hachure 0.5.1 → 0.6.0

package/README.md

@@ -128,6 +128,11 @@ anchors, policy references, derivation edges, and confidence basis metadata.
 Derived trust status is never stored on the claim itself as source of truth; it is
 computed from the surrounding bundle at evaluation time.
 
+Claims also carry two optional round-trip fields, tolerated but never producer-authored:
+`producerStatus` (the producer's own declared status, present when a TrustReport's
+derived claims are re-fed as bundle input) and `freshness` ({ `asOf`, `expiresAt`?,
+`stale` }, a freshness stamp on derived/report claims).
+
 ### Evidence
 
 An item of support for a claim. Evidence is linked to a claim via `claimId`. Each
@@ -186,7 +191,7 @@ re-evaluation if the derivation algorithm changes.
 ### DerivationRule
 
 A named, versioned rule that derives a boolean answer from existing claims (ADR 0003 §5).
-Rules compose claims using value predicates (`eq`, `gt`, `gte`, `lte`, `in`, `exists`)
+Rules compose claims using value predicates (`eq`, `neq`, `gt`, `gte`, `lt`, `lte`, `in`, `exists`)
 and status predicates (`acceptedStatuses`), combined with `"all"` or `"any"`. Rules
 are promoted from Flow's gate-expectation language. The weakest-link confidence ceiling
 propagates through rule evaluation unchanged.
@@ -198,7 +203,7 @@ propagates through rule evaluation unchanged.
 Status is a pure, versioned function of the bundle data and a `now` timestamp. The
 full specification of the derivation algorithm is in [status-function.md](status-function.md).
 
-The eight possible statuses:
+The nine possible statuses:
 
 | Status | Meaning |
 |---|---|
@@ -210,6 +215,7 @@ The eight possible statuses:
 | `disputed` | A verified claim has blocking contradicting evidence, or a terminal dispute event exists. |
 | `superseded` | A terminal event marks the claim as superseded. |
 | `rejected` | A terminal event marks the claim as rejected. |
+| `revoked` | An explicit invalidation event has revoked the claim's verification. For single-claim status derivation this folds to `stale` (see [status-function.md](status-function.md), Step 2) unless a later verification event re-asserts the claim; the reference implementation still tracks `revoked` as a distinct, weakest-ranked raw status for `Claim.status`/`VerificationEvent.status`, claim-group rollups, and weakest-link ordering. |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hachure",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "statusFunctionVersion": "2",
   "description": "Hachure — canonical distribution of the open trust format: normative JSON schemas, conformance test vectors, and spec constants.",
   "type": "module",
@@ -21,7 +21,10 @@
     "assurance.md"
   ],
   "scripts": {
-    "test": "node --test test/index.test.mjs"
+    "test": "node --test test/*.test.mjs"
+  },
+  "devDependencies": {
+    "ajv": "^8"
   },
   "keywords": [
     "trust",

package/schemas/claim.schema.json

@@ -12,7 +12,7 @@
     "claimType": { "type": "string" },
     "fieldOrBehavior": { "type": "string" },
     "value": {},
-    "status": { "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected", "revoked"] },
+    "status": { "$ref": "#/$defs/trustStatus" },
     "createdAt": { "type": "string", "format": "date-time" },
     "updatedAt": { "type": "string", "format": "date-time" },
     "expiresAt": {
@@ -67,9 +67,23 @@
       "type": "object",
       "additionalProperties": { "type": "string" }
     },
-    "metadata": { "type": "object" }
+    "metadata": { "type": "object" },
+    "producerStatus": { "$ref": "#/$defs/trustStatus" },
+    "freshness": {
+      "type": "object",
+      "required": ["asOf", "stale"],
+      "properties": {
+        "asOf": { "type": "string", "format": "date-time" },
+        "expiresAt": { "type": "string", "format": "date-time" },
+        "stale": { "type": "boolean" }
+      },
+      "additionalProperties": false
+    }
   },
   "$defs": {
+    "trustStatus": {
+      "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected", "revoked"]
+    },
     "integrityAnchor": {
       "type": "object",
       "required": ["id", "kind", "algorithm", "value", "sourceRef"],

package/schemas/derivation-rule.schema.json

@@ -40,7 +40,7 @@
         "target": { "$ref": "#/$defs/canonicalClaimTarget" },
         "acceptedStatuses": {
           "type": "array",
-          "items": { "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected"] }
+          "items": { "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected", "revoked"] }
         },
         "predicate": {
           "type": "object",

