blun-king-cli 9.1.567 → 9.1.569

package/agent-spine-plugin/src/lib/audit-premortem.js

@@ -0,0 +1,223 @@
+import { createHash } from "node:crypto";
+import { basename } from "node:path";
+import { inspectDeliveryPremortems } from "./delivery-premortem.js";
+import { createPremortemAttachment } from "./delivery-premortem-closure.js";
+import { premortemGoalBindingSummary } from "./delivery-premortem-binding.js";
+import { inspectPremortemLaneIndexes, premortemScopeDigest } from "./delivery-premortem-index.js";
+import {
+  inspectPremortemWriteIndexes,
+  inspectPremortemWriteProof
+} from "./delivery-premortem-write-ledger.js";
+
+const WRITE_INDEX_MISMATCH = "AGENTSPINE_PREMORTEM_MISMATCH";
+
+export function premortemIndexCrossReferenceFindings(premortems, indexes, gatewayPolicy) {
+  const findings = [];
+  const statesByLane = new Map(premortems.states.map((state) => [state.laneDigest, state]));
+  const pointersByLane = new Map();
+  for (const pointer of indexes.pointers) {
+    const values = pointersByLane.get(pointer.laneDigest) || [];
+    values.push(pointer);
+    pointersByLane.set(pointer.laneDigest, values);
+  }
+  const stateScanComplete = !premortems.errors.length && !premortems.truncations.length;
+  const indexScanComplete = !indexes.errors.length && !indexes.truncations.length;
+  if (stateScanComplete) for (const pointer of indexes.pointers) {
+    const state = statesByLane.get(pointer.laneDigest);
+    if (!state) {
+      findings.push({ laneDigest: pointer.laneDigest, reason: "premortem index pointer has no state" });
+      continue;
+    }
+    const binding = state.binding;
+    const sessionDigest = createHash("sha256").update(binding.sessionId).digest("hex");
+    if (pointer.sessionDigest !== sessionDigest || pointer.goalId !== binding.goalId
+      || pointer.goalStepId !== binding.goalStepId || pointer.queueId !== binding.queueId
+      || pointer.gatewayAttempt !== binding.gatewayAttempt
+      || pointer.planDefinitionsDigest !== binding.planDefinitionsDigest) {
+      findings.push({ laneDigest: pointer.laneDigest,
+        reason: "premortem index pointer does not match state binding" });
+    }
+  }
+  if (indexScanComplete) for (const state of premortems.states.filter((item) => item.binding.goalId)) {
+    const pointers = pointersByLane.get(state.laneDigest) || [];
+    if (!pointers.length) findings.push({ laneDigest: state.laneDigest,
+      reason: "goal premortem state has no index pointer" });
+    else if (pointers.length > 1) findings.push({ laneDigest: state.laneDigest,
+      reason: "goal premortem state has multiple index pointers" });
+    const consumed = state.events.some((event) => event.type === "premortem-consumed");
+    const finalized = indexes.finalizations.some((item) => item.laneDigest === state.laneDigest);
+    if (consumed && !finalized) findings.push({ laneDigest: state.laneDigest,
+      reason: "consumed goal premortem state has no scope finalization" });
+  }
+  if (stateScanComplete && indexScanComplete) for (const finalization of indexes.finalizations) {
+    const scopedPointers = indexes.pointers.filter((item) => item.scopeDigest === finalization.scopeDigest);
+    const scopedStates = premortems.states.filter((state) => state.binding.goalId
+      && premortemScopeDigest(state.binding.goalId, state.binding.goalStepId,
+        state.binding.queueId, state.binding.gatewayAttempt) === finalization.scopeDigest);
+    if (finalization.status === "read-only") {
+      if (scopedPointers.length || scopedStates.length) findings.push({ laneDigest: null,
+        reason: "read-only premortem finalization retains state or index evidence" });
+      continue;
+    }
+    const pointer = scopedPointers.length === 1 ? scopedPointers[0] : null;
+    const state = scopedStates.length === 1 ? scopedStates[0] : null;
+    if (!pointer || !state || pointer.laneDigest !== finalization.laneDigest) {
+      findings.push({ laneDigest: finalization.laneDigest,
+        reason: "closed premortem finalization is orphaned" });
+      continue;
+    }
+    if (pointer.digest !== finalization.pointerDigest) findings.push({ laneDigest: state.laneDigest,
+      reason: "closed premortem finalization has the wrong pointer digest" });
+    const consumed = state.events.some((event) => event.type === "premortem-consumed");
+    if (!consumed || !state.closure || !state.lastWrite) findings.push({ laneDigest: state.laneDigest,
+      reason: "closed premortem finalization has no consumed closed state" });
+    else if (createPremortemAttachment(state).attachmentDigest !== finalization.attachmentDigest) {
+      findings.push({ laneDigest: state.laneDigest,
+        reason: "closed premortem finalization has the wrong attachment digest" });
+    }
+    const binding = state.binding;
+    const exact = finalization.goalId === binding.goalId && finalization.goalStepId === binding.goalStepId
