mdkg 0.3.9 → 0.4.1

package/dist/graph/agent_file_types.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AGENT_ATTRIBUTE_KEY_ORDER = exports.AGENT_FILE_BASENAMES = exports.AGENT_FILE_TYPES = exports.LEGACY_SPEC_BASENAME = exports.CANONICAL_MANIFEST_BASENAME = void 0;
+exports.KNOWN_REDACTION_CLASSES = exports.KNOWN_RECEIPT_KINDS = exports.KNOWN_CONTRACT_PROFILES = exports.AGENT_ATTRIBUTE_KEY_ORDER = exports.AGENT_FILE_BASENAMES = exports.AGENT_FILE_TYPES = exports.LEGACY_SPEC_BASENAME = exports.CANONICAL_MANIFEST_BASENAME = void 0;
 exports.isAgentFileType = isAgentFileType;
 exports.isManifestSemanticType = isManifestSemanticType;
 exports.collectManifestSiblingConflicts = collectManifestSiblingConflicts;
@@ -41,6 +41,9 @@ const MANIFEST_ATTRIBUTE_KEYS = [
     "role",
     "runtime_mode",
     "work_contracts",
+    "contract_profile",
+    "validation_policy_ref",
+    "evidence_policy_ref",
     "requested_capabilities",
     "skill_refs",
     "tool_refs",
@@ -58,6 +61,7 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "version",
         "agent_id",
         "kind",
+        "contract_profile",
         "pricing_model",
         "required_capabilities",
         "skill_refs",
@@ -79,6 +83,9 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "request_ref",
         "trigger_ref",
         "payload_hash",
+        "contract_profile",
+        "validation_policy_ref",
+        "evidence_policy_ref",
         "input_refs",
         "queue_refs",
         "requested_outputs",
@@ -92,6 +99,11 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
         "outcome",
         "cost_ref",
         "redaction_policy",
+        "contract_profile",
+        "receipt_kind",
+        "redaction_class",
+        "validation_policy_ref",
+        "evidence_policy_ref",
         "proof_refs",
         "attestation_refs",
         "evidence_hashes",
@@ -123,6 +135,9 @@ exports.AGENT_ATTRIBUTE_KEY_ORDER = {
 const SEMVER_RE = /^\d+\.\d+\.\d+(?:[-+][a-z0-9.-]+)?$/;
 const LOWER_TOKEN_RE = /^[a-z][a-z0-9_]*(?:-[a-z0-9_]+)*$/;
 const FIELD_DESCRIPTOR_RE = /^[a-z][a-z0-9_]*:[a-z][a-z0-9_]*(?::(?:required|optional))?$/;
+exports.KNOWN_CONTRACT_PROFILES = new Set(["generic", "omni-room"]);
+exports.KNOWN_RECEIPT_KINDS = new Set(["worker", "final", "cleanup", "audit"]);
+exports.KNOWN_REDACTION_CLASSES = new Set(["public", "internal", "private", "restricted"]);
 const ROLE_VALUES = new Set([
     "orchestrator",
     "subagent",
@@ -233,7 +248,7 @@ function collectManifestSiblingConflicts(filePaths, formatDir) {
     const conflicts = [];
     for (const [dirPath, basenames] of Array.from(basenamesByDir.entries()).sort()) {
         if (basenames.has(exports.CANONICAL_MANIFEST_BASENAME) && basenames.has(exports.LEGACY_SPEC_BASENAME)) {
-            conflicts.push(`${formatDir(dirPath)}: MANIFEST.md and SPEC.md cannot both exist in the same logical Omni unit; keep MANIFEST.md and remove the legacy SPEC.md alias`);
+            conflicts.push(`${formatDir(dirPath)}: MANIFEST.md and SPEC.md cannot both exist in the same logical unit; keep MANIFEST.md and remove the legacy SPEC.md alias`);
         }
     }
     return conflicts;
@@ -390,6 +405,48 @@ function validatePortableOrUriScalar(value, key, filePath) {
         throw formatError(filePath, `${key} must be a portable id or URI ref`);
     }
 }
+function requireContractMetadataToken(value, key, filePath) {
+    if (LOWER_TOKEN_RE.test(value)) {
+        return;
+    }
+    const id = key === "receipt_kind"
+        ? "receipt-kind.invalid"
+        : key === "redaction_class"
+            ? "redaction-class.invalid"
+            : "contract-profile.invalid";
+    throw formatError(filePath, `${id}: ${key} must be lowercase snake/kebab style`);
+}
+function optionalContractMetadataString(frontmatter, key, filePath) {
+    const value = frontmatter[key];
+    if (value === undefined) {
+        return undefined;
+    }
+    const id = key === "receipt_kind"
+        ? "receipt-kind.invalid"
+        : key === "redaction_class"
+            ? "redaction-class.invalid"
+            : "contract-profile.invalid";
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw formatError(filePath, `${id}: ${key} must be a non-empty string`);
