persona-harness 0.8.35 → 0.8.37

package/README.md

@@ -95,6 +95,22 @@ Persona Harness exposes two deliberately separate tracks:
   OpenCode plugin registered, it delivers one bounded Context block only after
   a safe observed file target. It grants no completion authority.
 
+### Context Boundary
+
+- **Activation:** `context.enabled` is explicit and `default-off`; it does not
+  inherit broad runtime guidance switches.
+- **Authority:** Context is `non-authoritative`: it cannot grant completion or
+  verification authority.
+- **Isolation:** Context-only paths do not execute project commands or contact
+  GitHub/network.
+- **Host:** OpenCode is the only implemented delivery adapter; live host
+  delivery remains a separate, unobserved boundary.
+- **Evidence:** Context usefulness remains `INCONCLUSIVE` until independent
+  external evidence exists.
+- **Product focus:** the productized workflow focus is Java/Spring. The
+  TypeScript reference implementation and fixtures support this experimental
+  Context boundary; they are not a TypeScript code-quality claim.
+
 Context configuration is separate from legacy runtime guidance switches. A
 missing block stays disabled. An explicit `context.enabled` setting controls
 only the targeted Context adapter; it does not enable legacy runtime guidance,

package/dist/context-external-validation/context-external-validation-parser.d.ts

@@ -0,0 +1,3 @@
+import type { ContextExternalValidationProtocol, ContextExternalValidationStatus } from "./context-external-validation-types.js";
+export declare function parseContextExternalValidationProtocol(value: unknown): ContextExternalValidationProtocol | undefined;
+export declare function parseContextExternalValidationStatus(value: unknown): ContextExternalValidationStatus | undefined;

package/dist/context-external-validation/context-external-validation-parser.js

@@ -0,0 +1,251 @@
+import { CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS, CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA, CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, } from "./context-external-validation-types.js";
+const CANDIDATE_KEYS = ["commit", "packageVersion", "tarSha256"];
+const PARTICIPANT_KEYS = ["id", "relationship"];
+const PROTOCOL_KEYS = ["candidate", "cohort", "interventionPolicy", "maximumMinutesPerStart", "schemaVersion", "taskDigest", "tokenReference"];
+const STATUS_KEYS = ["observations", "productVerdict", "protocol", "schemaVersion", "status"];
+const OBSERVATION_KEYS = [
+    "candidate",
+    "conflictResolution",
+    "contradictionIncreased",
+    "correctionReduced",
+    "durationMinutes",
+    "intervention",
+    "outcome",
+    "overreachIncreased",
+    "participantId",
+    "policySurvived",
+    "startState",
+    "taskDigest",
+    "taskRegressed",
+    "tokenOverheadPermille",
+];
+const MINIMUM_COHORT_SIZE = 3;
+const MAXIMUM_COHORT_SIZE = 5;
+const MAXIMUM_MINUTES_PER_START = 240;
+const MAXIMUM_RECORDED_TOKEN_OVERHEAD_PERMILLE = 10_000;
+export function parseContextExternalValidationProtocol(value) {
+    if (!isRecord(value) || !hasExactKeys(value, PROTOCOL_KEYS) || value.schemaVersion !== CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA)
+        return undefined;
+    const candidate = parseCandidate(value.candidate);
+    const cohort = parseCohort(value.cohort);
+    if (candidate === undefined || cohort === undefined || !isSha256(value.taskDigest))
+        return undefined;
+    if (value.tokenReference !== "same-task-context-off")
+        return undefined;
+    if (value.interventionPolicy !== "none" && value.interventionPolicy !== "clarification-only")
+        return undefined;
+    if (!isBoundedInteger(value.maximumMinutesPerStart, 1, MAXIMUM_MINUTES_PER_START))
+        return undefined;
+    return {
+        candidate,
+        cohort,
+        interventionPolicy: value.interventionPolicy,
+        maximumMinutesPerStart: value.maximumMinutesPerStart,
+        schemaVersion: CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA,
+        taskDigest: value.taskDigest,
+        tokenReference: "same-task-context-off",
+    };
+}
+export function parseContextExternalValidationStatus(value) {
+    if (!isRecord(value) || !hasExactKeys(value, STATUS_KEYS) || value.schemaVersion !== CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA)
+        return undefined;
+    if (value.status === "not-started") {
+        if (value.protocol !== null || !isEmptyArray(value.observations) || value.productVerdict !== "INCONCLUSIVE")
+            return undefined;
+        return CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS;
+    }
+    const protocol = parseContextExternalValidationProtocol(value.protocol);
+    const observations = parseObservations(value.observations);
+    if (protocol === undefined || observations === undefined || !observationsMatchProtocol(observations, protocol))
+        return undefined;
+    if (value.status === "preregistered") {
+        if (!isEmptyArray(observations) || value.productVerdict !== "INCONCLUSIVE")
+            return undefined;
+        return { observations, productVerdict: "INCONCLUSIVE", protocol, schemaVersion: CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, status: "preregistered" };
+    }
+    if (value.status === "observing") {
+        if (observations.length === 0 || observations.length >= protocol.cohort.length || value.productVerdict !== "INCONCLUSIVE")
+            return undefined;
+        return { observations, productVerdict: "INCONCLUSIVE", protocol, schemaVersion: CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, status: "observing" };
+    }
+    if (value.status !== "completed" || !hasCompleteDenominator(observations, protocol.cohort))
+        return undefined;
+    if (value.productVerdict !== "PRODUCT_GO" && value.productVerdict !== "PRODUCT_NO_GO")
+        return undefined;
+    return { observations, productVerdict: value.productVerdict, protocol, schemaVersion: CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, status: "completed" };
+}
+function parseCandidate(value) {
+    if (!isRecord(value) || !hasExactKeys(value, CANDIDATE_KEYS))
+        return undefined;
+    if (!isCommit(value.commit) || !isPackageVersion(value.packageVersion) || !isSha256(value.tarSha256))
+        return undefined;
+    return { commit: value.commit, packageVersion: value.packageVersion, tarSha256: value.tarSha256 };
+}
+function parseCohort(value) {
+    if (!Array.isArray(value) || value.length < MINIMUM_COHORT_SIZE || value.length > MAXIMUM_COHORT_SIZE)
+        return undefined;
+    const cohort = [];
+    for (const entry of value) {
+        const participant = parseParticipant(entry);
+        if (participant === undefined)
+            return undefined;
+        cohort.push(participant);
+    }
+    return isStrictlySortedUnique(cohort.map((participant) => participant.id)) ? cohort : undefined;
+}
+function parseParticipant(value) {
+    if (!isRecord(value) || !hasExactKeys(value, PARTICIPANT_KEYS) || !isParticipantId(value.id))
+        return undefined;
+    if (value.relationship !== "independent" && value.relationship !== "past-collaborator" && value.relationship !== "disclosed-other")
+        return undefined;
+    return { id: value.id, relationship: value.relationship };
+}
+function parseObservations(value) {
+    if (!Array.isArray(value) || value.length > MAXIMUM_COHORT_SIZE)
+        return undefined;
+    const observations = [];
+    for (const entry of value) {
+        const observation = parseObservation(entry);
+        if (observation === undefined)
+            return undefined;
+        observations.push(observation);
+    }
+    return hasUnique(observations.map((observation) => observation.participantId)) ? observations : undefined;
+}
+function parseObservation(value) {
+    if (!isRecord(value) || !hasExactKeys(value, OBSERVATION_KEYS))
+        return undefined;
+    const candidate = parseCandidate(value.candidate);
+    const participantId = value.participantId;
+    const taskDigest = value.taskDigest;
+    if (candidate === undefined || !isParticipantId(participantId) || !isSha256(taskDigest))
+        return undefined;
+    const identity = { candidate, participantId, taskDigest };
+    if (value.startState === "accepted-start")
+        return parseAcceptedStart(value, identity);
+    if (value.startState === "declined-before-start" || value.startState === "withdrawn-before-start") {
+        return parseUnstartedObservation(value, identity, value.startState);
+    }
+    return undefined;
+}
+function parseAcceptedStart(value, identity) {
+    const outcome = value.outcome;
+    const conflictResolution = value.conflictResolution;
+    const contradictionIncreased = value.contradictionIncreased;
+    const correctionReduced = value.correctionReduced;
+    const durationMinutes = value.durationMinutes;
+    const intervention = value.intervention;
+    const overreachIncreased = value.overreachIncreased;
+    const policySurvived = value.policySurvived;
+    const taskRegressed = value.taskRegressed;
+    const tokenOverheadPermille = value.tokenOverheadPermille;
+    if ((outcome !== "completed" && outcome !== "not-completed") || (conflictResolution !== "accurate" && conflictResolution !== "inaccurate"))
+        return undefined;
+    if (!isBoolean(contradictionIncreased) || !isBoolean(correctionReduced) || !isBoundedInteger(durationMinutes, 1, MAXIMUM_MINUTES_PER_START))
+        return undefined;
+    if (!isBoolean(overreachIncreased) || !isBoolean(policySurvived) || !isBoolean(taskRegressed))
+        return undefined;
+    if (!isBoundedInteger(tokenOverheadPermille, 0, MAXIMUM_RECORDED_TOKEN_OVERHEAD_PERMILLE))
+        return undefined;
+    if (intervention !== "none" && intervention !== "declared-clarification")
+        return undefined;
+    return {
+        candidate: identity.candidate,
+        conflictResolution,
+        contradictionIncreased,
+        correctionReduced,
+        durationMinutes,
+        intervention,
+        overreachIncreased,
+        outcome,
+        participantId: identity.participantId,
+        policySurvived,
+        startState: "accepted-start",
+        taskDigest: identity.taskDigest,
+        taskRegressed,
+        tokenOverheadPermille,
+    };
+}
+function parseUnstartedObservation(value, identity, startState) {
+    if (value.outcome !== "not-observed" || value.conflictResolution !== "not-observed" || value.intervention !== "none")
+        return undefined;
+    if (value.contradictionIncreased !== null || value.correctionReduced !== null || value.durationMinutes !== null || value.overreachIncreased !== null)
+        return undefined;
+    if (value.policySurvived !== null || value.taskRegressed !== null || value.tokenOverheadPermille !== null)
+        return undefined;
+    return {
+        candidate: identity.candidate,
+        conflictResolution: "not-observed",
+        contradictionIncreased: null,
+        correctionReduced: null,
+        durationMinutes: null,
+        intervention: "none",
+        overreachIncreased: null,
+        outcome: "not-observed",
+        participantId: identity.participantId,
+        policySurvived: null,
+        startState,
+        taskDigest: identity.taskDigest,
+        taskRegressed: null,
+        tokenOverheadPermille: null,
+    };
+}
+function observationsMatchProtocol(observations, protocol) {
+    return observations.every((observation) => {
+        if (!sameCandidate(observation.candidate, protocol.candidate) || observation.taskDigest !== protocol.taskDigest)
+            return false;
+        if (!protocol.cohort.some((participant) => participant.id === observation.participantId))
+            return false;
+        if (observation.startState !== "accepted-start")
+            return true;
+        if (observation.durationMinutes === null || observation.durationMinutes > protocol.maximumMinutesPerStart)
+            return false;
+        return protocol.interventionPolicy === "clarification-only" || observation.intervention === "none";
+    });
+}
+function hasCompleteDenominator(observations, cohort) {
+    return observations.length === cohort.length && observations.every((observation, index) => observation.participantId === cohort[index]?.id);
+}
+function sameCandidate(left, right) {
+    return left.commit === right.commit && left.packageVersion === right.packageVersion && left.tarSha256 === right.tarSha256;
+}
+function hasExactKeys(value, keys) {
+    return Object.keys(value).length === keys.length && Object.keys(value).every((key) => keys.includes(key));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isEmptyArray(value) {
+    return Array.isArray(value) && value.length === 0;
+}
+function isStrictlySortedUnique(values) {
+    let previous;
+    for (const value of values) {
+        if (previous !== undefined && previous >= value)
+            return false;
+        previous = value;
+    }
+    return true;
+}
+function hasUnique(values) {
+    return new Set(values).size === values.length;
+}
+function isCommit(value) {
+    return typeof value === "string" && /^[0-9a-f]{40}$/u.test(value);
+}
+function isPackageVersion(value) {
+    return typeof value === "string" && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u.test(value);
+}
+function isSha256(value) {
+    return typeof value === "string" && /^[0-9a-f]{64}$/u.test(value);
+}
+function isParticipantId(value) {
+    return typeof value === "string" && /^P-(?:0[1-9]|[1-9][0-9])$/u.test(value);
+}
+function isBoundedInteger(value, minimum, maximum) {
+    return typeof value === "number" && Number.isInteger(value) && value >= minimum && value <= maximum;
+}
+function isBoolean(value) {
+    return typeof value === "boolean";
+}
+//# sourceMappingURL=context-external-validation-parser.js.map