+      && finalization.queueId === binding.queueId && finalization.gatewayAttempt === binding.gatewayAttempt
+      && finalization.planDefinitionsDigest === binding.planDefinitionsDigest
+      && finalization.host === binding.host && finalization.projectId === binding.projectId
+      && finalization.entityId === binding.entityId && finalization.groupId === binding.groupId
+      && finalization.taskId === binding.taskId;
+    const summaryDigest = createHash("sha256")
+      .update(JSON.stringify([premortemGoalBindingSummary(state).digest])).digest("hex");
+    if (!exact || finalization.bindingSummaryDigest !== summaryDigest) findings.push({ laneDigest: state.laneDigest,
+      reason: "closed premortem finalization has the wrong binding evidence" });
+  }
+  if (indexScanComplete) for (const goal of gatewayPolicy.goals || []) {
+    for (const step of goal.plan?.steps || []) {
+      const checkpoint = step.deliveryCheckpoint;
+      const outcome = step.outcomeReceipt;
+      if (step.status !== "completed" || !new Set(["closed", "read-only"]).has(checkpoint?.status)) continue;
+      const finalization = indexes.finalizations.find((item) => item.digest === checkpoint.scopeFinalizationDigest);
+      if (!finalization) {
+        findings.push({ laneDigest: checkpoint.bindingDigest ?? null,
+          reason: "completed goal premortem has no bound scope finalization" });
+        continue;
+      }
+      const exact = finalization.status === checkpoint.status && finalization.goalId === goal.goalId
+        && finalization.goalStepId === step.stepId && finalization.queueId === checkpoint.queueId
+        && finalization.gatewayAttempt === checkpoint.gatewayAttempt
+        && finalization.planDefinitionsDigest === checkpoint.planDefinitionsDigest
+        && finalization.host === checkpoint.host && finalization.projectId === checkpoint.projectId
+        && finalization.entityId === checkpoint.entityId && finalization.groupId === checkpoint.groupId
+        && finalization.taskId === (checkpoint.taskId ?? null);
+      if (!exact) findings.push({ laneDigest: checkpoint.bindingDigest ?? null,
+        reason: "completed goal premortem scope finalization has the wrong binding" });
+      if (checkpoint.status === "closed" && (checkpoint.sourceAttachmentDigest
+        !== finalization.attachmentDigest || outcome?.sourceAttachmentDigest
+        !== finalization.attachmentDigest)) {
+        findings.push({ laneDigest: checkpoint.bindingDigest ?? null,
+          reason: "completed goal premortem source attachment does not match scope finalization" });
+      }
+    }
+  }
+  return findings;
+}
+
+function boundedWrites(state) {
+  const writes = [state.firstWrite, state.lastWrite, ...(state.writeLedger || [])].filter(Boolean);
+  return [...new Map(writes.map((write) => [write.idDigest, {
+    idDigest: write.idDigest, inputDigest: write.inputDigest,
+    inputKnown: write.inputKnown, writeDigest: write.writeDigest || write.digest
+  }])).values()];
+}
+
+function sameWrite(entry, expected) {
+  return entry?.idDigest === expected.idDigest && entry.inputDigest === expected.inputDigest
+    && entry.inputKnown === expected.inputKnown && entry.writeDigest === expected.writeDigest;
+}
+
+function addIssue(target, seen, laneDigest, item, fallbackPath) {
+  const issue = { laneDigest, path: item.path || fallbackPath,
+    reason: String(item.reason || "premortem write-index inspection failed").slice(0, 400),
+    code: typeof item.code === "string" ? item.code : null };
+  const key = `${laneDigest}:${issue.code}:${issue.reason}`;
+  if (!seen.has(key)) {
+    seen.add(key);
+    target.push(issue);
+  }
+}
+
+export async function inspectPremortemWriteIndexAudit(premortems, {
+  inspectIndexes = inspectPremortemWriteIndexes,
+  inspectProof = inspectPremortemWriteProof
+} = {}) {
+  const combined = { directories: [], paths: [], nodes: [], errors: [], uncertainties: [],
+    truncations: [], states: 0, attemptedProofs: 0, verifiedProofs: 0,
+    authority: "context-only" };
+  const paths = new Set();
+  const errorKeys = new Set();
+  const uncertaintyKeys = new Set();
+  for (const state of premortems.states.filter((item) => item.writeIndexRoot)) {
+    const statePath = premortems.paths.find((path) => basename(path) === `${state.laneDigest}.json`);
+    if (!statePath) {
+      addIssue(combined.uncertainties, uncertaintyKeys, state.laneDigest, {
+        path: premortems.directory,
+        reason: `premortem state ${state.laneDigest} has no inspected path`
+      }, premortems.directory);
+      if (premortems.directory) paths.add(premortems.directory);
+      continue;
+    }
+    combined.states += 1;
+    let inspected;
+    try {
+      inspected = await inspectIndexes({ statePath, state });
+    } catch (error) {
+      const target = error.code === WRITE_INDEX_MISMATCH
+        ? [combined.errors, errorKeys] : [combined.uncertainties, uncertaintyKeys];
