nexakit 0.0.0-stage → 0.2.0

package/schemas/agent-client-isolated-variant.schema.json

@@ -0,0 +1,105 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-isolated-variant.schema.json",
+  "$ref": "#/$defs/input",
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" },
+    "digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "time": { "type": "string", "format": "date-time" },
+    "mechanismId": {
+      "enum": ["tools-empty-denied", "restricted-settings", "local-personalizations-excluded", "session-hooks-disabled", "managed-sources-excluded", "strict-empty-mcp", "connectors-disabled", "browser-ide-excluded", "skills-plugins-delegation-excluded", "minimal-environment", "updates-nonessential-traffic-disabled", "resume-persistence-fallback-excluded"]
+    },
+    "candidate": {
+      "type": "object", "additionalProperties": false,
+      "required": ["client", "candidateId", "artifactSha256", "versionReference", "configurationSha256", "environmentSha256", "authentication"],
+      "properties": {
+        "client": { "const": "claude-code" },
+        "candidateId": { "$ref": "#/$defs/id" },
+        "artifactSha256": { "$ref": "#/$defs/digest" },
+        "versionReference": { "$ref": "#/$defs/id" },
+        "configurationSha256": { "$ref": "#/$defs/digest" },
+        "environmentSha256": { "$ref": "#/$defs/digest" },
+        "authentication": { "enum": ["subscription", "api", "bare", "unknown"] }
+      }
+    },
+    "observation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mechanismId", "state", "referenceId", "observedAt"],
+      "properties": {
+        "mechanismId": { "$ref": "#/$defs/mechanismId" },
+        "state": { "enum": ["configured", "absent", "unknown"] },
+        "referenceId": { "$ref": "#/$defs/id" },
+        "observedAt": { "$ref": "#/$defs/time" }
+      }
+    },
+    "assessment": {
+      "oneOf": [
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["mechanismId", "provenance", "outcome"],
+          "properties": {
+            "mechanismId": { "$ref": "#/$defs/mechanismId" },
+            "provenance": { "const": "pending" },
+            "outcome": { "const": "unknown" }
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["mechanismId", "provenance", "basis", "outcome", "referenceId", "observedAt", "scopeSha256", "definitionSha256"],
+          "properties": {
+            "mechanismId": { "$ref": "#/$defs/mechanismId" },
+            "provenance": { "enum": ["documented", "local-structure-observation", "operator-attested", "native-variant-tested", "rejected"] },
+            "basis": { "enum": ["documentation", "structure", "attestation", "native-test"] },
+            "outcome": { "enum": ["supported", "unknown", "incompatible"] },
+            "referenceId": { "$ref": "#/$defs/id" },
+            "observedAt": { "$ref": "#/$defs/time" },
+            "scopeSha256": { "$ref": "#/$defs/digest" },
+            "definitionSha256": { "$ref": "#/$defs/digest" }
+          }
+        }
+      ]
+    },
+    "input": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "variantId", "candidate", "now", "mode", "role", "mechanisms", "observations", "assessments"],
+      "properties": {
+        "schemaVersion": { "const": "1.0.0" },
+        "variantId": { "const": "claude-subscription-text-v1" },
+        "candidate": { "$ref": "#/$defs/candidate" },
+        "now": { "$ref": "#/$defs/time" },
+        "mode": { "enum": ["tutor", "autonomous"] },
+        "role": { "enum": ["proponent", "reviewer"] },
+        "mechanisms": { "type": "array", "maxItems": 12, "items": { "$ref": "#/$defs/mechanismId" } },
+        "observations": { "type": "array", "maxItems": 12, "items": { "$ref": "#/$defs/observation" } },
+        "assessments": { "type": "array", "maxItems": 12, "items": { "$ref": "#/$defs/assessment" } }
+      }
+    },
+    "policy": {
+      "type": "object", "additionalProperties": false,
+      "required": ["policyId", "maxEvidenceAgeSeconds", "revokedReferences", "allowedVariants"],
+      "properties": {
+        "policyId": { "$ref": "#/$defs/id" },
+        "maxEvidenceAgeSeconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
