omk-adaptorch-wpl 0.91.0

package/dist/b2c-mapper.js

@@ -0,0 +1,186 @@
+/**
+ * Maps OA adjudication + policy flags to B2C {@link VerdictCard} and apply/submit gates.
+ */
+import { B2C_VERDICT_SCHEMA_VERSION, } from "./b2c-verdict.js";
+import { POLICY_FLAG } from "./policy-wall.js";
+const USER_VERDICT_SEVERITY = ["BLOCKED", "INCONCLUSIVE", "ADVISORY", "PASS"];
+function worstUserVerdict(current, next) {
+    const cur = USER_VERDICT_SEVERITY.indexOf(current);
+    const nxt = USER_VERDICT_SEVERITY.indexOf(next);
+    return cur <= nxt ? current : next;
+}
+function verdictFromOa(verdict) {
+    switch (verdict) {
+        case "CONFIRMED":
+            return "PASS";
+        case "CORROBORATED-FAILURE":
+            return "ADVISORY";
+        case "CONTRADICTED":
+            return "BLOCKED";
+        case "INDETERMINATE":
+            return "INCONCLUSIVE";
+        case "VERIFIER-ERROR":
+            return "INCONCLUSIVE";
+    }
+}
+function riskFromUserVerdict(verdict, flags) {
+    if (verdict === "BLOCKED" || flags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING)) {
+        return "critical";
+    }
+    if (verdict === "INCONCLUSIVE")
+        return "high";
+    if (verdict === "ADVISORY")
+        return "medium";
+    return "low";
+}
+const REASON_CODE_USER = {
+    SCOPE_VIOLATION: { blocked: "Write scope violation detected by outcome adjudication." },
+    SCHEMA_DRIFT: { blocked: "Output schema does not match the expected contract." },
+    CONTENT_CHECK_FAILED: { blocked: "Content verification failed for one or more artifacts." },
+    NO_EVIDENCE_ON_SUCCESS: { blocked: "Run reported success but left no usable evidence." },
+    EMPTY_ARTIFACT_CONTENT: { blocked: "An artifact was present but contained no substantive content." },
+    TRACE_CHECK_FAILED: { blocked: "Trace verification failed for this run." },
+    TRACE_ERROR_SPAN: { blocked: "Error-level spans were found under a reported success." },
+    MIN_ACTIONS_UNMET: { blocked: "Fewer actions were recorded than required for this kind." },
+    RUN_STATUS_UNPARSEABLE: { blocked: "Run status could not be interpreted." },
+    RUN_FETCH_FAILED: { blocked: "Evidence could not be fetched for this run." },
+    MALFORMED_REQUEST: { blocked: "Adjudication request was malformed." },
+    RUN_NOT_TERMINAL: { blocked: "Run has not reached a terminal status yet." },
+    EVIDENCE_EMPTY: { blocked: "Evidence was too thin to reach a confident verdict." },
+    FAILURE_REPORTED: { blocked: "The run reported failure and evidence agrees." },
+    ALL_CHECKS_PASSED: { passed: "All outcome adjudication checks passed." },
+};
+function userStringsForReasonCode(code) {
+    const entry = REASON_CODE_USER[code];
+    const passed = [];
+    const blocked = [];
+    if (entry.passed)
+        passed.push(entry.passed);
+    if (entry.blocked)
+        blocked.push(entry.blocked);
+    return { passed, blocked };
+}
+function userVerdictFromPolicyFlags(flags, previewOnly) {
+    let v = "PASS";
+    if (flags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING) ||
+        flags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT) ||
+        flags.includes(POLICY_FLAG.SECRET_SUSPECT)) {
+        v = worstUserVerdict(v, "BLOCKED");
+    }
+    if (flags.includes(POLICY_FLAG.EVIDENCE_DAG_INCOMPLETE)) {
+        v = worstUserVerdict(v, "INCONCLUSIVE");
+    }
+    if (previewOnly &&
+        (flags.includes(POLICY_FLAG.REPRO_OVERFIT_SUSPECT) || flags.includes(POLICY_FLAG.LOW_DISCRIMINATION))) {
+        v = worstUserVerdict(v, "ADVISORY");
+    }
+    return v === "PASS" && flags.length === 0 ? null : v;
+}
+export const BATCH1_NO_DOCKER_RUNNER = "BATCH1_NO_DOCKER_RUNNER";
+function buildNextActions(verdict, previewOnly, canApply) {
+    if (verdict === "BLOCKED") {
+        return ["Regenerate"];
+    }
+    if (verdict === "INCONCLUSIVE") {
+        return previewOnly ? ["Deep Check", "Regenerate"] : ["Deep Check"];
+    }
+    if (verdict === "ADVISORY") {
+        return previewOnly ? ["Deep Check", "Apply"] : ["Apply"];
+    }
+    if (canApply) {
+        return ["Apply"];
+    }
+    return ["Deep Check"];
+}
+function buildLimitsCode(previewOnly) {
+    return previewOnly ? BATCH1_NO_DOCKER_RUNNER : undefined;
+}
+function buildDisclaimer(previewOnly, limitsCode) {
+    if (!previewOnly) {
+        return undefined;
+    }
+    const code = limitsCode ?? BATCH1_NO_DOCKER_RUNNER;
+    return `Preview-only evaluation (${code}): no docker runner; apply and submit gates are conservative.`;
+}
+export function mapToB2C(input) {
+    const evaluatedAt = input.evaluatedAt ?? new Date().toISOString();
+    let userVerdict = "INCONCLUSIVE";
+    const passed_checks = [];
+    const blocked_reasons = [];
+    if (input.diffPaths.length === 0 && input.adjudication === undefined) {
+        userVerdict = "INCONCLUSIVE";
+        blocked_reasons.push("No changed paths were found in the diff; cannot assess write scope.");
+    }
+    else {
+        userVerdict = "PASS";
+    }
+    const policyVerdict = userVerdictFromPolicyFlags(input.policyFlags, input.previewOnly);
+    if (policyVerdict !== null) {
+        userVerdict = worstUserVerdict(userVerdict, policyVerdict);
+    }
+    if (input.policyFlags.includes(POLICY_FLAG.SECRET_SUSPECT)) {
+        blocked_reasons.push("Diff lines may contain secrets or credentials; remove before proceeding.");
+    }
+    if (input.policyFlags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT)) {
+        blocked_reasons.push("One or more changed paths fall outside the approved write scope.");
+    }
+    if (input.policyFlags.includes(POLICY_FLAG.EVIDENCE_DAG_INCOMPLETE)) {
+        blocked_reasons.push("Run evidence is required but was not evaluated in this receipt.");
+    }
+    if (input.previewOnly && input.policyFlags.includes(POLICY_FLAG.LOW_DISCRIMINATION)) {
+        blocked_reasons.push("Preview-only mode: discrimination against production evidence is limited.");
+    }
+    if (input.adjudication !== undefined) {
+        const fromOa = verdictFromOa(input.adjudication.verdict);
+        userVerdict = worstUserVerdict(userVerdict, fromOa);
+        const strings = userStringsForReasonCode(input.adjudication.reason_code);
+        passed_checks.push(...strings.passed);
+        blocked_reasons.push(...strings.blocked);
+    }
+    else if (userVerdict === "PASS" && input.diffPaths.length > 0) {
+        passed_checks.push("Changed paths are within approved write scope (fast wall).");
+    }
+    const limitsCode = buildLimitsCode(input.previewOnly);
+    const limits = {
+        requiresHumanReview: userVerdict === "BLOCKED" || userVerdict === "INCONCLUSIVE",
+        previewOnly: input.previewOnly,
+        code: limitsCode,
+    };
+    const canApply = userVerdict === "PASS" &&
+        !input.policyFlags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING) &&
+        !input.policyFlags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT) &&
+        !input.policyFlags.includes(POLICY_FLAG.SECRET_SUSPECT) &&
+        (input.adjudication === undefined || input.adjudication.verdict === "CONFIRMED");
+    const shouldSubmit = userVerdict !== "BLOCKED" && !input.policyFlags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING);
+    const disclaimer = buildDisclaimer(input.previewOnly, limitsCode);
+    const verdictCard = {
+        schemaVersion: B2C_VERDICT_SCHEMA_VERSION,
+        verdict: userVerdict,
+        risk: riskFromUserVerdict(userVerdict, input.policyFlags),
+        limits,
+        passed_checks,
+        blocked_reasons: [...new Set(blocked_reasons)],
+        next_actions: buildNextActions(userVerdict, input.previewOnly, canApply),
+        repairHints: input.repairHints !== undefined && input.repairHints.length > 0 ? input.repairHints : undefined,
+        packetId: input.packetId,
+        kind: input.kind,
+    };
+    const receipt = {
+        schemaVersion: B2C_VERDICT_SCHEMA_VERSION,
+        evaluatedAt,
+        kind: input.kind,
+        packetId: input.packetId,
+        dispatchRecordId: input.dispatchRecordId,
+        runIds: input.runIds,
+        previewOnly: input.previewOnly,
+        canApply,
+        shouldSubmit,
+        policyFlags: [...input.policyFlags],
+        adjudicationVerdict: input.adjudication?.verdict,
+        adjudicationReasonCode: input.adjudication?.reason_code,
+        diffPaths: input.diffPaths,
+        disclaimer,
+    };
+    return { verdictCard, receipt };
+}
+//# sourceMappingURL=b2c-mapper.js.map

