motionloom 2.0.0

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "motionloom",
+  "version": "2.0.0",
+  "type": "module",
+  "description": "MotionLoom: project-aware animation Skill with graph, provenance, Motion IR, runtime telemetry, DSSE-compatible signed attestation, external evidence verification and Dev Lab review.",
+  "bin": {
+    "motionloom": "bin/motionloom.mjs"
+  },
+  "files": [
+    "README.md",
+    "SKILL.md",
+    "LICENSE",
+    "agent-card.json",
+    "bin",
+    "scripts",
+    "src",
+    "templates",
+    "assets",
+    "schemas",
+    "references",
+    "docs",
+    "examples",
+    "project-context.example.json",
+    "tests/evals",
+    "tests/scripts/run_tests.py",
+    "tests/scripts/test_attestation.py"
+  ],
+  "keywords": [
+    "animation",
+    "agent-skill",
+    "motion-design",
+    "lottie",
+    "dotlottie",
+    "rive",
+    "gsap",
+    "framer-motion",
+    "runtime-evidence",
+    "developer-tools"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lenhonbp/MotionLoom.git"
+  },
+  "homepage": "https://github.com/lenhonbp/MotionLoom#readme",
+  "bugs": {
+    "url": "https://github.com/lenhonbp/MotionLoom/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18",
+    "python": ">=3.11"
+  },
+  "scripts": {
+    "prepack": "find . -type d -name __pycache__ -prune -exec rm -rf {} + && find . -type f \\( -name '*.pyc' -o -name '*.pyo' \\) -delete",
+    "test": "python3 tests/scripts/run_tests.py",
+    "validate": "python3 scripts/quality-gate.py --all",
+    "doctor": "python3 scripts/skill-doctor.py --json",
+    "report": "python3 scripts/report.py",
+    "report:check": "python3 scripts/report-contract.py",
+    "review": "python3 scripts/review-hook.py",
+    "manifest": "python3 scripts/manifest.py",
+    "intelligence": "python3 scripts/intelligence.py",
+    "intelligence:registry": "python3 scripts/intelligence.py capabilities build --output capability-registry.json",
+    "intelligence:registry:check": "python3 scripts/intelligence.py capabilities validate --path capability-registry.json",
+    "intelligence:p1": "python3 scripts/intelligence.py",
+    "quality:p1": "python3 scripts/quality-gate.py --require-intelligence --require-p1 --require-benchmark",
+    "eval:intelligence": "python3 scripts/eval-intelligence.py",
+    "benchmark:semantic": "python3 scripts/intelligence.py semantic-lint benchmark --task-dir artifacts/professional-review-e2e --iterations 25 --threshold-ms 500",
+    "evidence:verify": "python3 scripts/evidence-verifier.py --scene-dir src/output/browser-review-smoke --task-dir artifacts/browser-review-smoke-task --runtime-evidence runtime-adapters/runtime-evidence.json --max-age-days 1 --output artifacts/browser-review-smoke-task/evidence-verifier-report.json",
+    "attestation:build": "python3 scripts/attestation.py build",
+    "attestation:verify": "python3 scripts/attestation-verifier.py",
+    "attestation:policy": "python3 scripts/attestation.py validate-policy",
+    "attestation:keygen": "python3 scripts/attestation-keygen.py",
+    "quality:telemetry": "python3 scripts/quality-gate.py --scene browser-review-smoke --context artifacts/browser-review-smoke-task/project-context.json --task-dir artifacts/browser-review-smoke-task --require-browser-review --require-intelligence --require-p1 --require-benchmark --require-telemetry",
+    "quality:attestation": "python3 scripts/quality-gate.py --scene browser-review-smoke --context artifacts/browser-review-smoke-task/project-context.json --task-dir artifacts/browser-review-smoke-task --require-browser-review --require-intelligence --require-p1 --require-benchmark --require-telemetry --require-attestation",
+    "pack:dotlottie": "bash scripts/to-dotlottie.sh",
+    "runtime:test": "node scripts/runtime-adapters.mjs"
+  },
+  "dependencies": {
+    "@lottiefiles/dotlottie-web": "^0.79.0",
+    "@napi-rs/canvas": "^1.0.5",
+    "@rive-app/canvas": "^2.39.2",
+    "framer-motion": "^13.1.0",
+    "gsap": "^3.15.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
+  },
+  "devDependencies": {
+    "playwright": "^1.62.1",
+    "vite": "^8.2.1"
+  },
+  "license": "MIT"
+}