+        "revokedReferences": { "type": "array", "maxItems": 256, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+        "allowedVariants": { "type": "array", "maxItems": 1, "uniqueItems": true, "items": { "const": "claude-subscription-text-v1" } }
+      }
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["scope", "state", "reasons", "unresolvedMechanisms", "descriptionSha256", "scopeSha256", "executed", "runtimeReady", "verifiedAdmission", "externalBillingVerified", "effectiveIsolationVerified"],
+      "properties": {
+        "scope": { "const": "isolated-variant-claims-only" },
+        "state": { "enum": ["invalid", "incomplete", "blocked", "ready-for-variant-review"] },
+        "reasons": { "type": "array", "minItems": 1, "maxItems": 32, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+        "unresolvedMechanisms": { "type": "array", "maxItems": 12, "uniqueItems": true, "items": { "$ref": "#/$defs/mechanismId" } },
+        "descriptionSha256": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/digest" }] },
+        "scopeSha256": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/digest" }] },
+        "executed": { "const": false },
+        "runtimeReady": { "const": false },
+        "verifiedAdmission": { "const": false },
+        "externalBillingVerified": { "const": false },
+        "effectiveIsolationVerified": { "const": false }
+      }
+    }
+  }
+}

package/schemas/agent-client-isolated-verification.schema.json

@@ -0,0 +1,99 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-isolated-verification.schema.json",
+  "$ref": "#/$defs/input",
+  "$defs": {
+    "id": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/id" },
+    "digest": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/digest" },
+    "time": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/time" },
+    "mechanismId": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/mechanismId" },
+    "methodId": { "enum": ["documentation-review", "structure-review", "fixture-test", "native-test"] },
+    "phase": { "enum": ["pre-start", "session", "shutdown"] },
+    "phases": { "type": "array", "maxItems": 3, "items": { "$ref": "#/$defs/phase" } },
+    "evidence": {
+      "type": "object", "additionalProperties": false,
+      "required": ["provenance", "basis", "outcome", "referenceId", "observedAt", "scopeSha256", "definitionSha256"],
+      "properties": {
+        "provenance": { "enum": ["documented", "local-structure-observation", "operator-attested", "fixture-claim", "native-claim", "rejected"] },
+        "basis": { "enum": ["documentation", "structure", "attestation", "fixture-test", "native-test"] },
+        "outcome": { "enum": ["supported", "unknown", "incompatible"] },
+        "referenceId": { "$ref": "#/$defs/id" },
+        "observedAt": { "$ref": "#/$defs/time" },
+        "scopeSha256": { "$ref": "#/$defs/digest" },
+        "definitionSha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "check": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mechanismId", "methodId", "coverage", "containment", "evidence"],
+      "properties": {
+        "mechanismId": { "$ref": "#/$defs/mechanismId" },
+        "methodId": { "$ref": "#/$defs/methodId" },
+        "coverage": { "$ref": "#/$defs/phases" },
+        "containment": { "enum": ["not-needed", "declared-contained", "unknown", "prohibited-effect-required"] },
+        "evidence": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/evidence" }] }
+      }
+    },
+    "input": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "variant", "checks"],
+      "properties": {
+        "schemaVersion": { "const": "1.0.0" },
+        "variant": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/input" },
+        "checks": { "type": "array", "maxItems": 12, "items": { "$ref": "#/$defs/check" } }
+      }
+    },
+    "catalogCheck": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mechanismId", "definitionSha256", "allowedMethods", "requiredCoverage"],
+      "properties": {
+        "mechanismId": { "$ref": "#/$defs/mechanismId" },
+        "definitionSha256": { "$ref": "#/$defs/digest" },