package/dist/b2c-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"b2c-mapper.js","sourceRoot":"","sources":["../src/b2c-mapper.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EACN,0BAA0B,GAO1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAC;AAEhE,MAAM,qBAAqB,GAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAE7F,SAAS,gBAAgB,CAAC,OAAoB,EAAE,IAAiB,EAAe;IAC/E,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACnC;AAED,SAAS,aAAa,CAAC,OAAqB,EAAe;IAC1D,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,WAAW;YACf,OAAO,MAAM,CAAC;QACf,KAAK,sBAAsB;YAC1B,OAAO,UAAU,CAAC;QACnB,KAAK,cAAc;YAClB,OAAO,SAAS,CAAC;QAClB,KAAK,eAAe;YACnB,OAAO,cAAc,CAAC;QACvB,KAAK,gBAAgB;YACpB,OAAO,cAAc,CAAC;IACxB,CAAC;AAAA,CACD;AAED,SAAS,mBAAmB,CAAC,OAAoB,EAAE,KAAmB,EAAiB;IACtF,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAClF,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,gBAAgB,GAA0E;IAC/F,eAAe,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE;IACvF,YAAY,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAChF,oBAAoB,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE;IAC3F,sBAAsB,EAAE,EAAE,OAAO,EAAE,mDAAmD,EAAE;IACxF,sBAAsB,EAAE,EAAE,OAAO,EAAE,+DAA+D,EAAE;IACpG,kBAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE;IAC1E,gBAAgB,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE;IACvF,iBAAiB,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE;IAC1F,sBAAsB,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE;IAC3E,gBAAgB,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE;IAC5E,iBAAiB,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE;IACrE,gBAAgB,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE;IAC3E,cAAc,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE;IAClF,gBAAgB,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAC9E,iBAAiB,EAAE,EAAE,MAAM,EAAE,yCAAyC,EAAE;CACxE,CAAC;AAEF,SAAS,wBAAwB,CAAC,IAA4B,EAA2C;IACxG,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,CAC3B;AAED,SAAS,0BAA0B,CAAC,KAAmB,EAAE,WAAoB,EAAsB;IAClG,IAAI,CAAC,GAAgB,MAAM,CAAC;IAC5B,IACC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC;QACnD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAClD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,EACzC,CAAC;QACF,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzD,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACzC,CAAC;IACD,IACC,WAAW;QACX,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,EACpG,CAAC;QACF,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CACrD;AAoBD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAkC,CAAC;AAE1E,SAAS,gBAAgB,CAAC,OAAoB,EAAE,WAAoB,EAAE,QAAiB,EAAuB;IAC7G,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,YAAY,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,CAAC;AAAA,CACtB;AAED,SAAS,eAAe,CAAC,WAAoB,EAAsB;IAClE,OAAO,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACzD;AAED,SAAS,eAAe,CAAC,WAAoB,EAAE,UAA8B,EAAsB;IAClG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,IAAI,uBAAuB,CAAC;IACnD,OAAO,4BAA4B,IAAI,+DAA+D,CAAC;AAAA,CACvG;AAED,MAAM,UAAU,QAAQ,CAAC,KAAoB,EAAkB;IAC9D,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,IAAI,WAAW,GAAgB,cAAc,CAAC;IAC9C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtE,WAAW,GAAG,cAAc,CAAC;QAC7B,eAAe,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACP,WAAW,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,0BAA0B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC5B,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,eAAe,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACpE,eAAe,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACrE,eAAe,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrF,eAAe,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzD,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACzE,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,eAAe,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,WAAW,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,aAAa,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAkB;QAC7B,mBAAmB,EAAE,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,cAAc;QAChF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,UAAU;KAChB,CAAC;IAEF,MAAM,QAAQ,GACb,WAAW,KAAK,MAAM;QACtB,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC;QAChE,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC;QAC/D,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC;QACvD,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;IAElF,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAEnH,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAElE,MAAM,WAAW,GAAgB;QAChC,aAAa,EAAE,0BAA0B;QACzC,OAAO,EAAE,WAAW;QACpB,IAAI,EAAE,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC;QACzD,MAAM;QACN,aAAa;QACb,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9C,YAAY,EAAE,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC;QACxE,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC5G,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;KAChB,CAAC;IAEF,MAAM,OAAO,GAAwB;QACpC,aAAa,EAAE,0BAA0B;QACzC,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ;QACR,YAAY;QACZ,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,mBAAmB,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO;QAChD,sBAAsB,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW;QACvD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU;KACV,CAAC;IAEF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAAA,CAChC","sourcesContent":["/**\n * Maps OA adjudication + policy flags to B2C {@link VerdictCard} and apply/submit gates.\n */\n\nimport type { AdjudicationResult } from \"./adjudicator.ts\";\nimport type { AdjudicationReasonCode, VerdictState } from \"./adjudicator-registry.ts\";\nimport {\n\tB2C_VERDICT_SCHEMA_VERSION,\n\ttype UserRiskLevel,\n\ttype UserVerdict,\n\ttype VerdictCard,\n\ttype VerdictLimits,\n\ttype VerdictNextAction,\n\ttype VerificationReceipt,\n} from \"./b2c-verdict.ts\";\nimport { POLICY_FLAG, type PolicyFlag } from \"./policy-wall.ts\";\n\nconst USER_VERDICT_SEVERITY: UserVerdict[] = [\"BLOCKED\", \"INCONCLUSIVE\", \"ADVISORY\", \"PASS\"];\n\nfunction worstUserVerdict(current: UserVerdict, next: UserVerdict): UserVerdict {\n\tconst cur = USER_VERDICT_SEVERITY.indexOf(current);\n\tconst nxt = USER_VERDICT_SEVERITY.indexOf(next);\n\treturn cur <= nxt ? current : next;\n}\n\nfunction verdictFromOa(verdict: VerdictState): UserVerdict {\n\tswitch (verdict) {\n\t\tcase \"CONFIRMED\":\n\t\t\treturn \"PASS\";\n\t\tcase \"CORROBORATED-FAILURE\":\n\t\t\treturn \"ADVISORY\";\n\t\tcase \"CONTRADICTED\":\n\t\t\treturn \"BLOCKED\";\n\t\tcase \"INDETERMINATE\":\n\t\t\treturn \"INCONCLUSIVE\";\n\t\tcase \"VERIFIER-ERROR\":\n\t\t\treturn \"INCONCLUSIVE\";\n\t}\n}\n\nfunction riskFromUserVerdict(verdict: UserVerdict, flags: PolicyFlag[]): UserRiskLevel {\n\tif (verdict === \"BLOCKED\" || flags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING)) {\n\t\treturn \"critical\";\n\t}\n\tif (verdict === \"INCONCLUSIVE\") return \"high\";\n\tif (verdict === \"ADVISORY\") return \"medium\";\n\treturn \"low\";\n}\n\nconst REASON_CODE_USER: Record<AdjudicationReasonCode, { passed?: string; blocked?: string }> = {\n\tSCOPE_VIOLATION: { blocked: \"Write scope violation detected by outcome adjudication.\" },\n\tSCHEMA_DRIFT: { blocked: \"Output schema does not match the expected contract.\" },\n\tCONTENT_CHECK_FAILED: { blocked: \"Content verification failed for one or more artifacts.