE,eAAO,MAAM,oBAAoB,aAIJ,CAAC;AAE9B,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0B7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;kBAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAe5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;kBAUjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CAahE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAExD;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAGrD;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIlE;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAEvE"}

package/dist/proof-planner/model.js

@@ -0,0 +1,215 @@
+import * as z from "zod";
+export const PROOF_PLANNER_SCHEMA_VERSION = "1.0.0";
+export class ProofPlannerError extends Error {
+    code;
+    constructor(code, detail) {
+        super(detail ? `${code}: ${detail}` : code);
+        this.name = "ProofPlannerError";
+        this.code = code;
+    }
+}
+export const ASSURANCE_LEVELS = ["P0", "P1", "P2", "P3", "P4", "P5"];
+export const SURFACE_ROLES = [
+    "product",
+    "execution-context",
+    "evaluation",
+    "test",
+    "proof-infrastructure",
+    "documentation",
+];
+export const SURFACE_REACHES = ["direct", "transitive"];
+export const SURFACE_RUNTIMES = ["none", "build", "offline-analysis", "live"];
+export const BOUNDARIES = [
+    "protocol",
+    "persistence",
+    "replay",
+    "analysis",
+    "decision",
+    "admission",
+    "security",
+    "public-api",
+    "benchmark",
+    "holdout",
+];
+export const BEHAVIOR_CHANGES = ["none", "suspected", "fix", "feature"];
+export const COVERAGES = ["tested", "untested", "unknown"];
+export const CLAIM_KINDS = [
+    "behavior",
+    "equivalence",
+    "invariant",
+    "compatibility",
+    "empirical",
+    "documentation",
+];
+export const CLAIM_CRITICALITIES = ["low", "standard", "high", "critical"];
+export const CLAIM_SCOPES = ["local", "component", "system"];
+export const PRODUCT_SIGNALS = [
+    "UNEXPECTED_BEHAVIOR",
+    "UNPLANNED_IMPACT",
+    "UNKNOWN_DEPENDENCY",
+    "LIVE_RUNTIME_TOUCHED",
+    "CORPUS_DIVERGENCE",
+    "WITNESS_NOT_CAUSAL",
+    "REGRESSION",
+];
+export const INFRASTRUCTURE_SIGNALS = [
+    "TIMEOUT",
+    "ENVIRONMENT_FAILURE",
+    "TOOLING_FAILURE",
+];
+export const ATTRIBUTION_BASES = [
+    "REPRODUCES_ON_BASELINE",
+    "PASSES_ON_SAME_REVISION",
+    "OUTSIDE_IMPACT",
+    "INFRASTRUCTURE_ERROR_REPORTED",
+    "DECLARED_ENVIRONMENT_FACTOR",
+];
+/** What a piece of evidence is about. Surface roles map onto these subjects. */
+export const EVIDENCE_SUBJECTS = [
+    "product",
+    "evaluation",
+    "proof-infrastructure",
+    "documentation",
+];
+export const EVIDENCE_WEIGHTS = ["targeted", "broad", "ceremony"];
+/**
+ * What a piece of evidence stays valid for.
+ * - exact-revision: only the revision it was produced on.
+ * - surface-content: each scoped surface, while that surface, the test and proof-infrastructure
+ *   surfaces that exercise it, the baseline and (for every kind that is not documentation-only)
+ *   the runtime tree keep their digests. Without a scope it is revision-wide: exact-revision.
+ * - runtime-tree: any revision with the same baseline and runtime tree digest.