package/dist/context-external-validation/context-external-validation-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-external-validation-parser.js","sourceRoot":"","sources":["../../src/context-external-validation/context-external-validation-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,yCAAyC,GAC1C,MAAM,wCAAwC,CAAA;AAS/C,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAU,CAAA;AACzE,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,cAAc,CAAU,CAAA;AACxD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,CAAU,CAAA;AACvJ,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAU,CAAA;AACtG,MAAM,gBAAgB,GAAG;IACvB,WAAW;IACX,oBAAoB;IACpB,wBAAwB;IACxB,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,SAAS;IACT,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,uBAAuB;CACf,CAAA;AAEV,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAC7B,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAC7B,MAAM,yBAAyB,GAAG,GAAG,CAAA;AACrC,MAAM,wCAAwC,GAAG,MAAM,CAAA;AAQvD,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,2CAA2C;QAAE,OAAO,SAAS,CAAA;IAEpJ,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAA;IACpG,IAAI,KAAK,CAAC,cAAc,KAAK,uBAAuB;QAAE,OAAO,SAAS,CAAA;IACtE,IAAI,KAAK,CAAC,kBAAkB,KAAK,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAA;IAC9G,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,EAAE,yBAAyB,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnG,OAAO;QACL,SAAS;QACT,MAAM;QACN,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,aAAa,EAAE,2CAA2C;QAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,uBAAuB;KACxC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,yCAAyC;QAAE,OAAO,SAAS,CAAA;IAEhJ,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YAAE,OAAO,SAAS,CAAA;QAC7H,OAAO,0CAA0C,CAAA;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,sCAAsC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvE,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IAEhI,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YAAE,OAAO,SAAS,CAAA;QAC5F,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,yCAAyC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IACtJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YAAE,OAAO,SAAS,CAAA;QAC3I,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,yCAAyC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IAClJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5G,IAAI,KAAK,CAAC,cAAc,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,KAAK,eAAe;QAAE,OAAO,SAAS,CAAA;IACvG,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,yCAAyC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACxJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACtH,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,SAAS,CAAA;IAEvH,MAAM,MAAM,GAA2C,EAAE,CAAA;IACzD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACjG,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9G,IAAI,KAAK,CAAC,YAAY,KAAK,aAAa,IAAI,KAAK,CAAC,YAAY,KAAK,mBAAmB,IAAI,KAAK,CAAC,YAAY,KAAK,iBAAiB;QAAE,OAAO,SAAS,CAAA;IACpJ,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,SAAS,CAAA;IAEjF,MAAM,YAAY,GAA2C,EAAE,CAAA;IAC/D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC/C,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChC,CAAC;IAED,OAAO,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3G,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAAE,OAAO,SAAS,CAAA;IAEhF,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;IACnC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAA;IACzG,MAAM,QAAQ,GAA8B,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,CAAA;IAEpF,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB;QAAE,OAAO,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACrF,IAAI,KAAK,CAAC,UAAU,KAAK,uBAAuB,IAAI,KAAK,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QAClG,OAAO,yBAAyB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA8B,EAC9B,QAAmC;IAEnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAA;IACnD,MAAM,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;IAC3D,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAA;IACjD,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;IACvC,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAA;IACnD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IACzC,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAA;IACzD,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,eAAe,CAAC,IAAI,CAAC,kBAAkB,KAAK,UAAU,IAAI,kBAAkB,KAAK,YAAY,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5J,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,EAAE,yBAAyB,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7J,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/G,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,CAAC,EAAE,wCAAwC,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3G,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,wBAAwB;QAAE,OAAO,SAAS,CAAA;IAE1F,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,kBAAkB;QAClB,sBAAsB;QACtB,iBAAiB;QACjB,eAAe;QACf,YAAY;QACZ,kBAAkB;QAClB,OAAO;QACP,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc;QACd,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,aAAa;QACb,qBAAqB;KACtB,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,KAA8B,EAC9B,QAAmC,EACnC,UAA8D;IAE9D,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,IAAI,KAAK,CAAC,kBAAkB,KAAK,cAAc,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IACtI,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACtK,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3H,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,kBAAkB,EAAE,cAAc;QAClC,sBAAsB,EAAE,IAAI;QAC5B,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,MAAM;QACpB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,cAAc;QACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,IAAI;QACpB,UAAU;QACV,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,aAAa,EAAE,IAAI;QACnB,qBAAqB,EAAE,IAAI;KAC5B,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,YAA6D,EAAE,QAA2C;IAC3I,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE;QACxC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAAE,OAAO,KAAK,CAAA;QAC7H,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,WAAW,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAA;QACtG,IAAI,WAAW,CAAC,UAAU,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAA;QAC5D,IAAI,WAAW,CAAC,eAAe,KAAK,IAAI,IAAI,WAAW,CAAC,eAAe,GAAG,QAAQ,CAAC,sBAAsB;YAAE,OAAO,KAAK,CAAA;QACvH,OAAO,QAAQ,CAAC,kBAAkB,KAAK,oBAAoB,IAAI,WAAW,CAAC,YAAY,KAAK,MAAM,CAAA;IACpG,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAA6D,EAC7D,MAAuD;IAEvD,OAAO,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;AAC7I,CAAC;AAED,SAAS,aAAa,CAAC,IAAwC,EAAE,KAAyC;IACxG,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAA;AAC3H,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;AAC3G,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAyB;IACvD,IAAI,QAA4B,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAC7D,QAAQ,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,MAAyB;IAC1C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,OAAe,EAAE,OAAe;IACxE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,CAAA;AACrG,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,SAAS,CAAA;AACnC,CAAC"}