\" },\n\tNO_EVIDENCE_ON_SUCCESS: { blocked: \"Run reported success but left no usable evidence.\" },\n\tEMPTY_ARTIFACT_CONTENT: { blocked: \"An artifact was present but contained no substantive content.\" },\n\tTRACE_CHECK_FAILED: { blocked: \"Trace verification failed for this run.\" },\n\tTRACE_ERROR_SPAN: { blocked: \"Error-level spans were found under a reported success.\" },\n\tMIN_ACTIONS_UNMET: { blocked: \"Fewer actions were recorded than required for this kind.\" },\n\tRUN_STATUS_UNPARSEABLE: { blocked: \"Run status could not be interpreted.\" },\n\tRUN_FETCH_FAILED: { blocked: \"Evidence could not be fetched for this run.\" },\n\tMALFORMED_REQUEST: { blocked: \"Adjudication request was malformed.\" },\n\tRUN_NOT_TERMINAL: { blocked: \"Run has not reached a terminal status yet.\" },\n\tEVIDENCE_EMPTY: { blocked: \"Evidence was too thin to reach a confident verdict.\" },\n\tFAILURE_REPORTED: { blocked: \"The run reported failure and evidence agrees.\" },\n\tALL_CHECKS_PASSED: { passed: \"All outcome adjudication checks passed.\" },\n};\n\nfunction userStringsForReasonCode(code: AdjudicationReasonCode): { passed: string[]; blocked: string[] } {\n\tconst entry = REASON_CODE_USER[code];\n\tconst passed: string[] = [];\n\tconst blocked: string[] = [];\n\tif (entry.passed) passed.push(entry.passed);\n\tif (entry.blocked) blocked.push(entry.blocked);\n\treturn { passed, blocked };\n}\n\nfunction userVerdictFromPolicyFlags(flags: PolicyFlag[], previewOnly: boolean): UserVerdict | null {\n\tlet v: UserVerdict = \"PASS\";\n\tif (\n\t\tflags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING) ||\n\t\tflags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT) ||\n\t\tflags.includes(POLICY_FLAG.SECRET_SUSPECT)\n\t) {\n\t\tv = worstUserVerdict(v, \"BLOCKED\");\n\t}\n\tif (flags.includes(POLICY_FLAG.EVIDENCE_DAG_INCOMPLETE)) {\n\t\tv = worstUserVerdict(v, \"INCONCLUSIVE\");\n\t}\n\tif (\n\t\tpreviewOnly &&\n\t\t(flags.includes(POLICY_FLAG.REPRO_OVERFIT_SUSPECT) || flags.includes(POLICY_FLAG.LOW_DISCRIMINATION))\n\t) {\n\t\tv = worstUserVerdict(v, \"ADVISORY\");\n\t}\n\treturn v === \"PASS\" && flags.length === 0 ? null : v;\n}\n\nexport interface MapToB2CInput {\n\tkind: string;\n\tpacketId?: string;\n\tdispatchRecordId?: string;\n\trunIds: string[];\n\tpreviewOnly: boolean;\n\tpolicyFlags: PolicyFlag[];\n\tdiffPaths: string[];\n\tadjudication?: AdjudicationResult;\n\tevaluatedAt?: string;\n\trepairHints?: string[];\n}\n\nexport interface MapToB2COutput {\n\tverdictCard: VerdictCard;\n\treceipt: VerificationReceipt;\n}\n\nexport const BATCH1_NO_DOCKER_RUNNER = \"BATCH1_NO_DOCKER_RUNNER\" as const;\n\nfunction buildNextActions(verdict: UserVerdict, previewOnly: boolean, canApply: boolean): VerdictNextAction[] {\n\tif (verdict === \"BLOCKED\") {\n\t\treturn [\"Regenerate\"];\n\t}\n\tif (verdict === \"INCONCLUSIVE\") {\n\t\treturn previewOnly ? [\"Deep Check\", \"Regenerate\"] : [\"Deep Check\"];\n\t}\n\tif (verdict === \"ADVISORY\") {\n\t\treturn previewOnly ? [\"Deep Check\", \"Apply\"] : [\"Apply\"];\n\t}\n\tif (canApply) {\n\t\treturn [\"Apply\"];\n\t}\n\treturn [\"Deep Check\"];\n}\n\nfunction buildLimitsCode(previewOnly: boolean): string | undefined {\n\treturn previewOnly ? BATCH1_NO_DOCKER_RUNNER : undefined;\n}\n\nfunction buildDisclaimer(previewOnly: boolean, limitsCode: string | undefined): string | undefined {\n\tif (!previewOnly) {\n\t\treturn undefined;\n\t}\n\tconst code = limitsCode ?? BATCH1_NO_DOCKER_RUNNER;\n\treturn `Preview-only evaluation (${code}): no docker runner; apply and submit gates are conservative.`;\n}\n\nexport function mapToB2C(input: MapToB2CInput): MapToB2COutput {\n\tconst evaluatedAt = input.evaluatedAt ?? new Date().toISOString();\n\tlet userVerdict: UserVerdict = \"INCONCLUSIVE\";\n\tconst passed_checks: string[] = [];\n\tconst blocked_reasons: string[] = [];\n\n\tif (input.diffPaths.length === 0 && input.adjudication === undefined) {\n\t\tuserVerdict = \"INCONCLUSIVE\";\n\t\tblocked_reasons.push(\"No changed paths were found in the diff; cannot assess write scope.\");\n\t} else {\n\t\tuserVerdict = \"PASS\";\n\t}\n\n\tconst policyVerdict = userVerdictFromPolicyFlags(input.policyFlags, input.previewOnly);\n\tif (policyVerdict !== null) {\n\t\tuserVerdict = worstUserVerdict(userVerdict, policyVerdict);\n\t}\n\n\tif (input.policyFlags.includes(POLICY_FLAG.SECRET_SUSPECT)) {\n\t\tblocked_reasons.push(\"Diff lines may contain secrets or credentials; remove before proceeding.\");\n\t}\n\tif (input.policyFlags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT)) {\n\t\tblocked_reasons.push(\"One or more changed paths fall outside the approved write scope.\");\n\t}\n\tif (input.policyFlags.includes(POLICY_FLAG.EVIDENCE_DAG_INCOMPLETE)) {\n\t\tblocked_reasons.push(\"Run evidence is required but was not evaluated in this receipt.\");\n\t}\n\tif (input.previewOnly && input.policyFlags.includes(POLICY_FLAG.LOW_DISCRIMINATION)) {\n\t\tblocked_reasons.push(\"Preview-only mode: discrimination against production evidence is limited.\");\n\t}\n\n\tif (input.adjudication !== undefined) {\n\t\tconst fromOa = verdictFromOa(input.adjudication.verdict);\n\t\tuserVerdict = worstUserVerdict(userVerdict, fromOa);\n\t\tconst strings = userStringsForReasonCode(input.adjudication.reason_code);\n\t\tpassed_checks.push(...strings.passed);\n\t\tblocked_reasons.push(...strings.blocked);\n\t} else if (userVerdict === \"PASS\" && input.diffPaths.length > 0) {\n\t\tpassed_checks.push(\"Changed paths are within approved write scope (fast wall).\");\n\t}\n\n\tconst limitsCode = buildLimitsCode(input.previewOnly);\n\tconst limits: VerdictLimits = {\n\t\trequiresHumanReview: userVerdict === \"BLOCKED\" || userVerdict === \"INCONCLUSIVE\",\n\t\tpreviewOnly: input.previewOnly,\n\t\tcode: limitsCode,\n\t};\n\n\tconst canApply =\n\t\tuserVerdict === \"PASS\" &&\n\t\t!input.policyFlags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING) &&\n\t\t!input.policyFlags.includes(POLICY_FLAG.CANDIDATE_LEAK_SUSPECT) &&\n\t\t!input.policyFlags.includes(POLICY_FLAG.SECRET_SUSPECT) &&\n\t\t(input.adjudication === undefined || input.adjudication.verdict === \"CONFIRMED\");\n\n\tconst shouldSubmit = userVerdict !== \"BLOCKED\" && !input.policyFlags.includes(POLICY_FLAG.NON_NEGOTIABLE_BLOCKING);\n\n\tconst disclaimer = buildDisclaimer(input.previewOnly, limitsCode);\n\n\tconst verdictCard: VerdictCard = {\n\t\tschemaVersion: B2C_VERDICT_SCHEMA_VERSION,\n\t\tverdict: userVerdict,\n\t\trisk: riskFromUserVerdict(userVerdict, input.policyFlags),\n\t\tlimits,\n\t\tpassed_checks,\n\t\tblocked_reasons: [...new Set(blocked_reasons)],\n\t\tnext_actions: buildNextActions(userVerdict, input.previewOnly, canApply),\n\t\trepairHints: input.repairHints !== undefined && input.repairHints.length > 0 ? input.repairHints : undefined,\n\t\tpacketId: input.packetId,\n\t\tkind: input.kind,\n\t};\n\n\tconst receipt: VerificationReceipt = {\n\t\tschemaVersion: B2C_VERDICT_SCHEMA_VERSION,\n\t\tevaluatedAt,\n\t\tkind: input.kind,\n\t\tpacketId: input.packetId,\n\t\tdispatchRecordId: input.dispatchRecordId,\n\t\trunIds: input.runIds,\n\t\tpreviewOnly: input.previewOnly,\n\t\tcanApply,\n\t\tshouldSubmit,\n\t\tpolicyFlags: [...input.policyFlags],\n\t\tadjudicationVerdict: input.adjudication?.verdict,\n\t\tadjudicationReasonCode: input.adjudication?.reason_code,\n\t\tdiffPaths: input.diffPaths,\n\t\tdisclaimer,\n\t};\n\n\treturn { verdictCard, receipt };\n}\n"]}