+        "allowedMethods": { "type": "array", "minItems": 1, "maxItems": 4, "uniqueItems": true, "items": { "$ref": "#/$defs/methodId" } },
+        "requiredCoverage": { "type": "array", "minItems": 1, "maxItems": 3, "uniqueItems": true, "items": { "$ref": "#/$defs/phase" } }
+      }
+    },
+    "catalog": {
+      "type": "object", "additionalProperties": false,
+      "required": ["catalogId", "variantSchema", "variantPolicy", "checks"],
+      "properties": {
+        "catalogId": { "$ref": "#/$defs/id" },
+        "variantSchema": { "type": "object" },
+        "variantPolicy": { "$ref": "agent-client-isolated-variant.schema.json#/$defs/policy" },
+        "checks": { "type": "array", "minItems": 12, "maxItems": 12, "items": { "$ref": "#/$defs/catalogCheck" } }
+      }
+    },
+    "row": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mechanismId", "methodId", "state", "requiredCoverage", "missingCoverage", "missingEvidence", "reasons", "evidenceAuthenticated"],
+      "properties": {
+        "mechanismId": { "$ref": "#/$defs/mechanismId" },
+        "methodId": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/methodId" }] },
+        "state": { "enum": ["documented-only", "structure-only", "test-scoped", "unresolved", "incompatible", "not-observable-in-scope"] },
+        "requiredCoverage": { "$ref": "#/$defs/phases" },
+        "missingCoverage": { "$ref": "#/$defs/phases" },
+        "missingEvidence": { "type": "array", "maxItems": 16, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+        "reasons": { "type": "array", "maxItems": 32, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+        "evidenceAuthenticated": { "const": false }
+      }
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["scope", "state", "decision", "matrix", "reasons", "planSha256", "variantScopeSha256", "executed", "runtimeReady", "verifiedAdmission", "externalBillingVerified", "effectiveIsolationVerified"],
+      "properties": {
+        "scope": { "const": "isolated-verification-plan-only" },
+        "state": { "enum": ["invalid", "blocked", "plan-review-required"] },
+        "decision": { "const": "no-native-start" },
+        "matrix": { "type": "array", "minItems": 12, "maxItems": 12, "items": { "$ref": "#/$defs/row" } },
+        "reasons": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+        "planSha256": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/digest" }] },
+        "variantScopeSha256": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/digest" }] },
+        "executed": { "const": false },
+        "runtimeReady": { "const": false },
+        "verifiedAdmission": { "const": false },
+        "externalBillingVerified": { "const": false },
+        "effectiveIsolationVerified": { "const": false }
+      }
+    }
+  }
+}

package/schemas/agent-client-managed-preferences-invocation.schema.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-managed-preferences-invocation.schema.json",
+  "$defs": {
+    "integer": { "type": "integer", "minimum": 0 },
+    "pin": {
+      "type": "object", "additionalProperties": false,
+      "required": ["path", "dev", "ino", "uid", "mode", "size", "mtimeMs", "ctimeMs", "sha256"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "dev": { "$ref": "#/$defs/integer" }, "ino": { "$ref": "#/$defs/integer" }, "uid": { "$ref": "#/$defs/integer" },
+        "mode": { "type": "integer", "minimum": 0, "maximum": 4095 },
+        "size": { "type": "integer", "minimum": 1, "maximum": 8388608 },
+        "mtimeMs": { "type": "number", "minimum": 0 }, "ctimeMs": { "type": "number", "minimum": 0 },
+        "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+      }
+    },
+    "parent": {
+      "type": "object", "additionalProperties": false,
+      "required": ["path", "dev", "ino", "uid", "mode"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "dev": { "$ref": "#/$defs/integer" }, "ino": { "$ref": "#/$defs/integer" }, "uid": { "$ref": "#/$defs/integer" },
+        "mode": { "const": 448 }
+      }
+    },
+    "limits": {
+      "type": "object", "additionalProperties": false,
+      "required": ["totalTimeoutMs", "graceMs", "confirmationMs", "maxOutputBytes", "maxErrorBytes", "permitLifetimeMs"],