package/schemas/trust-bundle.schema.json

@@ -18,36 +18,15 @@
     },
     "policies": {
       "type": "array",
-      "items": { "type": "object" }
+      "items": { "$ref": "verification-policy.schema.json" }
     },
     "events": {
       "type": "array",
-      "items": { "type": "object" }
+      "items": { "$ref": "verification-event.schema.json" }
     },
     "identityLinks": {
       "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["subjects"],
-        "properties": {
-          "subjects": {
-            "type": "array",
-            "minItems": 2,
-            "items": {
-              "type": "object",
-              "required": ["subjectType", "subjectId"],
-              "properties": {
-                "subjectType": { "type": "string" },
-                "subjectId": { "type": "string" }
-              },
-              "additionalProperties": false
-            }
-          },
-          "reason": { "type": "string" },
-          "attestedBy": { "type": "string" }
-        },
-        "additionalProperties": false
-      }
+      "items": { "$ref": "#/$defs/identityLink" }
     },
     "claimGroups": {
       "type": "array",
@@ -68,6 +47,32 @@
       },
       "additionalProperties": false
     },
+    "identityLink": {
+      "type": "object",
+      "required": ["subjects"],
+      "properties": {
+        "id": { "type": "string" },
+        "subjects": {
+          "type": "array",
+          "minItems": 2,
+          "items": { "$ref": "#/$defs/subjectRef" }
+        },
+        "reason": { "type": "string" },
+        "attestedBy": { "type": "string" },
+        "relation": { "enum": ["equivalent", "subsumes", "converts"] },
+        "conversion": {
+          "type": "object",
+          "properties": {
+            "factor": { "type": "number" },
+            "offset": { "type": "number" },
+            "note": { "type": "string" }
+          },
+          "additionalProperties": false
+        },
+        "mappingClaimId": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
     "authorityTrace": {
       "type": "object",
       "required": ["id", "subject", "actorRef", "authorityType", "authorityRef", "sourceRef", "observedAt"],

package/schemas/trust-report.schema.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kontourai.io/schemas/surface/trust-report.schema.json",
+  "title": "Surface TrustReport",
+  "$comment": "transparencyGaps, changeRecords, subjectGroups, claimGroupRollups, summary, and evidenceRequirementsByClaimId are intentionally loosely typed pending dedicated normative sub-schemas (no existing schema for TransparencyGap/DerivationChangeRecord/SubjectGroup/ClaimGroupRollup/TrustReportSummary/EvidenceRequirement exists anywhere in the ecosystem today); only the top-level report shape and the pass-through bundle fields are strictly validated.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "id",
+    "generatedAt",
+    "source",
+    "claims",
+    "evidence",
+    "policies",
+    "events",
+    "evidenceRequirementsByClaimId",
+    "transparencyGaps",
+    "changeRecords",
+    "subjectGroups",
+    "claimGroupRollups",
+    "summary",
+    "statusFunctionVersion"
+  ],
+  "properties": {
+    "schemaVersion": { "enum": [2, 3, 4] },
+    "id": { "type": "string" },
+    "generatedAt": { "type": "string", "format": "date-time" },
+    "source": { "type": "string" },
+    "claims": {
+      "type": "array",
+      "items": {
+        "allOf": [
+          { "$ref": "claim.schema.json" },
+          { "type": "object", "required": ["status"] }
+        ]
+      }
+    },
+    "evidence": {
+      "type": "array",
+      "items": { "$ref": "evidence.schema.json" }
+    },
+    "policies": {
+      "type": "array",
+      "items": { "$ref": "verification-policy.schema.json" }
+    },
+    "events": {
+      "type": "array",
+      "items": { "$ref": "verification-event.schema.json" }
+    },
+    "identityLinks": {
+      "type": "array",
+      "items": { "$ref": "trust-bundle.schema.json#/$defs/identityLink" }
+    },
+    "claimGroups": {
+      "type": "array",
+      "items": { "$ref": "trust-bundle.schema.json#/$defs/claimGroup" }
+    },
+    "authorityTrace": {
+      "type": "array",
+      "items": { "$ref": "trust-bundle.schema.json#/$defs/authorityTrace" }
+    },
+    "evidenceRequirementsByClaimId": {
+      "type": "object",
+      "additionalProperties": { "type": "object" }
+    },
+    "transparencyGaps": {
+      "type": "array",
+      "items": { "type": "object" }
+    },
+    "changeRecords": {
+      "type": "array",
+      "items": { "type": "object" }
+    },
+    "subjectGroups": {
+      "type": "array",
+      "items": { "type": "object" }
+    },
+    "claimGroupRollups": {
+      "type": "array",
+      "items": { "type": "object" }
+    },
+    "summary": { "type": "object" },
+    "statusFunctionVersion": { "type": "string" }
+  }
+}

package/schemas/verification-policy.schema.json

@@ -10,7 +10,7 @@
     "parentType": { "type": "string" },
     "requiredEvidence": {
       "type": "array",
-      "items": { "enum": ["source_excerpt", "test_output", "human_attestation", "calculation_trace", "document_citation", "crawl_observation", "policy_rule"] }
+      "items": { "enum": ["source_excerpt", "test_output", "human_attestation", "attestation", "calculation_trace", "document_citation", "crawl_observation", "policy_rule"] }
     },
     "requiredMethods": {
       "type": "array",
@@ -53,7 +53,7 @@
             "type": "array",
             "minItems": 2,
             "maxItems": 2,
-            "items": { "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected"] }
+            "items": { "enum": ["unknown", "proposed", "assumed", "verified", "stale", "disputed", "superseded", "rejected", "revoked"] }
           },
           "message": { "type": "string" }
         },