+    }
+    return value;
+}
+function validateOptionalContractProfile(frontmatter, filePath) {
+    const contractProfile = optionalContractMetadataString(frontmatter, "contract_profile", filePath);
+    if (contractProfile) {
+        requireContractMetadataToken(contractProfile, "contract_profile", filePath);
+    }
+}
+function validateOptionalPolicyRefs(frontmatter, filePath) {
+    const validationPolicyRef = optionalRefString(frontmatter, "validation_policy_ref", filePath);
+    if (validationPolicyRef) {
+        validatePortableOrUriScalar(validationPolicyRef, "validation_policy_ref", filePath);
+    }
+    const evidencePolicyRef = optionalRefString(frontmatter, "evidence_policy_ref", filePath);
+    if (evidencePolicyRef) {
+        validatePortableOrUriScalar(evidencePolicyRef, "evidence_policy_ref", filePath);
+    }
+}
 function validateOptionalFieldDescriptors(values, key, filePath) {
     if (values.length === 0) {
         return;
@@ -448,6 +505,8 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             requireEnum(runtimeMode, "runtime_mode", RUNTIME_MODE_VALUES, filePath);
             const updatePolicy = expectString(frontmatter, "update_policy", filePath);
             requireEnum(updatePolicy, "update_policy", UPDATE_POLICY_VALUES, filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
+            validateOptionalPolicyRefs(frontmatter, filePath);
             validateRelativeMarkdownPaths(optionalList(frontmatter, "work_contracts", filePath), "work_contracts", "WORK.md", filePath);
             validateCapabilities(optionalList(frontmatter, "requested_capabilities", filePath), "requested_capabilities", filePath);
             validatePortableRefs(optionalList(frontmatter, "skill_refs", filePath), "skill_refs", filePath);
@@ -467,6 +526,7 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             requirePortableIdRef(agentId, "agent_id", filePath);
             const kind = expectString(frontmatter, "kind", filePath);
             requireLowerToken(kind, "kind", filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
             const pricingModel = expectString(frontmatter, "pricing_model", filePath);
             requireEnum(pricingModel, "pricing_model", PRICING_MODEL_VALUES, filePath);
             const requiredCapabilities = expectList(frontmatter, "required_capabilities", filePath);
@@ -505,6 +565,8 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             validatePortableOrUriScalar(requester, "requester", filePath);
             const orderStatus = expectString(frontmatter, "order_status", filePath);
             requireEnum(orderStatus, "order_status", ORDER_STATUS_VALUES, filePath);
+            validateOptionalContractProfile(frontmatter, filePath);
+            validateOptionalPolicyRefs(frontmatter, filePath);
             const requestRef = optionalRefString(frontmatter, "request_ref", filePath);
             if (requestRef) {
                 validatePortableOrUriScalar(requestRef, "request_ref", filePath);
@@ -542,6 +604,16 @@ function validateAgentFrontmatter(type, frontmatter, filePath) {
             if (redactionPolicy) {
                 requireEnum(redactionPolicy, "redaction_policy", REDACTION_POLICY_VALUES, filePath);
             }
+            validateOptionalContractProfile(frontmatter, filePath);
+            const receiptKind = optionalContractMetadataString(frontmatter, "receipt_kind", filePath);
+            if (receiptKind) {
+                requireContractMetadataToken(receiptKind, "receipt_kind", filePath);
+            }
+            const redactionClass = optionalContractMetadataString(frontmatter, "redaction_class", filePath);
+            if (redactionClass) {
+                requireContractMetadataToken(redactionClass, "redaction_class", filePath);
+            }
+            validateOptionalPolicyRefs(frontmatter, filePath);
             validatePortableOrUriRefs(optionalList(frontmatter, "proof_refs", filePath), "proof_refs", filePath);
             validatePortableOrUriRefs(optionalList(frontmatter, "attestation_refs", filePath), "attestation_refs", filePath);
             validateHashRefs(optionalList(frontmatter, "evidence_hashes", filePath), "evidence_hashes", filePath);

