owlrunkit 0.19.1 → 0.20.0

package/docs/architecture/OWLCODA_RUNKIT_020_TEAM_DELIVERY_PHASE1_PRODUCT_DECISION_20260813.md

@@ -0,0 +1,296 @@
+# OwlRunKit 0.20 Team Delivery Phase 1 Product Decision
+
+Date: 2026-08-13
+Status: `source_candidate_implemented_and_verified / initial_read_only_dogfood_passed / owner_release_authorized / registry_publication_pending`
+
+## Decision
+
+OwlRunKit 0.20 Phase 1 adds a read-only Team Delivery projection and portable
+team packet contracts on top of the existing Project Driver. It does not add a
+second task graph, start Agents, route vendors, dispatch work, or change Quick
+or Formal assurance.
+
+The product sequence is fixed:
+
+1. publish and stabilize 0.19.2;
+2. implement 0.20 Phase 1 as read-only recommendation plus native contracts;
+3. dogfood it in at least two real projects;
+4. only if measured net value is positive, ask the Owner whether opt-in assisted
+   dispatch should be designed.
+
+Steps 1 and 2 are complete through a repository source candidate. Step 3 has
+started with read-only recommendation and status projection; transfer and
+acceptance value have not yet been proven through a complete live lifecycle.
+The Owner separately authorized the 0.20 publication transition after the
+initial read-only dogfood. That authorization does not pre-authorize assisted
+dispatch, project adoption, deployment, production, business, funds, or any
+other permission transition.
+
+## Current source-candidate evidence
+
+- Focused Team Delivery and public-contract checks: 25 passed, 0 failed.
+- Compatibility, CLI, project-local binding, and neighboring Formal checks:
+  129 passed, 0 failed.
+- Standalone pack, isolated install, initialization, Team packet validation,
+  and Quick attestation: 6 passed, 0 failed.
+- Complete RunKit gate: 853 tests, 841 passed, 0 failed, 12 skipped.
+- Root build and production dependency audit passed; the production audit
+  reported 0 vulnerabilities.
+- Core, Skill candidate, package config, public attester, and distribution
+  manifest resolve to
+  `sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70`.
+
+These facts establish a source candidate only. They do not establish dogfood
+value, registry publication, project adoption, runtime activation, or release
+authority.
+
+## Initial read-only dogfood
+
+The candidate was run directly against current Project Driver truth without
+installing or modifying either target project.
+
+- OwlFootball had one actionable owned lane and one dependency-blocked future
+  lane. Recommendation: `off + project_driver`, assurance unchanged.
+- The active Sierac MES control project had one actionable writer and several
+  dependency-blocked future lanes. Recommendation: `off + project_driver`,
+  assurance unchanged.
+- A real Sierac MES parallel worktree had two simultaneously actionable,
+  disjoint, unassigned lanes. Recommendation: `team + project_driver_team`,
+  both lanes parallel-eligible, no path conflict, assurance unchanged.
+- The first Team result exposed a self-referential `team status` next action.
+  The candidate was corrected so unassigned actionable lanes now point to
+  `project assign --help`; focused and complete gates were rerun afterward.
+- For each directly tested project/worktree, the Project Driver tree
+  fingerprint and Git status fingerprint were byte-identical before and after.
+  Dispatch remained disabled and every authority field remained false.
+
+This establishes correct initial admission and exit behavior. It does not yet
+establish lower handoff time, candidate transfer value, independent acceptance
+value, or eligibility for assisted dispatch.
+
+## Verified starting facts
+
+- `owlrunkit@0.19.2` is published and exact-registry verified.
+- Project Driver already owns durable WorkItems, dependencies, owned paths,
+  assignments, decisions, checkpoints, handoffs, rework, integration gates,
+  source delivery, takeover, and project truth hashing.
+- Usage Mode already keeps continuity and assurance separate.
+- Quick and Formal already own evidence strength; multi-Agent work does not by
+  itself imply Formal.
+- The local `manage-agent-team` Skill contains useful operating policy, but it
+  is not available on every machine and is not an acceptable product runtime
+  dependency.
+- Real dogfood shows Team coordination is useful for multiple writers,
+  independent acceptance, candidate transfer, and cross-session ownership; it