package/dist/b2c-verdict.d.ts

@@ -0,0 +1,66 @@
+/**
+ * B2C Correctness Wall — user-facing verdict vocabulary (schemaVersion 1).
+ */
+import type { DeepWallRunnerEvidence, DeepWallStatus } from "./deep-wall.ts";
+import type { SignedWallReceipt } from "./receipt-signature.ts";
+import type { VerificationDigest } from "./signed-receipt.ts";
+export declare const B2C_VERDICT_SCHEMA_VERSION: 1;
+/** End-user verdict (distinct from OA {@link VerdictState}). */
+export type UserVerdict = "PASS" | "ADVISORY" | "INCONCLUSIVE" | "BLOCKED";
+export type UserRiskLevel = "low" | "medium" | "high" | "critical";
+/** Structured next-step for B2C verdict cards. */
+export type VerdictNextAction = "Apply" | "Deep Check" | "Regenerate";
+export interface VerdictLimits {
+    /** When true, automated apply/submit must not proceed without human override. */
+    requiresHumanReview: boolean;
+    /** Preview-only evaluation; no side effects implied. */
+    previewOnly: boolean;
+    /** Machine-readable limit code (e.g. batch-1 no docker runner). */
+    code?: string;
+}
+export interface VerdictCard {
+    schemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;
+    verdict: UserVerdict;
+    risk: UserRiskLevel;
+    limits: VerdictLimits;
+    /** Checks that passed (human-readable). */
+    passed_checks: string[];
+    /** Reasons submission or apply is blocked (human-readable). */
+    blocked_reasons: string[];
+    /** Suggested follow-ups for the user or operator. */
+    next_actions: VerdictNextAction[];
+    /** Optional operator-facing repair guidance. */
+    repairHints?: string[];
+    packetId?: string;
+    kind: string;
+}
+export interface VerificationReceipt {
+    schemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;
+    evaluatedAt: string;
+    kind: string;
+    packetId?: string;
+    dispatchRecordId?: string;
+    runIds: string[];
+    previewOnly: boolean;
+    /** Machine may apply the proposed change (distinct from shouldSubmit). */
+    canApply: boolean;
+    /** Packet may be submitted to downstream workflow. */
+    shouldSubmit: boolean;
+    policyFlags: string[];
+    adjudicationVerdict?: string;
+    adjudicationReasonCode?: string;
+    diffPaths: string[];
+    /** Human-readable limits / preview disclaimer. */
+    disclaimer?: string;
+    /** Patch/evidence fingerprints (no secret payload). */
+    verificationDigest?: VerificationDigest;
+    /** Correctness wall batch id for this evaluation receipt. */
+    wallVersion?: string;
+    /** Deep wall phase when {@link EvaluateCorrectnessWallParams.deepWall} was requested. */
+    deepWallStatus?: DeepWallStatus;
+    /** Structured evidence when deep wall reached `completed` (Wave 4-C3b). */
+    deepWallEvidence?: DeepWallRunnerEvidence;
+    /** Optional HMAC attestation when signing secret configured (Wave 3). */
+    signedReceipt?: SignedWallReceipt;
+}
+//# sourceMappingURL=b2c-verdict.d.ts.map

package/dist/b2c-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"b2c-verdict.d.ts","sourceRoot":"","sources":["../src/b2c-verdict.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,eAAO,MAAM,0BAA0B,GAAa,CAAC;AAErD,gEAAgE;AAChE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;AAE3E,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAEnE,kDAAkD;AAClD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,YAAY,GAAG,YAAY,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC7B,iFAAiF;IACjF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,wDAAwD;IACxD,WAAW,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC3B,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,+DAA+D;IAC/D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,qDAAqD;IACrD,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;IAClB,sDAAsD;IACtD,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,yEAAyE;IACzE,aAAa,CAAC,EAAE,iBAAiB,CAAC;CAClC","sourcesContent":["/**\n * B2C Correctness Wall — user-facing verdict vocabulary (schemaVersion 1).\n */\n\nimport type { DeepWallRunnerEvidence, DeepWallStatus } from \"./deep-wall.ts\";\nimport type { SignedWallReceipt } from \"./receipt-signature.ts\";\nimport type { VerificationDigest } from \"./signed-receipt.ts\";\n\nexport const B2C_VERDICT_SCHEMA_VERSION = 1 as const;\n\n/** End-user verdict (distinct from OA {@link VerdictState}). */\nexport type UserVerdict = \"PASS\" | \"ADVISORY\" | \"INCONCLUSIVE\" | \"BLOCKED\";\n\nexport type UserRiskLevel = \"low\" | \"medium\" | \"high\" | \"critical\";\n\n/** Structured next-step for B2C verdict cards. */\nexport type VerdictNextAction = \"Apply\" | \"Deep Check\" | \"Regenerate\";\n\nexport interface VerdictLimits {\n\t/** When true, automated apply/submit must not proceed without human override. */\n\trequiresHumanReview: boolean;\n\t/** Preview-only evaluation; no side effects implied. */\n\tpreviewOnly: boolean;\n\t/** Machine-readable limit code (e.g. batch-1 no docker runner). */\n\tcode?: string;\n}\n\nexport interface VerdictCard {\n\tschemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;\n\tverdict: UserVerdict;\n\trisk: UserRiskLevel;\n\tlimits: VerdictLimits;\n\t/** Checks that passed (human-readable). */\n\tpassed_checks: string[];\n\t/** Reasons submission or apply is blocked (human-readable). */\n\tblocked_reasons: string[];\n\t/** Suggested follow-ups for the user or operator. */\n\tnext_actions: VerdictNextAction[];\n\t/** Optional operator-facing repair guidance. */\n\trepairHints?: string[];\n\tpacketId?: string;\n\tkind: string;\n}\n\nexport interface VerificationReceipt {\n\tschemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;\n\tevaluatedAt: string;\n\tkind: string;\n\tpacketId?: string;\n\tdispatchRecordId?: string;\n\trunIds: string[];\n\tpreviewOnly: boolean;\n\t/** Machine may apply the proposed change (distinct from shouldSubmit). */\n\tcanApply: boolean;\n\t/** Packet may be submitted to downstream workflow. */\n\tshouldSubmit: boolean;\n\tpolicyFlags: string[];\n\tadjudicationVerdict?: string;\n\tadjudicationReasonCode?: string;\n\tdiffPaths: string[];\n\t/** Human-readable limits / preview disclaimer. */\n\tdisclaimer?: string;\n\t/** Patch/evidence fingerprints (no secret payload). */\n\tverificationDigest?: VerificationDigest;\n\t/** Correctness wall batch id for this evaluation receipt. */\n\twallVersion?: string;\n\t/** Deep wall phase when {@link EvaluateCorrectnessWallParams.deepWall} was requested. */\n\tdeepWallStatus?: DeepWallStatus;\n\t/** Structured evidence when deep wall reached `completed` (Wave 4-C3b). */\n\tdeepWallEvidence?: DeepWallRunnerEvidence;\n\t/** Optional HMAC attestation when signing secret configured (Wave 3). */\n\tsignedReceipt?: SignedWallReceipt;\n}\n"]}

package/dist/b2c-verdict.js

@@ -0,0 +1,5 @@
+/**
+ * B2C Correctness Wall — user-facing verdict vocabulary (schemaVersion 1).
+ */
+export const B2C_VERDICT_SCHEMA_VERSION = 1;
+//# sourceMappingURL=b2c-verdict.js.map

package/dist/b2c-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"b2c-verdict.js","sourceRoot":"","sources":["../src/b2c-verdict.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC","sourcesContent":["/**\n * B2C Correctness Wall — user-facing verdict vocabulary (schemaVersion 1).\n */\n\nimport type { DeepWallRunnerEvidence, DeepWallStatus } from \"./deep-wall.ts\";\nimport type { SignedWallReceipt } from \"./receipt-signature.ts\";\nimport type { VerificationDigest } from \"./signed-receipt.ts\";\n\nexport const B2C_VERDICT_SCHEMA_VERSION = 1 as const;\n\n/** End-user verdict (distinct from OA {@link VerdictState}). */\nexport type UserVerdict = \"PASS\" | \"ADVISORY\" | \"INCONCLUSIVE\" | \"BLOCKED\";\n\nexport type UserRiskLevel = \"low\" | \"medium\" | \"high\" | \"critical\";\n\n/** Structured next-step for B2C verdict cards. */\nexport type VerdictNextAction = \"Apply\" | \"Deep Check\" | \"Regenerate\";\n\nexport interface VerdictLimits {\n\t/** When true, automated apply/submit must not proceed without human override. */\n\trequiresHumanReview: boolean;\n\t/** Preview-only evaluation; no side effects implied. */\n\tpreviewOnly: boolean;\n\t/** Machine-readable limit code (e.g. batch-1 no docker runner). */\n\tcode?: string;\n}\n\nexport interface VerdictCard {\n\tschemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;\n\tverdict: UserVerdict;\n\trisk: UserRiskLevel;\n\tlimits: VerdictLimits;\n\t/** Checks that passed (human-readable). */\n\tpassed_checks: string[];\n\t/** Reasons submission or apply is blocked (human-readable). */\n\tblocked_reasons: string[];\n\t/** Suggested follow-ups for the user or operator. */\n\tnext_actions: VerdictNextAction[];\n\t/** Optional operator-facing repair guidance. */\n\trepairHints?: string[];\n\tpacketId?: string;\n\tkind: string;\n}\n\nexport interface VerificationReceipt {\n\tschemaVersion: typeof B2C_VERDICT_SCHEMA_VERSION;\n\tevaluatedAt: string;\n\tkind: string;\n\tpacketId?: string;\n\tdispatchRecordId?: string;\n\trunIds: string[];\n\tpreviewOnly: boolean;\n\t/** Machine may apply the proposed change (distinct from shouldSubmit). */\n\tcanApply: boolean;\n\t/** Packet may be submitted to downstream workflow. */\n\tshouldSubmit: boolean;\n\tpolicyFlags: string[];\n\tadjudicationVerdict?: string;\n\tadjudicationReasonCode?: string;\n\tdiffPaths: string[];\n\t/** Human-readable limits / preview disclaimer. */\n\tdisclaimer?: string;\n\t/** Patch/evidence fingerprints (no secret payload). */\n\tverificationDigest?: VerificationDigest;\n\t/** Correctness wall batch id for this evaluation receipt. */\n\twallVersion?: string;\n\t/** Deep wall phase when {@link EvaluateCorrectnessWallParams.deepWall} was requested. */\n\tdeepWallStatus?: DeepWallStatus;\n\t/** Structured evidence when deep wall reached `completed` (Wave 4-C3b). */\n\tdeepWallEvidence?: DeepWallRunnerEvidence;\n\t/** Optional HMAC attestation when signing secret configured (Wave 3). */\n\tsignedReceipt?: SignedWallReceipt;\n}\n"]}