+      "properties": {
+        "totalTimeoutMs": { "type": "integer", "minimum": 25, "maximum": 15000 },
+        "graceMs": { "type": "integer", "minimum": 1, "maximum": 1000 },
+        "confirmationMs": { "type": "integer", "minimum": 1, "maximum": 1000 },
+        "maxOutputBytes": { "type": "integer", "minimum": 1, "maximum": 32768 },
+        "maxErrorBytes": { "type": "integer", "minimum": 1, "maximum": 32768 },
+        "permitLifetimeMs": { "type": "integer", "minimum": 1, "maximum": 3600000 }
+      }
+    },
+    "configuration": {
+      "type": "object", "additionalProperties": false,
+      "required": ["expectedSource", "artifact", "workspaceParent", "limits"],
+      "properties": {
+        "expectedSource": { "enum": ["synthetic", "core-foundation-claim"] },
+        "artifact": { "$ref": "#/$defs/pin" }, "workspaceParent": { "$ref": "#/$defs/parent" }, "limits": { "$ref": "#/$defs/limits" }
+      }
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["scope", "state", "decision", "spawnAttempts", "helperStarted", "helperExecutionVerified", "artifactMatchedBefore", "artifactMatchedAfter", "terminationConfirmed", "cleanupRequired", "stdoutBytes", "stderrBytes", "elapsedMs", "projection", "reasons", "nativeClientStarted", "inferenceRequested", "runtimeReady", "verifiedAdmission", "effectiveIsolationVerified", "externalBillingVerified", "preferencesQueriedVerified"],
+      "properties": {
+        "scope": { "const": "managed-preferences-helper-only" },
+        "state": { "enum": ["blocked", "completed", "helper-failed", "failed", "canceled", "timed-out", "indeterminate"] },
+        "decision": { "const": "no-client-start" },
+        "spawnAttempts": { "type": "integer", "minimum": 0, "maximum": 1 },
+        "helperStarted": { "type": "boolean" }, "helperExecutionVerified": { "type": "boolean" },
+        "artifactMatchedBefore": { "type": "boolean" }, "artifactMatchedAfter": { "type": "boolean" },
+        "terminationConfirmed": { "type": "boolean" }, "cleanupRequired": { "type": "boolean" },
+        "stdoutBytes": { "$ref": "#/$defs/integer" }, "stderrBytes": { "$ref": "#/$defs/integer" }, "elapsedMs": { "$ref": "#/$defs/integer" },
+        "projection": { "anyOf": [{ "type": "null" }, { "$ref": "agent-client-managed-preferences.schema.json#/$defs/report" }] },
+        "reasons": { "type": "array", "minItems": 1, "maxItems": 32, "uniqueItems": true, "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" } },
+        "nativeClientStarted": { "const": false }, "inferenceRequested": { "const": false }, "runtimeReady": { "const": false },
+        "verifiedAdmission": { "const": false }, "effectiveIsolationVerified": { "const": false }, "externalBillingVerified": { "const": false },
+        "preferencesQueriedVerified": { "const": false }
+      }
+    }
+  }
+}

package/schemas/agent-client-managed-preferences.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-managed-preferences.schema.json",
+  "$ref": "#/$defs/wire",
+  "$defs": {
+    "source": { "enum": ["synthetic", "core-foundation-claim"] },
+    "field": {
+      "type": "object", "additionalProperties": false,
+      "required": ["name", "type", "forced"],
+      "properties": {
+        "name": { "enum": ["hooks", "policyHelper", "apiKeyHelper", "env", "managedMcpServers", "disableAllHooks"] },
+        "type": { "enum": ["not-found-by-api", "boolean", "number", "string", "array", "dictionary", "other"] },
+        "forced": { "enum": ["forced", "not-forced", "unknown"] }
+      }
+    },
+    "wire": {
+      "oneOf": [
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["schemaVersion", "source", "application", "status", "fields"],
+          "properties": {
+            "schemaVersion": { "const": "1.0.0" },
+            "source": { "$ref": "#/$defs/source" },
+            "application": { "const": "com.anthropic.claudecode" },
+            "status": { "const": "complete" },
+            "fields": { "type": "array", "minItems": 6, "maxItems": 6, "items": { "$ref": "#/$defs/field" } }
+          }
+        },
+        {
+          "type": "object", "additionalProperties": false,
+          "required": ["schemaVersion", "source", "status", "code"],
