chainlesschain 0.166.74 → 0.166.77

package/src/lib/evolution/evolution-eval-contracts.js

@@ -0,0 +1,86 @@
+/** Shared evaluation contracts; keep this module free of runtime dependencies. */
+
+export const EVOLUTION_EVAL_TASK_SCHEMA =
+  "chainlesschain.evolution-eval-task/v1";
+export const EVOLUTION_EVAL_SUITE_SCHEMA =
+  "chainlesschain.evolution-eval-suite/v1";
+export const EVOLUTION_EVAL_POLICY_SCHEMA =
+  "chainlesschain.evolution-eval-policy/v2";
+export const EVOLUTION_EVAL_RECEIPT_SCHEMA =
+  "chainlesschain.evolution-eval-receipt/v4";
+export const EVOLUTION_EVAL_RESULT_EVIDENCE_SCHEMA =
+  "chainlesschain.evolution-eval-result-evidence/v1";
+export const EVOLUTION_EVAL_SUITE_AUTHORITY_SCHEMA =
+  "chainlesschain.evolution-eval-suite-authority-receipt/v1";
+export const EVOLUTION_EVAL_ENVIRONMENT_SCHEMA =
+  "chainlesschain.evolution-eval-environment-receipt/v1";
+export const EVOLUTION_EVAL_ARTIFACT_SCHEMA =
+  "chainlesschain.evolution-eval-artifact-resolution-receipt/v1";
+export const EVOLUTION_EVAL_PROVENANCE_SCHEMA =
+  "chainlesschain.evolution-eval-provenance-binding-receipt/v1";
+export const EVOLUTION_EVAL_SUBJECT_SCHEMA =
+  "chainlesschain.evolution-eval-subject-handle-receipt/v1";
+export const EVOLUTION_EVAL_REPLAY_SCHEMA =
+  "chainlesschain.evolution-eval-handle-reservation-receipt/v1";
+export const EVOLUTION_EVAL_SUPERVISION_SCHEMA =
+  "chainlesschain.evolution-eval-deadline-enforcement-receipt/v3";
+export const EVOLUTION_EVAL_ISOLATED_TARGET_SCHEMA =
+  "chainlesschain.evolution-eval-isolated-target/v2";
+export const EVOLUTION_EVAL_AUTHORITY_DESCRIPTOR_SCHEMA =
+  "chainlesschain.evolution-eval-authority-descriptor/v1";
+/**
+ * Authority roots commit configuration supplied by a trusted composition
+ * boundary. They are not local proofs that JavaScript callable bytes match a
+ * declared handlerArtifactDigest. Production must use an attested loader that
+ * binds each descriptor to the loaded callable; requests and plugins must not
+ * construct Gate/Verifier authority ports.
+ */
+export const EVOLUTION_EVAL_AUTHORITY_ROOT_SEMANTICS = Object.freeze({
+  kind: "trusted-composition-configuration-commitment",
+  callableBinding: "attested-loader-required",
+  requestConstructedAuthorities: "forbidden",
+});
+export const EVOLUTION_EVAL_TARGET_INVOCATION_SCHEMA =
+  "chainlesschain.evolution-eval-target-invocation/v2";
+export const EVOLUTION_EVAL_TARGET_REVOCATION_SCHEMA =
+  "chainlesschain.evolution-eval-target-revocation/v2";
+export const EVOLUTION_EVAL_EXECUTION_SCHEMA =
+  "chainlesschain.evolution-eval-execution-receipt/v1";
+export const EVOLUTION_EVAL_GRADE_SCHEMA =
+  "chainlesschain.evolution-eval-grade-receipt/v1";
+export const EVOLUTION_EVAL_SAFETY_SCHEMA =
+  "chainlesschain.evolution-eval-safety-receipt/v1";
+
+export const EVOLUTION_EVAL_INVALID_CODE = "CC_EVOLUTION_EVAL_INVALID";
+export const EVOLUTION_EVAL_LEAKAGE_CODE = "CC_EVOLUTION_EVAL_LEAKAGE";
+export const EVOLUTION_EVAL_AUTHORITY_FAILED_CODE =
+  "CC_EVOLUTION_EVAL_AUTHORITY_FAILED";
+export const EVOLUTION_EVAL_EXECUTION_FAILED_CODE =
+  "CC_EVOLUTION_EVAL_EXECUTION_FAILED";
+export const EVOLUTION_EVAL_GRADER_FAILED_CODE =
+  "CC_EVOLUTION_EVAL_GRADER_FAILED";
+export const EVOLUTION_EVAL_SAFETY_FAILED_CODE =
+  "CC_EVOLUTION_EVAL_SAFETY_FAILED";
+export const EVOLUTION_EVAL_SUPERVISOR_UNRESPONSIVE_CODE =
+  "CC_EVOLUTION_EVAL_SUPERVISOR_UNRESPONSIVE";
+export const EVOLUTION_EVAL_TARGET_SETTLEMENT_UNCONFIRMED_CODE =
+  "CC_EVOLUTION_EVAL_TARGET_SETTLEMENT_UNCONFIRMED";
+
+export const EVOLUTION_EVAL_ATTESTATION_PURPOSES = Object.freeze({
+  suite: "chainlesschain.evolution-eval.suite-authority/v1",
+  environment: "chainlesschain.evolution-eval.environment/v1",
+  artifact: "chainlesschain.evolution-eval.artifact/v1",
+  provenance: "chainlesschain.evolution-eval.provenance/v1",
+  subject: "chainlesschain.evolution-eval.subject/v1",
+  replay: "chainlesschain.evolution-eval.handle-replay/v1",
+  supervisor: "chainlesschain.evolution-eval.deadline-supervisor/v3",
+  targetInvocation:
+    "chainlesschain.evolution-eval.target-invocation-evidence/v1",
+  targetRevocation:
+    "chainlesschain.evolution-eval.target-revocation-evidence/v1",
+  execution: "chainlesschain.evolution-eval.execution/v1",
+  grade: "chainlesschain.evolution-eval.grade/v1",
+  safety: "chainlesschain.evolution-eval.safety/v1",
+  receipt: "chainlesschain.evolution-eval.receipt/v3",
+  clock: "chainlesschain.evolution-eval.trusted-clock/v1",
+});