package/dist/graph/frontmatter.js

@@ -30,11 +30,16 @@ exports.DEFAULT_FRONTMATTER_KEY_ORDER = [
     "role",
     "runtime_mode",
     "work_contracts",
+    "contract_profile",
+    "validation_policy_ref",
+    "evidence_policy_ref",
     "requested_capabilities",
     "resource_profile",
     "update_policy",
     "agent_id",
     "kind",
+    "receipt_kind",
+    "redaction_class",
     "pricing_model",
     "required_capabilities",
     "inputs",

package/dist/graph/node.js

@@ -236,8 +236,36 @@ function requireTemplateSchema(type, templateSchemas, filePath) {
     return schema;
 }
 const OPTIONAL_COMPAT_TEMPLATE_KEYS = {
+    manifest: {
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
     spec: {
         spec_kind: "scalar",
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
+    work: {
+        contract_profile: "scalar",
+        profile: "scalar",
+    },
+    work_order: {
+        contract_profile: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
+    },
+    receipt: {
+        contract_profile: "scalar",
+        receipt_kind: "scalar",
+        redaction_class: "scalar",
+        validation_policy_ref: "scalar",
+        evidence_policy_ref: "scalar",
+        profile: "scalar",
     },
 };
 function validateTemplateKeys(frontmatter, schema, filePath) {

package/dist/init/AGENT_START.md

@@ -57,6 +57,12 @@ Agent operating prompt:
 - Use `mdkg archive add/list/show/verify/compress` for committed source and artifact sidecars under `.mdkg/archive`.
 - Use `mdkg work ...` helpers for semantic mirror contracts, deterministic triggers, work order status, receipt verification, and artifact registration.
 - Treat work contracts, orders, and receipts as committed semantic mirrors only; never store raw secrets, credentials, live payment state, ledger mutations, or canonical marketplace state in mdkg.
+- Treat optional `contract_profile`, policy refs, receipt kind, and redaction
+  class fields as generic semantic mirror metadata. Use `mdkg validate --profile
+  omni-room` or `mdkg work validate --profile omni-room` only when a downstream
+  profile-specific check is intended; mdkg validates mirrors, while downstream
+  runtimes own execution, provider state, billing or ledger state, and final
+  receipt authority.
 - Use `artifact://...` for external/runtime-managed artifacts and `archive://...` for committed mdkg archive sidecars.
 - Use `mdkg bundle create/list/show/verify` for explicit full `.mdkg` graph snapshot bundles.
 - Use `mdkg subgraph add/list/verify/sync/materialize` to register child bundle snapshots as read-only planning context, refresh root-owned child bundle snapshots, and optionally generate ignored inspection trees.

package/dist/init/CLI_COMMAND_MATRIX.md

@@ -120,10 +120,11 @@ Project database commands:
 - active `.mdkg/db/runtime/` files and `.mdkg/db` WAL/SHM/journal/lock/temp files are ignored by default
 
 Validation commands:
-- `mdkg validate [--out <path>] [--json-out <path>] [--quiet] [--changed-only] [--summary] [--limit <n>] [--json]`
+- `mdkg validate [--out <path>] [--json-out <path>] [--quiet] [--changed-only] [--summary] [--limit <n>] [--profile <name>] [--json]`
 - `--changed-only` filters warning presentation to changed `.mdkg` files while full graph errors still run
 - `--summary` emits bounded warning samples for agent/CI logs; `--limit <n>` controls the sample size
 - `--out <path>` writes the compatibility text report; `--json-out <path>` writes a clean full JSON receipt
+- `--profile omni-room` applies explicit contract-profile validation after generic validation; it is separate from `mdkg pack --profile`
 - JSON receipts include `warning_summary` and `warning_diagnostics` with warning ids, categories, severity, paths, refs, and remediation text
 
 Node creation commands:
@@ -146,6 +147,9 @@ Agent workflow file type creation:
 