package/dist/context-external-validation/context-external-validation-types.d.ts

@@ -0,0 +1,77 @@
+export declare const CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA: "persona-context-external-validation-protocol.1";
+export declare const CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA: "persona-context-external-validation-status.1";
+export declare const CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA: "persona-context-external-validation-result.1";
+export type ContextExternalValidationCandidate = {
+    readonly commit: string;
+    readonly packageVersion: string;
+    readonly tarSha256: string;
+};
+export type ContextExternalValidationParticipant = {
+    readonly id: string;
+    readonly relationship: "independent" | "past-collaborator" | "disclosed-other";
+};
+export type ContextExternalValidationProtocol = {
+    readonly candidate: ContextExternalValidationCandidate;
+    readonly cohort: readonly ContextExternalValidationParticipant[];
+    readonly interventionPolicy: "none" | "clarification-only";
+    readonly maximumMinutesPerStart: number;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA;
+    readonly taskDigest: string;
+    readonly tokenReference: "same-task-context-off";
+};
+export type ContextExternalValidationObservation = {
+    readonly candidate: ContextExternalValidationCandidate;
+    readonly conflictResolution: "accurate" | "inaccurate" | "not-observed";
+    readonly contradictionIncreased: boolean | null;
+    readonly correctionReduced: boolean | null;
+    readonly durationMinutes: number | null;
+    readonly intervention: "none" | "declared-clarification";
+    readonly overreachIncreased: boolean | null;
+    readonly outcome: "completed" | "not-completed" | "not-observed";
+    readonly participantId: string;
+    readonly policySurvived: boolean | null;
+    readonly startState: "accepted-start" | "declined-before-start" | "withdrawn-before-start";
+    readonly taskDigest: string;
+    readonly taskRegressed: boolean | null;
+    readonly tokenOverheadPermille: number | null;
+};
+export type ContextExternalValidationProductVerdict = "INCONCLUSIVE" | "PRODUCT_GO" | "PRODUCT_NO_GO";
+export type ContextExternalValidationStatus = {
+    readonly observations: readonly [];
+    readonly productVerdict: "INCONCLUSIVE";
+    readonly protocol: null;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA;
+    readonly status: "not-started";
+} | {
+    readonly observations: readonly [];
+    readonly productVerdict: "INCONCLUSIVE";
+    readonly protocol: ContextExternalValidationProtocol;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA;
+    readonly status: "preregistered";
+} | {
+    readonly observations: readonly ContextExternalValidationObservation[];
+    readonly productVerdict: "INCONCLUSIVE";
+    readonly protocol: ContextExternalValidationProtocol;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA;
+    readonly status: "observing";
+} | {
+    readonly observations: readonly ContextExternalValidationObservation[];
+    readonly productVerdict: "PRODUCT_GO" | "PRODUCT_NO_GO";
+    readonly protocol: ContextExternalValidationProtocol;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA;
+    readonly status: "completed";
+};
+export type ContextExternalValidationResult = {
+    readonly code: "context-external-validation-status-invalid" | "context-external-validation-verdict-mismatch";
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA;
+    readonly status: "blocked";
+} | {
+    readonly acceptedStartCount: number;
+    readonly independentStartCount: number;
+    readonly observationCount: number;
+    readonly phase: ContextExternalValidationStatus["status"];
+    readonly productVerdict: ContextExternalValidationProductVerdict;
+    readonly schemaVersion: typeof CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA;
+    readonly status: "ready";
+};
+export declare const CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS: ContextExternalValidationStatus;

package/dist/context-external-validation/context-external-validation-types.js

@@ -0,0 +1,12 @@
+export const CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA = "persona-context-external-validation-protocol.1";
+export const CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA = "persona-context-external-validation-status.1";
+export const CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA = "persona-context-external-validation-result.1";
+const EMPTY_OBSERVATIONS = [];
+export const CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS = Object.freeze({
+    observations: EMPTY_OBSERVATIONS,
+    productVerdict: "INCONCLUSIVE",
+    protocol: null,
+    schemaVersion: CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA,
+    status: "not-started",
+});
+//# sourceMappingURL=context-external-validation-types.js.map

package/dist/context-external-validation/context-external-validation-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-external-validation-types.js","sourceRoot":"","sources":["../../src/context-external-validation/context-external-validation-types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2CAA2C,GAAG,gDAAyD,CAAA;AACpH,MAAM,CAAC,MAAM,yCAAyC,GAAG,8CAAuD,CAAA;AAChH,MAAM,CAAC,MAAM,yCAAyC,GAAG,8CAAuD,CAAA;AAwFhH,MAAM,kBAAkB,GAAgB,EAAE,CAAA;AAE1C,MAAM,CAAC,MAAM,0CAA0C,GAAoC,MAAM,CAAC,MAAM,CAAC;IACvG,YAAY,EAAE,kBAAkB;IAChC,cAAc,EAAE,cAAc;IAC9B,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,yCAAyC;IACxD,MAAM,EAAE,aAAa;CACtB,CAAC,CAAA"}

package/dist/context-external-validation/context-external-validation.d.ts

@@ -0,0 +1,2 @@
+import type { ContextExternalValidationResult } from "./context-external-validation-types.js";
+export declare function evaluateContextExternalValidationStatus(value: unknown): ContextExternalValidationResult;