package/src/lib/evolution/evolution-eval-gate.js

@@ -9,91 +9,44 @@
 
 import { createHash, randomBytes } from "node:crypto";
 import { isProxy } from "node:util/types";
-
-export const EVOLUTION_EVAL_TASK_SCHEMA =
-  "chainlesschain.evolution-eval-task/v1";
-export const EVOLUTION_EVAL_SUITE_SCHEMA =
-  "chainlesschain.evolution-eval-suite/v1";
-export const EVOLUTION_EVAL_POLICY_SCHEMA =
-  "chainlesschain.evolution-eval-policy/v2";
-export const EVOLUTION_EVAL_RECEIPT_SCHEMA =
-  "chainlesschain.evolution-eval-receipt/v4";
-export const EVOLUTION_EVAL_RESULT_EVIDENCE_SCHEMA =
-  "chainlesschain.evolution-eval-result-evidence/v1";
-export const EVOLUTION_EVAL_SUITE_AUTHORITY_SCHEMA =
-  "chainlesschain.evolution-eval-suite-authority-receipt/v1";
-export const EVOLUTION_EVAL_ENVIRONMENT_SCHEMA =
-  "chainlesschain.evolution-eval-environment-receipt/v1";
-export const EVOLUTION_EVAL_ARTIFACT_SCHEMA =
-  "chainlesschain.evolution-eval-artifact-resolution-receipt/v1";
-export const EVOLUTION_EVAL_PROVENANCE_SCHEMA =
-  "chainlesschain.evolution-eval-provenance-binding-receipt/v1";
-export const EVOLUTION_EVAL_SUBJECT_SCHEMA =
-  "chainlesschain.evolution-eval-subject-handle-receipt/v1";
-export const EVOLUTION_EVAL_REPLAY_SCHEMA =
-  "chainlesschain.evolution-eval-handle-reservation-receipt/v1";
-export const EVOLUTION_EVAL_SUPERVISION_SCHEMA =
-  "chainlesschain.evolution-eval-deadline-enforcement-receipt/v3";
-export const EVOLUTION_EVAL_ISOLATED_TARGET_SCHEMA =
-  "chainlesschain.evolution-eval-isolated-target/v2";
-export const EVOLUTION_EVAL_AUTHORITY_DESCRIPTOR_SCHEMA =
-  "chainlesschain.evolution-eval-authority-descriptor/v1";
-/**
- * Authority roots commit configuration supplied by a trusted composition
- * boundary. They are not local proofs that JavaScript callable bytes match a
- * declared handlerArtifactDigest. Production must use an attested loader that
- * binds each descriptor to the loaded callable; requests and plugins must not
- * construct Gate/Verifier authority ports.
- */
-export const EVOLUTION_EVAL_AUTHORITY_ROOT_SEMANTICS = Object.freeze({
-  kind: "trusted-composition-configuration-commitment",
-  callableBinding: "attested-loader-required",
-  requestConstructedAuthorities: "forbidden",
-});
-export const EVOLUTION_EVAL_TARGET_INVOCATION_SCHEMA =
-  "chainlesschain.evolution-eval-target-invocation/v2";
-export const EVOLUTION_EVAL_TARGET_REVOCATION_SCHEMA =
-  "chainlesschain.evolution-eval-target-revocation/v2";
-export const EVOLUTION_EVAL_EXECUTION_SCHEMA =
-  "chainlesschain.evolution-eval-execution-receipt/v1";
-export const EVOLUTION_EVAL_GRADE_SCHEMA =
-  "chainlesschain.evolution-eval-grade-receipt/v1";
-export const EVOLUTION_EVAL_SAFETY_SCHEMA =
-  "chainlesschain.evolution-eval-safety-receipt/v1";
-
-export const EVOLUTION_EVAL_INVALID_CODE = "CC_EVOLUTION_EVAL_INVALID";
-export const EVOLUTION_EVAL_LEAKAGE_CODE = "CC_EVOLUTION_EVAL_LEAKAGE";