package/project-context.example.json

@@ -0,0 +1,26 @@
+{
+  "schema_version": "1.1",
+  "name": "host-project",
+  "project_root": "/absolute/path/to/host-project",
+  "stack": {
+    "framework": "framer-motion",
+    "react": true,
+    "vue": false,
+    "react_native": false,
+    "native_web": false
+  },
+  "brand": {
+    "primary": "#2563EB",
+    "accent": "#F59E0B",
+    "palette": [],
+    "fonts": []
+  },
+  "motion_language": {
+    "easings_used": [],
+    "duration_patterns": [],
+    "recommendation": "ease-out"
+  },
+  "existing_animations": [],
+  "manifest_overrides": {},
+  "source_authority": "project-manifest.json then assets/library/, never invented geometry"
+}

package/references/browser-review-contract.md

@@ -0,0 +1,32 @@
+# Browser review contract
+
+Browser review is a required post-render handoff, not a separate skill. The Animation Skill prepares a candidate, then triggers or suggests a browser-capable Agent to open the internal Dev Lab URL. The browser Agent must inspect the exact candidate scene, not a demo scene or a different build.
+
+```text
+rendered → review_required → candidate prepared → internal browser opened
+         → user reviews/fixes → review.json approved or changes_requested
+         → validated → ready_for_pr → explicit confirmation
+```
+
+Prepare a candidate with:
+
+```bash
+python3 scripts/review-hook.py prepare \
+  --task-dir artifacts/<task-id> \
+  --lab-url http://127.0.0.1:3300
+```
+
+The command writes `browser-review.json` into the task bundle and scene output, records a deterministic `candidate_id`, binds the candidate to the context and animation source SHA-256, and emits JSON containing the exact URL and the next browser Agent action.
+
+The browser-capable Agent must open the emitted URL, inspect frames 0/50/100, scrub the timeline, check the quality checklist, record notes, and ask the user for approval. The page exposes `window.__lab.getReview()` so the Agent can capture the review payload without relying on a downloaded file. Persist the captured payload with:
+
+```bash
+python3 scripts/report.py review \
+  --task-dir artifacts/<task-id> \
+  --decision approved \
+  --candidate-id <candidate-id> \
+  --reviewer user \
+  --notes "Reviewed in the internal Dev Lab"
+```
+
+`ready_for_pr` and `confirmed` are rejected unless the review decision is `approved` and the candidate identity still matches the source, context and task. If the user requests a change, record `changes_requested`, add the issue, return to generation/rendering, and prepare a new candidate. Opening a browser is allowed as a review side effect; commit, push and PR remain explicit confirmation side effects.

package/references/dotlottie-source-notes.md

@@ -0,0 +1,21 @@
+# dotLottie implementation notes
+
+These notes preserve the external format facts used for the `.lottie` packager.
+
+## Sources
+
+- https://dotlottie.io/spec/2.0/
+- https://docs.lottiefiles.com/en/format/dotlottie/structure
+- https://github.com/LottieFiles/dotlottie-web/blob/main/SKILL.md
+
+## Contract used by this repository
+
+- A `.lottie` file is a ZIP archive using the `application/zip+dotlottie` format.
+- `manifest.json` is required at the archive root.
+- `a/` is required and contains at least one Lottie JSON animation.
+- The v2 manifest requires `version: "2"` and `animations` with unique `id` values.
+- `initial.animation`, when present, names an animation ID stored under `a/`.
+- Optional directories include `i/` for images, `t/` for themes, `s/` for state machines and `f/` for fonts.
+- Animation IDs should use the dotLottie filename-safe pattern: alphanumeric characters, dots, underscores, spaces and hyphens.
+- Runtime rendering should use the official dotLottie runtime; synchronous frame capture uses `autoplay: false`, load completion, then `setFrame()`.
+- The package/runtime reference recommends `.lottie` over raw JSON for compression, bundled assets, themes and state machines.

