persona-harness 0.8.21 → 0.8.22

package/docs/current/release/consumer-authority-v0822-acceptance.json

@@ -0,0 +1,1215 @@
+{
+  "schemaVersion": "consumer-authority-v0822-acceptance.1",
+  "package": {
+    "channel": "unpublished",
+    "scope": "source-candidate",
+    "version": "0.8.22"
+  },
+  "packageBoundary": {
+    "bundle": {
+      "requiredRefs": [
+        "explicit-single-refs-heads-candidate-must-match-expected-head",
+        "refs/remotes/origin/main"
+      ],
+      "verification": "git-bundle-verify-and-exact-ref-binding",
+      "baseComparison": "independent-no-local-base-checkout-under-the-same-npm-policy"
+    },
+    "cleanCheckout": {
+      "requiredBindings": [
+        "checkout-cwd",
+        "git-toplevel",
+        "npm-prefix",
+        "resolved-package-json-path",
+        "resolved-package-lock-path",
+        "HEAD-package-json-bytes",
+        "HEAD-package-lock-bytes"
+      ],
+      "sourceFallback": "forbidden"
+    },
+    "npm": {
+      "invocation": "plain-npm-from-bound-detached-checkout-cwd",
+      "packPrefixFlag": "forbidden",
+      "global": false,
+      "ignoreScriptsBeforePack": false,
+      "install": "npm-ci-ignore-scripts",
+      "workspaces": false
+    },
+    "pack": {
+      "metadata": "name-version-filename-must-match-frozen-package-and-lock",
+      "prepack": "package-root-build-script-derived-from-its-own-package-root",
+      "postcondition": "fresh-installed-cli-version-must-match-tarball-version"
+    },
+    "authoritativeBundleContract": {
+      "command": "node scripts/verify-clean-package-boundary.mjs --exercise-contract",
+      "baseAndTarget": "fresh-detached-no-local-checkouts-from-the-same-complete-bundle",
+      "candidateRef": "explicit-single-refs-heads-candidate-must-match-expected-head",
+      "headAlias": "optional-head-mapping-must-match-the-same-expected-head",
+      "sourceCandidateRef": "refs/heads/clean-package-source",
+      "rejectBeforePack": "launcher-cwd-or-manifest-outside-bound-checkout",
+      "sourceContract": "built-cli-package-exercise-contract-under-the-same-executable",
+      "installedContract": "fresh-installed-package-exercise-uses-the-exact-canonical-target-tarball-sha256-and-package-content-identity-before-the-separate-node24-publisher-handoff",
+      "fullJavaGradleContract": "source-and-fresh-installed-full-contract-on-a-provisioned-java-gradle-host",
+      "partialCloneSourceHydration": "only-a-blob-none-promisor-clone-with-the-exact-canonical-origin-may-no-filter-hydrate-the-retained-origin-main-sha-before-local-bundle-materialization-without-moving-refs",
+      "rootPolicy": "the-git-bound-authoritative-bundle-verifier-runs-only-from-a-complete-source-materialization-and-requires-git; fresh-installed-contracts-load-observer-stage-and-package-record-only-from-the-exact-tarball-without-src-git-or-source-verifier-fallback",
+      "exercisePhaseProtocol": {
+        "authorityDiscoveryResult": {
+          "marker": "authority-discovery-exercise-result",
+          "placement": "exactly-one-trusted-unconsumed-persisted-record-immediately-after-the-ready-authority-discovery-phase-for-the-matching-source-built-or-fresh-tar-surface",
+          "result": "trusted-unconsumed-persisted",
+          "schemaVersion": "consumer-authority-discovery-exercise.1"
+        },
+        "childOutput": "each-source-built-and-fresh-tar-package-exercise-phase-emits-one-ordered-exact-nonreflective-ready-record-or-one-terminal-blocked-record-before-the-terminal-pass-marker",
+        "freshTar": [
+          "tarball-materialization",
+          "fresh-install",
+          "package-identity",
+          "package-content-identity",
+          "opencode-interview-observation",
+          "repository-only-files",
+          "canonical-publisher",
+          "observer-credential",
+          "producer-intake",
+          "producer-action-topology",
+          "verifier-no-source",
+          "project-finish-verifier-no-source",
+          "prearmed-observer",
+          "v4-cleanliness",
+          "observer-gh-selector",
+          "attestation-parser",
+          "artifact-transport",
+          "authority-discovery",
+          "authority-lifecycle",
+          "staged-artifact-verifier",
+          "doctor-registry",
+          "evidence-read-write",
+          "report-stdin",
+          "workflow-lifecycle",
+          "bootstrap-workspace-intake",
+          "installed-package-test"
+        ],
+        "parentAcceptance": "the-clean-bundle-parent-requires-the-complete-ordered-ready-transcript-and-exact-terminal-pass-marker; marker-only-malformed-out-of-order-foreign-or-success-after-blocked-output-is-a-bounded-phase-envelope-block",
+        "schemaVersion": "clean-package-exercise-phase.1",
+        "sourceBuilt": [
+          "cli-binding",
+          "opencode-interview-observation",
+          "producer-intake",
+          "producer-action-topology",
+          "canonical-publisher",
+          "prearmed-observer",
+          "v4-cleanliness",
+          "observer-gh-selector",
+          "attestation-parser",
+          "artifact-transport",
+          "observer-credential",
+          "authority-discovery",
+          "authority-lifecycle",
+          "doctor-registry",
+          "evidence-read-write",
+          "report-stdin",
+          "workflow-lifecycle",
+          "bootstrap-workspace-intake"
+        ]
+      }
+    },
+    "contentIdentity": {
+      "aggregate": "sorted-package-relative-path-type-normalized-allowed-mode-size-sha256",
+      "allowedMemberTypes": [
+        "regular"
+      ],
+      "allowedModes": [
+        "0600",
+        "0644",
+        "0700",
+        "0755"
+      ],
+      "canonicalPacker": {
+        "environment": [
+          "isolated-HOME",
+          "isolated-npm-cache",
+          "isolated-npm-config",
+          "isolated-git-config",
+          "umask-0022",
+          "LANG-C",
+          "LC_ALL-C",
+          "TZ-UTC",
+          "SOURCE_DATE_EPOCH-0"
+        ],
+        "node": "20.19.0",
+        "npm": "10.8.2",
+        "publish": "handoff-one-exact-canonical-tarball-to-isolated-node24-npm11-publisher"
+      },
+      "crossEnvironment": "compare-package-content-identity-not-generic-independent-npm-pack-raw-tar-sha256",
+      "rawTarballSha256": "valid-only-for-the-exact-canonical-supplied-tarball-or-postpublish-registry-blob",
+      "registryReadback": "require-protected-main-tag-source-preflight-and-registry-version-sha1-sri-raw-sha256-and-package-content-identity-to-match-frozen-canonical-package-facts-without-registry-githead",
+      "retainedExternalDiagnostics": {
+        "beta16": {
+          "contentOnlySha256": "9bb1c7eaeceb79d198d7baafdaea9c8bc73cd8750209ea5aa76cfc46070e0832",
+          "entryCount": 1191,
+          "identitySha256": "9eac0bdc041e8e616bd6e4de3ba49e8490b8a269f3f0d3e520027833b927c332",
+          "modeCounts": {
+            "0600": 296,
+            "0644": 887,
+            "0700": 7,
+            "0755": 1
+          }
+        },