+          "properties": {
+            "schemaVersion": { "const": "1.0.0" },
+            "source": { "$ref": "#/$defs/source" },
+            "status": { "const": "failed" },
+            "code": { "enum": ["preferences-arguments-rejected", "preferences-backend-failed", "preferences-type-rejected"] }
+          }
+        }
+      ]
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["scope", "state", "decision", "sourceClaim", "fields", "reasons", "helperExecutionVerified", "preferencesQueriedVerified", "runtimeReady", "verifiedAdmission", "effectiveIsolationVerified", "externalBillingVerified"],
+      "properties": {
+        "scope": { "const": "partial-preference-observation" },
+        "state": { "enum": ["invalid", "helper-failed", "partial-observation"] },
+        "decision": { "const": "no-native-start" },
+        "sourceClaim": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/source" }] },
+        "fields": { "type": "array", "maxItems": 6, "items": { "$ref": "#/$defs/field" } },
+        "reasons": {
+          "type": "array", "minItems": 1, "maxItems": 8, "uniqueItems": true,
+          "items": { "enum": ["preferences-invalid-output", "preferences-source-mismatch", "preferences-exit-mismatch", "preferences-observation-partial", "preferences-force-unknown", "preferences-nonatomic-observation", "preferences-arguments-rejected", "preferences-backend-failed", "preferences-type-rejected", "preferences-stream-closed", "preferences-transport-timeout", "preferences-transport-overflow", "preferences-transport-unconfirmed", "preferences-transport-changed-artifact", "preferences-transport-error"] }
+        },
+        "helperExecutionVerified": { "const": false },
+        "preferencesQueriedVerified": { "const": false },
+        "runtimeReady": { "const": false },
+        "verifiedAdmission": { "const": false },
+        "effectiveIsolationVerified": { "const": false },
+        "externalBillingVerified": { "const": false }
+      }
+    }
+  }
+}

package/schemas/agent-client-native-diagnostics.schema.json

@@ -0,0 +1,85 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-native-diagnostics.schema.json",
+  "title": "S3.1 trusted native diagnostics, not inference admission",
+  "$defs": {
+    "pin": {
+      "type": "object", "additionalProperties": false,
+      "required": ["entryPath", "artifactPath", "expectedSha256", "expectedUid", "expectedMode", "expectedSize", "expectedDev", "expectedIno", "expectedLinkIno"],
+      "properties": {
+        "entryPath": {"type": "string", "minLength": 1, "maxLength": 4096},
+        "artifactPath": {"type": "string", "minLength": 1, "maxLength": 4096},
+        "expectedSha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"},
+        "expectedUid": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "expectedMode": {"type": "integer", "minimum": 0, "maximum": 4095},
+        "expectedSize": {"type": "integer", "minimum": 1, "maximum": 536870912},
+        "expectedDev": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "expectedIno": {"type": "integer", "minimum": 1, "maximum": 9007199254740991},
+        "expectedLinkIno": {"type": "integer", "minimum": 1, "maximum": 9007199254740991}
+      }
+    },
+    "limits": {
+      "type": "object", "additionalProperties": false,
+      "required": ["maxStarts", "processTimeoutMs", "totalTimeoutMs", "graceMs", "confirmationMs", "maxStdoutBytes", "maxStderrBytes"],
+      "properties": {
+        "maxStarts": {"const": 2},
+        "processTimeoutMs": {"type": "integer", "minimum": 100, "maximum": 15000},
+        "totalTimeoutMs": {"type": "integer", "minimum": 100, "maximum": 90000},
+        "graceMs": {"type": "integer", "minimum": 10, "maximum": 1000},
+        "confirmationMs": {"type": "integer", "minimum": 10, "maximum": 1000},
+        "maxStdoutBytes": {"type": "integer", "minimum": 1, "maximum": 131072},
+        "maxStderrBytes": {"type": "integer", "minimum": 1, "maximum": 32768}
+      }
+    },
+    "configuration": {
+      "type": "object", "additionalProperties": false,
+      "required": ["candidate", "workspaceParent", "limits"],
+      "properties": {