package/dist/deep-wall.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Deep Correctness Wall — stub default, plus evidence-gated runner injection (Wave 4-C3b).
+ *
+ * `completed` is NEVER emitted unless a caller injects a `runner`, sets
+ * `allowCompletion`, AND the runner returns structured evidence. Without all
+ * three, the result is downgraded to `unavailable`. This is a candidate-patch-leak
+ * guard: deep completion must be evidence-backed, never asserted.
+ */
+import { BATCH1_NO_DOCKER_RUNNER } from "./b2c-mapper.ts";
+export type DeepWallStatus = "not_requested" | "unavailable" | "completed";
+export type DeepWallPhase = "stub" | "docker";
+export declare const DEEP_WALL_UNAVAILABLE: "DEEP_WALL_UNAVAILABLE";
+/** Policy flag when deep wall would report completed without a wired runner (Wave 4 gate). */
+export declare const DEEP_RUNNER_NOT_WIRED: "DEEP_RUNNER_NOT_WIRED";
+/** Policy flag when an injected runner returned `completed` without valid evidence (downgraded). */
+export declare const DEEP_RUNNER_EVIDENCE_MISSING: "DEEP_RUNNER_EVIDENCE_MISSING";
+/** Policy flag when an injected runner threw (caught, treated as unavailable). */
+export declare const DEEP_RUNNER_ERROR: "DEEP_RUNNER_ERROR";
+/** Structured evidence a runner MUST attach to a `completed` result. */
+export interface DeepWallRunnerEvidence {
+    /** Content digest of what was checked (e.g. sha256 of replayed patch + base). */
+    digest: string;
+    /** The exact command/provenance the runner executed. */
+    command: string;
+    /** Runner exit code; `completed` requires `0` by runner contract. */
+    exitCode: number;
+}
+export interface DeepWallRunnerResult {
+    status: "completed" | "unavailable";
+    evidence?: DeepWallRunnerEvidence;
+    message: string;
+}
+export type DeepWallRunnerFn = (params: RunDeepWallStubParams) => Promise<DeepWallRunnerResult>;
+export interface RunDeepWallStubParams {
+    kind: string;
+    runIds?: string[];
+    packetId?: string;
+    /** Wave 3: `docker` records intent; runner still unavailable until hermetic exec ships. */
+    phase?: DeepWallPhase;
+    /** Wave 4-C3b: injected hermetic runner. Completion is gated by `allowCompletion` + evidence. */
+    runner?: DeepWallRunnerFn;
+    /** Must be `true` for a runner to report `completed`; default `false` (stub path). */
+    allowCompletion?: boolean;
+}
+export interface DeepWallStubResult {
+    status: Extract<DeepWallStatus, "unavailable">;
+    limits: readonly [typeof BATCH1_NO_DOCKER_RUNNER];
+    message: string;
+}
+export interface DeepWallResult {
+    status: DeepWallStatus;
+    message: string;
+    evidence?: DeepWallRunnerEvidence;
+    limits?: readonly string[];
+    /** Additional policy flags surfaced by the runner path (e.g. evidence-missing, runner-error). */
+    runnerFlags?: readonly string[];
+}
+/** Resolve deep-wall phase from env `OMK_WALL_DEEP_PHASE` (stub | docker). */
+export declare function resolveDeepWallPhaseFromEnv(): DeepWallPhase;
+/**
+ * Hermetic deep runner is not shipped by default; `completed` is only reachable
+ * via an injected runner through {@link runDeepWall}, and even then requires evidence.
+ */
+export declare function isDeepRunnerCompletionAllowed(): boolean;
+/**
+ * Stub deep wall: always reports unavailable with batch-1 limit code (no docker exec).
+ */
+export declare function runDeepWallStub(params: RunDeepWallStubParams): DeepWallStubResult;
+/**
+ * Evidence-gated deep wall entry point.
+ *
+ * - No runner, or `allowCompletion !== true` → stub unavailable path.
+ * - Runner present + `allowCompletion` → runner is called in a try/catch.
+ *   - `completed` + valid evidence → `completed` (evidence attached).
+ *   - `completed` without valid evidence → downgraded to `unavailable`
+ *     with `DEEP_RUNNER_EVIDENCE_MISSING` (candidate-patch-leak guard).
+ *   - runner throws → `unavailable` with `DEEP_RUNNER_ERROR`.
+ */
+export declare function runDeepWall(params: RunDeepWallStubParams): Promise<DeepWallResult>;
+//# sourceMappingURL=deep-wall.d.ts.map

package/dist/deep-wall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-wall.d.ts","sourceRoot":"","sources":["../src/deep-wall.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,aAAa,GAAG,WAAW,CAAC;AAE3E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9C,eAAO,MAAM,qBAAqB,yBAAmC,CAAC;AAEtE,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,yBAAmC,CAAC;AAEtE,oGAAoG;AACpG,eAAO,MAAM,4BAA4B,gCAA0C,CAAC;AAEpF,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,qBAA+B,CAAC;AAE9D,wEAAwE;AACxE,MAAM,WAAW,sBAAsB;IACtC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC;IACpC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,qBAAqB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEhG,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,iGAAiG;IACjG,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,sFAAsF;IACtF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAC/C,MAAM,EAAE,SAAS,CAAC,OAAO,uBAAuB,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,iGAAiG;IACjG,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAqBD,8EAA8E;AAC9E,wBAAgB,2BAA2B,IAAI,aAAa,CAI3D;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,kBAAkB,CAQjF;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CA6BxF","sourcesContent":["/**\n * Deep Correctness Wall — stub default, plus evidence-gated runner injection (Wave 4-C3b).\n *\n * `completed` is NEVER emitted unless a caller injects a `runner`, sets\n * `allowCompletion`, AND the runner returns structured evidence. Without all\n * three, the result is downgraded to `unavailable`. This is a candidate-patch-leak\n * guard: deep completion must be evidence-backed, never asserted.\n */\n\nimport { BATCH1_NO_DOCKER_RUNNER } from \"./b2c-mapper.ts\";\n\nexport type DeepWallStatus = \"not_requested\" | \"unavailable\" | \"completed\";\n\nexport type DeepWallPhase = \"stub\" | \"docker\";\n\nexport const DEEP_WALL_UNAVAILABLE = \"DEEP_WALL_UNAVAILABLE\" as const;\n\n/** Policy flag when deep wall would report completed without a wired runner (Wave 4 gate). */\nexport const DEEP_RUNNER_NOT_WIRED = \"DEEP_RUNNER_NOT_WIRED\" as const;\n\n/** Policy flag when an injected runner returned `completed` without valid evidence (downgraded). */\nexport const DEEP_RUNNER_EVIDENCE_MISSING = \"DEEP_RUNNER_EVIDENCE_MISSING\" as const;\n\n/** Policy flag when an injected runner threw (caught, treated as unavailable). */\nexport const DEEP_RUNNER_ERROR = \"DEEP_RUNNER_ERROR\" as const;\n\n/** Structured evidence a runner MUST attach to a `completed` result. */\nexport interface DeepWallRunnerEvidence {\n\t/** Content digest of what was checked (e.g. sha256 of replayed patch + base). */\n\tdigest: string;\n\t/** The exact command/provenance the runner executed. */\n\tcommand: string;\n\t/** Runner exit code; `completed` requires `0` by runner contract. */\n\texitCode: number;\n}\n\nexport interface DeepWallRunnerResult {\n\tstatus: \"completed\" | \"unavailable\";\n\tevidence?: DeepWallRunnerEvidence;\n\tmessage: string;\n}\n\nexport type DeepWallRunnerFn = (params: RunDeepWallStubParams) => Promise<DeepWallRunnerResult>;\n\nexport interface RunDeepWallStubParams {\n\tkind: string;\n\trunIds?: string[];\n\tpacketId?: string;\n\t/** Wave 3: `docker` records intent; runner still unavailable until hermetic exec ships. */\n\tphase?: DeepWallPhase;\n\t/** Wave 4-C3b: injected hermetic runner. Completion is gated by `allowCompletion` + evidence. */\n\trunner?: DeepWallRunnerFn;\n\t/** Must be `true` for a runner to report `completed`; default `false` (stub path). */\n\tallowCompletion?: boolean;\n}\n\nexport interface DeepWallStubResult {\n\tstatus: Extract<DeepWallStatus, \"unavailable\">;\n\tlimits: readonly [typeof BATCH1_NO_DOCKER_RUNNER];\n\tmessage: string;\n}\n\nexport interface DeepWallResult {\n\tstatus: DeepWallStatus;\n\tmessage: string;\n\tevidence?: DeepWallRunnerEvidence;\n\tlimits?: readonly string[];\n\t/** Additional policy flags surfaced by the runner path (e.g. evidence-missing, runner-error). */\n\trunnerFlags?: readonly string[];\n}\n\nconst DEFAULT_DEEP_WALL_MESSAGE =\n\t\"Deep correctness check is not available in this environment (no docker runner). Use preview fast wall or run checks locally.\";\n\nconst DOCKER_PHASE_MESSAGE =\n\t\"Deep wall docker phase requested but hermetic runner is not wired yet; fast wall and local CI remain authoritative.\";\n\nfunction hasValidEvidence(e: unknown): e is DeepWallRunnerEvidence {\n\tif (typeof e !== \"object\" || e === null) return false;\n\tconst v = e as DeepWallRunnerEvidence;\n\treturn (\n\t\ttypeof v.digest === \"string\" &&\n\t\tv.digest.length > 0 &&\n\t\ttypeof v.command === \"string\" &&\n\t\tv.command.length > 0 &&\n\t\ttypeof v.exitCode === \"number\" &&\n\t\tNumber.isFinite(v.exitCode)\n\t);\n}\n\n/** Resolve deep-wall phase from env `OMK_WALL_DEEP_PHASE` (stub | docker). */\nexport function resolveDeepWallPhaseFromEnv(): DeepWallPhase {\n\tconst raw = process.env.OMK_WALL_DEEP_PHASE?.trim().toLowerCase();\n\tif (raw === \"docker\") return \"docker\";\n\treturn \"stub\";\n}\n\n/**\n * Hermetic deep runner is not shipped by default; `completed` is only reachable\n * via an injected runner through {@link runDeepWall}, and even then requires evidence.\n */\nexport function isDeepRunnerCompletionAllowed(): boolean {\n\treturn false;\n}\n\n/**\n * Stub deep wall: always reports unavailable with batch-1 limit code (no docker exec).\n */\nexport function runDeepWallStub(params: RunDeepWallStubParams): DeepWallStubResult {\n\tconst phase = params.phase ?? resolveDeepWallPhaseFromEnv();\n\tconst message = phase === \"docker\" ? DOCKER_PHASE_MESSAGE : DEFAULT_DEEP_WALL_MESSAGE;\n\treturn {\n\t\tstatus: \"unavailable\",\n\t\tlimits: [BATCH1_NO_DOCKER_RUNNER],\n\t\tmessage,\n\t};\n}\n\n/**\n * Evidence-gated deep wall entry point.\n *\n * - No runner, or `allowCompletion !== true` → stub unavailable path.\n * - Runner present + `allowCompletion` → runner is called in a try/catch.\n *   - `completed` + valid evidence → `completed` (evidence attached).\n *   - `completed` without valid evidence → downgraded to `unavailable`\n *     with `DEEP_RUNNER_EVIDENCE_MISSING` (candidate-patch-leak guard).\n *   - runner throws → `unavailable` with `DEEP_RUNNER_ERROR`.\n */\nexport async function runDeepWall(params: RunDeepWallStubParams): Promise<DeepWallResult> {\n\tif (params.runner !== undefined && params.allowCompletion === true) {\n\t\ttry {\n\t\t\tconst result = await params.runner(params);\n\t\t\tif (result.status === \"completed\") {\n\t\t\t\tif (hasValidEvidence(result.evidence)) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tstatus: \"completed\",\n\t\t\t\t\t\tevidence: result.evidence,\n\t\t\t\t\t\tmessage: result.message,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"unavailable\",\n\t\t\t\t\tmessage: \"Deep runner reported completed without valid evidence; downgraded to unavailable.\",\n\t\t\t\t\trunnerFlags: [DEEP_RUNNER_EVIDENCE_MISSING],\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn { status: \"unavailable\", message: result.message };\n\t\t} catch (err) {\n\t\t\treturn {\n\t\t\t\tstatus: \"unavailable\",\n\t\t\t\tmessage: `Deep runner threw: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\trunnerFlags: [DEEP_RUNNER_ERROR],\n\t\t\t};\n\t\t}\n\t}\n\tconst stub = runDeepWallStub(params);\n\treturn { status: stub.status, message: stub.message, limits: stub.limits };\n}\n"]}