-export const EVOLUTION_EVAL_AUTHORITY_FAILED_CODE =
-  "CC_EVOLUTION_EVAL_AUTHORITY_FAILED";
-export const EVOLUTION_EVAL_EXECUTION_FAILED_CODE =
-  "CC_EVOLUTION_EVAL_EXECUTION_FAILED";
-export const EVOLUTION_EVAL_GRADER_FAILED_CODE =
-  "CC_EVOLUTION_EVAL_GRADER_FAILED";
-export const EVOLUTION_EVAL_SAFETY_FAILED_CODE =
-  "CC_EVOLUTION_EVAL_SAFETY_FAILED";
-export const EVOLUTION_EVAL_SUPERVISOR_UNRESPONSIVE_CODE =
-  "CC_EVOLUTION_EVAL_SUPERVISOR_UNRESPONSIVE";
-export const EVOLUTION_EVAL_TARGET_SETTLEMENT_UNCONFIRMED_CODE =
-  "CC_EVOLUTION_EVAL_TARGET_SETTLEMENT_UNCONFIRMED";
-
-export const EVOLUTION_EVAL_ATTESTATION_PURPOSES = Object.freeze({
-  suite: "chainlesschain.evolution-eval.suite-authority/v1",
-  environment: "chainlesschain.evolution-eval.environment/v1",
-  artifact: "chainlesschain.evolution-eval.artifact/v1",
-  provenance: "chainlesschain.evolution-eval.provenance/v1",
-  subject: "chainlesschain.evolution-eval.subject/v1",
-  replay: "chainlesschain.evolution-eval.handle-replay/v1",
-  supervisor: "chainlesschain.evolution-eval.deadline-supervisor/v3",
-  targetInvocation:
-    "chainlesschain.evolution-eval.target-invocation-evidence/v1",
-  targetRevocation:
-    "chainlesschain.evolution-eval.target-revocation-evidence/v1",
-  execution: "chainlesschain.evolution-eval.execution/v1",
-  grade: "chainlesschain.evolution-eval.grade/v1",
-  safety: "chainlesschain.evolution-eval.safety/v1",
-  receipt: "chainlesschain.evolution-eval.receipt/v3",
-  clock: "chainlesschain.evolution-eval.trusted-clock/v1",
-});
+import {
+  admitEvolutionEvalLaunch,
+  captureEvolutionEvalLaunchAdmissionBinding,
+  isEvolutionEvalLaunchAdmissionAuthority,
+} from "./evolution-eval-launch-admission.js";
+
+import {
+  EVOLUTION_EVAL_TASK_SCHEMA,
+  EVOLUTION_EVAL_SUITE_SCHEMA,
+  EVOLUTION_EVAL_POLICY_SCHEMA,
+  EVOLUTION_EVAL_RECEIPT_SCHEMA,
+  EVOLUTION_EVAL_RESULT_EVIDENCE_SCHEMA,
+  EVOLUTION_EVAL_SUITE_AUTHORITY_SCHEMA,
+  EVOLUTION_EVAL_ENVIRONMENT_SCHEMA,
+  EVOLUTION_EVAL_ARTIFACT_SCHEMA,
+  EVOLUTION_EVAL_PROVENANCE_SCHEMA,
+  EVOLUTION_EVAL_SUBJECT_SCHEMA,
+  EVOLUTION_EVAL_REPLAY_SCHEMA,
+  EVOLUTION_EVAL_SUPERVISION_SCHEMA,
+  EVOLUTION_EVAL_ISOLATED_TARGET_SCHEMA,
+  EVOLUTION_EVAL_AUTHORITY_DESCRIPTOR_SCHEMA,
+  EVOLUTION_EVAL_AUTHORITY_ROOT_SEMANTICS,
+  EVOLUTION_EVAL_TARGET_INVOCATION_SCHEMA,
+  EVOLUTION_EVAL_TARGET_REVOCATION_SCHEMA,
+  EVOLUTION_EVAL_EXECUTION_SCHEMA,
+  EVOLUTION_EVAL_GRADE_SCHEMA,
+  EVOLUTION_EVAL_SAFETY_SCHEMA,
+  EVOLUTION_EVAL_INVALID_CODE,
+  EVOLUTION_EVAL_LEAKAGE_CODE,
+  EVOLUTION_EVAL_AUTHORITY_FAILED_CODE,
+  EVOLUTION_EVAL_EXECUTION_FAILED_CODE,
+  EVOLUTION_EVAL_GRADER_FAILED_CODE,
+  EVOLUTION_EVAL_SAFETY_FAILED_CODE,
+  EVOLUTION_EVAL_SUPERVISOR_UNRESPONSIVE_CODE,
+  EVOLUTION_EVAL_TARGET_SETTLEMENT_UNCONFIRMED_CODE,
+  EVOLUTION_EVAL_ATTESTATION_PURPOSES,
+} from "./evolution-eval-contracts.js";
+export * from "./evolution-eval-contracts.js";
 