+        "beta17": {
+          "contentOnlySha256": "d411a23a2343cd21e33ac30250ed903934968e214b7f198ccd0ea91a7d6bf580",
+          "entryCount": 1200,
+          "identitySha256": "5771dc973dd95e5d3f8b01a9e17becf3c17223b3d94aed692e5248e0c3054c5e",
+          "modeCounts": {
+            "0600": 305,
+            "0644": 887,
+            "0700": 7,
+            "0755": 1
+          }
+        },
+        "headerClassification": "normalized-gzip-tar-headers-do-not-explain-the-retained-content-or-mode-identity-delta",
+        "reuse": "diagnostic-only-not-acceptance-evidence"
+      },
+      "schemaVersion": "package-content-identity.1",
+      "publisherRuntime": "node24.18.0-npm11.16.0-dry-run-and-real-publish-use-identical-canonical-tarball-argv"
+    },
+    "registryReadback": {
+      "failureEvidence": "sanitized-readback-is-uploaded-even-when-postpublish-reconciliation-blocks",
+      "sourceBinding": "workflow-verified-canonical-tar",
+      "unsupportedMetadata": "registry-githead-is-neither-required-nor-reflected"
+    },
+    "currentVersionAuthority": "current-package-json-package-lock-and-current-versioned-acceptance-manifest-must-bind-one-identical-prerelease-version; historical-versioned-acceptance-records-remain-strict-and-never-define-current-package-identity"
+  },
+  "preAuthorityReadiness": {
+    "consumer": "exact-registry-installed-java-spring-gradle",
+    "commands": [
+      "ph bootstrap backend --strict --no-developer-mcp",
+      "ph plan --accept",
+      "ph bearshell ./gradlew test",
+      "ph bearshell ./gradlew compileJava",
+      "ph bearshell ./gradlew clean",
+      "ph evidence read README.md",
+      "ph evidence read .persona/project-profile.jsonc",
+      "ph evidence read src/main/java/example/cooperative/GreetingService.java",
+      "ph plan --report-filled implementation --stdin",
+      "ph plan --report-filled review --stdin"
+    ],
+    "expectedDefaultFinish": {
+      "absentBlockers": [
+        "implementation-report-missing",
+        "review-report-missing",
+        "evidence-missing",
+        "report-coverage-missing",
+        "profile-read-coverage-missing",
+        "java-role-read-coverage-missing",
+        "workflow-loop-state-absent",
+        "ralph-loop-state-absent"
+      ],
+      "primaryBlocker": "trusted-authority-required",
+      "status": "blocked"
+    },
+    "publicOutput": {
+      "absoluteWorkspacePaths": "omitted",
+      "stableReferences": [
+        ".persona/workflow/plan.md",
+        ".persona/workflow/implementation-report.md",
+        ".persona/workflow/review-report.md"
+      ]
+    },
+    "initialization": {
+      "acceptedPlan": "ph plan --accept",
+      "binding": {
+        "consumerRoot": "same-canonical-project-root",
+        "profile": ".persona/project-profile.jsonc",
+        "reportsAndEvidence": "public-command-created-only",
+        "sourceIdentity": "current-git-source-identity"
+      },
+      "inactiveFinish": {
+        "blocker": "workflow-state-uninitialized",
+        "status": "blocked"
+      },
+      "loopState": [
+        ".persona/workflow/workflow-loop-state.json",
+        ".persona/workflow/ralph-loop-state.json"
+      ],
+      "sameConsumer": true,
+      "retainedDraftPlan": "bootstrap preserves an existing draft plan; public readiness must accept it explicitly"
+    },
+    "negativeCases": [
+      "absolute-workspace-or-temp-path-public-output",
+      "missing-or-malformed-report",
+      "repeated-control-or-oversized-report",
+      "missing-unsafe-replaced-or-identity-drifted-evidence",
+      "workflow-or-ralph-loop-missing-malformed-or-unsafe",
+      "default-finish-has-no-authority-side-effect"
+    ],
+    "proof": "source-built-and-fresh-packed-installed-public-cli"
+  },
+  "authority": {
+    "binding": {
+      "callerEnrollment": {
+        "repositoryId": 1304576182,
+        "repositorySlug": "jyt6640/persona-harness-attestation-claim-fixture",
+        "workflowPath": ".github/workflows/research-attestation.yml",
+        "workflowRef": "refs/heads/main"
+      },
+      "reusableSigner": {
+        "certificateSanIdentity": "reusable-producer-workflow",
+        "workflowPath": ".github/workflows/persona-harness-project-finish.yml"
+      },
+      "runtimeSourceProjection": {
+        "excludedRuntimeMetadata": [
+          ".persona/.ph-init-manifest.json",
+          ".persona/workflow"
+        ],
+        "reason": "bootstrap-local ownership metadata contains the consumer real path and is not caller project source",
+        "stillBound": [
+          ".persona/project-profile.jsonc",
+          "root-gradle-build-and-settings",
+          "git-source-identity",
+          "public-reports-and-evidence"
+        ]
+      },
+      "required": [
+        "caller-workflow-filename-ref-and-sha",
+        "reusable-workflow-sha-and-certificate-SAN",
+        "repository-id-and-slug",
+        "source-head-and-source-identity",
+        "workflow-run-and-attempt",
+        "artifact-id-and-sha256",
+        "original-archive-members"
+      ],
+      "storeSchema": "consumer-authority-original-artifact.2"
+    },
+    "modeledContract": {
+      "acceptedTopology": "separate-enrolled-caller-and-reusable-signer",
+      "proof": "source-built-and-fresh-packed-installed-public-bootstrap-bound-discovery-exact-once-finish-and-replay-test",
+      "rejected": [
+        "caller-workflow-mismatch",
+        "reusable-workflow-or-certificate-SAN-mismatch",
+        "repository-source-or-run-mismatch",
+        "artifact-digest-or-archive-mismatch",
+        "stale-or-replayed-terminal-record"
+      ],
+      "authorityClaim": "none-before-a-current-original-artifact-is-verified-online"
+    },
+    "fixturePlan": {
+      "artifact": "project-finish-attestation",
+      "consumer": "public-java-spring-gradle",
+      "postmergeAction": "normal-push-to-main",
+      "registryInstall": "requires-authorized-release-before-registry-install-persona-harness@0.8.22"
+    },
+    "hostedFixture": {
+      "callerWorkflowPath": ".github/workflows/research-attestation.yml",
+      "certificateSanIdentity": "reusable-producer-workflow",
+      "event": "push",
+      "ref": "refs/heads/main",
+      "repository": "jyt6640/persona-harness-attestation-claim-fixture",
+      "reusableWorkflowPath": ".github/workflows/persona-harness-project-finish.yml",
+      "revision": "v0822-source-candidate-head-before-authorized-release"
+    },
+    "verification": {
+      "predicate": "project-finish-attestation.1",
+      "route": "fixed-product-owned-online",
+      "unavailable": "bounded-non-authoritative"
+    },
+    "fetchDiagnostic": {
+      "allowedCodes": [
+        "authority-fetch-evidence",
+        "authority-fetch-invalid",
+        "authority-fetch-network",
+        "authority-fetch-policy"
+      ],
+      "childEnvelope": "only-exit-one-fixed-code-ok-false",
+      "persistence": "blocked-child-leaves-no-artifact-or-authority-state",
+      "privacy": "no-token-path-url-or-raw-child-output",