+ */
+export const EVIDENCE_BINDINGS = ["exact-revision", "surface-content", "runtime-tree"];
+export const EVIDENCE_VERIFICATIONS = ["executed", "attested"];
+const IdentifierSchema = z
+    .string()
+    .min(1)
+    .max(160)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._:/@-]*$/);
+const TextSchema = z.string().min(1).max(1_024);
+/** A git commit or tree object id, or a sha256 content digest. */
+const RevisionIdSchema = z.string().regex(/^([a-f0-9]{40}|[a-f0-9]{64}|sha256:[a-f0-9]{64})$/);
+/** An explicitly typed content identity, so that two formats can never compare equal. */
+const ContentDigestSchema = z
+    .string()
+    .regex(/^(sha256:[a-f0-9]{64}|git:[a-f0-9]{40}|git:[a-f0-9]{64})$/);
+export const EvidenceKindIdSchema = z
+    .string()
+    .min(1)
+    .max(96)
+    .regex(/^[A-Z][A-Z0-9_]*$/);
+export const SurfaceSchema = z.strictObject({
+    id: IdentifierSchema,
+    role: z.enum(SURFACE_ROLES),
+    reach: z.enum(SURFACE_REACHES),
+    runtime: z.enum(SURFACE_RUNTIMES),
+    boundaries: z.array(z.enum(BOUNDARIES)).max(BOUNDARIES.length),
+    /**
+     * For product, execution-context and evaluation surfaces: the declared behavior change.
+     * For test and proof-infrastructure surfaces: "none" means purely additive; any other value
+     * means an existing oracle, budget, selection or gate is modified.
+     */
+    behaviorChange: z.enum(BEHAVIOR_CHANGES),
+    coverage: z.enum(COVERAGES),
+    environmentSensitive: z.boolean(),
+    contentDigest: ContentDigestSchema.optional(),
+    /**
+     * Test and proof-infrastructure surfaces: identifiers of the surfaces they exercise. For a
+     * test, absent means all; a proof-infrastructure surface only counts where it names them.
+     */
+    exercises: z.array(IdentifierSchema).max(512).optional(),
+});
+export const ChangeImpactSchema = z.strictObject({
+    schemaVersion: z.literal(PROOF_PLANNER_SCHEMA_VERSION),
+    revision: z.strictObject({
+        id: RevisionIdSchema,
+        /** Merge-base the impact is computed against; the impact is cumulative from it. */
+        baseline: RevisionIdSchema,
+        /** Digest of every path that is not test, proof infrastructure or documentation. */
+        runtimeTreeDigest: ContentDigestSchema.optional(),
+    }),
+    surfaces: z.array(SurfaceSchema).min(1).max(512),
+    analysis: z.strictObject({
+        method: z.enum(["static-graph", "declared"]),
+        completeness: z.enum(["complete", "partial", "unknown"]),
+        uncertainty: z.enum(["low", "medium", "high"]),
+        unknowns: z
+            .array(z.strictObject({
+            description: TextSchema,
+            surfaces: z.array(IdentifierSchema).max(64),
+        }))
+            .max(64),
+        omittedSurfaceCount: z.int().min(0).max(1_000_000),
+    }),
+    reversibility: z.enum(["trivial", "reversible", "costly", "irreversible"]),
+    causalWitness: z.enum(["available", "feasible", "infeasible", "not-applicable"]),
+});
+export const AssuranceClaimSchema = z.strictObject({
+    id: IdentifierSchema,
+    statement: TextSchema,
+    kind: z.enum(CLAIM_KINDS),
+    criticality: z.enum(CLAIM_CRITICALITIES),
+    scope: z.enum(CLAIM_SCOPES),
+    surfaces: z.array(IdentifierSchema).min(1).max(512),
+});
+export const ProofSignalSchema = z.strictObject({
+    id: IdentifierSchema,
+    /**
+     * Signals count for the revision they were observed on. An unresolved signal from another
+     * revision still counts when it names the same baseline and runtime tree as the planned change:
+     * the product it observed is byte-identical.