 const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/u;
 const TASK_BINDING_NONCE_PATTERN = /^task-binding-[a-f0-9]{48,128}$/u;
@@ -713,6 +666,7 @@ const RECEIPT_KEYS = new Set([
 const SPLIT_COUNT_KEYS = new Set(SPLITS);
 
 const GATE_INSTANCES = new WeakSet();
+const GATE_LAUNCH_BINDINGS = new WeakMap();
 const RECEIPT_VERIFIER_INSTANCES = new WeakSet();
 const IMMUTABLE_ISOLATED_TARGET_BINDINGS = new WeakMap();
 
@@ -1813,6 +1767,26 @@ function normalizeRunEvaluationContext(value) {
   });
 }
 
+/** Freeze the exact caller-controlled part of a launch before a run ID exists. */
+export function computeEvolutionEvalLaunchRequestDigest(input) {
+  preflightCanonicalStructure(input);
+  assertExactRecord(input, RUN_REQUEST_KEYS, "evaluation launch request");
+  return digest(
+    {
+      suiteRef: normalizeId(input.suiteRef, "suiteRef", 256),
+      candidateId: normalizeDigest(input.candidateId, "candidateId"),
+      baselineId: normalizeDigest(input.baselineId, "baselineId"),
+      targetEnvironmentRef: normalizeId(
+        input.targetEnvironmentRef,
+        "targetEnvironmentRef",
+        256,
+      ),
+      evaluationContext: normalizeRunEvaluationContext(input.evaluationContext),
+    },
+    "chainlesschain.evolution-eval-launch-request/v1",
+  );
+}
+
 function normalizeEvaluationContext(value) {
   preflightCanonicalStructure(value);
   assertExactRecord(value, EVALUATION_CONTEXT_KEYS, "evaluation context");
@@ -3631,6 +3605,7 @@ export class EvolutionEvalGate {
   #authorityPolicies;
   #supervision;
   #clock;
+  #launchAdmission;
 