+      "publicState": "missing"
+    },
+    "fetchBindingReason": {
+      "allowedReasons": [
+        "artifact",
+        "package-version",
+        "source",
+        "enrollment",
+        "run",
+        "signer",
+        "freshness",
+        "consumption",
+        "verification",
+        "unknown"
+      ],
+      "output": "fixed-enum-only-no-values-paths-tokens-urls-or-raw-output",
+      "publicState": "binding-mismatch",
+      "schemaVersion": "consumer-authority-fetch-binding-reason.1"
+    },
+    "fetchSelection": {
+      "requiredTuple": [
+        "artifactId",
+        "runId",
+        "sourceHead",
+        "artifactDigest"
+      ],
+      "repositoryOnly": "blocked-before-enrollment-or-fetch",
+      "returnedArtifact": "must-match-all-four-fields-before-verifier-or-store",
+      "receipt": "explicit-secret-free-verified-tuple-or-retained-verified-receipt"
+    },
+    "fetchResult": {
+      "schemaVersion": "consumer-authority-fetch.4",
+      "sourceReason": [
+        "head",
+        "inputs",
+        "identity",
+        "status",
+        "index",
+        "content",
+        "working-tree",
+        "workspace",
+        "unknown"
+      ],
+      "sourceReasonWhen": "present-only-with-bindingReason-source",
+      "nonSourceReasons": "existing-binding-reasons-omit-sourceReason",
+      "privacy": "fixed-enum-only-no-receipt-path-digest-certificate-artifact-credential-or-raw-diagnostic"
+    },
+    "readOnlyVerify": {
+      "command": "ph authority verify",
+      "input": [
+        "archive",
+        "artifactId",
+        "runId",
+        "sourceHead",
+        "artifactDigest"
+      ],
+      "schemaVersion": "consumer-authority-verify.2",
+      "output": [
+        "authorityEligible",
+        "consumptionState",
+        "reason",
+        "schemaVersion",
+        "sourceFallback",
+        "sourceReason",
+        "state"
+      ],
+      "sourceReason": [
+        "head",
+        "inputs",
+        "identity",
+        "status",
+        "index",
+        "content",
+        "working-tree",
+        "workspace",
+        "unknown"
+      ],
+      "sourceReasonWhen": "present-only-with-reason-source-mismatch",
+      "nonSourceReasons": "existing-verify-reasons-omit-sourceReason",
+      "trustUnavailable": [
+        "dns-unavailable",
+        "network-unavailable",
+        "trust-root-unavailable",
+        "verification-timeout"
+      ],
+      "noCredentialFetchStoreConsumeFinishReplay": true,
+      "malformedMismatchSymlinkSourceStaleRuntime": "blocked",
+      "archiveInput": {
+        "arbitrarySymlinkAncestorOrLeaf": "blocked-before-verifier-or-store",
+        "darwinSystemTemporaryAlias": "only-root-owned-/tmp-symlink-to-private-tmp-is-canonicalized-before-no-follow-validation",
+        "nonDarwin": "uses-input-absolute-path-without-temporary-alias-canonicalization",
+        "ancestorDirectoryChurn": "same-no-follow-directory-location-and-mode-required-while-unrelated-entry-metadata-may-change",
+        "directParentIntegrity": "full-no-follow-identity-remains-required-before-read"
+      },
+      "artifactDigestInput": "canonical-sha256-prefix-or-exact-64-hex-normalized-before-archive-verification"
+    }
+  },
+  "externalAttestationCommandPlan": {
+    "certificateOidcIssuer": "https://token.actions.githubusercontent.com",
+    "command": [
+      "attestation",
+      "verify"
+    ],
+    "denySelfHostedRunners": true,
+    "exitClassification": {
+      "authenticationRequired": 4,
+      "normalVerificationFailure": 1,
+      "verified": 0
+    },
+    "format": "json",
+    "predicateType": "https://github.com/jyt6640/persona-harness/attestations/project-finish-attestation.1",
+    "repositorySelector": {
+      "flag": "--repo",
+      "source": "caller-enrollment.repositorySlug"
+    },
+    "schemaVersion": "consumer-authority-external-attestation-command-plan.1",
+    "signerDigest": {
+      "flag": "--signer-digest",
+      "source": "reusable-signer.workflowSha"
+    },
+    "signerSelector": {
+      "flag": "--signer-workflow",
+      "source": "reusable-signer.workflowPath"
+    },
+    "sourceDigest": {
+      "flag": "--source-digest",
+      "source": "caller-source.sourceSha"
+    },
+    "sourceRef": {
+      "flag": "--source-ref",
+      "source": "caller-source.ref"
+    },
+    "tokenIsolation": {
+      "artifactAccess": "forbidden-during-preflight",
+      "credential": "absent",
+      "output": "bounded-classification-only"
+    }
+  },
+  "prearmedExternalHandoff": {
+    "prepare": {
+      "allowedBeforeFixture": [
+        "prepare-one-exact-git-backed-fixture-clone-and-isolated-consumer-home-store",
+        "source-bound-bootstrap-before-final-fixture-commit",
+        "retain-identical-unpushed-final-fixture-commit-as-the-installed-consumer-cwd-head",
+        "post-commit-excluded-runtime-build-only-preparation",
+        "v4-immutable-tracked-binding-and-stage-scoped-residue-cleanliness-after-every-prepush-stage",
+        "workflow-selected-observer-gh-tool-preflight-without-package-path-lookup-token-or-artifact",
+        "public-pre-authority-readiness",
+        "public-initialized-finish-state",
+        "observer-credential-preflight",
+        "external-attestation-command-plan-preflight",
+        "external-artifact-transport-plan-preflight",
+        "enroll-after-prefetch-readiness",
+        "status-and-explain-on-ready-same-consumer"
+      ],
+      "consumer": "isolated-exact-registry-install",
+      "credentialPreflight": {
+        "acquisition": "host-gh-auth-token-read-once",
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-observer.mjs --json",
+        "consumerHome": "isolated-ephemeral",
+        "hostCredential": "host-gh-only",
+        "logging": "forbidden",
+        "observerWorker": "github-actions-read-only",
+        "persistence": "forbidden",
+        "productFallback": "forbidden",
+        "scope": "fixed-authenticated-user-and-empty-sentinel-actions-metadata",
+        "tokenEnvironment": "PH_OBSERVER_PREFLIGHT_GITHUB_TOKEN"
+      },
+      "attestationCommandPreflight": {
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-external-attestation.mjs --json",
+        "credential": "absent",
+        "input": "no-artifact-grammar-sentinel-only",
+        "output": "bounded-exit-classification-only",
+        "productFallback": "forbidden"
+      },
+      "prohibitedBeforeArtifact": [
+        "artifact-download",
+        "online-crypto-validation",
+        "authority-fetch",
+        "finish-consumption",
+        "replay-observation"
+      ],
+      "requiredBeforeFixtureAuthorization": "public-initialized-finish-blocked-only-on-trusted-authority-required",
+      "artifactTransportPreflight": {
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-external-artifact-transport.mjs --json",
+        "credential": "absent",
+        "input": "no-artifact-fixed-topology-and-metadata-sentinel-only",
+        "output": "bounded-parser-classification-only",
+        "productFallback": "forbidden"