+     */
+    revision: RevisionIdSchema,
+    baseline: RevisionIdSchema.optional(),
+    runtimeTreeDigest: ContentDigestSchema.optional(),
+    signal: z.enum([...PRODUCT_SIGNALS, ...INFRASTRUCTURE_SIGNALS]),
+    surfaces: z.array(IdentifierSchema).max(512),
+    exercisesImpactedSurfaces: z.enum(["yes", "no", "unknown"]),
+    attribution: z.array(z.enum(ATTRIBUTION_BASES)).max(ATTRIBUTION_BASES.length),
+    detail: TextSchema,
+});
+export const EvidenceKindSpecSchema = z.strictObject({
+    id: EvidenceKindIdSchema,
+    title: TextSchema,
+    description: TextSchema,
+    weight: z.enum(EVIDENCE_WEIGHTS),
+    binding: z.enum(EVIDENCE_BINDINGS),
+    subjects: z.array(z.enum(EVIDENCE_SUBJECTS)).min(1).max(EVIDENCE_SUBJECTS.length),
+    verification: z.enum(EVIDENCE_VERIFICATIONS),
+    /** Bump when the meaning of the kind changes; title and description edits do not count. */
+    semanticsVersion: z.int().min(1).max(1_000),
+});
+export function subjectOfRole(role) {
+    switch (role) {
+        case "product":
+        case "execution-context":
+            return "product";
+        case "evaluation":
+            return "evaluation";
+        case "test":
+        case "proof-infrastructure":
+            return "proof-infrastructure";
+        case "documentation":
+            return "documentation";
+    }
+}
+export function levelIndex(level) {
+    return ASSURANCE_LEVELS.indexOf(level);
+}
+export function levelAt(index) {
+    const bounded = Math.max(0, Math.min(ASSURANCE_LEVELS.length - 1, index));
+    return ASSURANCE_LEVELS[bounded] ?? "P0";
+}
+/** Ordinal (UTF-16 code unit) comparison; never locale-dependent. */
+export function compareOrdinal(left, right) {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+}
+export function sortedUnique(values) {
+    return [...new Set(values)].sort(compareOrdinal);
+}
+//# sourceMappingURL=model.js.map

package/dist/proof-planner/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/proof-planner/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAgB,CAAC;AAE7D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,MAAe;QACvC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAG9E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS;IACT,mBAAmB;IACnB,YAAY;IACZ,MAAM;IACN,sBAAsB;IACtB,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU;IACV,aAAa;IACb,QAAQ;IACR,UAAU;IACV,UAAU;IACV,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;IACX,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AACjF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU;IACV,aAAa;IACb,WAAW;IACX,eAAe;IACf,WAAW;IACX,eAAe;CACP,CAAC;AACX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,qBAAqB;IACrB,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;IACpB,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,SAAS;IACT,qBAAqB;IACrB,iBAAiB;CACT,CAAC;AAIX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,wBAAwB;IACxB,yBAAyB;IACzB,gBAAgB;IAChB,+BAA+B;IAC/B,6BAA6B;CACrB,CAAC;AAGX,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,YAAY;IACZ,sBAAsB;IACtB,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAEhG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAExE,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAC5C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChD,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;AAC/F,yFAAyF;AACzF,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,KAAK,CAAC,2DAA2D,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAE9B,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;IAC9D;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IAC3B,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,EAAE,EAAE,gBAAgB;QACpB,mFAAmF;QACnF,QAAQ,EAAE,gBAAgB;QAC1B,oFAAoF;QACpF,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;KAClD,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC5C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,QAAQ,EAAE,CAAC;aACR,KAAK,CACJ,CAAC,CAAC,YAAY,CAAC;YACb,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;SAC5C,CAAC,CACH;aACA,GAAG,CAAC,EAAE,CAAC;QACV,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;KACnD,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC1E,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;CACjF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IACjD,EAAE,EAAE,gBAAgB;IACpB,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9C,EAAE,EAAE,gBAAgB;IACpB;;;;OAIG;IACH,QAAQ,EAAE,gBAAgB;IAC1B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACrC,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,sBAAsB,CAAC,CAAC;IAC/D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,yBAAyB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;IAC7E,MAAM,EAAE,UAAU;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,UAAU;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACjF,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAC5C,2FAA2F;IAC3F,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC5C,CAAC,CAAC;AAGH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB;YACtB,OAAO,SAAS,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM,CAAC;QACZ,KAAK,sBAAsB;YACzB,OAAO,sBAAsB,CAAC;QAChC,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAqB;IAC9C,OAAO,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa;IACxD,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,YAAY,CAAmB,MAAmB;IAChE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACnD,CAAC"}

package/dist/proof-planner/plan.d.ts

@@ -0,0 +1,140 @@
+import * as z from "zod";
+import { AssuranceClaimSchema, type AssuranceLevel, type AttributionBasis, ChangeImpactSchema, type EvidenceBinding, type EvidenceKindSpec, type EvidenceSubject, type EvidenceWeight, PROOF_PLANNER_SCHEMA_VERSION, ProofSignalSchema, type SignalName, type Surface, type SurfaceRole } from "./model.js";
+import { type AssurancePolicy, type FactId } from "./policy.js";
+export type ImpactBound = "no-product-runtime" | "bounded-confident" | "bounded-uncertain" | "unbounded";
+export type PlanStatus = "PROVE" | "HOLD" | "BLOCKED";
+export type SignalClassificationName = "product" | "proof-infrastructure" | "unattributed" | "pre-existing" | "absorbed" | "other-revision";
+export interface PlannerFact {
+    id: FactId;
+    subject: EvidenceSubject;
+    surfaces: string[];
+    refs: string[];
+    detail: string;
+}
+export interface EvidenceRequirement {
+    kind: string;
+    title: string;
+    weight: EvidenceWeight;
+    binding: EvidenceBinding;
+    verification: EvidenceKindSpec["verification"];
+    subjects: EvidenceSubject[];
+    semanticDigest: string;
+    /** Surfaces the evidence is about; empty for revision-wide evidence. */
+    surfaces: string[];
+    /** Fact ids or `baseline:<level>:<subject>` entries that made this evidence necessary. */
+    because: string[];
+}
+export interface ActivationCondition {
+    /** Policy triggers that would have required or recommended the kind. */
+    triggers: {
+        fact: FactId;
+        effect: "require" | "recommend";
+    }[];
+    /** Level baselines that would have required the kind. */
+    baselines: {
+        level: AssuranceLevel;
+        subjects: {
+            subject: EvidenceSubject;
+            level: AssuranceLevel | null;
+        }[];
+    }[];
+}
+export interface NotRequiredEvidence {
+    requirement: EvidenceRequirement;
+    rationale: string;
+    activation: ActivationCondition;
+    evaluatedAgainst: "actual-change" | "worst-case";
+}
+export interface UndeterminedEvidence {
+    requirement: EvidenceRequirement;
+    rationale: string;
+}
+export interface EscalationCondition {
+    signal: SignalName;
+    variant: "product" | "infrastructure-attributed" | "infrastructure-unattributed";
+    classification: SignalClassificationName;
+    resultingLevel: AssuranceLevel;
+    resultingStatus: PlanStatus;
+    addsRequired: string[];
+    rationale: string;
+}
+export interface PlannerDecision {
+    step: "impact" | "claim" | "signal" | "floor" | "raise" | "level" | "status";
+    subject: EvidenceSubject | null;
+    fact: FactId | null;
+    level: AssuranceLevel | null;
+    detail: string;
+}
+export interface Uncertainty {
+    id: string;
+    statement: string;
+    mitigatedBy: string[];
+}
+export interface SignalClassification {
+    id: string;
+    /** The revision the signal was observed on, which may differ from the planned one. */
+    revision: string;
+    signal: SignalName;
+    classification: SignalClassificationName;
+    exercises: "yes" | "no" | "unknown";
+    basis: AttributionBasis[];
+    surfaces: string[];
+    reason: string;