   constructor({
     policy,
@@ -3655,7 +3630,24 @@ export class EvolutionEvalGate {
     invocationEvidenceVerifier,
     revocationEvidenceVerifier,
     clock,
+    launchAdmission,
   }) {
+    if (
+      launchAdmission !== undefined &&
+      !isEvolutionEvalLaunchAdmissionAuthority(launchAdmission)
+    ) {
+      throw evalError(
+        EVOLUTION_EVAL_INVALID_CODE,
+        "launchAdmission must be a trusted admission authority",
+      );
+    }
+    this.#launchAdmission = launchAdmission;
+    GATE_LAUNCH_BINDINGS.set(
+      this,
+      launchAdmission === undefined
+        ? null
+        : captureEvolutionEvalLaunchAdmissionBinding(launchAdmission),
+    );
     this.#policy = verifyEvolutionEvalPolicy(policy);
     this.#authorityPolicies = normalizeAuthorityPolicies(authorityPolicies);
     const supervisorPolicy = this.#authorityPolicies.supervisor;
@@ -5440,6 +5432,54 @@ export class EvolutionEvalGate {
     const deadlineMs = started.milliseconds + this.#policy.maxWallClockMs;
     const deadlineAt = new Date(deadlineMs).toISOString();
 
+    if (this.#launchAdmission) {
+      const binding = GATE_LAUNCH_BINDINGS.get(this);
+      const requestDigest = computeEvolutionEvalLaunchRequestDigest({
+        suiteRef,
+        candidateId,
+        baselineId,
+        targetEnvironmentRef,
+        evaluationContext,
+      });
+      if (binding.descriptor.planDigest !== evaluationContext.planDigest) {
+        throw evalError(
+          EVOLUTION_EVAL_INVALID_CODE,
+          "launch admission plan differs from the evaluation run context",
+        );
+      }
+      if (
+        binding.expectedRequest &&
+        (binding.expectedRequest.requestDigest !== requestDigest ||
+          binding.expectedRequest.policyDigest !== this.#policy.policyDigest ||
+          binding.expectedRequest.evaluationAuthorityRoot !==
+            this.#evaluationAuthorityRoot)
+      ) {
+        throw evalError(
+          EVOLUTION_EVAL_INVALID_CODE,
+          "evaluation run differs from its enrolled launch request",
+        );
+      }
+      await admitEvolutionEvalLaunch(this.#launchAdmission, {
+        runId,
+        runNonce,
+        requestDigest,
+        policyDigest: this.#policy.policyDigest,
+        evaluationAuthorityRoot: this.#evaluationAuthorityRoot,
+        tenantId: this.#tenantId,
+        admittedAt: started.timestamp,
+        deadlineAt,
+      });
+      if (
+        NATIVE_MONOTONIC_NOW() >= runLocalDeadlineMs ||
+        readClock(this.#clock).milliseconds >= deadlineMs
+      ) {
+        throw evalError(
+          EVOLUTION_EVAL_AUTHORITY_FAILED_CODE,
+          "launch admission crossed the evaluation deadline",
+        );
+      }
+    }
+
     const suiteRequest = deepFreeze({
       runId,
       runNonce,
@@ -6535,6 +6575,17 @@ export function isEvolutionEvalGate(value) {
   return GATE_INSTANCES.has(value);
 }
 
+/** Read-only composition check; the authority capability itself stays private. */
+export function captureEvolutionEvalGateLaunchAdmissionBinding(gate) {
+  if (!GATE_INSTANCES.has(gate)) {
+    throw evalError(
+      EVOLUTION_EVAL_INVALID_CODE,
+      "a branded EvolutionEvalGate is required",
+    );
+  }
+  return GATE_LAUNCH_BINDINGS.get(gate);
+}
+
 export function isEvolutionEvalReceiptVerifier(value) {
   return RECEIPT_VERIFIER_INSTANCES.has(value);
 }