+      addIssue(target[0], target[1], state.laneDigest, {
+        path: error.path || statePath, reason: error.message, code: error.code
+      }, statePath);
+      paths.add(error.path || statePath);
+      continue;
+    }
+    combined.directories.push(inspected.directory);
+    for (const path of inspected.paths) paths.add(path);
+    combined.nodes.push(...inspected.nodes);
+    combined.truncations.push(...inspected.truncations);
+    for (const item of inspected.errors) {
+      if (item.path) paths.add(item.path);
+      const target = item.code === WRITE_INDEX_MISMATCH
+        ? [combined.errors, errorKeys] : [combined.uncertainties, uncertaintyKeys];
+      addIssue(target[0], target[1], state.laneDigest, item, statePath);
+    }
+    for (const item of inspected.truncations) if (item.path) paths.add(item.path);
+    for (const expected of boundedWrites(state)) {
+      combined.attemptedProofs += 1;
+      try {
+        const proof = await inspectProof({ statePath, laneDigest: state.laneDigest,
+          rootDigest: state.writeIndexRoot, idDigest: expected.idDigest });
+        for (const path of proof.paths) paths.add(path);
+        if (!sameWrite(proof.entry, expected)) {
+          addIssue(combined.errors, errorKeys, state.laneDigest, {
+            path: proof.paths.at(-1) || statePath, code: WRITE_INDEX_MISMATCH,
+            reason: "premortem write index does not prove a bounded write"
+          }, statePath);
+        } else combined.verifiedProofs += 1;
+      } catch (error) {
+        const item = { path: error.path || inspected.paths[0] || statePath,
+          reason: error.message, code: error.code };
+        const target = error.code === WRITE_INDEX_MISMATCH
+          ? [combined.errors, errorKeys] : [combined.uncertainties, uncertaintyKeys];
+        addIssue(target[0], target[1], state.laneDigest, item, statePath);
+      }
+    }
+  }
+  combined.paths = [...paths].sort();
+  return combined;
+}
+
+export async function inspectPremortemAudit(root, gatewayPolicy) {
+  const premortems = await inspectDeliveryPremortems(root);
+  const indexes = premortems.directory
+    ? await inspectPremortemLaneIndexes(premortems.directory)
+    : { directory: null, directories: [], paths: [], pointers: [], errors: [],
+      finalizations: [], tamperedPointers: [], tamperedFinalizations: [], truncations: [] };
+  const writeIndexes = await inspectPremortemWriteIndexAudit(premortems);
+  const crossReferenceIssues = premortemIndexCrossReferenceFindings(premortems, indexes, gatewayPolicy);
+  return { premortems, indexes, writeIndexes, crossReferenceIssues };
+}

package/agent-spine-plugin/src/lib/audit.js

@@ -22,11 +22,12 @@ import { fileURLToPath } from "node:url";
 import { checkHosts } from "../../scripts/check-hosts.js";
 import { resolveHostSourceCatalog } from "./source-roots.js";
 import { preflightStatus } from "./preflight.js";
+import { inspectPremortemAudit } from "./audit-premortem.js";
+import { worldModelStatePath } from "./world-model.js";
 
 function gate(id, name, ok, detail, severity = "error") {
   return { id, name, ok, severity, detail };
 }
-
 function authorityViolations(graph, attention, learning, continuity, coordination, sharing, trust, registry, feedState) {
   const records = [
     ...graph.edges,
@@ -125,6 +126,7 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     : await buildCatalog(root));
   const catalog = before;
   const catalogPath = await saveCatalog(catalog);
+  const worldModelPath = await worldModelStatePath(before.root);
   const { graph, graphPath } = await loadGraph(before.root, catalog);
   const { attention, attentionPath, error: attentionLoadError } = await inspectAttention(before.root, catalog);
   const { learning, learningPath, error: learningLoadError } = await inspectLearning(before.root, catalog);
@@ -152,6 +154,9 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
   const { trust, trustPath, error: trustLoadError } = await inspectTrust(before.root, catalog);
   const { registry, registryPath, signerDirectory, errors: signerErrors } = await inspectSignerRegistry(before.root, catalog);
   const { state: feedState, statePath: feedStatePath, error: feedStateError } = await inspectHttpsFeedState(before.root);
+  const { premortems, indexes: premortemIndexes, writeIndexes: premortemWriteIndexes,
+    crossReferenceIssues: premortemCrossReferenceIssues } = await inspectPremortemAudit(
+    before.root, gatewayPolicy);
   const context = await resolveContext({ root: before.root, cwd: before.root, host: "generic", maxBytes: 16384, includeContent: true, catalog });
   let briefing = null;
   let briefingError = null;
@@ -175,6 +180,13 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
   const brokenLinks = catalog.conflicts.filter((conflict) => conflict.type === "broken-link");
   const reviewConflicts = catalog.conflicts.filter((conflict) => conflict.type !== "broken-link");
   const authority = authorityViolations(graph, attention, learning, continuity, coordination, sharing, trust, registry, feedState);
+  const premortemRecords = premortems.states.flatMap((state) => [state, state.requirement,
+    state.artifact, state.firstWrite, state.lastWrite, state.closure, ...state.events].filter(Boolean))
+    .concat(premortemIndexes.pointers, premortemIndexes.finalizations, premortemWriteIndexes.nodes);
+  const premortemAuthorityIssues = premortemRecords.filter((record) => record.authority !== "context-only");
+  const premortemIssues = [...premortems.errors, ...premortemIndexes.errors, ...premortemWriteIndexes.errors]
+    .map((item) => `unreadable-state:${item.reason}`)
+    .concat(premortemCrossReferenceIssues.map((item) => `index-state-mismatch:${item.reason}`));
   const forbidden = forbiddenEntityKeys(graph);
   const privacyValues = new Set(["private", "shared", "group"]);
   const privateRecords = [
@@ -292,10 +304,16 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
       ? `${catalog.documents.length} project documents; host-native source resolution failed closed: ${sourceResolutionError}`
       : sourceResolution ? `${sourceResolution.scopes.user} user, ${sourceResolution.scopes.project} project, and ${sourceResolution.scopes["project-memory"]} memory sources; broad home scan disabled`
         : `${catalog.documents.length} Markdown documents indexed`),
-    gate(3, "State isolation", [catalogPath, graphPath, attentionPath, learningPath, continuityPath,
+    gate(3, "State isolation", [catalogPath, graphPath, worldModelPath, attentionPath, learningPath, continuityPath,
       policyPath, coordinationPath, executionPolicyPath, selfstarterPath, channelPolicyPath,
       channelRuntimePath, personaPolicyPath, personaRuntimePath, gatewayPolicyPath, gatewayRuntimePath,
-      sharingPath, trustPath, registryPath, signerDirectory, feedStatePath]
+      sharingPath, trustPath, registryPath, signerDirectory, feedStatePath, premortems.directory,
+      ...premortems.paths, ...premortems.errors.map((item) => item.path), premortemIndexes.directory,
+      ...premortemIndexes.directories, ...premortemIndexes.paths,
+      ...premortemIndexes.errors.map((item) => item.path), ...premortemWriteIndexes.directories,
+      ...premortemWriteIndexes.paths, ...premortemWriteIndexes.errors.map((item) => item.path),
+      ...premortemWriteIndexes.uncertainties.map((item) => item.path),
+      ...premortemWriteIndexes.truncations.map((item) => item.path)].filter(Boolean)
       .every((path) => statePathIsScanExcluded(catalog, path)),
     catalog.scanPolicy?.stateRoot === "excluded"
       ? `Authenticated state is excluded from the home-root source scan for ${catalog.root}`
@@ -303,10 +321,10 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     gate(4, "Native hierarchy", nativeMapped.every((document) => document.hosts.length > 0), `${nativeMapped.length} host-native documents mapped`),
     gate(5, "Link integrity", brokenLinks.length === 0, brokenLinks.length ? `${brokenLinks.length} broken Markdown links` : "All indexed Markdown links resolve"),
     gate(6, "Conflict visibility", Array.isArray(catalog.conflicts), `${reviewConflicts.length} precedence or classification findings exposed`, "warning"),
-    gate(7, "Authority boundary", authority.length === 0 && forbidden.length === 0 && policyIssues.length === 0 && coordinationAuthorityIssues.length === 0 && executionPolicyIssues.length === 0 && selfstarterAuthorityIssues.length === 0 && channelPolicyIssues.length === 0 && personaPolicyIssues.length === 0 && gatewayPolicyIssues.length === 0 && sharingAuthorityIssues.length === 0 && !preflightError, preflightError
+    gate(7, "Authority boundary", authority.length === 0 && premortemAuthorityIssues.length === 0 && forbidden.length === 0 && policyIssues.length === 0 && coordinationAuthorityIssues.length === 0 && executionPolicyIssues.length === 0 && selfstarterAuthorityIssues.length === 0 && channelPolicyIssues.length === 0 && personaPolicyIssues.length === 0 && gatewayPolicyIssues.length === 0 && sharingAuthorityIssues.length === 0 && !preflightError, preflightError
       ? `preflight policy or receipt state failed closed: ${preflightError}`
-      : `${authority.length} context authority violations; ${forbidden.length} forbidden entity records; ${policyIssues.length} delegation policy findings; ${coordinationAuthorityIssues.length} assignment findings; ${executionPolicyIssues.length} execution policy findings; ${selfstarterAuthorityIssues.length} self-starter authority findings; ${channelPolicyIssues.length} channel policy findings; ${personaPolicyIssues.length} persona policy findings; ${gatewayPolicyIssues.length} gateway policy findings; ${sharingAuthorityIssues.length} shared authority findings; preflight ${preflight.status}`),