package/references/intelligence-core.md

@@ -0,0 +1,98 @@
+# Intelligence Core v0.1
+
+Use this reference when an Agent needs to understand or extend MotionLoom's task-bound intelligence contracts. The core is deterministic and artifact-first: it indexes relationships, attests pipeline steps, filters runtime capabilities, describes framework-neutral motion intent and verifies replay integrity. It does not make an aesthetic claim or replace human review.
+
+## Contract map
+
+| Artifact | Command | Acceptance role |
+| --- | --- | --- |
+| `project-graph.json` | `python3 scripts/intelligence.py graph build --task-dir <task>` | Links project, intent, scene, context, artifacts and review with task identity and hashes. |
+| `provenance.json` | `python3 scripts/intelligence.py provenance build --task-dir <task>` | Records step actor, builder, materials, products, policy, result and parent chain hash. |
+| `capability-registry.json` | `python3 scripts/intelligence.py capabilities build --output <path>` | Describes verified/scaffold-only adapters, evidence freshness, compatibility, fallback and side effects. |
+| `motion-ir.json` | `python3 scripts/intelligence.py motion-ir build --task-dir <task>` | Binds framework-neutral tracks and accessibility policy to task, scene, context and source. |
+| `replay-bundle.json` | `python3 scripts/intelligence.py replay capture --root <root> --task-dir <task>` | Captures clean-root artifact hashes and environment metadata; verification fails on mutation or omission. |
+| `semantic-lint-report.json` | `python3 scripts/intelligence.py semantic-lint build --task-dir <task>` | Reports intent, timing, easing, accessibility, performance and anti-pattern findings with severity, confidence and evidence. |
+| `semantic-lint-benchmark.json` | `python3 scripts/intelligence.py semantic-lint benchmark --task-dir <task>` | Measures in-process semantic-lint execution, rule coverage and p95 against a deterministic threshold; it is a performance contract, not visual approval. |
+| `runtime-telemetry.json` | `bash scripts/capture-runtime-telemetry.sh <scene> artifacts/<task-id>` | Records deterministic scrub-point observations, RAF timing, runtime state hashes and source/manifest/Motion IR bindings from the real adapter harness. |
+| `evidence-verifier-report.json` | `python3 scripts/evidence-verifier.py --scene-dir <scene-dir> --task-dir <task> --runtime-evidence <path>` | Read-only external verification result for task/scene/path/hash/age integrity; `approval` is always `false`. |
+| `attestation-statement.json` | `python3 scripts/attestation.py statement --scene-dir <scene-dir> --task-dir <task> --context <context>` | Derives canonical task/scene/source/manifest/Motion IR/evidence hash bindings before signing. |
+| `attestation.json` | `python3 scripts/attestation.py build --statement <statement> --private-key <key> --key-id <id>` | DSSE-compatible Ed25519 envelope over the versioned statement; `approval` is always `false`. |
+| `trust-policy.json` | `python3 scripts/attestation.py validate-policy --path <policy>` | Declares trusted keys, validity, rotation and fail-closed revocation behavior. |
+| `attestation-verifier-report.json` | `python3 scripts/attestation-verifier.py --attestation <bundle> --trust-policy <policy>` | Independent verifier result with stable exit codes 0/10/11/12/13/14; verification never grants approval. |
+| `continuity-report.json` | `python3 scripts/intelligence.py continuity build --task-dirs <task>...` | Checks context, intent, Motion IR and transition continuity across an ordered scene set. |
+| `fix-plan.json` | `python3 scripts/intelligence.py fix-plan build --task-dir <task> --reports <report>...` | Converts findings into root cause, patch scope, selective rerun scope, verification and user-review requirements. |
+
+## Agent operating rules
+
+The Agent must build the graph, Motion IR, provenance, replay bundle, P1 feedback reports and semantic-lint benchmark after render and before the strict quality gate. For a strict observability run it must also capture runtime telemetry and run the external verifier before `--require-telemetry`. For a production trust run it must derive/sign `attestation.json`, copy or resolve a managed `trust-policy.json`, run the independent attestation verifier and use `--require-attestation`. It must run the report completeness contract for changed scenes; that contract selects one deterministic passing task bundle and fails on ambiguous ties. It may use a verified capability only when the registry evidence is fresh, its hash matches the referenced file and the target environment is compatible. `scaffold_only` is a planning option, never a production acceptance result.
+
+The graph and provenance are evidence indexes, not approval tokens. A valid graph cannot bypass source binding, runtime assertions, browser review, reviewer consent or the `OPEN_PR=0` default. A confidence or risk value can prioritize investigation but cannot replace a deterministic rule or human decision.
+
+All task-bound paths are resolved under their declared root and symlink traversal is rejected. Replay additionally binds `task_dir`, `task_id`, scene and every recorded file to the same task bundle. Browser-review and Dev Lab handoffs must use same-origin artifact/task bases and must agree on task, scene and candidate identity; expiry or mismatch is a review failure, not a warning to ignore.
+
+## Strict validation
+
+```bash
+python3 scripts/intelligence.py graph validate --path artifacts/<task-id>/project-graph.json
+python3 scripts/intelligence.py motion-ir validate --path artifacts/<task-id>/motion-ir.json
+python3 scripts/intelligence.py provenance validate --task-dir artifacts/<task-id>
+python3 scripts/intelligence.py replay verify \
+  --root . --bundle artifacts/<task-id>/replay-bundle.json
+python3 scripts/intelligence.py semantic-lint validate \