package/dist/context-external-validation/context-external-validation.js

@@ -0,0 +1,56 @@
+import { CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA } from "./context-external-validation-types.js";
+import { parseContextExternalValidationStatus } from "./context-external-validation-parser.js";
+const MINIMUM_INDEPENDENT_STARTS = 3;
+const PRODUCT_GO_TOKEN_OVERHEAD_PERMILLE = 1_300;
+export function evaluateContextExternalValidationStatus(value) {
+    const parsed = parseContextExternalValidationStatus(value);
+    if (parsed === undefined)
+        return blocked("context-external-validation-status-invalid");
+    if (parsed.status === "not-started") {
+        return {
+            acceptedStartCount: 0,
+            independentStartCount: 0,
+            observationCount: 0,
+            phase: "not-started",
+            productVerdict: "INCONCLUSIVE",
+            schemaVersion: CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA,
+            status: "ready",
+        };
+    }
+    const acceptedStarts = parsed.observations.filter((observation) => observation.startState === "accepted-start");
+    const independentStartCount = acceptedStarts.filter((observation) => relationshipFor(parsed.protocol.cohort, observation.participantId) === "independent").length;
+    const productVerdict = parsed.status === "completed"
+        ? calculateCompletedVerdict(parsed.protocol, acceptedStarts, independentStartCount)
+        : "INCONCLUSIVE";
+    if (parsed.productVerdict !== productVerdict)
+        return blocked("context-external-validation-verdict-mismatch");
+    return {
+        acceptedStartCount: acceptedStarts.length,
+        independentStartCount,
+        observationCount: parsed.observations.length,
+        phase: parsed.status,
+        productVerdict,
+        schemaVersion: CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA,
+        status: "ready",
+    };
+}
+function calculateCompletedVerdict(protocol, acceptedStarts, independentStartCount) {
+    const positiveOutcomes = acceptedStarts.filter((observation) => observation.correctionReduced === true || observation.policySurvived === true).length;
+    const qualifies = independentStartCount >= MINIMUM_INDEPENDENT_STARTS
+        && positiveOutcomes >= 2
+        && acceptedStarts.every((observation) => observation.outcome === "completed")
+        && acceptedStarts.every((observation) => observation.conflictResolution === "accurate")
+        && acceptedStarts.every((observation) => observation.contradictionIncreased === false && observation.overreachIncreased === false)
+        && acceptedStarts.every((observation) => observation.taskRegressed === false)
+        && acceptedStarts.every((observation) => observation.durationMinutes !== null && observation.durationMinutes <= protocol.maximumMinutesPerStart)
+        && acceptedStarts.every((observation) => observation.tokenOverheadPermille !== null && observation.tokenOverheadPermille <= PRODUCT_GO_TOKEN_OVERHEAD_PERMILLE)
+        && acceptedStarts.every((observation) => observation.intervention === "none");
+    return qualifies ? "PRODUCT_GO" : "PRODUCT_NO_GO";
+}
+function relationshipFor(cohort, participantId) {
+    return cohort.find((participant) => participant.id === participantId)?.relationship;
+}
+function blocked(code) {
+    return { code, schemaVersion: CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA, status: "blocked" };
+}
+//# sourceMappingURL=context-external-validation.js.map

package/dist/context-external-validation/context-external-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-external-validation.js","sourceRoot":"","sources":["../../src/context-external-validation/context-external-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,wCAAwC,CAAA;AAQlG,OAAO,EAAE,oCAAoC,EAAE,MAAM,yCAAyC,CAAA;AAE9F,MAAM,0BAA0B,GAAG,CAAC,CAAA;AACpC,MAAM,kCAAkC,GAAG,KAAK,CAAA;AAEhD,MAAM,UAAU,uCAAuC,CAAC,KAAc;IACpE,MAAM,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,CAAA;IAC1D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,4CAA4C,CAAC,CAAA;IAEtF,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,kBAAkB,EAAE,CAAC;YACrB,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,CAAC;YACnB,KAAK,EAAE,aAAa;YACpB,cAAc,EAAE,cAAc;YAC9B,aAAa,EAAE,yCAAyC;YACxD,MAAM,EAAE,OAAO;SAChB,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,KAAK,gBAAgB,CAAC,CAAA;IAC/G,MAAM,qBAAqB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,KAAK,aAAa,CAAC,CAAC,MAAM,CAAA;IACjK,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,KAAK,WAAW;QAClD,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,qBAAqB,CAAC;QACnF,CAAC,CAAC,cAAc,CAAA;IAElB,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC,8CAA8C,CAAC,CAAA;IAC5G,OAAO;QACL,kBAAkB,EAAE,cAAc,CAAC,MAAM;QACzC,qBAAqB;QACrB,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5C,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,cAAc;QACd,aAAa,EAAE,yCAAyC;QACxD,MAAM,EAAE,OAAO;KAChB,CAAA;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,QAA2C,EAC3C,cAA+D,EAC/D,qBAA6B;IAE7B,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,iBAAiB,KAAK,IAAI,IAAI,WAAW,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,MAAM,CAAA;IACrJ,MAAM,SAAS,GAAG,qBAAqB,IAAI,0BAA0B;WAChE,gBAAgB,IAAI,CAAC;WACrB,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,KAAK,WAAW,CAAC;WAC1E,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,kBAAkB,KAAK,UAAU,CAAC;WACpF,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,sBAAsB,KAAK,KAAK,IAAI,WAAW,CAAC,kBAAkB,KAAK,KAAK,CAAC;WAC/H,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,KAAK,KAAK,CAAC;WAC1E,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,eAAe,KAAK,IAAI,IAAI,WAAW,CAAC,eAAe,IAAI,QAAQ,CAAC,sBAAsB,CAAC;WAC7I,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,qBAAqB,KAAK,IAAI,IAAI,WAAW,CAAC,qBAAqB,IAAI,kCAAkC,CAAC;WAC5J,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,YAAY,KAAK,MAAM,CAAC,CAAA;IAC/E,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAA;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,MAAuD,EAAE,aAAqB;IACrG,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,YAAY,CAAA;AACrF,CAAC;AAED,SAAS,OAAO,CAAC,IAAmG;IAClH,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,yCAAyC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC9F,CAAC"}

package/dist/context-external-validation/index.d.ts

@@ -0,0 +1,4 @@
+export { CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS, CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA, CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA, CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, } from "./context-external-validation-types.js";
+export type { ContextExternalValidationCandidate, ContextExternalValidationObservation, ContextExternalValidationParticipant, ContextExternalValidationProductVerdict, ContextExternalValidationProtocol, ContextExternalValidationResult, ContextExternalValidationStatus, } from "./context-external-validation-types.js";
+export { evaluateContextExternalValidationStatus } from "./context-external-validation.js";
+export { parseContextExternalValidationProtocol, parseContextExternalValidationStatus } from "./context-external-validation-parser.js";

package/dist/context-external-validation/index.js

@@ -0,0 +1,4 @@
+export { CONTEXT_EXTERNAL_VALIDATION_INITIAL_STATUS, CONTEXT_EXTERNAL_VALIDATION_PROTOCOL_SCHEMA, CONTEXT_EXTERNAL_VALIDATION_RESULT_SCHEMA, CONTEXT_EXTERNAL_VALIDATION_STATUS_SCHEMA, } from "./context-external-validation-types.js";
+export { evaluateContextExternalValidationStatus } from "./context-external-validation.js";
+export { parseContextExternalValidationProtocol, parseContextExternalValidationStatus } from "./context-external-validation-parser.js";
+//# sourceMappingURL=index.js.map

package/dist/context-external-validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/context-external-validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,yCAAyC,EACzC,yCAAyC,GAC1C,MAAM,wCAAwC,CAAA;AAU/C,OAAO,EAAE,uCAAuC,EAAE,MAAM,kCAAkC,CAAA;AAC1F,OAAO,EAAE,sCAAsC,EAAE,oCAAoC,EAAE,MAAM,yCAAyC,CAAA"}

package/dist/context-external-validation.d.ts

@@ -0,0 +1 @@
+export * from "./context-external-validation/index.js";

package/dist/context-external-validation.js

@@ -0,0 +1,2 @@
+export * from "./context-external-validation/index.js";
+//# sourceMappingURL=context-external-validation.js.map

package/dist/context-external-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-external-validation.js","sourceRoot":"","sources":["../src/context-external-validation.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAA"}

package/docs/current/README.md

@@ -23,6 +23,8 @@ history but do not become a current product or release claim.
 | Use the portable shared-skill or product-discovery guidance | [Persona Shared Skills Core](persona-shared-skills-core.md) |
 | Maintain a local personalization profile | [Personalization Profile V1](personalization-profile-v1.md) |
 | Follow the Context Personalization program | [Context Personalization Program Status](context-program-status.md) |
+| Contribute to Context Personalization safely | [Context contributor map](context-contributor-map.json) |
+| Prepare or audit Context external validation | [Context External Validation Protocol](context-external-validation.md) |
 | Define safe project-shareable team conventions | [Team Profile V2](context-team-profile-v2.md) |
 | Understand claims and measurement limits | [Measurement scorecard](measurement-scorecard.md) |
 | Review Finish or external authority boundaries | [Consumer Authority V1 decision](consumer-authority-v1-decision.md); the repository-only external-attested walkthrough supplies the full procedure |