+  is negative value for ordinary single-owner closure.
+
+## Stable product model
+
+Team Delivery adds one orthogonal dimension:
+
+```text
+continuity   none | project_driver
+coordination none | team_delivery
+assurance    none | quick | formal
+acceptance   L0 | L1 | L2 | L3
+authority    always externally granted; never inferred by RunKit
+```
+
+`team_delivery` is a read-only coordination recommendation in Phase 1. It is
+not a continuity mode, assurance level, acceptance verdict, or authority.
+
+Project Driver remains the sole active project and task truth. Team Delivery
+may project WorkItems into lanes, but it cannot create a parallel team/task
+database or reinterpret project events.
+
+## User-visible Phase 1 surface
+
+```text
+npx --no-install owlrunkit team recommend --workspace "$PWD"
+npx --no-install owlrunkit team status --workspace "$PWD"
+npx --no-install owlrunkit team packet validate --workspace "$PWD" --packet <file>
+```
+
+All commands are read-only and support `--json`. Human output is the default.
+Every result includes the authority boundary and
+`authorizationGranted=false`.
+
+### `team recommend`
+
+The recommendation is derived only from current Project Driver truth:
+
+- no initialized project, no ready work, or one ordinary ready WorkItem:
+  `off`;
+- two or more simultaneously actionable WorkItems with disjoint owned paths:
+  `team`;
+- overlapping owned paths: `team`, but parallel writing is blocked and the
+  unique next action is to revise ownership or serialize the lanes;
+- a WorkItem in independent verification: `team`;
+- a pending handoff, rework return, or live candidate ownership transfer:
+  `team`;
+- multiple active owners: `team`.
+
+The result explains trigger reasons, rejected lighter handling, projected
+overhead, path conflicts, acceptance gaps, and one next command. It never
+chooses a model vendor or starts an Agent.
+
+### `team status`
+
+Status projects the current Project Driver into:
+
+- current project identity and truth hash;
+- incomplete lanes with current owner, dependencies, owned paths, and explicit
+  actionable state;
+- which lanes may run concurrently;
+- path conflicts;
+- independent-acceptance gaps;
+- handoff, rework, and source-delivery continuity facts;
+- the current Team recommendation and unique coordination next action.
+
+The next command must not loop back to `team status`. An unassigned actionable
+lane points to assignment help, a path conflict points to immutable scope
+revision help, an owner transition points to takeover help, and an already
+owned Team candidate points to portable packet validation help.
+
+It does not copy or persist a second task graph.
+
+### `team packet validate`
+
+The validator accepts one bounded regular non-symlink JSON file, rejects
+duplicate keys and extra fields, validates the native packet contract, and
+binds project-aware packets to the current `projectId`, `projectTruthHash`,
+WorkItem, and owned paths. Validation performs no packet creation or project
+mutation.
+
+## Native portable contracts
+
+Phase 1 publishes three strict Draft 2020-12 contracts and matching runtime
+validators.
+
+### TeamTaskPacket V2
+
+The task packet binds one Project Driver WorkItem and Gate. It carries:
+
+- actual launcher-declared Agent, model family, and model version;
+- risk axes and required acceptance level;
+- exact worktree and candidate-entry identity;
+- allowed and prohibited paths/actions;
+- evidence plan, verification cadence, handoff requirement, escalation budget,
+  and exact stop point;
+- project identity and project truth hash;
+- an explicit all-false authority boundary.
+
+Model family is opaque declared identity. Core does not contain Sol, Luna,
+Grok, Kimi, capacity ratios, retries, or routing preferences.
+
+### TeamAcceptancePacket V2
+
+The acceptance packet binds one Gate and candidate, records implementation and
+verification identities, acceptance level, fresh adversarial families,
+candidate identity before and after, evidence reuse, findings, verdict, and
+remaining levels. Medium or high second-order risk cannot claim independent
+acceptance when implementation and verification model families are equal.
+
+`ACCEPT`, `REWORK`, and `BLOCKED` remain distinct. One packet accepts one Gate;
+it does not grant the next external transition.
+
+### CandidateTransferPacket V1
+
+The transfer packet preserves a live candidate across writer ownership change:
+
+```text
+candidate_active
+  -> transfer_requested
+  -> packet_generated
+  -> new_owner_validation
+  -> handoff_ack
+  -> old_writer_release
+```
+
+It binds candidate identity, dirty manifest, reconstruction sources, protected
+artifacts, previous and next owner, verification state, and handoff ACK. A
+packet at `old_writer_release` is invalid unless the new owner has accepted the
+handoff with evidence. The packet does not itself assign Project Driver
+authority or release the prior writer.
+
+## Admission and exit rules
+
+Team Mode is recommended only when coordination changes the outcome or critical
+path. Parallelism being possible is insufficient.
+
+The recommendation must explicitly exit Team Mode for a single authorized
+owner with a bounded, reversible, directly verifiable task. Production or
+release labels alone do not force Team Mode. Long duration alone selects
+continuity, not coordination. Multiple Agents alone do not force Formal.
+
+Path conflict does not authorize parallel writers. It creates a visible
+coordination blocker.
+
+## Acceptance scenarios
+
+1. No Project Driver definition returns `off`, zero lanes, no dispatch, and no
+   authority.
+2. One ordinary ready WorkItem returns `off` even though Project Driver exists.
+3. Two independent ready WorkItems with disjoint owned paths return `team` and
+   both lanes are parallel-eligible.
+4. Two actionable WorkItems with overlapping owned paths return `team`, expose
+   the exact conflict, and mark both lanes non-parallel.
+5. Independent verification, pending handoff/rework, candidate transfer, or
+   multiple active owners recommends `team` without changing assurance.
+6. `team recommend`, `team status`, and packet validation write zero project,
+   source, Git, or RunKit bytes.
+7. A valid TeamTaskPacket is bound to the current Project Driver WorkItem and
+   owned paths; stale project truth or widened scope is rejected.
+8. Same-family verification at medium/high second-order risk cannot claim
+   independent acceptance.
+9. Candidate transfer cannot reach `old_writer_release` before accepted
+   handoff ACK with evidence.
+10. Packet schemas and runtime validators reject missing, extra, duplicate-key,
+    authority-looking, and malformed identity fields consistently.
+11. Installed-package help, CLI JSON, public schemas, Core manifest, and the
+    Skill describe the same Phase 1 surface without requiring the local
+    `manage-agent-team` Skill.
+12. No output authorizes Git, release, deployment, production, business,
+    automation, money, credentials, or Agent dispatch.
+
+## Phase 1 non-goals
+
+- no automatic or assisted Agent launch;
+- no vendor CLI federation or general swarm;
+- no model ranking, scorecard, capacity allocation, retry policy, or
+  model-specific prompt logic in Core;
+- no second project/task graph;
+- no packet generator that silently assigns ownership;
+- no new Quick or Formal Gate;
+- no replacement for COM-019 or any domain product decision;
+- no 0.20 publication claim before a separately verified release transition.
+
+## Dogfood Gate before assisted dispatch
+
+At least two real projects must demonstrate all of the following:
+
+- ordinary single-owner work reliably exits Team Mode;
+- multiple writers and independent acceptance produce correct lanes, path
+  conflicts, and independence gaps;
+- a machine without the local Skill can validate and continue from the npm
+  package and self-contained packets;
+- writer transfer preserves the candidate through ACK;
+- measured handoff time, controller intervention, or duplicate verification
+  decreases;
+- the benefit is not merely more packets or receipts.
+
+Only after these facts exist may the Owner decide whether to design opt-in
+assisted dispatch. General automatic federation remains a separate product and
+authority decision.
+
+## What cannot be claimed now
+
+- 0.20 has not completed transfer or independent-acceptance dogfood and has not
+  yet been committed, tagged, registry-published, adopted, or made active;
+  source-candidate verification is not registry publication proof.
+- Team Delivery does not dispatch or supervise Agents.
+- The local Skill is not part of the product runtime contract.
+- Team recommendation is not acceptance or authority.
+- Phase 1 is not the selected COM-019 Primary AI Value Loop.
+- No business, production, deployment, or release outcome follows from this
+  product decision.