+      }
+    },
+    "trigger": {
+      "onlyAfter": "immutable-prepush-fixture-commit-v4-tracked-binding-and-stage-scoped-residue-cleanliness-and-workflow-selected-observer-gh-tool-ready-and-natural-current-version-original-artifact",
+      "steps": [
+        "pre-push-fixture-parent-cwd-head-source-identity-and-v4-cleanliness-ready",
+        "normal-push-of-the-same-final-fixture-commit-to-main",
+        "current-original-artifact-transport-and-online-crypto",
+        "verify-online-before-leaf-certificate-notAfter-without-validity-relaxation",
+        "authority-fetch-discovers-and-binds-original-artifact",
+        "same-consumer-trusted-unconsumed-no-readiness-blocker",
+        "finish-consume-once",
+        "finish-replay-blocked"
+      ]
+    },
+    "nonAuthority": [
+      "preflight-does-not-self-validate",
+      "readiness-does-not-authorize-fixture",
+      "readiness-does-not-grant-authority",
+      "readiness-does-not-persist-or-log-host-credential",
+      "command-plan-preflight-does-not-access-artifact-or-network",
+      "command-plan-preflight-does-not-reuse-beta15-artifact",
+      "transport-plan-preflight-does-not-access-an-artifact-or-network",
+      "transport-model-safety-is-not-online-crypto-or-authority-evidence"
+    ],
+    "finalObserverProcedure": {
+      "credentialHandoff": "retrieve-host-gh-credential-silently-outside-the-consumer-and-pass-it-only-to-one-fixed-read-only-observer-child",
+      "execution": {
+        "environment": "env-i-with-only-fixed-allowlisted-variables",
+        "toolPaths": [
+          "absolute-gh",
+          "absolute-git",
+          "absolute-node",
+          "absolute-npm"
+        ]
+      },
+      "failureHandling": {
+        "afterFetch": "do-not-reinitialize-switch-reset-or-retry",
+        "beforeFetch": "abandon-and-recreate-the-consumer-before-any-live-fetch"
+      },
+      "hostStateIsolation": {
+        "externalStateRoots": [
+          "HOME",
+          "GH_CONFIG_DIR",
+          "XDG_CONFIG_HOME",
+          "XDG_DATA_HOME",
+          "XDG_STATE_HOME",
+          "XDG_CACHE_HOME",
+          "XDG_RUNTIME_DIR",
+          "TMPDIR",
+          "APPDATA",
+          "LOCALAPPDATA",
+          "USERPROFILE",
+          "GIT_CONFIG_GLOBAL",
+          "GIT_CONFIG_SYSTEM",
+          "NPM_CONFIG_USERCONFIG",
+          "NPM_CONFIG_CACHE"
+        ],
+        "forbiddenConsumerPaths": [
+          ".local/**",
+          ".config/**",
+          ".cache/**"
+        ],
+        "rootBinding": "all-fifteen-absolute-state-roots-must-remain-outside-the-consumer-realpath"
+      },
+      "liveSteps": [
+        "normal-push-of-the-same-final-fixture-commit-to-main",
+        "current-original-artifact-transport-and-online-crypto-within-leaf-window-without-validity-relaxation",
+        "authenticated-fetch-once",
+        "same-consumer-status-and-explain-trusted-unconsumed-with-no-readiness-blocker",
+        "Finish-consume-once",
+        "immediate-Finish-replay-blocked"
+      ],
+      "noReinitializationAfterFetch": [
+        "consumer-cwd-git-head-or-source-profile-change",
+        "consumer-home-or-authority-store-replacement",
+        "bootstrap-plan-report-evidence-or-loop-state-reset",
+        "consumer-switch-or-copied-state"
+      ],
+      "postCommitPreparation": {
+        "allowedMutations": [
+          ".persona/.ph-init-manifest.json",
+          ".persona/evidence/**",
+          ".persona/workflow/**",
+          ".gradle/**",
+          "build/**",
+          "node_modules/**"
+        ],
+        "forbiddenSourceBoundMutations": [
+          ".github/workflows/research-attestation.yml",
+          ".gitignore",
+          ".local/**",
+          ".config/**",
+          ".cache/**",
+          ".opencode/opencode.json",
+          ".persona/conventions/**",
+          ".persona/harness.jsonc",
+          ".persona/policies/**",
+          ".persona/project-profile.jsonc",
+          ".persona/rules/**",
+          "AGENTS.md",
+          "root-gradle-build-and-settings",
+          "src/**"
+        ]
+      },
+      "prePushCommit": {
+        "cwd": "must-be-exact-fixture-git-toplevel-and-canonical-project-root",
+        "finalCommit": "one-final-commit-contains-only-allowed-source-bound-bootstrap-outputs-and-reusable-pin",
+        "head": "must-remain-the-identical-unpushed-final-fixture-commit",
+        "remoteParent": "must-remain-unchanged-immediately-before-normal-push",
+        "sourceBoundBootstrap": "must-complete-before-final-commit",
+        "sourceIdentity": "immutable-tracked-source-head-parent-reusable-pin-and-digest-map-with-v4-stage-scoped-runtime-residue-projection"
+      },
+      "prefetchSteps": [
+        "one-exact-git-backed-fixture-clone-cwd-head-and-isolated-consumer-home-store",
+        "baseline-v4-immutable-tracked-binding-and-normalized-residue-projection",
+        "source-bound-bootstrap-before-final-fixture-commit",
+        "source-bound-preparation-v4-constrained-final-diff-and-normalized-residue-projection",
+        "one-final-commit-with-only-source-bound-bootstrap-allowlist-and-reusable-pin",
+        "post-commit-excluded-runtime-build-only-slow-preparation-before-push-without-arbitrary-outer-timeout",
+        "credential-handoff-v4-immutable-binding-and-normalized-residue-projection",
+        "observer-child-v4-immutable-binding-and-normalized-residue-projection",
+        "immediately-pre-push-v4-immutable-binding-and-normalized-residue-projection",
+        "workflow-selected-observer-gh-tool-dpkg-ownership-byte-strict-record-qualified-regular-nonsymlink-policy-primary-optional-known-completion-mode-independent-and-strict-secondary-inert-or-block-copyfile-excl-private-copy-reassessment-version-compatible-runner-temp-isolated-token-free-state-root-fixed-selector-stage-and-package-record-shape-without-package-path-lookup",
+        "public-bootstrap-current-loop-state",
+        "public-plan-accept-retained-or-draft-plan",
+        "public-Gradle-test-compileJava-and-clean",
+        "public-README-profile-and-Java-evidence",
+        "public-implementation-and-review-report-ingress",
+        "public-plan-status",
+        "public-bootstrap-current-loop-state",
+        "public-bootstrap-current-loop-state",
+        "public-plan-accept-retained-or-draft-plan"
+      ],
+      "procedureRecord": {
+        "location": "coordinator-governed-immutable-external-procedure-record-no-local-path",
+        "sha256": "5389c027b21f72f325a5d9e467ecd4d150f672e14da1d04f51774602a284c57d"
+      },
+      "stageCleanliness": [
+        "baseline",
+        "source-bound-preparation",
+        "credential-handoff",
+        "observer-child",
+        "immediately-pre-push"
+      ],
+      "timeBounds": {
+        "certificateValidity": "non-relaxable-verify-online-before-leaf-certificate-notAfter",
+        "outerTimeout": "forbidden-no-arbitrary-outer-timeout",
+        "slowPreparation": "complete-before-one-normal-push"
+      },
+      "schemaVersion": "consumer-authority-final-observer-procedure.4",