+  --path artifacts/<task-id>/semantic-lint-report.json
+python3 scripts/intelligence.py semantic-lint benchmark \
+  --task-dir artifacts/<task-id> --iterations 25 --threshold-ms 500
+python3 scripts/evidence-verifier.py \
+  --scene-dir src/output/<scene> \
+  --task-dir artifacts/<task-id> \
+  --runtime-evidence runtime-adapters/runtime-evidence.json \
+  --max-age-days 1 \
+  --output artifacts/<task-id>/evidence-verifier-report.json
+python3 scripts/attestation.py statement \
+  --scene-dir src/output/<scene> \
+  --task-dir artifacts/<task-id> \
+  --context <project-context.json> \
+  --output artifacts/<task-id>/attestation-statement.json
+python3 scripts/attestation.py build \
+  --statement artifacts/<task-id>/attestation-statement.json \
+  --private-key <managed-ed25519-key> --key-id <key-id> \
+  --output artifacts/<task-id>/attestation.json
+python3 scripts/attestation-verifier.py \
+  --attestation artifacts/<task-id>/attestation.json \
+  --trust-policy artifacts/<task-id>/trust-policy.json \
+  --expected-task-id <task-id> --expected-scene <scene> \
+  --output artifacts/<task-id>/attestation-verifier-report.json
+python3 scripts/intelligence.py continuity validate \
+  --path artifacts/<task-id>/continuity-report.json
+python3 scripts/intelligence.py fix-plan validate \
+  --path artifacts/<task-id>/fix-plan.json
+python3 scripts/quality-gate.py \
+  --scene <scene> \
+  --context <project-context.json> \
+  --task-dir artifacts/<task-id> \
+  --require-browser-review --require-intelligence --require-p1 --require-benchmark --require-telemetry --require-attestation
+python3 scripts/eval-intelligence.py
+```
+
+The replay policy excludes generated reports and manifests because `report.py collect` and `report.py render` legitimately rewrite them. Source, spec, runtime evidence, review, graph, provenance and Motion IR remain integrity-bound. If any bound artifact changes, replay must be captured again or the gate must reject it.
+
+## Failure semantics
+
+| Failure | Meaning | Agent action |
+| --- | --- | --- |
+| `missing project-graph.json` or `missing motion-ir.json` | Intelligence artifacts were not built | Run the corresponding build command; do not mark the task validated. |
+| `no capability satisfies the registry selection policy` | Runtime is stale, unsupported, scaffold-only or tampered | Choose another verified adapter or ask the user for an explicit exception. |
+| `project graph edge references an unknown node` | Relationship index is corrupt | Rebuild the graph from the task bundle and inspect changed artifacts. |
+| `replay bundle has mismatch(es)` | A bound artifact changed after capture | Identify the changed path, rerun only the affected pipeline scope, then capture replay again. |
+| `semantic lint status: warn` | A heuristic or human-review finding exists | Preserve the finding, generate `fix-plan.json`, and request review; do not turn a warning into approval. |
+| `semantic lint benchmark status: fail` | Semantic-lint p95 execution is at or above its declared threshold | Reduce lint complexity or raise the threshold only with an explicit contract change and new eval evidence; do not treat the benchmark as a visual-quality score. |
+| `continuity report has drift` | Scene context, intent, asset or transition contract changed | Rerun only the affected scenes and transitions, then verify the updated continuity report. |
+| `fix-plan source report hash mismatch` | The plan no longer describes the reports that produced it | Regenerate the plan from current reports before proposing a patch. |
+| Browser review or approval failure | Candidate is not approved by the right reviewer/task | Return to Dev Lab review; never synthesize `review.json`. |
+| `artifact is missing or outside task bundle` | A graph, provenance or replay record attempts to escape its declared task root or traverse a symlink | Stop the task, inspect the path and rebuild the artifact from a clean task bundle. |
+| `ambiguous passing task bundles share the same state and updated_at` | More than one task bundle could supply evidence for the same changed scene | Resolve the duplicate explicitly and rerun the report contract; never merge evidence by filename order. |
+| `artifact_base must share the Dev Lab origin` or identity binding failure | Dev Lab query parameters would mix an external or foreign task/candidate bundle | Reject the handoff and regenerate the review URL from the canonical task bundle. |
+| `runtime telemetry verification failed` | Scrub-point evidence is stale, tampered, missing, cross-task, path-escaped or bound to different source/manifest/Motion IR bytes | Re-run the real runtime capture from the canonical scene/task bundle, then verify again; never treat the verifier as approval. |
+| `attestation verification failed` | Payload hash, DSSE signature, signer validity/revocation, policy lookup, path binding or expected task/scene binding failed | Regenerate the statement from current artifacts, re-run the external verifier against a managed policy and investigate signer lifecycle; never flip `approval` or bypass user review. |
+
+The public eval corpus is `tests/evals/intelligence-cases.json`. It covers positive verified selection plus scaffold-only, stale evidence, tampering, graph corruption, replay tamper and foreign-task candidate failures. P1 extends the acceptance surface with semantic warning preservation, generic-intent detection, multi-scene context drift, selective rerun binding, performance budget/frame-rate warnings, perceptual easing/reduced-motion warnings and benchmark execution time. The 1.9.0 slice adds runtime telemetry happy-path, state tamper, cross-task identity, stale evidence and symlink escape cases. The 2.0.0 slice adds clean attestation, payload tamper, binding mismatch, revoked signer and unknown signer cases without weakening the approval=false and human-review invariants.