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,11 +7,13 @@ description: Run receipt-backed, project-owned work with OwlCoda RunKit. Use whe
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Bundled release: standalone `owlrunkit@0.19.1`, bundling Contract `0.2` and
-Core `0.19.1` with manifest
-`sha256:291ef97c93a513eed24a29f75c400b61cefd6a8c0ab228401cf2c6a73ea9e622`.
-The published `owlrunkit@0.19.0` package is the trusted prior for rollback;
-verify exact official npm registry provenance before adoption. The immutable
+Bundled candidate: standalone `owlrunkit@0.20.0`, bundling Contract `0.2` and
+Core `0.20.0` with manifest
+`sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70`.
+This candidate is not published. The current published release remains
+`owlrunkit@0.19.2`, which is the trusted prior for rollback and the only
+registry-installable version named by this Skill before publication. Verify
+exact official npm registry provenance before adoption. The immutable
 rollback baseline for the prior release is `owlrunkit@0.16.1` with SHA-1
 `1bc119d24879bdd8959af16b364af55ca9d61ea9` and canonical npm tarball URL
 `https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.16.1.tgz`.
@@ -19,6 +21,28 @@ The root `owlcoda` package has a separate version lifecycle.
 
 The session is an execution interface. Project artifacts are the system of record.
 
+## Team Delivery Phase 1
+
+Use Team Delivery only when current Project Driver facts make coordination
+material. It is a read-only projection, not a second graph or an Agent launcher.
+
+```bash
+npx --no-install owlrunkit team recommend --workspace "$PROJECT_ROOT"
+npx --no-install owlrunkit team status --workspace "$PROJECT_ROOT"
+npx --no-install owlrunkit team packet validate --workspace "$PROJECT_ROOT" \
+  --packet /absolute/path/to/team-packet.json
+```
+
+An uninitialized project, no actionable work, or one ordinary ready WorkItem
+must remain off. Disjoint actionable lanes may be parallel-eligible; overlapping
+owned paths must block parallel writing. Independent verification, handoff,
+rework, candidate transfer, or multiple active owners may recommend Team without
+changing assurance. TeamTaskPacket V2, TeamAcceptancePacket V2, and
+CandidateTransferPacket V1 are package-owned portable contracts. Do not depend
+on a user-level `manage-agent-team` Skill at runtime. Core does not choose model
+vendors, score Agents, start tasks, or grant Git, release, deployment,
+production, business, automation, or money authority.
+
 ## Project Driver actions
 
 Translate ordinary user requests into durable typed project actions. Do not ask
@@ -26,7 +50,8 @@ the user to operate the CLI when the request and authority are already clear.
 