package/docs/current/canonical-docs-index.md

@@ -16,6 +16,8 @@ Start with [Current Docs](README.md) unless you need a specific decision.
 | Portable shared-skill and product-discovery contract | `docs/current/persona-shared-skills-core.md` | Catalog ownership, interview approval, explicit handoffs, host boundary, and packaged surface. |
 | Personalization profile store | `docs/current/personalization-profile-v1.md` | Versioned local profile records, append-only lifecycle, privacy, and fail-closed storage. |
 | Context Personalization program | `docs/current/context-program-status.md` | Canonical P0 audit, isolated OpenCode delivery boundary, separation invariants, and claim status. |
+| Context contributor map | `docs/current/context-contributor-map.json` | Machine-checked current source ownership, credential-free local checks, and boundaries that stay separate from Context work. |
+| Context external-validation protocol | `docs/current/context-external-validation.md` | Strict preregistration and finite result-status contract; default state is no observations and `INCONCLUSIVE`. |
 | Team Profile V2 boundary | `docs/current/context-team-profile-v2.md` | Read-only project-shareable v2 Team Profile schema, v1 separation, shared-text safety, and pure resolver bridge. |
 | External environment procedure | `docs/current/external-environment-verification.md` | A bounded packaged-install check on a separate machine. |
 | External-attested Finish walkthrough | `docs/current/external-attested-finish-walkthrough.md` | Source-checkout-only enrolled/fetch/Finish/replay procedure and its limits. |

package/docs/current/context-contributor-map.json

@@ -0,0 +1,89 @@
+{
+  "schemaVersion": "persona-context-contributor-map.2",
+  "localChecks": [
+    {
+      "script": "test",
+      "command": "npm test"
+    },
+    {
+      "script": "typecheck",
+      "command": "npm run typecheck"
+    },
+    {
+      "script": "check:docs",
+      "command": "npm run check:docs"
+    }
+  ],
+  "operationalRoutes": [
+    {
+      "id": "private-security-report",
+      "marker": "## Reporting a vulnerability",
+      "path": "SECURITY.md"
+    },
+    {
+      "id": "context-local-verification",
+      "marker": "## Context contribution route",
+      "path": "CONTRIBUTING.md",
+      "script": "test"
+    },
+    {
+      "id": "owner-release-operations",
+      "marker": "# Release Operations",
+      "path": "docs/current/release/README.md"
+    },
+    {
+      "command": "npx ph doctor",
+      "id": "bootstrap-intake-diagnosis",
+      "marker": "if (command === \"doctor\")",
+      "path": "src/cli/index.ts"
+    }
+  ],
+  "ownership": [
+    {
+      "id": "context-core",
+      "paths": ["src/context-core/"]
+    },
+    {
+      "id": "context-profile",
+      "paths": ["src/context-profile/"]
+    },
+    {
+      "id": "context-cli",
+      "paths": ["src/cli/context-command.ts"]
+    },
+    {
+      "id": "context-delivery",
+      "paths": ["src/context-delivery/opencode-context-hooks.ts"]
+    },
+    {
+      "id": "context-external-validation",
+      "paths": ["src/context-external-validation/"]
+    },
+    {
+      "id": "workflow-integrity",
+      "paths": ["src/cli/workflow-command.ts", "src/cli/authority-command.ts"]
+    }
+  ],
+  "separateBoundaries": [
+    {
+      "id": "installed-package",
+      "reference": "test:package"
+    },
+    {
+      "id": "repository-contract",
+      "reference": "test:repository"
+    },
+    {
+      "id": "p0-implementation-release",
+      "reference": "#414"
+    },
+    {
+      "id": "generic-compatibility-release",
+      "reference": "#412"
+    },
+    {
+      "id": "host-observation",
+      "reference": "#410"
+    }
+  ]
+}

package/docs/current/context-external-validation-status.json

@@ -0,0 +1,7 @@
+{
+  "observations": [],
+  "productVerdict": "INCONCLUSIVE",
+  "protocol": null,
+  "schemaVersion": "persona-context-external-validation-status.1",
+  "status": "not-started"
+}

package/docs/current/context-external-validation.md

@@ -0,0 +1,91 @@
+# Context External Validation Protocol
+
+Status: current Context-specific preregistration and result-status contract.
+
+Machine-readable current state:
+[`context-external-validation-status.json`](context-external-validation-status.json).
+It records no protocol, no observations, and an `INCONCLUSIVE` product verdict.
+That is an absence of external evidence, not a negative result and not an
+invitation to simulate participants.
+
+## Purpose And Separation
+
+This protocol belongs to Context Personalization M9 and is tracked by
+[#429](https://github.com/jyt6640/persona-harness/issues/429). It records what
+must be fixed before a future independent observation can be interpreted.
+
+It does not replace either of these separate boundaries:
+
+- `context-comparison-manifest.json` is deterministic local fixture evidence
+  for OFF, legacy-broad, and targeted layered Context composition.
+- The independent Spring maintainer procedure is a Workflow Integrity
+  experiment and is not Context product-value evidence.
+
+No command, runtime hook, network call, GitHub authority action, workflow
+state, or participant action is implemented by this protocol. The evaluator is
+pure TypeScript and only validates supplied JSON-shaped values. It is available
+from the installed package as `persona-harness/context-external-validation`;
+that subpath is a parser and evaluator, not an observation runner.
+
+## Schemas
+
+The protocol uses `persona-context-external-validation-protocol.1`. Before any
+observation begins it requires exactly:
+
+- a 40-character candidate commit, package version, and SHA-256 tar digest;
+- one SHA-256 task digest, rather than task text, prompts, source, paths, or
+  participant contact information;
+- a three-to-five member pseudonymous cohort (`P-01` through `P-99`) with a
+  finite relationship category;
+- a finite per-start time limit, one declared intervention policy, and the
+  fixed `same-task-context-off` token reference.
+
+The result record uses `persona-context-external-validation-status.1` with
+four states:
+
+| State | Required meaning | Allowed product verdict |
+| --- | --- | --- |
+| `not-started` | No protocol and no observations have been recorded. | `INCONCLUSIVE` |
+| `preregistered` | An exact protocol exists, but no observation has started. | `INCONCLUSIVE` |
+| `observing` | A strict subset of the cohort has terminal records. | `INCONCLUSIVE` |
+| `completed` | Every cohort member has exactly one terminal record. | Calculated `PRODUCT_GO` or `PRODUCT_NO_GO` |
+
+Unknown fields, unbounded text, raw participant data, URLs, paths, credential
+shapes, unsupported relationship or intervention values, candidate mismatches,
+and malformed metrics are rejected. A missing protocol after `not-started`, a
+partial completed denominator, or a mismatched claimed verdict is also
+rejected.
+
+## Denominator And Verdict
+
+Each `completed` record must contain exactly one entry for every preregistered
+cohort pseudonym. An `accepted-start` carries bounded outcome metrics; a
+declined or pre-start withdrawal carries only fixed `not-observed` null
+metrics. This keeps every accepted start in the denominator and prevents a
+selective completed result.
+
+`PRODUCT_GO` is calculated only when all of the following are true:
+
+1. At least three recorded starts are independent.
+2. At least two starts reduce corrections or preserve the declared policy.
+3. Every started record completed the task, resolved its conflict accurately,
+   had no task regression, contradiction increase, or overreach increase, and
+   stayed inside the preregistered time budget.
+4. Every started record has token overhead at or below `1300` permille (1.3x)
+   and no maintainer intervention.
+
+`tokenOverheadPermille` is a normalized comparison value against the fixed
+`same-task-context-off` reference: `1000` means the reference amount. The
+status file retains neither raw token counts nor prompts; it only accepts the
+bounded normalized metric.
+
+A valid completed cohort that misses any criterion is `PRODUCT_NO_GO`. Before
+completion, or with no external evidence, the only possible verdict is
+`INCONCLUSIVE`. The record never stores raw prompts, source, paths,
+credentials, participant names, or free-form feedback.
+
+## What This Does Not Claim
+
+The initial status does not show that an external host received Context, that a
+model followed it, that users benefited, or that token use improved. It only
+makes the future evidence bar reproducible and fail-closed.

package/docs/current/context-program-status.md

@@ -2,16 +2,22 @@
 
 Status: current canonical program record.
 