package/references/reporting-contract.md

@@ -0,0 +1,38 @@
+# Reporting and handoff contract
+
+Use this reference when a task needs to be continued by another Agent or reviewed by a human.
+
+## Required artifact roles
+
+| File | Purpose |
+|---|---|
+| `task.json` | Current lifecycle state, task identity, project binding and commit/PR pointers |
+| `execution-report.json` | Completed, verified, not completed, problems, structure review and next Agent |
+| `decision-log.jsonl` | Append-only decisions with reason, evidence and actor |
+| `artifact-manifest.json` | Paths, types, byte sizes and SHA-256 checksums |
+| `quality-report.json` | Machine-readable quality gate result and rule-level evidence |
+| `issue-register.json` | Problems, severity, status, owner and next action |
+| `review.json` | Human/Agent review decision and categorized feedback |
+| `handoff.json` | What the next Agent should read, do, verify or ask the user |
+| `project-graph.json` | Task-bound relationship index for project, intent, scene, artifacts, evidence and review |
+| `provenance.json` | Step-level attestation with actor, builder, materials, products, policy and hash chain |
+| `motion-ir.json` | Framework-neutral motion intent bound to task, scene, context and source hashes |
+| `replay-bundle.json` | Clean replay environment metadata and artifact hash inventory |
+
+## Status semantics
+
+Use `blocked` when required input, permission or consent is missing. Use `failed` when an attempted operation produced a technical error. Use `review_required` when the artifact exists but a human or downstream Agent must inspect it. Use `validated` only when the quality gate passes, including strict Intelligence Core validation when the task declares `intelligence_required`. Use `ready_for_pr` only when validation and review are both complete.
+
+Never mark an item completed without an evidence path or command result. Never convert a scaffold-only runtime into a verified runtime in prose.
+
+## CLI recording contract
+
+Use `python3 scripts/report.py add` for facts that belong in `completed`, `verified`, `not_completed`, `problems` or `next_agent`. Use `python3 scripts/report.py structure` for missing files, broken references and untracked artifacts. Run `collect` to create deterministic SHA-256 entries, `check` to enforce semantic completeness, and `render` to create the human-readable `REPORT.md`.
+
+The initial `not_completed` entry is removed automatically after the first completed or verified item is recorded. Explicit unfinished work must still be added to `not_completed`; this prevents an empty template from looking like a complete task while preserving a visible record of work that remains.
+
+The report is an evidence index, not a chat transcript. Each item should point to a file, command output, test name, runtime metadata or review decision that another Agent can inspect.
+
+## Handoff rule
+
+The receiving Agent should be able to continue from `handoff.json`, `task.json`, `quality-report.json`, `project-graph.json`, `provenance.json`, `motion-ir.json`, `replay-bundle.json` and the artifact manifest without reconstructing the previous conversation. If that is not possible, the handoff is incomplete. Graph and provenance are indexes and attestations, not permission to skip browser review or user consent.