+}
+export interface PlanSurface {
+    id: string;
+    role: SurfaceRole;
+    reach: Surface["reach"];
+    contentDigest: string | null;
+    exercises: string[] | null;
+}
+export interface AssurancePlan {
+    schemaVersion: typeof PROOF_PLANNER_SCHEMA_VERSION;
+    status: PlanStatus;
+    level: AssuranceLevel;
+    levelBySubject: {
+        subject: EvidenceSubject;
+        level: AssuranceLevel;
+    }[];
+    impactBound: ImpactBound;
+    subject: {
+        revision: string;
+        baseline: string;
+        runtimeTreeDigest: string | null;
+        surfaces: PlanSurface[];
+    };
+    requiredEvidence: EvidenceRequirement[];
+    recommendedEvidence: EvidenceRequirement[];
+    explicitlyNotRequired: NotRequiredEvidence[];
+    undeterminedEvidence: UndeterminedEvidence[];
+    escalations: EscalationCondition[];
+    rationale: PlannerDecision[];
+    facts: PlannerFact[];
+    signals: SignalClassification[];
+    unaffectedClaims: {
+        id: string;
+        reason: string;
+    }[];
+    residualUncertainty: Uncertainty[];
+    policy: {
+        id: string;
+        version: string;
+        digest: string;
+    };
+    inputDigest: string;
+    planDigest: string;
+}
+export interface PlanAssuranceInput {
+    impact: z.input<typeof ChangeImpactSchema>;
+    claims?: z.input<typeof AssuranceClaimSchema>[];
+    signals?: z.input<typeof ProofSignalSchema>[];
+    policy?: AssurancePolicy;
+}
+/**
+ * Decide which evidence is proportionate for a change. Pure and deterministic: no clock, no
+ * randomness, no I/O. The plan states requirements; it never claims that evidence exists.
+ */
+export declare function planAssurance(input: PlanAssuranceInput): AssurancePlan;
+/** Evidence about the product, or a failure that may still be about the change. */
+export declare function isUnresolvedSignal(classification: Pick<SignalClassification, "classification" | "exercises">): boolean;
+//# sourceMappingURL=plan.d.ts.map

package/dist/proof-planner/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/proof-planner/plan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAEL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAIrB,kBAAkB,EAGlB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EAMnB,4BAA4B,EAG5B,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,WAAW,EAGjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EAIpB,KAAK,MAAM,EAEZ,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,WAAW,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,WAAW,CAAC;AAChB,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AACtD,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,eAAe,CAAC;IACzB,YAAY,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAA;KAAE,EAAE,CAAC;IAC9D,yDAAyD;IACzD,SAAS,EAAE;QACT,KAAK,EAAE,cAAc,CAAC;QACtB,QAAQ,EAAE;YAAE,OAAO,EAAE,eAAe,CAAC;YAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAA;SAAE,EAAE,CAAC;KACxE,EAAE,CAAC;CACL;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,mBAAmB,CAAC;IAChC,gBAAgB,EAAE,eAAe,GAAG,YAAY,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,SAAS,GAAG,2BAA2B,GAAG,6BAA6B,CAAC;IACjF,cAAc,EAAE,wBAAwB,CAAC;IACzC,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,UAAU,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7E,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,cAAc,EAAE,wBAAwB,CAAC;IACzC,SAAS,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,OAAO,4BAA4B,CAAC;IACnD,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,cAAc,CAAA;KAAE,EAAE,CAAC;IACtE,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,EAAE,WAAW,EAAE,CAAC;KACzB,CAAC;IACF,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;IACxC,mBAAmB,EAAE,mBAAmB,EAAE,CAAC;IAC3C,qBAAqB,EAAE,mBAAmB,EAAE,CAAC;IAC7C,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;IAC7C,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,gBAAgB,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnD,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,EAAE,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,EAAE,CAAC;IAC9C,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAuDD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAyDtE;AAwiBD,mFAAmF;AACnF,wBAAgB,kBAAkB,CAChC,cAAc,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,WAAW,CAAC,GACzE,OAAO,CAKT"}