package/dist/deep-wall.js

@@ -0,0 +1,97 @@
+/**
+ * Deep Correctness Wall — stub default, plus evidence-gated runner injection (Wave 4-C3b).
+ *
+ * `completed` is NEVER emitted unless a caller injects a `runner`, sets
+ * `allowCompletion`, AND the runner returns structured evidence. Without all
+ * three, the result is downgraded to `unavailable`. This is a candidate-patch-leak
+ * guard: deep completion must be evidence-backed, never asserted.
+ */
+import { BATCH1_NO_DOCKER_RUNNER } from "./b2c-mapper.js";
+export const DEEP_WALL_UNAVAILABLE = "DEEP_WALL_UNAVAILABLE";
+/** Policy flag when deep wall would report completed without a wired runner (Wave 4 gate). */
+export const DEEP_RUNNER_NOT_WIRED = "DEEP_RUNNER_NOT_WIRED";
+/** Policy flag when an injected runner returned `completed` without valid evidence (downgraded). */
+export const DEEP_RUNNER_EVIDENCE_MISSING = "DEEP_RUNNER_EVIDENCE_MISSING";
+/** Policy flag when an injected runner threw (caught, treated as unavailable). */
+export const DEEP_RUNNER_ERROR = "DEEP_RUNNER_ERROR";
+const DEFAULT_DEEP_WALL_MESSAGE = "Deep correctness check is not available in this environment (no docker runner). Use preview fast wall or run checks locally.";
+const DOCKER_PHASE_MESSAGE = "Deep wall docker phase requested but hermetic runner is not wired yet; fast wall and local CI remain authoritative.";
+function hasValidEvidence(e) {
+    if (typeof e !== "object" || e === null)
+        return false;
+    const v = e;
+    return (typeof v.digest === "string" &&
+        v.digest.length > 0 &&
+        typeof v.command === "string" &&
+        v.command.length > 0 &&
+        typeof v.exitCode === "number" &&
+        Number.isFinite(v.exitCode));
+}
+/** Resolve deep-wall phase from env `OMK_WALL_DEEP_PHASE` (stub | docker). */
+export function resolveDeepWallPhaseFromEnv() {
+    const raw = process.env.OMK_WALL_DEEP_PHASE?.trim().toLowerCase();
+    if (raw === "docker")
+        return "docker";
+    return "stub";
+}
+/**
+ * Hermetic deep runner is not shipped by default; `completed` is only reachable
+ * via an injected runner through {@link runDeepWall}, and even then requires evidence.
+ */
+export function isDeepRunnerCompletionAllowed() {
+    return false;
+}
+/**
+ * Stub deep wall: always reports unavailable with batch-1 limit code (no docker exec).
+ */
+export function runDeepWallStub(params) {
+    const phase = params.phase ?? resolveDeepWallPhaseFromEnv();
+    const message = phase === "docker" ? DOCKER_PHASE_MESSAGE : DEFAULT_DEEP_WALL_MESSAGE;
+    return {
+        status: "unavailable",
+        limits: [BATCH1_NO_DOCKER_RUNNER],
+        message,
+    };
+}
+/**
+ * Evidence-gated deep wall entry point.
+ *
+ * - No runner, or `allowCompletion !== true` → stub unavailable path.
+ * - Runner present + `allowCompletion` → runner is called in a try/catch.
+ *   - `completed` + valid evidence → `completed` (evidence attached).
+ *   - `completed` without valid evidence → downgraded to `unavailable`
+ *     with `DEEP_RUNNER_EVIDENCE_MISSING` (candidate-patch-leak guard).
+ *   - runner throws → `unavailable` with `DEEP_RUNNER_ERROR`.
+ */
+export async function runDeepWall(params) {
+    if (params.runner !== undefined && params.allowCompletion === true) {
+        try {
+            const result = await params.runner(params);
+            if (result.status === "completed") {
+                if (hasValidEvidence(result.evidence)) {
+                    return {
+                        status: "completed",
+                        evidence: result.evidence,
+                        message: result.message,
+                    };
+                }
+                return {
+                    status: "unavailable",
+                    message: "Deep runner reported completed without valid evidence; downgraded to unavailable.",
+                    runnerFlags: [DEEP_RUNNER_EVIDENCE_MISSING],
+                };
+            }
+            return { status: "unavailable", message: result.message };
+        }
+        catch (err) {
+            return {
+                status: "unavailable",
+                message: `Deep runner threw: ${err instanceof Error ? err.message : String(err)}`,
+                runnerFlags: [DEEP_RUNNER_ERROR],
+            };
+        }
+    }
+    const stub = runDeepWallStub(params);
+    return { status: stub.status, message: stub.message, limits: stub.limits };
+}
+//# sourceMappingURL=deep-wall.js.map