 The normal mainline is `init`, `assign`, `checkpoint`, `handoff`,
 `reject-and-return`, `decision`, `verification`, `integrate`, `status`, and
-`takeover`. External source lanes use `target-snapshot` and `import-delivery`
+`takeover`. A diagnosed WorkItem scope change uses append-only `work-item
+revise-scope`. External source lanes use `target-snapshot` and `import-delivery`
 without installing RunKit or writing control artifacts into the frozen target.
 After a project
 derives completed, `successor` is the bounded lifecycle step. `init` accepts one project definition
@@ -43,6 +68,10 @@ remains available for existing automation and compatibility.
 - "I decided ...": append a decision resolution with rationale and evidence.
 - "Hand this to another Agent": append the handoff, then a successor assignment;
   never overwrite the old assignment.
+- "The diagnosis changed this WorkItem's paths or measurable contract": append
+  one `project work-item revise-scope` event bound to the current assignment and
+  owner. Never edit the project definition or treat an older checkpoint as
+  completion evidence for the revised scope.
 - "Reject this failed candidate and return it": use one `project
   reject-and-return` event. Preserve the failed checkpoint, bind the review
   evidence, create the rework assignment, and never rewrite failure as active.
@@ -71,11 +100,19 @@ remains available for existing automation and compatibility.
   underlying risk; bind a Formal WorkItem to its actual execution and lease when
   applicable. Multi-Agent coordination, long duration, or interruption recovery
   alone does not select Formal.
+- "Everything in the ledger is complete": report
+  `code_complete_without_release_authority` unless a separate external actor has
+  granted the relevant Git/release/deploy authority. Never translate
+  `overall=completed` into product activation or `next: none`.
 
 For a multi-Agent project, checkpoint meaningful state changes promptly. A
 checkpoint is not a heartbeat and must not contain a guessed percentage.
 Completion requires evidence. If an assignment binds an execution, derive its
 state from the closeout and lease rather than trusting the Agent's claim.
+Before entering `verifying`, hand off and supersede the implementation assignment
+with a different Agent. If a verifying/completed checkpoint has no recognizable
+Quick/Formal receipt reference, preserve the checkpoint but report
+`no_bound_verification_receipt`; do not claim that a mere reference was attested.
 
 ```bash
 npx --no-install owlrunkit project init --workspace "$PROJECT_ROOT" --definition "$PROJECT_JSON"
@@ -92,6 +129,11 @@ npx --no-install owlrunkit project reject-and-return --workspace "$PROJECT_ROOT"
   --rework-id "$REWORK_ID" --at "$OCCURRED_AT" --work-item "$WORK_ITEM_ID" \
   --reviewer-agent "$REVIEWER_AGENT_ID" --to-agent "$AGENT_ID" \
   --reason "$REJECTION_REASON" --next "$NEXT_ACTION" --evidence "$EVIDENCE_REF"
+npx --no-install owlrunkit project work-item revise-scope --workspace "$PROJECT_ROOT" \
+  --revision-id "$REVISION_ID" --at "$OCCURRED_AT" \
+  --assignment-id "$ASSIGNMENT_ID" --work-item "$WORK_ITEM_ID" \
+  --owner-agent "$AGENT_ID" --owned-path "$OWNED_PATH" \
+  --reason "$SCOPE_REASON" --evidence "$EVIDENCE_REF"
 npx --no-install owlrunkit project decision --workspace "$PROJECT_ROOT" --resolve \
   --decision-id "$DECISION_ID" --at "$OCCURRED_AT" --resolution "$RESOLUTION" \
   --rationale "$RATIONALE" --evidence "$EVIDENCE_REF"
@@ -191,9 +233,9 @@ below has no CLI entry.
 