+        "candidate": {"$ref": "#/$defs/pin"},
+        "workspaceParent": {"type": "string", "minLength": 1, "maxLength": 4096},
+        "limits": {"$ref": "#/$defs/limits"}
+      }
+    },
+    "reason": {"enum": ["diagnostic-completed", "diagnostic-configuration-invalid", "diagnostic-schema-invalid", "diagnostic-input-forbidden", "diagnostic-permit-unavailable", "diagnostic-platform-not-admitted", "diagnostic-canceled", "diagnostic-path-unsafe", "diagnostic-private-parent-unsafe", "diagnostic-artifact-changed", "diagnostic-artifact-limit", "diagnostic-artifact-unconfirmed", "diagnostic-deadline", "diagnostic-spawn-failed", "diagnostic-process-error", "diagnostic-output-limit", "diagnostic-stderr-limit", "diagnostic-invalid-utf8", "diagnostic-output-unexpected", "diagnostic-group-unconfirmed", "diagnostic-signal-unconfirmed", "diagnostic-termination-unconfirmed", "diagnostic-exit-failed", "diagnostic-workspace-cleanup-required", "diagnostic-local-error"]},
+    "reasons": {"type": "array", "maxItems": 24, "uniqueItems": true, "items": {"$ref": "#/$defs/reason"}},
+    "operation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["recipe", "state", "spawnAttempts", "startObserved", "elapsedMs", "stdoutBytes", "stderrBytes", "terminationConfirmed", "reasons"],
+      "properties": {
+        "recipe": {"enum": ["version", "help"]},
+        "state": {"enum": ["not-started", "completed", "failed", "canceled", "timed-out", "indeterminate"]},
+        "spawnAttempts": {"type": "integer", "minimum": 0, "maximum": 1},
+        "startObserved": {"type": "boolean"}, "terminationConfirmed": {"type": "boolean"},
+        "elapsedMs": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "stdoutBytes": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "stderrBytes": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "reasons": {"$ref": "#/$defs/reasons"}
+      }
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["scope", "state", "nativeExecuted", "inferenceRequested", "actualModelCalls", "runtimeReady", "verifiedAdmission", "externalBillingVerified", "remoteCancellationVerified", "spawnAttempts", "startsObserved", "elapsedMs", "operations", "reasons"],
+      "properties": {
+        "scope": {"const": "native-diagnostics-only"},
+        "state": {"enum": ["blocked", "completed", "failed", "canceled", "timed-out", "indeterminate"]},
+        "nativeExecuted": {"type": "boolean"}, "inferenceRequested": {"const": false},
+        "actualModelCalls": {"type": "null"}, "runtimeReady": {"const": false},
+        "verifiedAdmission": {"const": false}, "externalBillingVerified": {"const": false},
+        "remoteCancellationVerified": {"const": false},
+        "spawnAttempts": {"type": "integer", "minimum": 0, "maximum": 2},
+        "startsObserved": {"type": "integer", "minimum": 0, "maximum": 2},
+        "elapsedMs": {"type": "integer", "minimum": 0, "maximum": 9007199254740991},
+        "operations": {"type": "array", "maxItems": 2, "items": {"$ref": "#/$defs/operation"}},
+        "reasons": {"$ref": "#/$defs/reasons"}
+      }
+    },
+    "observation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["declaredVersion", "optionsPresent"],
+      "properties": {
+        "declaredVersion": {"type": ["string", "null"], "pattern": "^\\d{1,4}\\.\\d{1,4}\\.\\d{1,4}(?:-[a-z0-9][a-z0-9.-]{0,31})?$"},
+        "optionsPresent": {"type": "array", "maxItems": 17, "uniqueItems": true, "items": {"enum": ["--tools", "--disallowedTools", "--strict-mcp-config", "--mcp-config", "--safe-mode", "--restricted", "--setting-sources", "--settings", "--model", "--effort", "--max-turns", "--no-session-persistence", "--output-format", "--permission-prompts", "--disable-slash-commands", "--no-chrome", "--print"]}}
+      }
+    }
+  }
+}

package/schemas/agent-client-native-evaluation.schema.json

@@ -0,0 +1,171 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-toolkit.local/schemas/agent-client-native-evaluation.schema.json",
+  "title": "C3.1a Offline Native Evidence",
+  "description": "Declaraciones sintéticas; no certifica instalaciones ni autoriza ejecución.",
+  "$ref": "#/$defs/input",