-    gate(8, "Context privacy", privacyInvalid.length === 0 && attentionGroupInvalid.length === 0 && attentionConfigValid && attentionIssues.length === 0 && learningIssues.length === 0 && continuityIssues.length === 0 && coordinationContextIssues.length === 0 && selfstarterStateIssues.length === 0 && channelRuntimeIssues.length === 0 && personaStateIssues.length === 0 && gatewayStateIssues.length === 0 && sharingContextIssues.length === 0 && authenticationIssues.length === 0, `${graph.entities.length} entities, ${graph.entityEdges.length} relationships, ${attention.signals.length} attention cues, ${attention.events.length} lifecycle events, ${learning.candidates.length} learning records, ${(learning.candidateEvidenceLineage || []).length} candidate-evidence lineage receipts, ${(learning.evaluations || []).length} immutable evaluation contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} exact-target contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v8", "agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} precommitted initial-trial contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} deadline-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} staleness-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} promotion-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} candidate-admission contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} candidate-evidence-cohort contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} blocking-defect-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} evidence-source-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} evidence-source-attested contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} bounded retry contracts, ${(learning.trialRetryExhaustions || []).length} terminal retry-exhaustion receipts, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v5", "agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} immutable initial-trial admissions, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} exact-target admissions, ${(learning.applications || []).filter((item) => item.schema === "agentspine.learning-application/v7").length} deadline-bound admissions, ${(learning.trialFailures || []).length} blocking trial-failure receipts, ${(learning.evaluatorRegistry || []).length} locally confirmed evaluator roots, ${(learning.evaluationBindings || []).length} evaluator-registry bindings, ${(learning.validationLeases || []).length} immutable validation leases, ${(learning.measurements || []).length} immutable measurement runs, ${(learning.applications || []).length} turn-bound projections, ${(learning.deliveries || []).length} completed model-turn deliveries, ${(learning.evaluationRevocations || []).length} evaluation revocations, ${(learning.evidenceRevocations || []).length} evidence revocations, ${(learning.measurementRevocations || []).length} measurement revocations, ${(learning.applicationRevocations || []).length} application revocations, ${(learning.deliveryRevocations || []).length} delivery revocations, ${(learning.outcomeRevocations || []).length} outcome revocations, ${(learning.outcomes || []).length} outcome receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v5", "agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} case-coverage receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} provenance-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} lineage-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} paired-evaluator receipts and ${(learning.outcomes || []).filter((item) => item.schema === "agentspine.learning-outcome/v9").length} evaluator-root-bound receipts, ${continuity.signals.length} continuity signals, ${coordination.tasks.length} coordination items, ${selfstarter.jobs.length} self-starter jobs, ${channelRuntime.events.length} channel events, ${personaRuntime.personas.length} authenticated personas, ${gatewayRuntime.queue.length} gateway queue items, ${gatewayRuntime.outbox.length} delivery records, ${sharing.records.length} shared records, ${trust.records.length} trusted keys, ${registry.signers.length} local signers, and ${feedState.feeds.length} feed receipts checked`),
+      : `${authority.length} context authority violations; ${premortemAuthorityIssues.length} premortem authority violations; ${forbidden.length} forbidden entity records; ${policyIssues.length} delegation policy findings; ${coordinationAuthorityIssues.length} assignment findings; ${executionPolicyIssues.length} execution policy findings; ${selfstarterAuthorityIssues.length} self-starter authority findings; ${channelPolicyIssues.length} channel policy findings; ${personaPolicyIssues.length} persona policy findings; ${gatewayPolicyIssues.length} gateway policy findings; ${sharingAuthorityIssues.length} shared authority findings; preflight ${preflight.status}`),