package/references/runtime-capability.md

@@ -0,0 +1,12 @@
+# Runtime capability levels
+
+Use explicit capability levels in reports and `agent-card.json`.
+
+| Level | Meaning | Acceptance |
+|---|---|---|
+| `scaffold` | Template/code exists but runtime integration is not proven | Never sufficient for production PR |
+| `static-validated` | JSON/XML/schema and local references are valid | Still not runtime evidence |
+| `runtime-verified` | Target runtime rendered required frames successfully | Can pass production gate if other rules pass |
+| `project-integrated` | Runtime artifact works in the actual host project route/component and target policy | Preferred final level |
+
+The current audited levels are `runtime-verified` for Lottie JSON, dotLottie packaging, SVG cutout rig, Rive, GSAP and Framer Motion. The adapter evidence is generated by `node scripts/runtime-adapters.mjs` and contains three deterministic scrub points plus runtime state. Treat Spine and Three.js as `scaffold` until their adapter test matrix is implemented.

package/references/signed-attestation.md

@@ -0,0 +1,31 @@
+# Signed attestation and trust-anchor contract
+
+MotionLoom's next trust boundary uses a **DSSE-compatible envelope** around a MotionLoom-specific JSON statement. The envelope authenticates the exact serialized predicate; it does not grant review approval. This separation follows the attestation model in SLSA [1] and the DSSE pre-authentication encoding rules [2].
+
+## Contract boundary
+
+| Layer | Responsibility | Must not claim |
+|---|---|---|
+| MotionLoom statement | Bind task, scene, source, manifest, Motion IR, runtime evidence, telemetry and provenance hashes | User approval |
+| DSSE-compatible envelope | Bind payload type, exact serialized body and signer signature | Artifact quality |
+| Trust policy | Select accepted algorithm, key, validity window and revocation state | Runtime correctness |
+| External verifier | Report integrity, binding and signer trust with stable exit codes | Approval or PR authorization |
+| Review lifecycle | Record user decision on the exact candidate | Cryptographic identity without verification |
+
+## Canonicalization rules
+
+The payload type is `application/vnd.motionloom.attestation+json;version=1`. The signed body is the exact UTF-8 serialized statement bytes. The DSSE pre-authentication encoding is computed over the UTF-8 payload type and those exact body bytes. A verifier must not verify one serialization and then parse a different serialization for application decisions.
+
+The statement uses a MotionLoom-specific subject/predicate shape. `subject[*].digest.sha256` identifies the attested artifact. The predicate binds `task_id`, `scene`, context hash, source/manifest/Motion IR hashes, runtime evidence hashes and provenance chain hash. The field `approval` is present only as the constant `false` in the bundle contract so cryptographic evidence cannot be mistaken for review approval.
+
+## Trust and key lifecycle
+
+Trust is configured out-of-band in `trust-policy.schema.json`. A `key_id` is only a lookup hint; the verifier must still resolve the key from the configured trust policy, require `status: active`, check the validity interval, enforce the algorithm and reject revoked or unknown signers. Rotation may overlap keys, but an expired or revoked signer must not be accepted merely because its signature is mathematically valid.
+
+The initial implementation is deliberately local-policy based and deterministic. It supports test trust anchors and explicit revocation fixtures. Production deployments may replace the trust source, but must preserve fail-closed verification and the review-first approval boundary.
+
+## References
+
+[1]: https://slsa.dev/spec/v1.2/attestation-model "SLSA v1.2 Software attestations"
+
+[2]: https://github.com/secure-systems-lab/dsse/blob/master/protocol.md "DSSE Protocol v1.0.2"

package/schemas/artifact-manifest.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/artifact-manifest.schema.json",
+  "title": "Animation artifact manifest",
+  "type": "object",
+  "required": ["manifest_version", "task_id", "generated_at", "artifacts"],
+  "properties": {
+    "manifest_version": {"type": "string"},
+    "task_id": {"type": "string"},
+    "generated_at": {"type": "string", "format": "date-time"},
+    "artifacts": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["path", "type", "sha256", "bytes"],
+        "properties": {"path": {"type": "string"}, "type": {"type": "string"}, "sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"}, "bytes": {"type": "integer", "minimum": 0}},
+        "additionalProperties": true
+      }
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/browser-review-candidate.schema.json