+      "cleanliness": {
+        "constrainedFinalDiff": "exact-v4-record-final-diff-only-with-immutable-reusable-pin",
+        "finalDiffPolicy": "only-documented-source-bound-bootstrap-paths-plus-the-required-immutable-reusable-pin",
+        "diagnostic": "normalized-clean-diagnostic-equals-stage-expected-residue-set",
+        "enumeration": "nul-safe-untracked-and-ignored-only",
+        "forbiddenConsumerPaths": [
+          ".local/**",
+          ".config/**",
+          ".cache/**"
+        ],
+        "immutableTrackedBinding": "exact-cwd-git-toplevel-head-parent-remote-parent-reusable-pin-digest-and-source-identity-digest-map",
+        "residueInspection": "lstat-and-realpath-contained-for-every-residue-and-ancestor",
+        "sourceProjection": "only-source-identity-and-project-finish-runtime-exclusions",
+        "stageResidueProjection": "exact-normalized-v4-record-residue-set-for-each-of-the-five-fences",
+        "policy": {
+          "allowedSourceBoundFinalDiffPaths": [
+            ".gitignore",
+            ".opencode/opencode.json",
+            ".persona/conventions/**",
+            ".persona/harness.jsonc",
+            ".persona/policies/**",
+            ".persona/project-profile.jsonc",
+            ".persona/rules/**",
+            "AGENTS.md",
+            "build.gradle",
+            "build.gradle.kts",
+            "gradle.properties",
+            "settings.gradle",
+            "settings.gradle.kts"
+          ],
+          "allowedResidues": [
+            {
+              "kind": "directory",
+              "path": ".gradle"
+            },
+            {
+              "kind": "file",
+              "path": ".persona/.ph-init-manifest.json"
+            },
+            {
+              "kind": "directory",
+              "path": ".persona/evidence"
+            },
+            {
+              "kind": "directory",
+              "path": ".persona/workflow"
+            },
+            {
+              "kind": "directory",
+              "path": "build"
+            },
+            {
+              "kind": "directory",
+              "path": "node_modules"
+            }
+          ],
+          "cleanDiagnostic": "git-clean-ndx-normalized-against-the-nul-safe-status-projection",
+          "forbiddenConsumerPaths": [
+            ".local/**",
+            ".config/**",
+            ".cache/**"
+          ],
+          "requiredReusablePinPath": ".github/workflows/research-attestation.yml",
+          "schemaVersion": "consumer-authority-final-observer-cleanliness.1",
+          "stageResidueProjection": {
+            "baseline": [],
+            "source-bound-preparation": [
+              ".persona/.ph-init-manifest.json",
+              ".persona/workflow"
+            ],
+            "credential-handoff": [
+              ".gradle",
+              ".persona/.ph-init-manifest.json",
+              ".persona/evidence",
+              ".persona/workflow",
+              "build",
+              "node_modules"
+            ],
+            "observer-child": [
+              ".gradle",
+              ".persona/.ph-init-manifest.json",
+              ".persona/evidence",
+              ".persona/workflow",
+              "build",
+              "node_modules"
+            ],
+            "immediately-pre-push": [
+              ".gradle",
+              ".persona/.ph-init-manifest.json",
+              ".persona/evidence",
+              ".persona/workflow",
+              "build",
+              "node_modules"
+            ]
+          },
+          "stages": [
+            "baseline",
+            "source-bound-preparation",
+            "credential-handoff",
+            "observer-child",
+            "immediately-pre-push"
+          ],
+          "statusEnumeration": "git-status-porcelain-v1-z-untracked-all-ignored-matching"
+        }
+      },
+      "observerGhTool": {
+        "executable": "workflow-selected-absolute-regular-non-symlink",
+        "invocation": "direct-exec-no-shell-no-path-lookup",
+        "output": "bounded-version-classification-only",
+        "provisioning": "workflow-owned-runner-package-record-to-private-regular-copy",
+        "schemaVersion": "consumer-authority-observer-gh-tool.2",
+        "version": ">=2.96.0 <3.0.0"
+      },
+      "observerGhSelection": "source-and-protected-ubuntu-ci-only-workflow-owned-dpkg-ownership-and-byte-strict-package-record-qualified-primary-with-optional-known-completion-mode-independent-validation-and-strict-secondary-inert-or-block-policy-copyfile-excl-private-copy-reassessment-with-runner-temp-isolated-token-free-state-root-and-fixed-nonreflective-selector-stage-and-package-record-shape",
+      "attestationCommandPreflight": {
+        "command": "node node_modules/persona-harness/scripts/preflight-consumer-authority-external-attestation.mjs --json --observer-gh <workflow-private-copy>",
+        "credential": "absent",
+        "input": "fixed-nonmaterialized-placeholder-exact-rendered-command-plan-and-help-only",
+        "output": "bounded-parser-classification-only",
+        "parser": "direct-absolute-gh-attestation-verify-placeholder-exact-plan-arguments-help",
+        "productFallback": "forbidden",
+        "stateIsolation": "same-explicit-token-free-home-gh-xdg-temp-git-and-npm-state-root-as-direct-version-assessment",
+        "timeout": "short-parser-only-bound"
+      }
+    }
+  },
+  "hostedResidual": {
+    "id": "v0822-current-package-acceptance-and-authorized-current-artifact-observation",
+    "requiredEvidence": "one separately authorized normal push of the v4-prepared exact fixture commit; immediate current-version original-artifact transport, online verification before leaf-certificate-notAfter without validity relaxation, one authenticated fetch, one Finish consumption, and immediate replay rejection occur in the same unchanged consumer",
+    "whyLocalCannotClose": "A real current signed artifact, leaf-certificate validity window, isolated external credential, online verification, and GitHub Actions discovery cannot be produced locally. Source and CI-shaped packed exercise prove v4 tracked-binding, stage-scoped residue cleanliness, workflow-selected observer-gh ownership, byte-strict primary package-record selector lifecycle, COPYFILE_EXCL private-copy reassessment, one runner-temp isolated token-free state root, fixed-placeholder exact-plan help parser preflight without artifact or network access, strict secondary validation, fixed stage and shape diagnostics. Package acceptance separately proves current package-lock-acceptance binding, exact-tar provenance, normal installation, installed-only no-source fallback, CLI approval-before-mutation behavior, complete source and fresh-installed fixture import closure, explicit public acceptance of a retained draft plan, exact Linux authority-fetch child envelope behavior, trusted-unconsumed-persisted discovery result binding, public readiness, privacy, trusted modeled fetch, one Finish consumption, and replay block without accessing a live artifact."