 ```bash
 npx --no-install owlrunkit bootstrap --workspace "$PROJECT_ROOT" \
-  --exact owlrunkit@0.19.1 --dry-run
+  --exact owlrunkit@0.19.2 --dry-run
 npx --no-install owlrunkit bootstrap --workspace "$PROJECT_ROOT" \
-  --exact owlrunkit@0.19.1 --apply
+  --exact owlrunkit@0.19.2 --apply
 npx --no-install owlrunkit init --workspace "$PROJECT_ROOT"
 npx --no-install owlrunkit inspect --json --workspace "$PROJECT_ROOT"
 npx --no-install owlrunkit status --workspace "$PROJECT_ROOT"
@@ -502,6 +544,9 @@ Formal accepted evidence admits the built-in Node syntax check and real project
 commands executed through a Verification Envelope:
 
 ```bash
+npx --no-install owlrunkit formal preflight \
+  --workspace "$PROJECT_ROOT" --envelope "$VERIFICATION_ENVELOPE_JSON"
+
 npx --no-install owlrunkit formal check \
   --workspace "$PROJECT_ROOT" --run-id "$RUN_ID" \
   --work-item "$WORK_ITEM_ID" --check-id "$CHECK_ID" \
@@ -517,10 +562,30 @@ command optimistically. The public 0.17 package provides the enforced macOS
 backend; Linux remains fail-closed. Legacy `verify` may capture evidence but
 must not be silently promoted into this Formal path.
 
+When a required project check cannot run inside the envelope, run it through
+Quick against the same frozen source and attach the fully attested receipt:
+
+```bash
+npx --no-install owlrunkit formal attach-evidence \
+  --workspace "$PROJECT_ROOT" --run-id "$RUN_ID" \
+  --evidence-id "$EVIDENCE_ID" --kind supplemental-local \
+  --receipt "$QUICK_RECEIPT_JSON"
+```
+
+Use `networked` instead of `supplemental-local` only when the attached command
+used network access. This classification is operator-declared and not attested
+by Quick Receipt V3, so artifacts expose
+`classificationBasis=operator_declared_not_attested`. Supplemental evidence
+remains non-gating: its receipt and materials are re-attested and summarized by
+an accepted `formal finish`, but it never substitutes for a passed Formal-eligible check or
+grants Git, release, deployment, or business authority.
+
 ## Freeze a dirty SourceCandidateV2
 
 Freeze, verify and materialize an immutable candidate without requiring a Git
-commit:
+commit. SourceCandidateV2 documents are limited to 64 MiB and 2,000,000 JSON
+values; producer and reader enforce the same bound before candidate payload or
+document writes.
 
 ```bash
 npx --no-install owlrunkit candidate freeze --workspace "$PROJECT_ROOT" \

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,9 +2,9 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.19.1",
-    "coreManifestSha256": "sha256:291ef97c93a513eed24a29f75c400b61cefd6a8c0ab228401cf2c6a73ea9e622",
-    "coreSourceRef": "artifact:sha256:291ef97c93a513eed24a29f75c400b61cefd6a8c0ab228401cf2c6a73ea9e622"
+    "coreVersion": "0.20.0",
+    "coreManifestSha256": "sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70",
+    "coreSourceRef": "artifact:sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70"
   },
   "authorizationPolicy": "external_explicit_authority_required"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.19.1",
+  "version": "0.20.0",
   "description": "Project Driver for cross-Agent project continuity and progression; execution, evidence, verification, and recovery are the underlying trust substrate.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -39,6 +39,16 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.20.0",
+      "coreManifestSha256": "sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70"
+    },
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.19.2",
+      "coreManifestSha256": "sha256:c46ae9d8ed0572e5636ab5725f922f8db3ee5bf0f966b200bce7b2287c9267c8"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.19.1",

package/packages/attest/src/quick.mjs

@@ -19,6 +19,16 @@ import { captureWorkspaceSnapshot } from "./workspace-snapshot.mjs";
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.20.0",
+    coreManifestSha256: "sha256:30098aa9344c17c1ed0b5ed45ef1c590b3214b824402f584029c1ecb38ca7a70",
+  },
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.19.2",
+    coreManifestSha256: "sha256:c46ae9d8ed0572e5636ab5725f922f8db3ee5bf0f966b200bce7b2287c9267c8",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.19.1",
@@ -134,7 +144,7 @@ export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
     coreVersion: "0.13.0",
     coreManifestSha256: "sha256:0455c847bf2df77703583c6f19c20cf103206bafc4f122795bf34d3f85f0263d",
   },
-]);
+].map(identity => Object.freeze(identity)));
 
 function dependencyEnvironmentCurrent(binding, materials) {
   if (binding === null || binding === undefined) return true;
@@ -211,11 +221,11 @@ function resultTemplate({ receipt, receiptPath, receiptSha256, decision, issues,
   };
 }
 