-Last reconciled: 2026-08-29
+Last reconciled: 2026-08-30
 P0 implementation release baseline: `9b80a45070be10659150095cf701a6f375bc6600`
 P0 implementation package: [`persona-harness@0.8.33`](https://www.npmjs.com/package/persona-harness/v/0.8.33)
 P0 implementation lineage: [#414](https://github.com/jyt6640/persona-harness/issues/414) delivered through [#437](https://github.com/jyt6640/persona-harness/pull/437)
 Current comparison release: `19c397e4fed5b1cce7d024fbcc51350e9676105f`
 Current comparison package: [`persona-harness@0.8.34`](https://www.npmjs.com/package/persona-harness/v/0.8.34)
 Current comparison lineage: [#411](https://github.com/jyt6640/persona-harness/issues/411) delivered through [#439](https://github.com/jyt6640/persona-harness/pull/439)
+Current Team Profile v2 release: `90a913168edac40eb29290e7ff47885bb94b30fd`
+Current Team Profile v2 package: [`persona-harness@0.8.35`](https://www.npmjs.com/package/persona-harness/v/0.8.35)
+Current Team Profile v2 lineage: [#421](https://github.com/jyt6640/persona-harness/issues/421) delivered through [#440](https://github.com/jyt6640/persona-harness/pull/440)
+Current compatibility release: `9e8dcc3e72fab52dcb71c12c1a45cd3846929be8`
+Current compatibility package: [`persona-harness@0.8.36`](https://www.npmjs.com/package/persona-harness/v/0.8.36)
+Current compatibility lineage: [#412](https://github.com/jyt6640/persona-harness/issues/412) delivered through [#441](https://github.com/jyt6640/persona-harness/pull/441)
 Historical pre-integration audit source: `f677a635040ad55d8b7d25abab280c5703a153ea`
 Program issue: [#389](https://github.com/jyt6640/persona-harness/issues/389)
-Remaining bounded work: [#410](https://github.com/jyt6640/persona-harness/issues/410), [#412](https://github.com/jyt6640/persona-harness/issues/412), and [#421](https://github.com/jyt6640/persona-harness/issues/421)
+Remaining bounded work: hosted residual [#410](https://github.com/jyt6640/persona-harness/issues/410), plus local integration candidates [#429](https://github.com/jyt6640/persona-harness/issues/429), [#430](https://github.com/jyt6640/persona-harness/issues/430), [#433](https://github.com/jyt6640/persona-harness/issues/433), [#434](https://github.com/jyt6640/persona-harness/issues/434), [#435](https://github.com/jyt6640/persona-harness/issues/435), and [#436](https://github.com/jyt6640/persona-harness/issues/436)
 
 ## Purpose
 
@@ -118,16 +124,18 @@ evidence rather than a description of current protected main.
 | --- | --- | --- | --- |
 | M1 | delivered via #413 | Workflow Integrity and Context Personalization are named as distinct tracks in public help and README. | Preserve the separate product boundary. |
 | M2 | delivered via #413 | `ph context` provides explicit, default-off local Context inspection and enablement. | Preserve no-overwrite initialization and non-activating inspection. |
-| M3 | delivered via #413; v2 source candidate locally validated | A safe Team Profile v1 is resolved as a separate, local Context layer. | #421 adds a separate semantic v2 schema and explicit resolver bridge without silently upgrading v1 files; package and hosted gates remain separate. |
+| M3 | delivered and released via #421/#440 | `persona-context-team-profile.2` is a separate semantic schema and explicit pure-resolver layer. It does not silently upgrade v1 files or enable Context, CLI delivery, or host activation. | Preserve v1/v2 separation and default-off behavior. |
 | M4 | delivered via #413 | Pure Core resolves the seven precedence layers and produces a deterministic `persona-context-envelope.v1`. | Keep Core host-neutral. |
 | M5 | implementation delivered; hosted residual | Core has no OpenCode or Java runtime import; the isolated OpenCode adapter is locally covered. | #410 may observe the real transform only after its own named Delivery Control predicate. |
 | M6 | implementation delivered; hosted residual | Context resolution, rendering, and delivery are separated from legacy workflow/authority behavior. | Preserve the isolated adapter boundary during #410. |
-| M7 | open | Historical version checks remain a maintenance concern. | #412 owns the generic Context compatibility manifest and runner. |
+| M7 | delivered and released via #412/#441 | The generic Context compatibility manifest and runner are version-neutral. | Preserve the manifest-driven runner. |
 | M8 | delivered via #413 | `npm test` now selects focused source evidence and installed packages receive a separate smoke. | Keep full protected verification separate. |
-| M9 | implementation delivered; hosted residual | Context CLI and doctor report bounded local state without claiming host delivery. | #410 remains the sole real-host observation route after #414. |
-| M10 | delivered and released via #411/#439 | #411 provides a versioned three-arm protocol, strict ten-fixture manifest, and deterministic evaluator for Context OFF, legacy broad compatibility, and targeted layered envelopes. | Keep model, host, and operational measurements unavailable until a separately authorized observation; every local product verdict remains `INCONCLUSIVE`. |
-| M11 | open | Historical version-specific checks still need a version-neutral Context compatibility boundary. | #412 owns the manifest/runner work. |
-| M12 | verified-existing | CI critical-path optimization is already measured and active. | Preserve it and add only bounded Context checks to the correct lane. |
+| M9 | implementation candidate; external evidence absent | Local Context inspection and deterministic fixtures do not establish independent usefulness. | #429 adds a strict preregistration and result-status contract; its committed state records no observation and `INCONCLUSIVE`. |
+| M10 | delivered via #411/#439; #436 local candidate | #411 provides a versioned three-arm protocol, strict ten-fixture manifest, and deterministic evaluator for Context OFF, legacy broad compatibility, and targeted layered envelopes. #436 adds an explicit clean-current-checkout candidate source without changing the fixed corpus. | Keep model, host, and operational measurements unavailable until a separately authorized observation; every local product verdict remains `INCONCLUSIVE`. |
+| M11 | delivered and released via #412/#441 | The installed-package compatibility boundary uses a generic manifest and runner. | Keep version-specific acceptance scripts out of new Context changes. |
+| M12 | verified-existing; #431 local candidate | CI critical-path optimization is already measured and active. #431 classifies an unavailable repository observer as `clean-package-observer-gh-required` rather than a source-test failure. | Preserve the critical path; treat the named observer prerequisite as `ENVIRONMENT_BLOCKED` and add only bounded Context checks to the correct lane. |
+| M13 | mixed: #412 delivered; #430/#435 local candidates | Stable `v0.8.36` provides the generic manifest/runner; the contributor map and its security/release/bootstrap-intake routes are local candidates for a readable credential-free contributor route. | Preserve generic package/source-fallback checks and keep the route separate from hosted or release work. |
+| M14 | #433 local candidate | The README entrypoint makes Context activation, authority, host, evidence, and product-focus limits explicit, with usefulness still `INCONCLUSIVE`. | Preserve the public boundary without promoting local evidence to host delivery or product value. |
 
 ## Invariants
 
@@ -157,9 +165,23 @@ evidence rather than a description of current protected main.
    `19c397e4fed5b1cce7d024fbcc51350e9676105f`. It provides the fixture-only
    three-arm protocol below, does not initiate a host, model, workflow, or
    authority action, and cannot establish product value.
-4. **Remaining independent work:** #410 owns the sole real OpenCode-host
-   observation route; #421 owns Team Profile v2 and #412 owns the generic
-   installed-package compatibility boundary.
+4. **Team Profile v2 release:** #421 is delivered as stable `v0.8.35` through
+   #440 on `90a913168edac40eb29290e7ff47885bb94b30fd`. It preserves the
+   explicit Context boundary and does not begin host observation.
+5. **Compatibility release:** #412 is delivered as stable `v0.8.36` through
+   #441 on `9e8dcc3e72fab52dcb71c12c1a45cd3846929be8`. It provides the
+   generic installed-package compatibility manifest and runner.
+6. **Remaining independent work:** #410 owns the sole real OpenCode-host
+   observation route. #429 owns a preregistered external-validation schema
+   whose initial state remains `INCONCLUSIVE` without an observation.
+7. **Current local P0 candidates:** #429 records the external-validation
+   parser/evaluator and empty status, #430 records the contributor map, #433
+   records the README claim boundary, #434 reconciles current program status,
+   #435 binds contributor operations to existing security/release/diagnosis
+   routes, #436 adds the explicit clean-current-checkout comparison route, and
+   #431 classifies the repository observer prerequisite before package work.
+   They are local integration candidates only; none is release, host-delivery,
+   or product-value evidence.
 