+  },
+  "mutationBoundary": {
+    "performed": false,
+    "prohibited": [
+      "npm-publish",
+      "tag-or-dist-tag-mutation",
+      "release-creation",
+      "artifact-download-or-live-verification",
+      "Finish-consumption",
+      "fixture-push-or-workflow-dispatch"
+    ]
+  },
+  "beta16HistoricalExternal": {
+    "outcome": "external-gh-artifact-download-exit-zero-with-zero-byte-output-before-zip-validation",
+    "reusableForBeta17": false,
+    "version": "0.8.0-beta.16"
+  },
+  "externalArtifactTransportPlan": {
+    "api": {
+      "accept": "application/vnd.github+json, application/octet-stream",
+      "origin": "https://api.github.com",
+      "version": "2022-11-28"
+    },
+    "artifact": {
+      "maximumBytes": 8388608,
+      "source": "validated-actions-artifact-metadata"
+    },
+    "endpoint": {
+      "method": "GET",
+      "path": "/repos/{caller-enrollment.repositorySlug}/actions/artifacts/{artifact.id}/zip"
+    },
+    "output": {
+      "files": [
+        "original.zip",
+        "bundle.json"
+      ],
+      "root": "private-observer-mkdtemp",
+      "write": "no-follow-reserved-and-promote-after-validation"
+    },
+    "redirect": {
+      "authorization": "api-origin-only",
+      "maximum": 1,
+      "permittedHosts": [
+        "pipelines.actions.githubusercontent.com",
+        "results-receiver.actions.githubusercontent.com",
+        "*.blob.core.windows.net"
+      ]
+    },
+    "response": {
+      "contentTypes": [
+        "application/octet-stream",
+        "application/zip"
+      ],
+      "status": 200,
+      "timeoutMs": 15000
+    },
+    "schemaVersion": "consumer-authority-external-artifact-transport-plan.1"
+  },
+  "beta17HistoricalPublish": {
+    "beta16Registry": "present-in-public-registry",
+    "outcome": "canonical-tar-and-provenance-completed-before-authorization-shaped-registry-put-e404",
+    "reusableForBeta18": false,
+    "version": "0.8.0-beta.17"
+  },
+  "canonicalPackagePublisherPlan": {
+    "canonicalPackerRuntime": {
+      "node": "20.19.0",
+      "npm": "10.8.2"
+    },
+    "canonicalTar": {
+      "handoff": "exact-canonical-tarball-sha256-and-package-content-identity",
+      "source": "canonical-package-packer-output-and-package-facts"
+    },
+    "preflight": {
+      "argv": [
+        "npm",
+        "publish",
+        "<canonical-tarball>",
+        "--access",
+        "public",
+        "--tag",
+        "<selected-dist-tag>",
+        "--provenance",
+        "--dry-run"
+      ],
+      "credentials": "no-custom-token-exchange-or-auth-state-output",
+      "mode": "node24-npm11-exact-canonical-tarball-dry-run"
+    },
+    "publisherEnvironment": {
+      "canonicalPackerConfigInheritance": "forbidden",
+      "isolated": [
+        "HOME",
+        "NPM_CONFIG_CACHE",
+        "NPM_CONFIG_GLOBALCONFIG",
+        "NPM_CONFIG_USERCONFIG"
+      ]
+    },
+    "publisherRuntime": {
+      "node": "24.18.0",
+      "npm": "11.16.0"
+    },
+    "npmTrustedPublishingMinimum": {
+      "node": "22.14.0",
+      "npm": "11.5.1"
+    },
+    "registryPut": {
+      "evidence": "hosted-only",
+      "historicalBeta17": "authorization-shaped-registry-response-not-package-absence"
+    },
+    "schemaVersion": "canonical-package-publisher-plan.1"
+  },
+  "beta18HistoricalPublish": {
+    "contentIdentity": "bf3de031ae9ed6d9ab290291f151d0befc1fc4804465f55bddb5ad382399a150",
+    "outcome": "registry-publish-succeeded-and-canonical-registry-bytes-matched-before-an-unsupported-githead-metadata-requirement-blocked-readback",
+    "rawTarballSha256": "66ef460552d03fd067baf412c1d4952e5bd42811b419c585092fc7a75b4c54e6",
+    "reusableForBeta19": false,
+    "version": "0.8.0-beta.18"
+  },
+  "beta19HistoricalPublish": {
+    "outcome": "published-immutable-staging-package-not-reusable-as-current-package-evidence",
+    "reusableForBeta20": false,
+    "version": "0.8.0-beta.19"
+  },
+  "beta20HistoricalFinalObserver": {
+    "outcome": "trusted-unconsumed-live-fetch-followed-by-intentional-workflow-state-uninitialized-block-not-reusable-as-closure-evidence",
+    "procedureRecordSha256": "1d370a4e4cdd55b20e27c016073246b78c373548c84c89c3499b3838e27980a7",
+    "reusableForBeta21": false,
+    "version": "0.8.0-beta.20"
+  },
+  "beta21HistoricalFinalObserver": {
+    "outcome": "online-crypto-and-bindings-passed-after-leaf-window-expired-before-authority-fetch-not-reusable-as-closure-evidence",
+    "reusableForBeta22": false,
+    "version": "0.8.0-beta.21"
+  },
+  "beta22HistoricalFinalObserver": {
+    "outcome": "host-gh-xdg-state-created-untracked-local-device-id-after-final-commit-not-reusable-as-closure-evidence",
+    "reusableForBeta23": false,
+    "version": "0.8.0-beta.22"
+  },
+  "beta23HistoricalFinalObserver": {
+    "outcome": "raw-empty-porcelain-and-clean-contradicted-approved-runtime-build-residue-after-final-commit-not-reusable-as-closure-evidence",
+    "reusableForBeta28": false,
+    "version": "0.8.0-beta.23"
+  },
+  "beta24HistoricalExternalContract": {
+    "outcome": "supplied-bundle-source-contract-required-ambient-gh-and-rejected-linux-runtime-owned-uv-use-io-uring-not-reusable-as-closure-evidence",
+    "reusableForBeta28": false,
+    "version": "0.8.0-beta.24"
+  },
+  "beta25HistoricalObserverTool": {
+    "outcome": "protected-verify-used-an-unselected-literal-observer-gh-path-and-collapsed-tool-stage-not-reusable-as-closure-evidence",
+    "reusableForBeta28": false,
+    "version": "0.8.0-beta.25"
+  },
+  "beta26HistoricalObserverTool": {
+    "outcome": "ubuntu-gh-package-record-includes-a-regular-nonexecutable-completion-sibling-and-basename-only-selection-blocked-before-tool-assessment-not-reusable-as-closure-evidence",
+    "reusableForBeta28": false,
+    "version": "0.8.0-beta.26"
+  },
+  "beta27HistoricalObserverTool": {
+    "outcome": "protected-verify-selector-collapsed-runner-package-list-record-assessment-private-copy-and-output-handoff-failures-to-one-non-attributable-code-not-reusable-as-closure-evidence",
+    "reusableForBeta28": false,
+    "version": "0.8.0-beta.27"
+  },
+  "observerGhTool": {
+    "executable": "workflow-selected-absolute-regular-non-symlink",
+    "invocation": "direct-exec-no-shell-no-path-lookup",
+    "output": "bounded-version-classification-only",
+    "provisioning": "workflow-owned-runner-package-record-to-private-regular-copy",
+    "schemaVersion": "consumer-authority-observer-gh-tool.2",
+    "version": ">=2.96.0 <3.0.0"
+  },