-export function attestQuickReceiptDetailsFromBytes({
+function attestQuickReceiptDetailsFromBytesWithCatalog({
   receiptPath,
   receiptBytes,
   workspaceRoot,
-}) {
+}, supportedCoreIdentities) {
   const absoluteReceiptPath = resolveRegularFilePath(receiptPath);
   let receipt;
   try {
@@ -241,7 +251,7 @@ export function attestQuickReceiptDetailsFromBytes({
   let materialMissing = false;
   let materialMismatch = false;
 
-  const coreValid = SUPPORTED_QUICK_CORE_IDENTITIES.some((core) =>
+  const coreValid = supportedCoreIdentities.some((core) =>
     receipt.coreIdentity.contractVersion === core.contractVersion
     && receipt.coreIdentity.coreVersion === core.coreVersion
     && receipt.coreIdentity.coreManifestSha256 === core.coreManifestSha256);
@@ -375,6 +385,34 @@ export function attestQuickReceiptDetailsFromBytes({
   };
 }
 
+export function attestQuickReceiptDetailsFromBytes(options) {
+  return attestQuickReceiptDetailsFromBytesWithCatalog(
+    options,
+    SUPPORTED_QUICK_CORE_IDENTITIES,
+  );
+}
+
+export function attestQuickReceiptDetailsFromBytesWithCoreCatalog(
+  options,
+  supportedCoreIdentities,
+) {
+  if (
+    !Array.isArray(supportedCoreIdentities)
+    || supportedCoreIdentities.length === 0
+    || supportedCoreIdentities.some((identity) => (
+      identity?.contractVersion !== "0.2"
+      || typeof identity?.coreVersion !== "string"
+      || !/^sha256:[a-f0-9]{64}$/u.test(identity?.coreManifestSha256 ?? "")
+    ))
+  ) {
+    throw new Error("trusted Quick Core catalog is invalid");
+  }
+  return attestQuickReceiptDetailsFromBytesWithCatalog(
+    options,
+    supportedCoreIdentities,
+  );
+}
+
 export function attestQuickReceiptDetails({ receiptPath, workspaceRoot }) {
   const { absolutePath, bytes } = readFileBytesBounded(receiptPath);
   return attestQuickReceiptDetailsFromBytes({

package/registry-release-policy-v1.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV1",
   "status": "release_candidate_unpublished",
   "packageName": "owlrunkit",
-  "candidateVersion": "0.19.1",
+  "candidateVersion": "0.20.0",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,
@@ -23,10 +23,10 @@
   ],
   "currentPublishedRelease": {
     "packageName": "owlrunkit",
-    "version": "0.19.0",
-    "shasum": "83d156554924e2e1c58d972e1c7d31262bddb186",
-    "integrity": "sha512-edtzE58ShWEM4C0IpHJQiu2h0kKBSprU+LjaZNsXTXObeVZlGuAxZXkD7Jn6chMk3mpCidOf4VtA1/an+EZNWw==",
-    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.19.0.tgz"
+    "version": "0.19.2",
+    "shasum": "f9b0f797fe9f79878374380db0756223accd61dc",
+    "integrity": "sha512-rFEnbOtPuybztz8EZbcQSY3tGycCAuTkg+qGDwcKaTPjdJRhsXS4OB2HLwDBiILIV6BFyRPSQ7zanObT4jd58g==",
+    "tarballUrl": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.19.2.tgz"
   },
   "registryRelease": null,
   "registryEvidenceMustBeExternal": true,

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.19.1",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.19.1",
+  "name": "owlrunkit-0.20.0",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.20.0",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,8 +14,8 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.19.1",
-      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.19.1.tgz",
+      "versionInfo": "0.20.0",
+      "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
       "licenseDeclared": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.19.1"
+          "referenceLocator": "pkg:npm/owlrunkit@0.20.0"
         }
       ]
     }