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{0,63}$" },
+    "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "nullableId": { "anyOf": [{ "$ref": "#/$defs/id" }, { "type": "null" }] },
+    "client": {
+      "type": "object", "additionalProperties": false,
+      "required": ["provider", "client", "variant", "clientVersion"],
+      "properties": {
+        "provider": { "enum": ["openai", "anthropic"] },
+        "client": { "enum": ["codex-cli", "claude-code"] },
+        "variant": { "enum": ["codex-native", "claude-native"] },
+        "clientVersion": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[a-z0-9.-]+)?$", "maxLength": 64 }
+      },
+      "oneOf": [
+        { "properties": { "provider": { "const": "openai" }, "client": { "const": "codex-cli" }, "variant": { "const": "codex-native" } } },
+        { "properties": { "provider": { "const": "anthropic" }, "client": { "const": "claude-code" }, "variant": { "const": "claude-native" } } }
+      ]
+    },
+    "binding": {
+      "type": "object", "additionalProperties": false,
+      "required": ["client", "platform", "architecture", "installationId", "artifactSha256", "configSha256", "environmentSha256", "controlRevision"],
+      "properties": {
+        "client": { "$ref": "#/$defs/client" },
+        "platform": { "enum": ["darwin", "linux", "win32"] },
+        "architecture": { "enum": ["arm64", "x64"] },
+        "installationId": { "$ref": "#/$defs/id" },
+        "artifactSha256": { "$ref": "#/$defs/sha256" },
+        "configSha256": { "$ref": "#/$defs/sha256" },
+        "environmentSha256": { "$ref": "#/$defs/sha256" },
+        "controlRevision": { "$ref": "#/$defs/id" }
+      }
+    },
+    "assessment": {
+      "type": "object", "additionalProperties": false,
+      "required": ["status", "source", "checkedAt", "expiresAt", "evidenceRef", "scopeSha256"],
+      "properties": {
+        "status": { "enum": ["documented", "locally-tested", "pending", "rejected"] },
+        "source": { "enum": ["provider-documentation", "installation-test", "operator-attestation"] },
+        "checkedAt": { "$ref": "#/$defs/timestamp" },
+        "expiresAt": { "$ref": "#/$defs/timestamp" },
+        "evidenceRef": { "$ref": "#/$defs/id" },
+        "scopeSha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "artifact": {
+      "type": "object", "additionalProperties": false,
+      "required": ["artifactId", "kind", "sha256"],
+      "properties": {
+        "artifactId": { "$ref": "#/$defs/id" },
+        "kind": { "enum": ["binary", "wrapper", "interpreter", "package"] },
+        "sha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "installation": {
+      "type": "object", "additionalProperties": false, "required": ["assessment", "artifacts"],
+      "properties": {
+        "assessment": { "$ref": "#/$defs/assessment" },
+        "artifacts": { "type": "array", "minItems": 1, "maxItems": 32, "items": { "$ref": "#/$defs/artifact" } }
+      }
+    },
+    "controlId": {
+      "enum": ["no-tools", "no-subagents", "no-mcp", "no-hooks", "no-personalizations", "no-updates", "stdin-text", "no-fallback", "no-resume", "no-permission-bypass", "internal-call-limit"]
+    },
+    "control": {
+      "type": "object", "additionalProperties": false,
+      "required": ["controlId", "assessment", "mechanismId", "positiveEvidenceRef", "negativeEvidenceRef"],
+      "properties": {
+        "controlId": { "$ref": "#/$defs/controlId" },
+        "assessment": { "$ref": "#/$defs/assessment" },
+        "mechanismId": { "$ref": "#/$defs/nullableId" },
+        "positiveEvidenceRef": { "$ref": "#/$defs/nullableId" },
+        "negativeEvidenceRef": { "$ref": "#/$defs/nullableId" }
+      }
+    },
+    "effectId": { "enum": ["native-auth", "provider-inference", "client-state", "telemetry", "descendants"] },
+    "authorization": {
+      "type": "object", "additionalProperties": false,
+      "required": ["status", "evidenceRef", "scopeSha256"],
+      "properties": {
+        "status": { "enum": ["approved", "pending", "denied"] },
+        "evidenceRef": { "$ref": "#/$defs/nullableId" },
+        "scopeSha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "effect": {