+  "observerGhSelection": {
+    "diagnostics": "only-fixed-tool-invalid-tool-unavailable-tool-version-unsupported-parser-rejected-parser-timeout-non-tool-stage-selector-stage-and-package-record-shape-codes-cross-the-package-contract-boundary",
+    "dpkgOwnership": "bounded-direct-dpkg-query-requires-gh-installed-status-ii-and-the-current-linux-architecture-before-package-record-parsing",
+    "packageRecord": {
+      "ancillary": "allow-an-absent-documented-completion-silently-and-allow-only-the-present-known-completion-after-no-follow-regular-nonsymlink-validation-regardless-of-executable-mode; treat-other-present-secondary-basename-gh-records-as-inert-only-after-no-follow-regular-nonsymlink-nonexecutable-validation; reject-listed-missing-symlink-nonregular-or-unknown-executable-secondary-records",
+      "encoding": "bounded-buffer-valid-utf8-lf-only-with-an-optional-final-lf-and-no-nul-cr-blank-duplicate-or-noncanonical-records",
+      "primary": "require-exactly-the-policy-primary-/usr/bin/gh-record-as-a-regular-nonsymlink-executable-after-no-follow-lstat",
+      "shapes": [
+        "record-encoding",
+        "record-path",
+        "primary-missing",
+        "primary-unsafe",
+        "ancillary-unsafe",
+        "executable-ambiguous",
+        "lstat-failed",
+        "canonical"
+      ],
+      "unknownExecutables": "reject-every-secondary-executable-or-alias-as-ambiguous"
+    },
+    "stateIsolation": "every-direct-version-assessment-and-parser-help-preflight-use-only-a-validated-runner-temp-real-directory-as-one-explicit-token-free-home-gh-xdg-temp-git-and-npm-state-root-so-gh-cannot-create-consumer-local-state",
+    "stages": [
+      "environment",
+      "package-list",
+      "package-record",
+      "source-assessment",
+      "private-reservation",
+      "private-copy",
+      "private-assessment",
+      "output-handoff"
+    ],
+    "unknown": "selector-internal",
+    "workflow": "validate-runner-temp-and-github-output-then-owned-dpkg-status-architecture-and-byte-record-primary-selection-with-optional-known-completion-mode-independent-validation-and-strict-secondary-inert-or-block-policy-and-runner-temp-isolated-token-free-state-root-to-copyfile-excl-private-regular-nonsymlink-copy-reassessment-and-parser-help-preflight-before-ci-publish-and-release-package-contracts"
+  },
+  "closureCompleteness": {
+    "deterministicLinks": [
+      "immutable-tracked-source-head-parent-pin-and-digest-map",
+      "v4-stage-scoped-runtime-residue-cleanliness",
+      "ubuntu-dpkg-ownership-byte-strict-package-record-policy-primary-with-optional-known-completion-mode-independent-validation-and-strict-secondary-records-workflow-selected-copyfile-excl-private-observer-gh-tool-reassessment-and-no-network-parser-help-preflight-with-fixed-nonreflective-selector-stage-and-package-record-shape-without-package-path-lookup",
+      "linux-runtime-owned-uv-use-io-uring-child-envelope-only",
+      "same-consumer-public-bootstrap-explicit-plan-accept-loop-gradle-reports-evidence-readiness",
+      "host-state-isolated-credential-preflight-and-command-transport-plans",
+      "current-original-byte-and-online-crypto-before-leaf-certificate-notAfter",
+      "authenticated-fetch-to-trusted-unconsumed",
+      "one-Finish-consumption-and-immediate-replay-block",
+      "current-package-lock-acceptance-version-binding-and-complete-source-and-fresh-installed-fixture-import-closure-without-source-fallback",
+      "workflow-private-copy-reassessment-and-fixed-placeholder-exact-plan-help-parser-preflight-without-artifact-network-token-or-ambient-state",
+      "actual-opencode-first-assistant-response-linked-event-and-zero-pre-approval-mutation-trace-without-transformed-input-substitution"
+    ],
+    "localProof": "clean-linux-node20-source-built-and-fresh-packed-installed-v4-cleanliness-qualified-dpkg-ownership-byte-strict-primary-with-optional-known-completion-mode-independent-validation-and-strict-secondary-package-record-copyfile-excl-private-copy-reassessment-runner-temp-isolated-token-free-gh-state-fixed-placeholder-exact-plan-help-parser-preflight-fixed-stage-and-shape-diagnostics-current-package-lock-acceptance-binding-complete-fixture-import-closure-and-authority-child-contracts-with-exact-linux-runtime-envelope-and-trusted-unconsumed-persisted-discovery-result-binding",
+    "remainingUncertainty": "one-authorized-v4-fixture-push-and-immediate-current-artifact-observation-only"
+  },
+  "beta28HistoricalObserverTool": {
+    "outcome": "protected-verify-observed-an-unattributed-package-record-selector-block-before-tests-and-beta28-is-not-reusable-as-closure-evidence",
+    "reusableForBeta29": false,
+    "version": "0.8.0-beta.28"
+  },
+  "beta29HistoricalObserverTool": {
+    "outcome": "protected-verify-observed-a-primary-validated-package-record-block-at-a-conflated-nonselected-ancillary-shape-and-beta29-is-not-reusable-as-closure-evidence",
+    "reusableForBeta30": false,
+    "version": "0.8.0-beta.29"
+  },
+  "beta30HistoricalObserverTool": {
+    "outcome": "protected-verify-observed-a-documented-nonselected-completion-in-executable-mode-classified-as-an-ambiguous-executor-before-the-known-completion-policy-branch-and-beta30-is-not-reusable-as-closure-evidence",
+    "reusableForBeta31": false,
+    "version": "0.8.0-beta.30"
+  },
+  "beta31HistoricalPackageContract": {
+    "outcome": "protected-verify-revealed-stale-current-version-authority-and-incomplete-source-and-release-fixture-copy-graphs-before-the-real-source-and-fresh-tar-package-contracts-could-run",
+    "reusableForBeta32": false,
+    "version": "0.8.0-beta.31"
+  },
+  "beta32HistoricalParserPreflight": {
+    "outcome": "protected-verify-reached-the-authoritative-bundle-source-contract-but-live-invalid-bundle-attestation-preflight-entered-gh-network-and-sigstore-initialization-before-parser-rejection-and-timed-out-not-reusable-as-closure-evidence",
+    "reusableForBeta33": false,
+    "version": "0.8.0-beta.32"
+  },
+  "rc1HistoricalNextChannelOnly": {
+    "outcome": "published-to-the-next-channel-to-open-the-release-candidate-cycle-the-integrity-roadmap-requires-before-stable-and-establishes-no-latest-or-general-availability-claim-on-its-own",
+    "reusableForGa": false,
+    "version": "0.8.0-rc.1"
+  },
+  "gaHistoricalSupersededByPatch": {
+    "outcome": "accepted-as-the-general-availability-record-for-its-own-tree-and-superseded-only-for-the-two-no-native-artifact-finish-fixes-this-patch-carries-so-it-establishes-no-claim-about-them",