+    gate(8, "Context privacy", privacyInvalid.length === 0 && attentionGroupInvalid.length === 0 && attentionConfigValid && attentionIssues.length === 0 && learningIssues.length === 0 && continuityIssues.length === 0 && coordinationContextIssues.length === 0 && selfstarterStateIssues.length === 0 && channelRuntimeIssues.length === 0 && personaStateIssues.length === 0 && gatewayStateIssues.length === 0 && sharingContextIssues.length === 0 && authenticationIssues.length === 0 && premortemIssues.length === 0, `${graph.entities.length} entities, ${graph.entityEdges.length} relationships, ${attention.signals.length} attention cues, ${attention.events.length} lifecycle events, ${learning.candidates.length} learning records, ${(learning.candidateEvidenceLineage || []).length} candidate-evidence lineage receipts, ${(learning.evaluations || []).length} immutable evaluation contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} exact-target contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v8", "agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} precommitted initial-trial contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} deadline-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} staleness-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} promotion-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} candidate-admission contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} candidate-evidence-cohort contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} blocking-defect-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} evidence-source-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v26", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v28", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} evidence-source-attested contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v25", "agentspine.learning-evaluation/v27", "agentspine.learning-evaluation/v29"].includes(item.schema)).length} bounded retry contracts, ${(learning.trialRetryExhaustions || []).length} terminal retry-exhaustion receipts, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v5", "agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} immutable initial-trial admissions, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} exact-target admissions, ${(learning.applications || []).filter((item) => item.schema === "agentspine.learning-application/v7").length} deadline-bound admissions, ${(learning.trialFailures || []).length} blocking trial-failure receipts, ${(learning.evaluatorRegistry || []).length} locally confirmed evaluator roots, ${(learning.evaluationBindings || []).length} evaluator-registry bindings, ${(learning.validationLeases || []).length} immutable validation leases, ${(learning.measurements || []).length} immutable measurement runs, ${(learning.applications || []).length} turn-bound projections, ${(learning.deliveries || []).length} completed model-turn deliveries, ${(learning.evaluationRevocations || []).length} evaluation revocations, ${(learning.evidenceRevocations || []).length} evidence revocations, ${(learning.measurementRevocations || []).length} measurement revocations, ${(learning.applicationRevocations || []).length} application revocations, ${(learning.deliveryRevocations || []).length} delivery revocations, ${(learning.outcomeRevocations || []).length} outcome revocations, ${(learning.outcomes || []).length} outcome receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v5", "agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} case-coverage receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} provenance-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} lineage-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} paired-evaluator receipts and ${(learning.outcomes || []).filter((item) => item.schema === "agentspine.learning-outcome/v9").length} evaluator-root-bound receipts, ${continuity.signals.length} continuity signals, ${coordination.tasks.length} coordination items, ${selfstarter.jobs.length} self-starter jobs, ${channelRuntime.events.length} channel events, ${personaRuntime.personas.length} authenticated personas, ${gatewayRuntime.queue.length} gateway queue items, ${gatewayRuntime.outbox.length} delivery records, ${sharing.records.length} shared records, ${trust.records.length} trusted keys, ${registry.signers.length} local signers, ${feedState.feeds.length} feed receipts, ${premortems.states.length} premortem states, and ${premortemIndexes.pointers.length} premortem index pointers checked`),
     gate(9, "Context budget", loadedBytes <= context.budget.maxBytes && briefingBudgetValid, briefingError
       ? `${loadedBytes}/${context.budget.maxBytes} source bytes; briefing failed closed: ${briefingError}`
       : `${loadedBytes}/${context.budget.maxBytes} source bytes; ${briefingBytes}/${briefing.budget.maxBytes} briefing bytes`),
@@ -321,6 +339,7 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     gates,
     catalogPath,
     graphPath,