@@ -0,0 +1,24 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/browser-review-candidate.schema.json",
+  "title": "Animation browser review candidate",
+  "type": "object",
+  "required": ["schema_version", "candidate_id", "task_id", "scene", "url", "status", "context_sha256", "source_sha256", "review_artifact", "expires_at"],
+  "properties": {
+    "schema_version": {"type": "string"},
+    "candidate_id": {"type": "string", "pattern": "^[a-f0-9]{20}$"},
+    "task_id": {"type": "string"},
+    "scene": {"type": "string", "pattern": "^[A-Za-z0-9._-]+$"},
+    "url": {"type": "string", "format": "uri"},
+    "status": {"type": "string", "enum": ["prepared", "opened", "reviewed", "approved", "changes_requested", "expired"]},
+    "context_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "source_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+    "runtime": {"type": "string"},
+    "checkpoints": {"type": "array", "items": {"type": "integer", "enum": [0, 50, 100]}},
+    "review_artifact": {"type": "string"},
+    "requires_user_approval": {"type": "boolean"},
+    "prepared_at": {"type": "string", "format": "date-time"},
+    "expires_at": {"type": "string", "format": "date-time"}
+  },
+  "additionalProperties": true
+}

package/schemas/capability-registry.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/capability-registry.schema.json",
+  "title": "MotionLoom capability registry",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "registry_id", "generated_at", "selection_policy", "capabilities"],
+  "properties": {
+    "schema_version": {"const": "0.1"},
+    "registry_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{2,127}$"},
+    "generated_at": {"type": "string", "format": "date-time"},
+    "selection_policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["require_verified", "allow_scaffold_only", "max_evidence_age_seconds"],
+      "properties": {
+        "require_verified": {"type": "boolean"},
+        "allow_scaffold_only": {"type": "boolean"},
+        "max_evidence_age_seconds": {"type": "integer", "minimum": 0}
+      }
+    },
+    "capabilities": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "status", "adapter_version", "inputs", "outputs", "compatibility", "last_verified_at", "evidence", "limitations", "risk_level", "side_effect_level"],
+        "properties": {
+          "id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,127}$"},
+          "kind": {"type": "string", "enum": ["analyzer", "planner", "generator", "renderer", "runtime-adapter", "review", "packager"]},
+          "status": {"type": "string", "enum": ["verified", "scaffold_only", "static_validated", "project_integrated", "disabled"]},
+          "adapter_version": {"type": "string", "minLength": 1},
+          "inputs": {"type": "array", "items": {"type": "string"}},
+          "outputs": {"type": "array", "items": {"type": "string"}},
+          "compatibility": {"$ref": "#/$defs/compatibility"},
+          "last_verified_at": {"type": "string", "format": "date-time"},
+          "evidence": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/evidence"}},
+          "limitations": {"type": "array", "items": {"type": "string"}},
+          "fallback": {"type": "string"},
+          "risk_level": {"type": "string", "enum": ["low", "medium", "high"]},
+          "side_effect_level": {"type": "string", "enum": ["read", "local_write", "user_review_required", "remote_write"]}
+        }
+      }
+    }
+  },
+  "$defs": {
+    "compatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["browsers", "os"],
+      "properties": {"browsers": {"type": "array", "items": {"type": "string"}}, "os": {"type": "array", "items": {"type": "string"}}, "node": {"type": "string"}}
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256", "kind"],
+      "properties": {"path": {"type": "string", "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$)).+"}, "sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"}, "kind": {"type": "string", "enum": ["runtime", "ci", "browser", "static"]}}
+    }
+  }
+}