+    "reusableForV081": false,
+    "version": "0.8.0"
+  },
+  "acceptanceResponsibilities": {
+    "package": {
+      "excludes": [
+        "attestation-parser",
+        "observer-gh-selector"
+      ],
+      "requires": [
+        "exact-tar-provenance",
+        "normal-install",
+        "installed-only-no-source-fallback",
+        "cli-and-approval-before-mutation",
+        "post-model-assistant-response-and-pre-approval-trace"
+      ]
+    },
+    "sourceAndProtectedUbuntuCi": {
+      "requires": [
+        "workflow-owned-dpkg-observer-gh-selection",
+        "private-regular-nonsymlink-observer-gh-copy",
+        "path-free-attestation-parser-preflight"
+      ]
+    }
+  },
+  "v081HistoricalRelease": {
+    "outcome": "accepted-for-its-own-v081-tree-and-not-reusable-for-the-published-v082-release-or-any-later-package",
+    "reusableForV082": false,
+    "version": "0.8.1"
+  },
+  "v082HistoricalRelease": {
+    "outcome": "published-latest-v082-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.2"
+  },
+  "v083HistoricalRelease": {
+    "outcome": "published-0.8.3-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.3"
+  },
+  "openCodeInterviewObservation": {
+    "approvalBoundary": {
+      "event": "permission.replied",
+      "acceptedResponses": [
+        "once",
+        "always"
+      ],
+      "preApprovalMutation": "tool.execute-before-or-after-command-executed-file-edited-file-watcher-updated-session-diff-and-assistant-tool-parts-block-before-approval"
+    },
+    "input": "normalized-opencode-event-stream-from-message-and-plugin-hook-surfaces",
+    "firstResponse": {
+      "assistantMessage": "first-message.updated-role-assistant-with-one-session-bound-message-id",
+      "assistantText": "message.part.updated-text-parts-linked-to-that-assistant-message-only",
+      "transformedUserInput": "user-messages-and-user-text-parts-never-satisfy-the-post-model-predicate",
+      "messageIdentity": "message-id-session-role-and-event-surface-association-is-immutable-role-drift-blocks",
+      "partIdentity": "part-id-session-message-type-and-event-surface-association-is-immutable-linked-text-cannot-promote",
+      "lifecycle": {
+        "message": "message.updated-first-or-same-binding-repeat-then-user-message.removed-once; no-unknown-remove-or-update-after-remove",
+        "part": "message.part.updated-first-or-same-binding-repeat-then-message.part.removed-once; no-unknown-remove-update-after-remove-or-rebind",
+        "rejectedCodes": [
+          "message-lifecycle-invalid",
+          "part-lifecycle-invalid"
+        ]
+      },
+      "cardinality": "one-assistant-message-id-only-repeated-updates-of-that-id-allowed"
+    },
+    "response": {
+      "predicate": "one-bounded-single-question-response-with-one-terminal-question-mark",
+      "rejectedContent": [
+        "solution",
+        "plan",
+        "command",
+        "file-change",
+        "multiple-or-nonquestion-content"
+      ]
+    },
+    "output": "fixed-status-booleans-and-code-only-no-response-text-path-argument-token-or-host-data",
+    "schemaVersion": "opencode-interview-observation.1"
+  },
+  "v084HistoricalRelease": {
+    "outcome": "published-0.8.4-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.4"
+  },
+  "v085HistoricalRelease": {
+    "outcome": "immutable-v085-tag-release-is-unpublished-history-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.5"
+  },
+  "v086HistoricalRelease": {
+    "outcome": "published-latest-v086-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.6"
+  },
+  "v087HistoricalRelease": {
+    "outcome": "published-latest-v087-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.7"
+  },
+  "v088HistoricalRelease": {
+    "outcome": "published-latest-v088-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.8"
+  },
+  "v0813HistoricalRelease": {
+    "outcome": "immutable-v0813-tag-release-is-unpublished-history-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.13"
+  },
+  "v0812HistoricalRelease": {
+    "outcome": "published-0.8.12-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.12"
+  },
+  "v0810HistoricalRelease": {
+    "outcome": "published-latest-v0810-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.10"
+  },
+  "v0811HistoricalRelease": {
+    "outcome": "published-0.8.11-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.11"
+  },
+  "v089HistoricalRelease": {
+    "outcome": "published-latest-v089-release-is-immutable-and-not-reusable-for-this-unpublished-v0814-source-candidate-or-any-later-package",
+    "reusableForV0814": false,
+    "version": "0.8.9"
+  },
+  "observerGhVersionProbe": {
+    "ceilingMs": 15000,
+    "timeoutCode": "gh-command-version-timeout",
+    "unavailableCode": "gh-command-unavailable",
+    "unsupportedCode": "gh-command-version-unsupported",
+    "invalidCode": "gh-command-tool-invalid",
+    "selectorCode": "observer-gh-workflow-tool-timeout",
+    "stageCode": "observer-gh-tool-timeout",
+    "output": "fixed-code-only-no-process-output"
+  },
+  "v0814HistoricalRelease": {
+    "outcome": "published-0.8.14-release-is-immutable-and-not-reusable-for-this-unpublished-v0815-source-candidate-or-any-later-package",
+    "reusableForV0815": false,
+    "version": "0.8.14"
+  },
+  "v0815HistoricalRelease": {
+    "outcome": "published-0.8.15-release-is-immutable-and-not-reusable-for-this-unpublished-v0816-source-candidate-or-any-later-package",
+    "reusableForV0816": false,
+    "version": "0.8.15"
+  },
+  "v0816HistoricalRelease": {
+    "outcome": "published-0.8.16-release-is-immutable-and-not-reusable-for-this-unpublished-v0817-source-candidate-or-any-later-package",
+    "reusableForV0817": false,
+    "version": "0.8.16"
+  },
+  "initialization": {
+    "packageTemplateIdentity": "canonical-package-template-digest-remains-separate-from-effective-bootstrap-overlay-file-digests",
+    "repairStaging": "manifest-less-recognized-portable-static-baseline-records-the-caller-realpath-before-staging-ownership-verification"
+  },
+  "projectFinishSourceIdentity": {
+    "adoptedInstructionPolicy": "remains-source-bound",
+    "repairInferenceObservations": "excludes-only-.persona/instructions/inferred.json-and-.persona/instructions/conflicts.json"
+  },
+  "v0821HistoricalRelease": {
+    "outcome": "published-0.8.21-release-is-immutable-and-not-reusable-for-this-unpublished-v0822-source-candidate-or-any-later-package",
+    "reusableForV0822": false,
+    "version": "0.8.21"
+  }
+}