 Agent workflow notes:
 - `--id <portable-id>` is only for agent workflow file types.
+- `--contract-profile <name>` is supported for MANIFEST, WORK, WORK_ORDER, and RECEIPT.
+- `--validation-policy-ref <ref>` and `--evidence-policy-ref <ref>` are supported for MANIFEST, WORK_ORDER, and RECEIPT.
+- `--receipt-kind <kind>` and `--redaction-class <class>` are supported for RECEIPT.
 - `manifest` and `work` scaffold as validation-clean standalone docs.
 - `work_order`, `receipt`, `feedback`, `dispute`, and `proposal` need real refs before strict `mdkg validate` passes.
 - `goal` nodes capture recursive objective state and required checks, but normal `mdkg next` does not select them.
@@ -285,22 +289,23 @@ Subgraph orchestration:
 - public/internal subgraphs require public bundle profiles
 
 Work semantic mirrors:
-- `mdkg work contract new "<title>" --id <work.id> --agent-id <agent.id> --kind <kind> --inputs <...> --outputs <...> [--required-capabilities <...>] [--pricing-model <...>] [--json]`
+- `mdkg work contract new "<title>" --id <work.id> --agent-id <agent.id> --kind <kind> --inputs <...> --outputs <...> [--contract-profile <name>] [--required-capabilities <...>] [--pricing-model <...>] [--json]`
 - `mdkg work trigger <work-or-capability-ref> [--id <order.id>] [--title "<title>"] [--requester <ref>] [--enqueue <queue>] [--json]`
-- `mdkg work order new "<title>" --id <order.id> --work-id <work.id> --requester <ref> [--request-ref <ref>] [--input-refs <...>] [--requested-outputs <...>] [--json]`
+- `mdkg work order new "<title>" --id <order.id> --work-id <work.id> --requester <ref> [--contract-profile <name>] [--validation-policy-ref <ref>] [--evidence-policy-ref <ref>] [--request-ref <ref>] [--input-refs <...>] [--requested-outputs <...>] [--json]`
 - `mdkg work order status <id-or-qid> [--json]`
 - `mdkg work order update <id-or-qid> [--status <status>] [--add-input-refs <...>] [--add-artifacts <...>] [--json]`
-- `mdkg work receipt new "<title>" --id <receipt.id> --work-order-id <order.id> --outcome success|partial|failure [--receipt-status recorded|verified|rejected|superseded] [--json]`
+- `mdkg work receipt new "<title>" --id <receipt.id> --work-order-id <order.id> --outcome success|partial|failure [--receipt-status recorded|verified|rejected|superseded] [--redaction-policy refs_and_hashes_only|redacted_summary|external_private] [--contract-profile <name>] [--receipt-kind <kind>] [--redaction-class <class>] [--validation-policy-ref <ref>] [--evidence-policy-ref <ref>] [--json]`
 - `mdkg work receipt verify <id-or-qid> [--json]`
 - `mdkg work receipt update <id-or-qid> [--receipt-status <status>] [--add-artifacts <...>] [--add-proof-refs <...>] [--add-attestation-refs <...>] [--json]`
 - `mdkg work artifact add <order-or-receipt-id-or-qid> <file> [--id <archive.id>] [--kind source|artifact] [--json]`
-- `mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--json]`
+- `mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--profile <name>] [--json]`
 - `work trigger` accepts a `WORK.md` ref directly or a `MANIFEST.md` / legacy `SPEC.md` capability ref with exactly one resolvable work contract; it creates a submitted order mirror and never executes work
 - example: `mdkg work trigger work.example --id order.example-1 --requester user://example --json`
 - `work trigger --enqueue <queue>` requires a valid project DB plus an explicitly created active queue, creates a submitted order mirror, and enqueues a local delivery message without executing work
 - `work order status` is read-only and reports deterministic order state plus linked receipts
 - `work receipt verify` is read-only and reports linkage, evidence, archive ref, hash, outcome, and redaction-policy checks
 - `work validate` is read-only and reports typed diagnostics for agent workflow mirrors; obvious raw secret, prompt, token, or payload markers are warnings, not hard failures
+- `work validate --profile omni-room` applies explicit contract-profile validation after generic mirror validation; it is separate from `mdkg pack --profile`
 - work commands mutate mdkg semantic mirror files only; production order, receipt, feedback, dispute, payment, ledger, marketplace inventory, fulfillment, and execution state remains canonical outside mdkg
 - do not store raw secrets, credentials, live payment state, ledger mutations, or canonical marketplace state in work mirrors
 - `artifact://...` refs identify external/runtime-managed artifacts; `archive://...` refs identify committed mdkg archive sidecars