+    worldModelPath,
     attentionPath,
     learningPath,
     continuityPath,
@@ -338,6 +357,37 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     trustPath,
     registryPath,
     feedStatePath,
+    premortemDiagnostics: {
+      directory: premortems.directory,
+      paths: [...premortems.paths, ...premortemWriteIndexes.paths],
+      states: premortems.states.length,
+      artifacts: premortems.states.filter((state) => state.artifact).length,
+      closures: premortems.states.filter((state) => state.closure).length,
+      errors: structuredClone([...premortems.errors, ...premortemWriteIndexes.errors]),
+      truncations: structuredClone([...premortems.truncations, ...premortemWriteIndexes.truncations]),
+      writeIndex: { directories: [...premortemWriteIndexes.directories],
+        paths: [...premortemWriteIndexes.paths], nodes: premortemWriteIndexes.nodes.length,
+        states: premortemWriteIndexes.states,
+        attemptedProofs: premortemWriteIndexes.attemptedProofs,
+        verifiedProofs: premortemWriteIndexes.verifiedProofs,
+        errors: structuredClone(premortemWriteIndexes.errors),
+        uncertainties: structuredClone(premortemWriteIndexes.uncertainties),
+        truncations: structuredClone(premortemWriteIndexes.truncations), authority: "context-only" },
+      index: {
+        directory: premortemIndexes.directory,
+        directories: [...premortemIndexes.directories],
+        paths: [...premortemIndexes.paths],
+        pointers: premortemIndexes.pointers.length,
+        finalizations: premortemIndexes.finalizations.length,
+        tamperedPointers: [...premortemIndexes.tamperedPointers],
+        tamperedFinalizations: [...premortemIndexes.tamperedFinalizations],
+        errors: structuredClone(premortemIndexes.errors),
+        truncations: structuredClone(premortemIndexes.truncations),
+        crossReferenceErrors: structuredClone(premortemCrossReferenceIssues),
+        authority: "context-only"
+      },
+      authority: "context-only"
+    },
     learningDiagnostics: {
       candidateEvidenceLineageReceipts:
         (learning.candidateEvidenceLineage || []).length,

package/agent-spine-plugin/src/lib/autonomy-policy.js

@@ -0,0 +1,110 @@
+import { randomUUID } from "node:crypto";
+import {
+  AUTONOMY_CONFIRMATION, AUTONOMY_MODES, CAPABILITY_RE, PUBLISH_CONFIRMATION,
+  appendHistory, canonicalLocalRoot, exactCapabilities, loadAutonomy, modeAllows,
+  mutateAutonomy, publicRepository, safeText, signedRecord, stableId, timestamp
+} from "./autonomy-store.js";
+import { loadExecutionPolicy } from "./selfstarter.js";
+
+function confirmation(value) {
+  if (value !== AUTONOMY_CONFIRMATION) throw new Error("autonomy changes require explicit local-owner confirmation");
+}
+
+export async function configureAutonomyProject({
+  root = process.cwd(), id = `autonomy-project:${randomUUID()}`, projectId, tenantId, groupId = null,
+  localRoot = null, publicUrl = null, mode = "observe", capabilities = [], goal = "Maintain a bounded project overview.",
+  confirmation: ownerConfirmation, publishConfirmation = null, now = new Date()
+}) {
+  confirmation(ownerConfirmation);
+  if (!AUTONOMY_MODES.includes(mode)) throw new Error(`mode must be one of: ${AUTONOMY_MODES.join(", ")}`);
+  if (Boolean(localRoot) === Boolean(publicUrl)) throw new Error("configure exactly one local root or public repository URL");
+  const source = localRoot
+    ? { kind: "local-root", value: await canonicalLocalRoot(localRoot) }
+    : { kind: "public-repository", value: publicRepository(publicUrl) };
+  const requestedCapabilities = exactCapabilities(capabilities);
+  if (modeAllows(mode, "execute") && !requestedCapabilities.length) throw new Error("execute and publish modes require exact capabilities");
+  if (mode === "publish" && publishConfirmation !== PUBLISH_CONFIRMATION) {
+    throw new Error("publish mode requires a separate explicit local publish confirmation");
+  }
+  const at = timestamp(now, "now");
+  const registrationId = stableId(id, "registrationId");
+  return mutateAutonomy(root, (state, paths) => {
+    const previous = state.projects.find((item) => item.id === registrationId);
+    if (previous && (previous.projectId !== projectId || previous.tenantId !== tenantId || previous.groupId !== groupId
+      || previous.source.kind !== source.kind || previous.source.value !== source.value)) {
+      throw new Error("project registration identity and scope are immutable; create a new registration");
+    }
+    state.revision += 1;
+    const body = {
+      id: registrationId, projectId: stableId(projectId, "projectId"), tenantId: stableId(tenantId, "tenantId"),
+      groupId: stableId(groupId, "groupId", true), source, mode, capabilities: requestedCapabilities,
+      goal: safeText(goal, "goal", 500), active: true, revision: state.revision,
+      createdAt: previous?.createdAt || at, updatedAt: at,