 Only one public command, schema, resolver, adapter, CI, script, or documentation
 boundary is changed per child issue. A child issue closes only when its stated
@@ -189,9 +211,9 @@ not assert direct closure causality.
 | #401 | closed via #413 | Bare `ph context init` remains a no-write preview. Explicit `ph context init --enable` uses no-follow exclusive creation to write only a minimal `.persona/harness.jsonc` Context configuration in a fresh safe project. Existing regular config files, unsafe paths, and malformed arguments return finite errors without rewriting any configuration. It does not alter legacy feature flags, activate a host, or create completion state. Focused init/status/routing tests and the isolated tarball smoke cover the public surface. |
 | #402 | closed via #413 | `ph context doctor` now reuses the safe status readers instead of emitting fixed placeholder state. It reports bounded config/enablement/mode/budget/Team Profile diagnostics and explicitly distinguishes available local Core/CLI inspection from unavailable host delivery. It does not load personal rule content, write state, activate a host, or use network/shell/process/completion behavior. Focused doctor/status/routing tests and the isolated tarball smoke cover the public surface. |
 | #403 | closed via #413 | The isolated OpenCode adapter captures only safe observed targets, uses the local Context preview/envelope boundary, suppresses duplicate digests until session compaction/deletion, and mutates only the next matching user message. `context.enabled` is its sole feature switch; it does not inherit `runtimeInjection`. Adapter, actual plugin composition, status/doctor wording, type compatibility, and fail-closed target cases have focused RED-to-GREEN coverage. A real `experimental.chat.messages.transform` host observation remains separate. |
-| #411 | delivered through #439 | Stable `v0.8.34` binds the deterministic three-arm comparison source at `19c397e4fed5b1cce7d024fbcc51350e9676105f`. `persona-context-comparison-manifest.1` fixes ten P0 fixtures and compares `off`, `legacy-broad`, and `targeted-layered` through `persona-context-comparison-result.1`. The repository runner requires an explicit candidate commit and package version, rejects a local identity mismatch before evaluation, and produces 30 deterministic records. It emits only rule ids/layers and digests; model/host/operational fields remain `null` and every local product verdict is `INCONCLUSIVE`. |
+| #411 | delivered through #439; #436 local candidate | Stable `v0.8.34` binds the deterministic three-arm comparison source at `19c397e4fed5b1cce7d024fbcc51350e9676105f`. `persona-context-comparison-manifest.1` fixes ten P0 fixtures and compares `off`, `legacy-broad`, and `targeted-layered` through `persona-context-comparison-result.1`. The historical runner accepts explicit candidate commit and package-version metadata; #436 adds a distinct explicit `--current-checkout` source that binds a clean root checkout before evaluation. Both forms produce 30 deterministic records and emit only rule ids/layers and digests; model/host/operational fields remain `null` and every local product verdict is `INCONCLUSIVE`. |
 | #414 | delivered through #437 | Stable `v0.8.33` binds the P0 implementation package/source release lineage. It is immutable historical release evidence and does not authorize #410, a host session, or any Context product claim by itself. |
-| #421 | local source candidate | `persona-context-team-profile.2` adds a separate JSONC loader and explicit pure-resolver team layer. It rejects unknown fields, unsafe shared text, duplicate ids, active topic conflicts, malformed JSONC, and symlinked files without reading personal state or activating a host. Local source tests, typecheck, build, docs/scope checks, and package smoke pass. | Package acceptance, protected integration, CLI delivery, adapter delivery, runtime activation, and external effectiveness remain unstarted. |
+| #421 | delivered through #440 | Stable `v0.8.35` binds the Team Profile v2 source at `90a913168edac40eb29290e7ff47885bb94b30fd`. The separate JSONC loader and explicit pure-resolver layer reject unknown fields, unsafe shared text, duplicate ids, active topic conflicts, malformed JSONC, and symlinked files without reading personal state or activating a host. | Release and provenance evidence do not begin CLI delivery, adapter delivery, runtime activation, or external effectiveness observation. |
 
 The heavy `test:installed-package-contract` and full protected repository suite
 remain unchanged. The generic package smoke is version-neutral and does not
@@ -240,7 +262,7 @@ was not modified.
 | P0 implementation release lineage | #414 delivered stable `v0.8.33` through #437. Its immutable tag, GitHub Release, npm `latest`, canonical tar, and provenance bind to `9b80a45070be10659150095cf701a6f375bc6600`. | Historical P0 implementation release evidence does not prove live host delivery. |
 | Deterministic comparison release lineage | #411 delivered stable `v0.8.34` through #439. Its immutable tag, GitHub Release, npm `latest`, canonical tar, and provenance bind to `19c397e4fed5b1cce7d024fbcc51350e9676105f`. | It records only deterministic technical results; host/model/operational values remain unavailable and product verdicts remain `INCONCLUSIVE`. |
 | Hosted Context delivery | The current published comparison package contains the merged #403 adapter boundary, but no package/release record substitutes for the #410 start predicate. | #410 still needs its own named Delivery Control start predicate and one bounded real OpenCode observation. |
-| Other follow-ups | #421 has a local Team Profile v2 source candidate and #412 owns the generic Context compatibility runner. | #421 package and protected hosted gates remain unstarted; neither item may manufacture host or user-value evidence. |
+| Other follow-ups | #421 is delivered as stable `v0.8.35` through #440; #412 is delivered as stable `v0.8.36` through #441. | Neither release manufactures host or user-value evidence. |
 
 Product-value verdict remains **INCONCLUSIVE**. Local composition, package,
 release, and CI evidence do not establish host-session delivery or user benefit.
@@ -248,15 +270,20 @@ release, and CI evidence do not establish host-session delivery or user benefit.
 ## #411 Comparison Protocol
 
 The Context comparison runner is repository-side tooling, not an installed
-user command. It requires an explicit full candidate commit and package version
-so it can reject a checkout mismatch before it evaluates the fixed corpus:
+user command. Its default command explicitly selects the clean current
+checkout as the candidate source:
 
 ```bash
-npm run benchmark:context -- \
-  --candidate-commit <full-current-commit> \
-  --package-version <exact-package-version>
+npm run benchmark:context
 ```
 
+The runner reads only the local Git root, full `HEAD`, clean working-tree state,
+and root `package.json` version for that mode. For reproducible supplied
+metadata, invoke the runner directly with both `--candidate-commit` and
+`--package-version`; mixing the two source forms, partial metadata, a dirty
+checkout, or a package root outside the Git root fails before manifest
+evaluation.
+
 It produces one `persona-context-comparison-result.1` record for each of ten
 fixtures and three arms. It emits only rule identifiers, layers, and digests;
 host/model/operational measurements remain `null` and product verdicts remain
@@ -278,6 +305,7 @@ expand the released Context delivery scope or change its default-off boundary.
 Do not reopen the completed #390–#403 integration or #414 release paths.
 Delivery Control must record #410's own named hosted start predicate before one
 real OpenCode `experimental.chat.messages.transform` observation can begin.
-#421 and #412 remain independent follow-up boundaries. Do not infer host
-delivery or product value from local composition tests, catalog registration,
-release provenance, or historical evidence.
+#429 may validate a preregistration/result schema, but its initial state must
+remain `INCONCLUSIVE`. Do not infer host delivery or product value from local
+composition tests, catalog registration, release provenance, an empty
+external-validation status, or historical evidence.