package/schemas/continuity-report.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/continuity-report.schema.json",
+  "title": "MotionLoom multi-scene continuity report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "report_id", "project_id", "status", "scenes", "transitions", "summary", "generated_at"],
+  "properties": {
+    "schema_version": {"const": "0.1"},
+    "report_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{2,127}$"},
+    "project_id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{2,127}$"},
+    "status": {"type": "string", "enum": ["pass", "warn", "fail"]},
+    "scenes": {"type": "array", "minItems": 1, "items": {"$ref": "#/$defs/scene"}},
+    "transitions": {"type": "array", "items": {"$ref": "#/$defs/transition"}},
+    "summary": {"$ref": "#/$defs/summary"},
+    "generated_at": {"type": "string", "format": "date-time"}
+  },
+  "$defs": {
+    "scene": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["scene", "order", "motion_ir_path", "motion_ir_sha256", "context_hash", "intent"],
+      "properties": {
+        "scene": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{1,63}$"},
+        "order": {"type": "integer", "minimum": 0},
+        "motion_ir_path": {"type": "string", "minLength": 1},
+        "motion_ir_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "context_hash": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "intent": {"type": "string", "minLength": 1}
+      }
+    },
+    "transition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "from_scene", "to_scene", "status", "checks"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{2,127}$"},
+        "from_scene": {"type": "string", "minLength": 1},
+        "to_scene": {"type": "string", "minLength": 1},
+        "status": {"type": "string", "enum": ["pass", "warn", "fail"]},
+        "checks": {"type": "array", "items": {"type": "string", "minLength": 1}},
+        "findings": {"type": "array", "items": {"type": "string", "minLength": 1}}
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["scene_count", "transition_count", "errors", "warnings", "blocking"],
+      "properties": {"scene_count": {"type": "integer", "minimum": 1}, "transition_count": {"type": "integer", "minimum": 0}, "errors": {"type": "integer", "minimum": 0}, "warnings": {"type": "integer", "minimum": 0}, "blocking": {"type": "integer", "minimum": 0}}
+    }
+  }
+}

package/schemas/evidence-verifier-report.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/evidence-verifier-report.schema.json",
+  "title": "MotionLoom external evidence verifier report",
+  "type": "object",
+  "required": ["schema_version", "verifier", "verified", "approval", "issues", "bindings"],
+  "properties": {
+    "schema_version": {"type": "string", "const": "1.0"},
+    "verifier": {"type": "string", "const": "motionloom-evidence-verifier/1.0"},
+    "verified": {"type": "boolean"},
+    "approval": {"type": "boolean", "const": false},
+    "issues": {"type": "array", "items": {"type": "string"}},
+    "bindings": {
+      "type": "object",
+      "required": ["scene", "task_id", "source_sha256", "manifest_sha256", "motion_ir_sha256", "telemetry_files"],
+      "properties": {
+        "scene": {"type": "string", "minLength": 1},
+        "task_id": {"type": "string", "minLength": 1},
+        "source_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "manifest_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "motion_ir_sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "telemetry_files": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}}
+      },
+      "additionalProperties": true
+    },
+    "policy": {
+      "type": "object",
+      "properties": {
+        "max_age_days": {"type": "number", "minimum": 0}
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/execution-report.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/lenhonbp/MotionLoom/blob/main/schemas/execution-report.schema.json",
+  "title": "Animation execution report",
+  "type": "object",
+  "required": ["report_version", "task_id", "status", "confidence", "completed", "verified", "not_completed", "problems", "structure_review", "next_agent", "generated_at"],
+  "properties": {
+    "report_version": {"type": "string"},
+    "task_id": {"type": "string"},
+    "status": {"type": "string", "enum": ["created", "needs_context", "planning", "sourcing", "generating", "rendering", "review_required", "blocked", "failed", "validated", "ready_for_pr", "confirmed"]},
+    "confidence": {"type": "string", "enum": ["high", "medium", "low"]},
+    "completed": {"type": "array", "items": {"$ref": "#/$defs/report_item"}},
+    "verified": {"type": "array", "items": {"$ref": "#/$defs/report_item"}},
+    "not_completed": {"type": "array", "items": {"$ref": "#/$defs/report_item"}},
+    "problems": {"type": "array", "items": {"$ref": "#/$defs/problem"}},
+    "structure_review": {"type": "object"},
+    "next_agent": {"type": "array", "items": {"type": "object"}},
+    "generated_at": {"type": "string", "format": "date-time"}
+  },
+  "$defs": {
+    "report_item": {
+      "type": "object",
+      "required": ["id", "summary", "status"],
+      "properties": {"id": {"type": "string"}, "summary": {"type": "string"}, "status": {"type": "string"}, "evidence": {"type": "array", "items": {"type": "string"}}, "confidence": {"type": "string"}},
+      "additionalProperties": true
+    },
+    "problem": {
+      "type": "object",
+      "required": ["id", "severity", "summary", "status"],
+      "properties": {"id": {"type": "string"}, "severity": {"type": "string", "enum": ["P0", "P1", "P2", "P3"]}, "summary": {"type": "string"}, "status": {"type": "string"}, "next_action": {"type": "string"}},
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true
+}