+      publishConfirmedAt: mode === "publish" ? at : null,
+      sourceAuthority: "explicit-local-owner-policy", authority: "explicit-local-autonomy-policy"
+    };
+    const project = signedRecord(body);
+    if (previous) state.projects = state.projects.map((item) => item.id === registrationId ? project : item);
+    else state.projects.push(project);
+    state.projects.sort((a, b) => a.id.localeCompare(b.id));
+    appendHistory(state, { kind: previous ? "project-updated" : "project-registered", projectRegistrationId: project.id, at });
+    return { project, policyRevision: state.revision, autonomyPath: paths.autonomyPath };
+  });
+}
+
+export async function revokeAutonomyProject({ root = process.cwd(), id, reason, confirmation: ownerConfirmation, now = new Date() }) {
+  confirmation(ownerConfirmation);
+  const registrationId = stableId(id, "registrationId");
+  const at = timestamp(now, "now");
+  const revokeReason = safeText(reason, "reason", 500);
+  return mutateAutonomy(root, (state, paths) => {
+    const previous = state.projects.find((item) => item.id === registrationId);
+    if (!previous?.active) throw new Error("project registration is unknown or already inactive");
+    state.revision += 1;
+    const { recordDigest: ignored, ...body } = previous;
+    const project = signedRecord({ ...body, active: false, updatedAt: at, revision: state.revision, revokedAt: at, revokeReason });
+    state.projects = state.projects.map((item) => item.id === registrationId ? project : item);
+    appendHistory(state, { kind: "project-revoked", projectRegistrationId: project.id, at });
+    return { project, policyRevision: state.revision, autonomyPath: paths.autonomyPath };
+  });
+}
+
+function exactGrant(policy, input, capability, now) {
+  return policy.grants.find((grant) => grant.active && grant.actorId === input.actorId
+    && grant.jobId === input.jobId && grant.taskId === input.taskId && grant.targetId === input.targetId
+    && grant.projectId === input.projectId && grant.groupId === input.groupId && grant.host === input.host
+    && grant.capabilities.includes(capability) && (!grant.expiresAt || new Date(grant.expiresAt) > now));
+}
+
+export async function evaluateAutonomyAction({
+  root = process.cwd(), registrationId, tenantId, groupId = null, action, capability = null,
+  actorId = null, jobId = null, taskId = null, targetId = null, projectId = null, host = null, now = new Date()
+}) {
+  if (!AUTONOMY_MODES.includes(action)) throw new Error(`action must be one of: ${AUTONOMY_MODES.join(", ")}`);
+  const { state } = await loadAutonomy(root);
+  const project = state.projects.find((item) => item.id === stableId(registrationId, "registrationId") && item.active);
+  const base = { schema: "agentspine.autonomy-decision/v1", registrationId, action, allowed: false,
+    reason: "project-registration-unavailable", grantsAuthority: false, authority: "additional-autonomy-gate" };
+  if (!project || project.tenantId !== stableId(tenantId, "tenantId") || project.groupId !== stableId(groupId, "groupId", true)) return base;
+  if (!modeAllows(project.mode, action)) return { ...base, reason: "autonomy-mode-insufficient", configuredMode: project.mode };
+  if (!modeAllows(action, "execute")) return { ...base, allowed: true, reason: "configured-context-action", configuredMode: project.mode };
+  if (project.projectId !== projectId) return { ...base, reason: "action-project-mismatch", configuredMode: project.mode };
+  if (typeof capability !== "string" || !CAPABILITY_RE.test(capability) || !project.capabilities.includes(capability)) {
+    return { ...base, reason: "capability-not-configured", configuredMode: project.mode };
+  }
+  if (action === "publish" && !project.publishConfirmedAt) return { ...base, reason: "publish-not-confirmed", configuredMode: project.mode };
+  const scope = { actorId, jobId, taskId, targetId, projectId, groupId, host };
+  if (Object.entries(scope).some(([key, value]) => key !== "groupId" && (typeof value !== "string" || !value))) {
+    return { ...base, reason: "execution-scope-incomplete", configuredMode: project.mode };
+  }
+  const { policy } = await loadExecutionPolicy(root);
+  const grant = exactGrant(policy, scope, capability, new Date(now));
+  if (!grant) return { ...base, reason: "execution-grant-unavailable", configuredMode: project.mode };
+  return { ...base, allowed: true, reason: "configured-and-explicitly-granted", configuredMode: project.mode, grantId: grant.id };
+}
+
+export async function autonomyStatus({ root = process.cwd(), tenantId = null, groupId = null } = {}) {
+  const { state, autonomyPath } = await loadAutonomy(root);
+  const projects = state.projects.filter((item) => (!tenantId || item.tenantId === tenantId) && item.groupId === groupId);
+  return { schema: AUTONOMY_SCHEMA, projects, revision: state.revision, autonomyPath, authority: "context-only" };
+}