package/docs/current/docs-inventory.md

@@ -59,6 +59,9 @@ Total indexed files: 342
 | `docs/current/clean-opencode-ph-bearshell-smoke.md` | current compatibility doc | - | Compatibility/current-era doc retained in place; migrate by summary and pointer before moving. |
 | `docs/current/consumer-authority-v1-decision.md` | current active pointer/status | - | Issue #108 V1 decision: the only enabled authority behavior is explicit `workflow finish implement --assurance cooperative` within the same Finish invocation after fixed local verification and one-time in-memory consumption; it is non-persistent, status/fetch/later closure remain blocked, and default/external boundaries remain blocked. |
 | `docs/current/context-comparison-manifest.json` | current test fixture manifest | - | Exact ten-fixture source-only corpus for the Context OFF, legacy broad compatibility, and targeted layered comparison protocol. |
+| `docs/current/context-contributor-map.json` | current test fixture manifest | - | Machine-readable current source-path and npm-script bindings for the Context contributor ownership map and local verification route. |
+| `docs/current/context-external-validation-status.json` | current active pointer/status | - | Machine-readable initial state for the Context external-validation protocol; it records no observations and an `INCONCLUSIVE` product verdict. |
+| `docs/current/context-external-validation.md` | current active pointer/status | - | Context-specific preregistration, denominator, privacy, and finite outcome contract for future independent observation; it does not record one. |
 | `docs/current/context-program-status.md` | current active pointer/status | - | Canonical P0 audit and isolated OpenCode delivery status for the default-off Context Personalization track and its separation from Workflow Integrity. |
 | `docs/current/context-team-profile-v2.md` | current active pointer/status | - | Read-only project-shareable Team Profile v2 schema, safety boundary, v1 separation, and pure resolver bridge. |
 | `docs/current/desktop-test-artifacts-index.md` | current compatibility doc | - | Compatibility/current-era doc retained in place; migrate by summary and pointer before moving. |

package/docs/current/release/consumer-authority-current-acceptance.json

@@ -25,7 +25,7 @@
   "package": {
     "channel": "unpublished",
     "scope": "source-candidate",
-    "version": "0.8.35"
+    "version": "0.8.37"
   },
   "currentSourceCandidate": {
     "registryInstall": "requires-authorized-release-before-registry-install",

package/docs/current/release/v0.8.36-release-notes.md

@@ -0,0 +1,35 @@
+# v0.8.36 Release Notes
+
+## Generic Context Compatibility Evidence
+
+This release adds a version-neutral Context compatibility manifest and runner
+for the installed package boundary. The package smoke derives the manifest from
+the exact materialized tarball and verifies its package name, version, SHA-256,
+content identity, required public paths, and source-fallback policy before it
+executes any Context command.
+
+The installed CLI scenarios cover default status, safe preview and explain,
+preview-only initialization, explicit enable with no-overwrite behavior, and
+invalid configuration. The runner returns fixed result codes and removes its
+temporary scenario state after every run.
+
+## Safety And Scope Boundaries
+
+- Malformed manifests, missing subjects, archive digest or content-identity
+  mismatches, unavailable package paths, and source-linked installed files stop
+  before a Context command can run.
+- The package check uses a fresh isolated installation and rejects any source
+  fallback, including an executable path that resolves into the source tree.
+- Context remains explicit opt-in and default-off. This release adds no new
+  public Context command, OpenCode host delivery, runtime injection default,
+  workflow, evidence, authority, network, process, or personal-store behavior.
+- The package materialization test uses the repository's shared pack lock, so
+  concurrent test workers cannot create a partial tarball during verification.
+
+## Verification
+
+The release path verifies manifest parsing and fail-closed diagnostics, a fresh
+tarball installation, all declared installed CLI scenarios, source-fallback
+rejection, package smoke, type safety, full repository Vitest, documentation,
+scope, release workflow, protected CI, canonical tar identity, and registry
+provenance.

package/docs/current/release/v0.8.37-release-notes.md

@@ -0,0 +1,38 @@
+# v0.8.37 Release Notes
+
+## Context P0 Boundaries
+
+This release consolidates the deterministic Context Personalization boundaries
+that stay separate from Workflow Integrity. It adds a preregistered
+external-validation protocol with an explicit empty result state, contributor
+ownership and operational-route maps, a public README claim boundary, and a
+benchmark command bound to the clean checked-out source identity.
+
+The comparison protocol continues to distinguish deterministic technical
+results from product usefulness. Without a preregistered external observation,
+the product verdict remains `INCONCLUSIVE`.
+
+## Repository Contract Clarity
+
+The full repository contract now classifies an unavailable selected observer
+path as `clean-package-observer-gh-required`. This is an
+`ENVIRONMENT_BLOCKED` prerequisite, not a source-test failure. Empty or missing
+observer input stops before package preparation; nonempty malformed paths remain
+argument errors.
+
+## Safety And Scope Boundaries
+
+- Context remains explicit opt-in and default-off.
+- Context-only paths do not infer workflow, shell/process execution, network,
+  GitHub, evidence, authority, credential, or host-observation actions.
+- This release does not claim a live OpenCode delivery result, external user
+  result, token saving, or product efficacy.
+- Historical releases remain immutable and cannot supply current package or
+  host-observation evidence.
+
+## Verification
+
+The delivery path verifies default unit and integration contracts, Context
+comparison source binding, type safety, documentation and release-policy
+checks, a fresh isolated tarball installation, protected CI, canonical package
+identity, and registry provenance.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "persona-harness",
-  "version": "0.8.35",
+  "version": "0.8.37",
   "private": false,
   "type": "module",
   "packageManager": "npm@10.8.2",
@@ -14,6 +14,7 @@
   },
   "exports": {
     ".": "./dist/index.js",
+    "./context-external-validation": "./dist/context-external-validation.js",
     "./effective-profile": "./dist/effective-profile.js",
     "./portable-skill": "./dist/portable-skill.js"
   },
@@ -62,6 +63,9 @@
     "docs/current/v0.3.0-alpha-publish-readiness.md",
     "docs/current/persona-harness-detailed-usage.md",
     "docs/current/context-program-status.md",
+    "docs/current/context-contributor-map.json",
+    "docs/current/context-external-validation.md",
+    "docs/current/context-external-validation-status.json",
     "docs/current/context-team-profile-v2.md",
     "docs/current/README.md",
     "docs/current/personalization-profile-v1.md",
@@ -340,10 +344,10 @@
     "observe:test-contract": "node scripts/observe-test-contract.mjs",
     "measure:entry-steering": "npm run build && node experiments/entry-intent-corpus/measure.mjs",
     "report:rules": "npm run build && node scripts/report-rule-diagnostics.mjs",
-    "benchmark:context": "npm run build && node scripts/eval/run-context-comparison.mjs --manifest docs/current/context-comparison-manifest.json",
+    "benchmark:context": "npm run build && node scripts/eval/run-context-comparison.mjs --manifest docs/current/context-comparison-manifest.json --current-checkout",
     "test": "node scripts/run-default-test.mjs",
     "test:fast": "npm run test:unit && npm run test:integration",
-    "test:unit": "vitest run --testTimeout=15000 tests/npm-test-contract.test.ts tests/context-config.test.ts tests/context-comparison.test.ts tests/context-comparison-runner.test.ts tests/context-core-import-boundary.test.ts tests/context-envelope-builder.test.ts tests/effective-context-v2.test.ts tests/effective-profile-resolution.test.ts tests/phase0-harness-config.test.ts tests/opencode-skill-adapter.test.ts",
+    "test:unit": "vitest run --testTimeout=15000 tests/npm-test-contract.test.ts tests/context-compatibility-manifest.test.ts tests/context-config.test.ts tests/context-comparison.test.ts tests/context-comparison-runner.test.ts tests/context-contributor-route.test.ts tests/context-core-import-boundary.test.ts tests/context-envelope-builder.test.ts tests/context-external-validation.test.ts tests/context-program-status.test.ts tests/context-readme-boundary.test.ts tests/effective-context-v2.test.ts tests/effective-profile-resolution.test.ts tests/phase0-harness-config.test.ts tests/opencode-skill-adapter.test.ts",
     "test:integration": "vitest run --testTimeout=15000 tests/context-command-routing.test.ts tests/context-doctor.test.ts tests/context-init.test.ts tests/context-preview.test.ts tests/context-explain.test.ts tests/context-status.test.ts tests/opencode-context-delivery.test.ts tests/personalization-profile-store.test.ts tests/team-profile-store.test.ts tests/team-profile-v2-store.test.ts tests/phase0-runtime-context-delivery.test.ts tests/personalization-profile-package-contract.test.ts",
     "test:smoke": "npm run build && node dist/cli/index.js --help",
     "test:full": "npm run test:repository",

package/packages/shared-skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@persona-harness/shared-skills",
-  "version": "0.8.35",
+  "version": "0.8.37",
   "type": "module",
   "private": true,
   "description": "Persona-owned portable skill procedures and optional overlays",