package/dist/init/README.md

@@ -80,8 +80,9 @@ intentionally with `mdkg new task ...` or `mdkg new test ...`.
 Agent workflow docs can use semantic ids:
 
 ```bash
-mdkg new manifest "image worker" --id agent.image-worker
-mdkg new work "generate image" --id work.generate-image
+mdkg new manifest "image worker" --id agent.image-worker --contract-profile generic
+mdkg new work "generate image" --id work.generate-image --contract-profile generic
+mdkg work validate --profile omni-room --json
 ```
 
 `MANIFEST.md` is optional. Repos without manifest files still validate. When
@@ -92,13 +93,21 @@ release, and `mdkg spec list/show/validate` remains a deprecated alias for
 read-only discovery surface for skills, manifests, WORK contracts, core docs,
 and design docs.
 
+Agent workflow files may include optional generic mirror fields such as
+`contract_profile`, `validation_policy_ref`, `evidence_policy_ref`,
+`receipt_kind`, and `redaction_class`. mdkg validates those mirrors and can run
+profile checks such as `mdkg validate --profile omni-room` and
+`mdkg work validate --profile omni-room`; downstream runtimes still own queue
+execution, room ids, provider state, billing or ledger state, and final receipt
+authority.
+
 Read `AGENT_START.md` first when this repo includes it.
 
 ## Pack Profiles
 
-- `--pack-profile standard`: full body (current default behavior)
-- `--pack-profile concise`: summary body with code stripped by default
-- `--pack-profile headers`: metadata-only body (`none`)
+- `--profile standard`: full body (current default behavior)
+- `--profile concise`: summary body with code stripped by default
+- `--profile headers`: metadata-only body (`none`)
 
 `--max-tokens` is a heuristic limit based on `chars / 4`.
 
@@ -229,10 +238,10 @@ mdkg archive verify archive://archive.example
 Use work lifecycle helpers for semantic mirrors only:
 
 ```bash
-mdkg work contract new "example capability" --id work.example --agent-id agent.example --kind example --inputs prompt:text:required --outputs result:text:required
+mdkg work contract new "example capability" --id work.example --agent-id agent.example --kind example --contract-profile generic --inputs prompt:text:required --outputs result:text:required
 mdkg work trigger work.example --id order.example-1 --requester user://example
 mdkg work order status order.example-1 --json
-mdkg work receipt new "example receipt" --id receipt.example-1 --work-order-id order.example-1 --outcome success
+mdkg work receipt new "example receipt" --id receipt.example-1 --work-order-id order.example-1 --outcome success --contract-profile generic --receipt-kind worker --redaction-class internal
 mdkg work receipt verify receipt.example-1 --json
 ```
 
@@ -249,7 +258,7 @@ Update and artifact commands accept local ids or local qids; subgraph qids are r
 `mdkg work trigger` creates a deterministic submitted `WORK_ORDER.md` from a
 WORK contract or a SPEC with exactly one resolvable work contract. `mdkg work
 order status` and `mdkg work receipt verify` are read-only review helpers.
-`mdkg work validate [<id-or-qid>] [--type spec|work|work_order|receipt|feedback|dispute|proposal] --json`
+`mdkg work validate [<id-or-qid>] [--type manifest|spec|work|work_order|receipt|feedback|dispute|proposal] [--profile omni-room] --json`
 is a read-only focused validator for agent workflow mirrors with typed diagnostics
 and raw secret, prompt, token, or payload marker warnings.
 `mdkg work trigger --enqueue <queue>` optionally writes a local project DB queue