package/dist/deep-wall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-wall.js","sourceRoot":"","sources":["../src/deep-wall.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAM1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAgC,CAAC;AAEtE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAgC,CAAC;AAEtE,oGAAoG;AACpG,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAAuC,CAAC;AAEpF,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAA4B,CAAC;AA+C9D,MAAM,yBAAyB,GAC9B,8HAA8H,CAAC;AAEhI,MAAM,oBAAoB,GACzB,qHAAqH,CAAC;AAEvH,SAAS,gBAAgB,CAAC,CAAU,EAA+B;IAClE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA2B,CAAC;IACtC,OAAO,CACN,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACpB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC3B,CAAC;AAAA,CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,2BAA2B,GAAkB;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,MAAM,CAAC;AAAA,CACd;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,GAAY;IACxD,OAAO,KAAK,CAAC;AAAA,CACb;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA6B,EAAsB;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,2BAA2B,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACtF,OAAO;QACN,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,CAAC,uBAAuB,CAAC;QACjC,OAAO;KACP,CAAC;AAAA,CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAA6B,EAA2B;IACzF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACpE,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnC,IAAI,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvC,OAAO;wBACN,MAAM,EAAE,WAAW;wBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;qBACvB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACN,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,mFAAmF;oBAC5F,WAAW,EAAE,CAAC,4BAA4B,CAAC;iBAC3C,CAAC;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACjF,WAAW,EAAE,CAAC,iBAAiB,CAAC;aAChC,CAAC;QACH,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAAA,CAC3E","sourcesContent":["/**\n * Deep Correctness Wall — stub default, plus evidence-gated runner injection (Wave 4-C3b).\n *\n * `completed` is NEVER emitted unless a caller injects a `runner`, sets\n * `allowCompletion`, AND the runner returns structured evidence. Without all\n * three, the result is downgraded to `unavailable`. This is a candidate-patch-leak\n * guard: deep completion must be evidence-backed, never asserted.\n */\n\nimport { BATCH1_NO_DOCKER_RUNNER } from \"./b2c-mapper.ts\";\n\nexport type DeepWallStatus = \"not_requested\" | \"unavailable\" | \"completed\";\n\nexport type DeepWallPhase = \"stub\" | \"docker\";\n\nexport const DEEP_WALL_UNAVAILABLE = \"DEEP_WALL_UNAVAILABLE\" as const;\n\n/** Policy flag when deep wall would report completed without a wired runner (Wave 4 gate). */\nexport const DEEP_RUNNER_NOT_WIRED = \"DEEP_RUNNER_NOT_WIRED\" as const;\n\n/** Policy flag when an injected runner returned `completed` without valid evidence (downgraded). */\nexport const DEEP_RUNNER_EVIDENCE_MISSING = \"DEEP_RUNNER_EVIDENCE_MISSING\" as const;\n\n/** Policy flag when an injected runner threw (caught, treated as unavailable). */\nexport const DEEP_RUNNER_ERROR = \"DEEP_RUNNER_ERROR\" as const;\n\n/** Structured evidence a runner MUST attach to a `completed` result. */\nexport interface DeepWallRunnerEvidence {\n\t/** Content digest of what was checked (e.g. sha256 of replayed patch + base). */\n\tdigest: string;\n\t/** The exact command/provenance the runner executed. */\n\tcommand: string;\n\t/** Runner exit code; `completed` requires `0` by runner contract. */\n\texitCode: number;\n}\n\nexport interface DeepWallRunnerResult {\n\tstatus: \"completed\" | \"unavailable\";\n\tevidence?: DeepWallRunnerEvidence;\n\tmessage: string;\n}\n\nexport type DeepWallRunnerFn = (params: RunDeepWallStubParams) => Promise<DeepWallRunnerResult>;\n\nexport interface RunDeepWallStubParams {\n\tkind: string;\n\trunIds?: string[];\n\tpacketId?: string;\n\t/** Wave 3: `docker` records intent; runner still unavailable until hermetic exec ships. */\n\tphase?: DeepWallPhase;\n\t/** Wave 4-C3b: injected hermetic runner. Completion is gated by `allowCompletion` + evidence. */\n\trunner?: DeepWallRunnerFn;\n\t/** Must be `true` for a runner to report `completed`; default `false` (stub path). */\n\tallowCompletion?: boolean;\n}\n\nexport interface DeepWallStubResult {\n\tstatus: Extract<DeepWallStatus, \"unavailable\">;\n\tlimits: readonly [typeof BATCH1_NO_DOCKER_RUNNER];\n\tmessage: string;\n}\n\nexport interface DeepWallResult {\n\tstatus: DeepWallStatus;\n\tmessage: string;\n\tevidence?: DeepWallRunnerEvidence;\n\tlimits?: readonly string[];\n\t/** Additional policy flags surfaced by the runner path (e.g. evidence-missing, runner-error). */\n\trunnerFlags?: readonly string[];\n}\n\nconst DEFAULT_DEEP_WALL_MESSAGE =\n\t\"Deep correctness check is not available in this environment (no docker runner). Use preview fast wall or run checks locally.\";\n\nconst DOCKER_PHASE_MESSAGE =\n\t\"Deep wall docker phase requested but hermetic runner is not wired yet; fast wall and local CI remain authoritative.\";\n\nfunction hasValidEvidence(e: unknown): e is DeepWallRunnerEvidence {\n\tif (typeof e !== \"object\" || e === null) return false;\n\tconst v = e as DeepWallRunnerEvidence;\n\treturn (\n\t\ttypeof v.digest === \"string\" &&\n\t\tv.digest.length > 0 &&\n\t\ttypeof v.command === \"string\" &&\n\t\tv.command.length > 0 &&\n\t\ttypeof v.exitCode === \"number\" &&\n\t\tNumber.isFinite(v.exitCode)\n\t);\n}\n\n/** Resolve deep-wall phase from env `OMK_WALL_DEEP_PHASE` (stub | docker). */\nexport function resolveDeepWallPhaseFromEnv(): DeepWallPhase {\n\tconst raw = process.env.OMK_WALL_DEEP_PHASE?.trim().toLowerCase();\n\tif (raw === \"docker\") return \"docker\";\n\treturn \"stub\";\n}\n\n/**\n * Hermetic deep runner is not shipped by default; `completed` is only reachable\n * via an injected runner through {@link runDeepWall}, and even then requires evidence.\n */\nexport function isDeepRunnerCompletionAllowed(): boolean {\n\treturn false;\n}\n\n/**\n * Stub deep wall: always reports unavailable with batch-1 limit code (no docker exec).\n */\nexport function runDeepWallStub(params: RunDeepWallStubParams): DeepWallStubResult {\n\tconst phase = params.phase ?? resolveDeepWallPhaseFromEnv();\n\tconst message = phase === \"docker\" ? DOCKER_PHASE_MESSAGE : DEFAULT_DEEP_WALL_MESSAGE;\n\treturn {\n\t\tstatus: \"unavailable\",\n\t\tlimits: [BATCH1_NO_DOCKER_RUNNER],\n\t\tmessage,\n\t};\n}\n\n/**\n * Evidence-gated deep wall entry point.\n *\n * - No runner, or `allowCompletion !== true` → stub unavailable path.\n * - Runner present + `allowCompletion` → runner is called in a try/catch.\n *   - `completed` + valid evidence → `completed` (evidence attached).\n *   - `completed` without valid evidence → downgraded to `unavailable`\n *     with `DEEP_RUNNER_EVIDENCE_MISSING` (candidate-patch-leak guard).\n *   - runner throws → `unavailable` with `DEEP_RUNNER_ERROR`.\n */\nexport async function runDeepWall(params: RunDeepWallStubParams): Promise<DeepWallResult> {\n\tif (params.runner !== undefined && params.allowCompletion === true) {\n\t\ttry {\n\t\t\tconst result = await params.runner(params);\n\t\t\tif (result.status === \"completed\") {\n\t\t\t\tif (hasValidEvidence(result.evidence)) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tstatus: \"completed\",\n\t\t\t\t\t\tevidence: result.evidence,\n\t\t\t\t\t\tmessage: result.message,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tstatus: \"unavailable\",\n\t\t\t\t\tmessage: \"Deep runner reported completed without valid evidence; downgraded to unavailable.\",\n\t\t\t\t\trunnerFlags: [DEEP_RUNNER_EVIDENCE_MISSING],\n\t\t\t\t};\n\t\t\t}\n\t\t\treturn { status: \"unavailable\", message: result.message };\n\t\t} catch (err) {\n\t\t\treturn {\n\t\t\t\tstatus: \"unavailable\",\n\t\t\t\tmessage: `Deep runner threw: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\t\trunnerFlags: [DEEP_RUNNER_ERROR],\n\t\t\t};\n\t\t}\n\t}\n\tconst stub = runDeepWallStub(params);\n\treturn { status: stub.status, message: stub.message, limits: stub.limits };\n}\n"]}

package/dist/evaluate-correctness-wall.d.ts

@@ -0,0 +1,35 @@
+/**
+ * B2C Correctness Wall orchestration — fast wall + optional OA adjudication.
+ */
+import type { AdaptOrchClient } from "./adaptorch-client.ts";
+import { type VerifierRegistryEntry } from "./adjudicator-registry.ts";
+import type { VerdictCard, VerificationReceipt } from "./b2c-verdict.ts";
+import { type DeepWallRunnerFn } from "./deep-wall.ts";
+export interface EvaluateCorrectnessWallParams {
+    kind: string;
+    runIds?: string[];
+    dispatchRecordId?: string;
+    approvedWriteScope?: string[];
+    previewOnly?: boolean;
+    diffText?: string;
+    packetId?: string;
+    /** When set with non-empty runIds and previewOnly false, OA adjudication is invoked. */
+    client?: AdaptOrchClient;
+    registry?: {
+        get(kind: string): VerifierRegistryEntry;
+    };
+    /** When true, merge deep-wall result into limits / policy flags. */
+    deepWall?: boolean;
+    /** Wave 4-C3b: injected hermetic runner. Completion gated by `deepWallAllowCompletion` + evidence. */
+    deepWallRunner?: DeepWallRunnerFn;
+    /** Must be true for a runner to emit `completed`. */
+    deepWallAllowCompletion?: boolean;
+    /** When set, attach HMAC signed receipt attestation (never log secret). */
+    receiptSigningSecret?: string;
+}
+export interface EvaluateCorrectnessWallResult {
+    verdictCard: VerdictCard;
+    receipt: VerificationReceipt;
+}
+export declare function evaluateCorrectnessWall(params: EvaluateCorrectnessWallParams): Promise<EvaluateCorrectnessWallResult>;
+//# sourceMappingURL=evaluate-correctness-wall.d.ts.map