+      "type": "object", "additionalProperties": false,
+      "required": ["effectId", "disposition", "presence", "assessment", "authorization"],
+      "properties": {
+        "effectId": { "$ref": "#/$defs/effectId" },
+        "disposition": { "enum": ["allowed", "rejected", "unknown"] },
+        "presence": { "enum": ["present", "absent", "unknown"] },
+        "assessment": { "$ref": "#/$defs/assessment" },
+        "authorization": { "$ref": "#/$defs/authorization" }
+      }
+    },
+    "access": {
+      "type": "object", "additionalProperties": false,
+      "required": ["access", "externalBilling", "assessment", "billingAssessment"],
+      "properties": {
+        "access": { "enum": ["subscription-session", "api-key", "unknown"] },
+        "externalBilling": { "enum": ["disabled", "enabled", "unknown"] },
+        "assessment": { "$ref": "#/$defs/assessment" },
+        "billingAssessment": { "$ref": "#/$defs/assessment" }
+      }
+    },
+    "accounting": {
+      "type": "object", "additionalProperties": false,
+      "required": ["maxCallsPerStart", "limitEnforced", "assessment"],
+      "properties": {
+        "maxCallsPerStart": { "type": ["integer", "null"], "minimum": 1, "maximum": 1000000 },
+        "limitEnforced": { "type": "boolean" },
+        "assessment": { "$ref": "#/$defs/assessment" }
+      }
+    },
+    "input": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "evaluationId", "now", "expectedBinding", "binding"],
+      "properties": {
+        "schemaVersion": { "const": "1.0.0" },
+        "evaluationId": { "$ref": "#/$defs/id" },
+        "now": { "$ref": "#/$defs/timestamp" },
+        "expectedBinding": { "$ref": "#/$defs/binding" },
+        "binding": { "$ref": "#/$defs/binding" },
+        "installation": { "$ref": "#/$defs/installation" },
+        "controls": { "type": "array", "maxItems": 11, "items": { "$ref": "#/$defs/control" } },
+        "effects": { "type": "array", "maxItems": 5, "items": { "$ref": "#/$defs/effect" } },
+        "access": { "$ref": "#/$defs/access" },
+        "accounting": { "$ref": "#/$defs/accounting" },
+        "observations": {
+          "type": "array", "maxItems": 7, "uniqueItems": true,
+          "items": { "enum": ["artifact-race-unresolved", "effective-config-unknown", "managed-policy-unknown", "native-effects-unknown", "subscription-compatibility-unknown", "internal-calls-unknown", "descendant-containment-unknown"] }
+        }
+      }
+    },
+    "policy": {
+      "type": "object", "additionalProperties": false,
+      "required": ["maxEvidenceAgeSeconds", "revokedEvidenceRefs"],
+      "properties": {
+        "maxEvidenceAgeSeconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
+        "revokedEvidenceRefs": { "type": "array", "maxItems": 256, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } }
+      }
+    },
+    "report": {
+      "type": "object", "additionalProperties": false,
+      "required": ["schemaVersion", "state", "evaluationId", "executed", "runtimeReady", "verifiedAdmission", "reasons", "missing", "audit"],
+      "properties": {
+        "schemaVersion": { "const": "1.0.0" },
+        "state": { "enum": ["invalid", "incomplete", "blocked", "ready-for-installation-review"] },
+        "evaluationId": { "$ref": "#/$defs/nullableId" },
+        "executed": { "const": false }, "runtimeReady": { "const": false }, "verifiedAdmission": { "const": false },
+        "reasons": { "type": "array", "maxItems": 256, "uniqueItems": true, "items": { "type": "string", "pattern": "^[a-z0-9:.-]{1,160}$" } },
+        "missing": { "type": "array", "maxItems": 256, "uniqueItems": true, "items": { "type": "string", "pattern": "^[a-z0-9.-]{1,160}$" } },
+        "audit": {
+          "type": "object", "additionalProperties": false, "required": ["inputSha256", "bindingSha256", "policySha256"],
+          "properties": {
+            "inputSha256": { "anyOf": [{ "$ref": "#/$defs/sha256" }, { "type": "null" }] },
+            "bindingSha256": { "anyOf": [{ "$ref": "#/$defs/sha256" }, { "type": "null" }] },
+            "policySha256": { "$ref": "#/$defs/sha256" }
+          }
+        }
+      }
+    }
+  }
+}