package/dist/init/init-manifest.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "tool": "mdkg",
-  "mdkg_version": "0.3.9",
+  "mdkg_version": "0.4.1",
   "files": [
     {
       "path": ".mdkg/config.json",
@@ -66,12 +66,12 @@
     {
       "path": ".mdkg/README.md",
       "category": "mdkg_doc",
-      "sha256": "e876acfbf3e9de411cd45eb86e7e9bff821f8a5dd6dc933bd6da4ac88a9686e6"
+      "sha256": "44e8030ee0642fe9c95589c2f4ece6ab7336d0c6691107bfdf59cebdba5de2ae"
     },
     {
       "path": ".mdkg/skills/author-mdkg-skill/SKILL.md",
       "category": "default_skill",
-      "sha256": "9ea196cb778e6a777c945b3bba9d51c7574602f413e9a1d5e01e2b95918c0873"
+      "sha256": "ffacd8b8412ab5453b53d91a192f27e0458da4591f80d82d4933805a6fb5a05d"
     },
     {
       "path": ".mdkg/skills/build-pack-and-execute-task/SKILL.md",
@@ -146,7 +146,7 @@
     {
       "path": ".mdkg/templates/default/manifest.md",
       "category": "template",
-      "sha256": "2ff2af58cae6a0381a66949d7d9e997fac6486da85171b09096c43663889da95"
+      "sha256": "a7d758cbe2a51c4889fef39bf91d67f67895f55bcd851d1e02e52f8b2a5a6f2c"
     },
     {
       "path": ".mdkg/templates/default/prd.md",
@@ -166,7 +166,7 @@
     {
       "path": ".mdkg/templates/default/receipt.md",
       "category": "template",
-      "sha256": "516faf98abe421f154d162b18006c7875f1a0025ac4d35cc16df744c13548d9d"
+      "sha256": "5ffbba7d9ad11193bf65830e4be5b3c04c0fe3aa81a4e473a849cd321644a383"
     },
     {
       "path": ".mdkg/templates/default/rule.md",
@@ -176,7 +176,7 @@
     {
       "path": ".mdkg/templates/default/spec.md",
       "category": "template",
-      "sha256": "8c96e0b6dafa65acb83a2d84519e05a7354896aec8991c148650e9ec58196c77"
+      "sha256": "2f00af67cf357f6a15a97bf175e6422d8c84d1fcf0e21977b1134e898378677e"
     },
     {
       "path": ".mdkg/templates/default/spike.md",
@@ -196,12 +196,12 @@
     {
       "path": ".mdkg/templates/default/work_order.md",
       "category": "template",
-      "sha256": "5fe376413035f2afe406d13491a597f103a2fce29d137951fe55ae042a1082f5"
+      "sha256": "d42460ae996f5f309d8666019c24d7b236947bc8a64cff6d4eff61b1d6e46216"
     },
     {
       "path": ".mdkg/templates/default/work.md",
       "category": "template",
-      "sha256": "cfc53d3be1d2c31576448d071a579bc3d5d2f6851755e29c20825f6b6764c0aa"
+      "sha256": "1ab3c4c79ecdaff2b76007bfbb9844bf581da592f70ac2a2475594b9c279d7cd"
     },
     {
       "path": ".mdkg/templates/skills/base.SKILL.md",
@@ -231,12 +231,12 @@
     {
       "path": ".mdkg/templates/specs/base.MANIFEST.md",
       "category": "template",
-      "sha256": "056c4ccf8285db72c8befdc6acd165d625dbe892d70e89ce586f081db8e250fc"
+      "sha256": "4d5fe98b388e9183c9577438e49c375e86d58314130c668be4695f124ea8c37c"
     },
     {
       "path": ".mdkg/templates/specs/base.SPEC.md",
       "category": "template",
-      "sha256": "6d4171fac00c2f3d8f2a2ac746b8a47c59aaecebe224c3a0046dd6e6974a1d08"
+      "sha256": "43d8b7726560c6245b2927ed5242dc872c394f16fb3dc9c3e58076766270ff5d"
     },
     {
       "path": ".mdkg/templates/specs/capability.MANIFEST.md",
@@ -311,7 +311,7 @@
     {
       "path": "AGENT_START.md",
       "category": "startup_doc",
-      "sha256": "91e31ae818b29f62ebe77ac24f7e1a2bd10a4fedfc1684da935f0849aaf6d200"
+      "sha256": "c387ce4fee55eafca09bcd30f32e4d7dc8ee7f9cc9811c1adffa0756c9423a35"
     },
     {
       "path": "AGENTS.md",
@@ -326,7 +326,7 @@
     {
       "path": "CLI_COMMAND_MATRIX.md",
       "category": "startup_doc",
-      "sha256": "82c509b91498131304ff2bc94bb7eb2f29c3c207a00bc8bcaf8a6ab52ff9e689"
+      "sha256": "7a71fa553e38395caae5f18ecb9650911c56a019b25e793addc20701e5df5a9e"
     },
     {
       "path": "llms.txt",