package/dist/evaluate-correctness-wall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate-correctness-wall.d.ts","sourceRoot":"","sources":["../src/evaluate-correctness-wall.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAA0B,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAE/F,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAGN,KAAK,gBAAgB,EAIrB,MAAM,gBAAgB,CAAC;AAOxB,MAAM,WAAW,6BAA6B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAAA;KAAE,CAAC;IACxD,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sGAAsG;IACtG,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,qDAAqD;IACrD,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC7C,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,mBAAmB,CAAC;CAC7B;AAED,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,6BAA6B,GACnC,OAAO,CAAC,6BAA6B,CAAC,CA4HxC","sourcesContent":["/**\n * B2C Correctness Wall orchestration — fast wall + optional OA adjudication.\n */\n\nimport type { AdaptOrchClient } from \"./adaptorch-client.ts\";\nimport { type AdjudicationRequest, adjudicate } from \"./adjudicator.ts\";\nimport { createVerifierRegistry, type VerifierRegistryEntry } from \"./adjudicator-registry.ts\";\nimport { mapToB2C } from \"./b2c-mapper.ts\";\nimport type { VerdictCard, VerificationReceipt } from \"./b2c-verdict.ts\";\nimport {\n\tDEEP_RUNNER_NOT_WIRED,\n\tDEEP_WALL_UNAVAILABLE,\n\ttype DeepWallRunnerFn,\n\tisDeepRunnerCompletionAllowed,\n\tresolveDeepWallPhaseFromEnv,\n\trunDeepWall,\n} from \"./deep-wall.ts\";\nimport { runFastWall } from \"./policy-wall.ts\";\nimport { signWallReceipt } from \"./receipt-signature.ts\";\nimport { deriveRepairHints } from \"./repair-loop.ts\";\nimport { buildVerificationDigest } from \"./signed-receipt.ts\";\nimport { CORRECTNESS_WALL_VERSION } from \"./wall-meta.ts\";\n\nexport interface EvaluateCorrectnessWallParams {\n\tkind: string;\n\trunIds?: string[];\n\tdispatchRecordId?: string;\n\tapprovedWriteScope?: string[];\n\tpreviewOnly?: boolean;\n\tdiffText?: string;\n\tpacketId?: string;\n\t/** When set with non-empty runIds and previewOnly false, OA adjudication is invoked. */\n\tclient?: AdaptOrchClient;\n\tregistry?: { get(kind: string): VerifierRegistryEntry };\n\t/** When true, merge deep-wall result into limits / policy flags. */\n\tdeepWall?: boolean;\n\t/** Wave 4-C3b: injected hermetic runner. Completion gated by `deepWallAllowCompletion` + evidence. */\n\tdeepWallRunner?: DeepWallRunnerFn;\n\t/** Must be true for a runner to emit `completed`. */\n\tdeepWallAllowCompletion?: boolean;\n\t/** When set, attach HMAC signed receipt attestation (never log secret). */\n\treceiptSigningSecret?: string;\n}\n\nexport interface EvaluateCorrectnessWallResult {\n\tverdictCard: VerdictCard;\n\treceipt: VerificationReceipt;\n}\n\nexport async function evaluateCorrectnessWall(\n\tparams: EvaluateCorrectnessWallParams,\n): Promise<EvaluateCorrectnessWallResult> {\n\tconst runIds = params.runIds ?? [];\n\tconst previewOnly = params.previewOnly === true;\n\tconst registry = params.registry ?? createVerifierRegistry([]);\n\n\tconst wall = runFastWall({\n\t\tdiffText: params.diffText,\n\t\tapprovedWriteScope: params.approvedWriteScope,\n\t\trunIds,\n\t\tpreviewOnly,\n\t});\n\n\tlet adjudication: Awaited<ReturnType<typeof adjudicate>> | undefined;\n\tconst useOa = runIds.length > 0 && !previewOnly && params.client !== undefined;\n\tif (useOa && params.client !== undefined) {\n\t\tconst request: AdjudicationRequest = {\n\t\t\tdispatch_record_id: params.dispatchRecordId ?? \"b2c-wall\",\n\t\t\tkind: params.kind,\n\t\t\trun_ids: runIds,\n\t\t};\n\t\tadjudication = await adjudicate(request, params.client, registry);\n\t}\n\n\tlet policyFlags = wall.flags;\n\tif (adjudication !== undefined) {\n\t\tpolicyFlags = wall.flags.filter((f) => f !== \"EVIDENCE_DAG_INCOMPLETE\");\n\t}\n\n\tconst provisional = mapToB2C({\n\t\tkind: params.kind,\n\t\tpacketId: params.packetId,\n\t\tdispatchRecordId: params.dispatchRecordId,\n\t\trunIds,\n\t\tpreviewOnly,\n\t\tpolicyFlags,\n\t\tdiffPaths: wall.diffPaths,\n\t\tadjudication,\n\t});\n\n\tconst repairHints = deriveRepairHints({\n\t\tuserVerdict: provisional.verdictCard.verdict,\n\t\tpolicyFlags,\n\t\tadjudicationReasonCode: adjudication?.reason_code,\n\t\tpreviewOnly,\n\t\tdiffPaths: wall.diffPaths,\n\t});\n\n\tconst mapped = mapToB2C({\n\t\tkind: params.kind,\n\t\tpacketId: params.packetId,\n\t\tdispatchRecordId: params.dispatchRecordId,\n\t\trunIds,\n\t\tpreviewOnly,\n\t\tpolicyFlags,\n\t\tdiffPaths: wall.diffPaths,\n\t\tadjudication,\n\t\trepairHints,\n\t});\n\n\tconst verificationDigest = buildVerificationDigest({\n\t\tpatchText: params.diffText,\n\t\tevidenceChunks: runIds.length > 0 ? runIds : undefined,\n\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t});\n\n\tlet verdictCard = mapped.verdictCard;\n\tlet receipt: VerificationReceipt = {\n\t\t...mapped.receipt,\n\t\tverificationDigest,\n\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t};\n\n\tconst signingSecret = params.receiptSigningSecret?.trim();\n\tif (signingSecret !== undefined && signingSecret.length > 0 && verificationDigest !== undefined) {\n\t\treceipt = {\n\t\t\t...receipt,\n\t\t\tsignedReceipt: signWallReceipt({\n\t\t\t\tdigest: verificationDigest,\n\t\t\t\twallVersion: CORRECTNESS_WALL_VERSION,\n\t\t\t\tsecret: signingSecret,\n\t\t\t}),\n\t\t};\n\t}\n\n\tif (params.deepWall === true) {\n\t\tconst deep = await runDeepWall({\n\t\t\tkind: params.kind,\n\t\t\trunIds,\n\t\t\tpacketId: params.packetId,\n\t\t\tphase: resolveDeepWallPhaseFromEnv(),\n\t\t\trunner: params.deepWallRunner,\n\t\t\tallowCompletion: params.deepWallAllowCompletion,\n\t\t});\n\t\tconst policyFlags = [...receipt.policyFlags];\n\t\tif (deep.status !== \"completed\") {\n\t\t\tif (!policyFlags.includes(DEEP_WALL_UNAVAILABLE)) {\n\t\t\t\tpolicyFlags.push(DEEP_WALL_UNAVAILABLE);\n\t\t\t}\n\t\t\tif (!isDeepRunnerCompletionAllowed() && !policyFlags.includes(DEEP_RUNNER_NOT_WIRED)) {\n\t\t\t\tpolicyFlags.push(DEEP_RUNNER_NOT_WIRED);\n\t\t\t}\n\t\t}\n\t\tfor (const f of deep.runnerFlags ?? []) {\n\t\t\tif (!policyFlags.includes(f as never)) policyFlags.push(f as never);\n\t\t}\n\t\tconst limitsCode = deep.limits?.[0] ?? verdictCard.limits.code;\n\t\tverdictCard = {\n\t\t\t...verdictCard,\n\t\t\tlimits: {\n\t\t\t\t...verdictCard.limits,\n\t\t\t\trequiresHumanReview: deep.status !== \"completed\",\n\t\t\t\tcode: limitsCode ?? verdictCard.limits.code,\n\t\t\t},\n\t\t\tblocked_reasons: [...new Set([...verdictCard.blocked_reasons, deep.message])],\n\t\t};\n\t\treceipt = {\n\t\t\t...receipt,\n\t\t\tpolicyFlags,\n\t\t\tdeepWallStatus: deep.status,\n\t\t\tdeepWallEvidence: deep.evidence,\n\t\t};\n\t}\n\n\treturn { verdictCard, receipt };\n}\n"]}