package/dist/init/skills/default/author-mdkg-skill/SKILL.md

@@ -62,6 +62,8 @@ For MANIFEST.md output, include:
 - Source mdkg nodes
 - Resource URIs
 - Capabilities
+- Contract profile, validation policy refs, and evidence policy refs when a
+  downstream runtime or workflow profile needs generic semantic mirrors
 - Inputs
 - Outputs
 - Dependencies
@@ -94,14 +96,17 @@ For MANIFEST.md output, include:
 10. Distinguish durable source from projection:
     mdkg/MANIFEST/SKILL is source; `.codex/agents`, future runtime manifests, and
     protocol resources are projections.
-11. Add validation checks and closeout evidence to every authored or revised
+11. Treat contract-profile fields as generic mdkg validation mirrors only.
+    Downstream runtimes own execution semantics, queue state, provider state, and
+    final receipt authority.
+12. Add validation checks and closeout evidence to every authored or revised
     SKILL/MANIFEST.
-12. If input is incomplete, create repair tasks instead of guessing.
-13. Validate the new or updated skill with `mdkg skill validate <slug>`.
-14. If the skill changes the public workflow, update `AGENT_START.md`,
+13. If input is incomplete, create repair tasks instead of guessing.
+14. Validate the new or updated skill with `mdkg skill validate <slug>`.
+15. If the skill changes the public workflow, update `AGENT_START.md`,
     `CLI_COMMAND_MATRIX.md`, root onboarding docs, and the skill registry in the
     same pass.
-15. When mirrored skill folders are enabled, run `mdkg skill sync` after broad
+16. When mirrored skill folders are enabled, run `mdkg skill sync` after broad
     manual changes so every configured `.mdkg/config.json`
     `customization.skill_mirrors.targets` path stays current. The default
     targets are `.agents/skills/` and `.claude/skills/`; other agent-local

package/dist/init/templates/default/manifest.md

@@ -7,6 +7,9 @@ spec_kind: capability
 role: tool_service
 runtime_mode: tool_service
 work_contracts: []
+contract_profile: generic
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 requested_capabilities: []
 skill_refs: []
 tool_refs: []

package/dist/init/templates/default/receipt.md

@@ -8,6 +8,11 @@ receipt_status: recorded
 outcome: success
 cost_ref: cost.redacted
 redaction_policy: refs_and_hashes_only
+contract_profile: generic
+receipt_kind: worker
+redaction_class: internal
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 proof_refs: []
 attestation_refs: []
 evidence_hashes: []

package/dist/init/templates/default/spec.md

@@ -7,6 +7,9 @@ spec_kind: capability
 role: tool_service
 runtime_mode: tool_service
 work_contracts: []
+contract_profile: generic
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 requested_capabilities: []
 skill_refs: []
 tool_refs: []

package/dist/init/templates/default/work.md

@@ -5,6 +5,7 @@ title: {{title}}
 version: 0.1.0
 agent_id: agent.example
 kind: generic
+contract_profile: generic
 pricing_model: quoted
 required_capabilities: [capability.example]
 skill_refs: []

package/dist/init/templates/default/work_order.md

@@ -10,6 +10,9 @@ order_status: submitted
 request_ref: request.example
 trigger_ref: trigger.manual
 payload_hash: sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+contract_profile: generic
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 input_refs: []
 queue_refs: []
 requested_outputs: [result:text:required]

package/dist/init/templates/specs/base.MANIFEST.md

@@ -7,6 +7,9 @@ spec_kind: capability
 role: {{role}}
 runtime_mode: {{runtime_mode}}
 work_contracts: []
+contract_profile: generic
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 requested_capabilities: []
 skill_refs: []
 tool_refs: []

package/dist/init/templates/specs/base.SPEC.md

@@ -7,6 +7,9 @@ spec_kind: capability
 role: {{role}}
 runtime_mode: {{runtime_mode}}
 work_contracts: []
+contract_profile: generic
+validation_policy_ref: policy.validation.default
+evidence_policy_ref: policy.evidence.default
 requested_capabilities: []
 skill_refs: []
 tool_refs: []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdkg",
-  "version": "0.3.9",
+  "version": "0.4.1",
   "description": "Git-native project memory for AI coding agents",
   "license": "MIT",
   "bin": {