pi-daddy 0.27.4 → 0.32.0

package/contracts/execution-retention/v2/README.md

@@ -1,148 +0,0 @@
-# Execution retention 2.0 — committed producer input for P03
-
-This version replaces the **wire semantics**, not the authority model, of the Sept7 1.0 candidate.
-The old v1 document and all prior receipts remain historical. Ledger v2/v3 and work-v4 are unchanged.
-Formal acceptance and independent overall review remain pending; fixture validity is not live qualification.
-
-## Ordinary host integration (additive local candidate)
-
-`PI_GRANTS_RETAIN_NATIVE_SESSIONS=1` plus an existing private canonical `PI_GRANTS_NATIVE_SESSION_ROOT`
-now allocates an exclusive per-execution target through shared public delegate/all/chain planning. The
-same plan/audit/executor receives `--session`; model tool parameters never select a target. Invalid roots
-or reused occurrences refuse; unset preserves default ephemeral behavior. This does not alter wire2.0,
-claim producer quiescence/active TUI branch or turn observations into acceptance. The new connected host
-can ingest these exact authorized manifests/blobs through real harness policy/checkpoint adapters into
-actual daily status; see `contracts/dashboard-host/v1/README.md`. No observer session-entry writes.
-
-## Public contract and reproducibility
-
-- API: `pi-daddy/execution-retention` (also the package root).
-- Strict JSON Schema: `pi-daddy/contracts/execution-retention/v2/manifest.schema.json`.
-- Six standalone manifest fixtures and their exact referenced blob bytes:
-  `pi-daddy/contracts/execution-retention/v2/fixtures/*`.
-- Source-owned schema, closed/frozen builder, exact integer/duplicate-aware JSON reader:
-  `src/retention-contract.ts`, exported as `RETENTION_SCHEMA`, `buildExecutionRetentionManifest`,
-  `parseExecutionRetentionManifest`.
-- Source-owned generator: `scripts/generate-retention-contract.ts`. No import-time writes or default target.
-
-From the repository root, with retained Node/dependencies (no package manager or lifecycle):
-
-```sh
-node packages/pi-daddy/scripts/generate-retention-contract.ts --check packages/pi-daddy/contracts/execution-retention/v2
-node packages/pi-daddy/scripts/generate-retention-contract.ts --write /absolute/new-parent/fresh-output
-node --test packages/pi-daddy/test/retention-contract.test.ts packages/pi-daddy/test/native-session-retention.test.ts
-```
-
-The write target must not exist and its parent must exist. `--check` is read-only and checks the complete
-fixture inventory, not just known files. Each fixture is built with the same producer wire builder and
-native-byte parser as runtime output; all declarations are deterministic synthetic examples, **not**
-provider/native-issued receipts. Two fixtures deliberately share identical transcript bytes but have
-different branch knowledge. Exact bytes alone cannot tell an external reader which branch is active.
-
-## Activation and supported native routes
-
-`PI_GRANTS_EXECUTION_ARCHIVE=/private/archive` still opts in to asynchronous output/receipt retention.
-Native **file content** additionally needs `PI_GRANTS_NATIVE_SESSION_ROOT=/private/native-sessions`.
-That root must be an absolute, owner-private directory (0700); admitted files must be owned regular
-single-link `.jsonl` files within its canonical boundary. Symlink files/outside targets, missing headers,
-wrong expected session IDs and arbitrary non-session files are refused. No directory scan, auth read,
-parent-transcript traversal, session migration or rewrite occurs. A native file's ordinary 0644 mode is
-acceptable behind the checked private root; this is not hostile-filesystem race containment.
-
-Existing governed launch paths now consume:
-
-1. **Herdr 0.8.2 protocol 20 `AgentInfo.agent_session`**, from already-required `agent start/get` replies.
-   The exact started pane ID and `agent:"pi"` must match. `kind:"id"` records that native session ID with
-   missing transcript bytes. `kind:"path"` locates a private session file; the ID is read from its valid
-   v3 header, never inferred from the pathname, pane, PID, terminal output or logical name. The reference's
-   integration source is observation provenance, not work authority. No additional Herdr RPC is issued.
-2. **Explicit pi `--session` files** on an already-governed process plan. Argv is only a locator, not proof:
-   the asynchronous reader must actually open stable private bytes and validate the native header before
-   publishing an ID. Start/end observations are coalesced, so missing early files can become available.
-   The default `--no-session` behavior is deliberately unchanged; archive activation does not enable
-   persistence or alter a worker's control/error behavior.
-3. **The public read-only pi `SessionManager` API**, when a host actually owns that native manager:
-   `retention.observeSessionManager(manager)` or `readNativeSession({source:"pi-session-manager", manager,
-   path:manager.getSessionFile(), allowedRoot})`. The reader samples `getSessionId/getSessionFile/getLeafId`
-   before/after the descriptor read and requires the leaf's complete parent chain in the retained bytes.
-   This supplies an observed leaf (including an observed null after `resetLeaf`), not a guessed file tail.
-   An in-memory manager has no retained file on this route and remains explicitly missing.
-
-**Exact unsupported routes:** default ephemeral process children have no session-file bytes. Current
-print-mode/interactive Herdr launch seams do not expose a live child `SessionManager`. Herdr protocol 20
-session references contain no leaf. Pi 0.84.2 `branch()`/`resetLeaf()` change only its in-memory pointer,
-so reopening a JSONL file reports the last appended entry, not necessarily the live active branch.
-Consequently **file-only and Herdr-only active branches stay unknown**, even when transcript bytes are
-retained. Pi RPC `get_entries` does expose `leafId`, but replacing the current governed print/interactive
-executor with a new RPC control protocol is not implemented or claimed here. No monitoring extension,
-injected status prompt, additional worker turn, or model call is used to bridge these gaps.
-
-## Version 2 fields and authority separation
-
-The wire remains a small `manifest.json` with relative content-addressed blob basenames, plus LF.
-It is replaced atomically after all referenced bytes are written. Every generation passes the strict
-producer builder before publication. There is no fsync or full-process-crash durability promise.
-
-The v1 identity, terminal outcome, content reference and observation-only fields remain, with these
-**explicitly versioned** changes:
-
-- `version` is `2.0`; the v2 reader rejects `1.0` rather than silently interpreting it as v2.
-- New required `nativeSession`: source, status, session ID/path, `parentSessionPath`, branch state/leaf,
-  last persisted entry ID, byte digest and a reason. No parent file is read from the header pointer.
-- `native.sessionId/sessionPath/branchLeafId` are checked display projections of that observation.
-  Callers cannot inject these through the PID/pane display setter.
-- `content.session` now refers to actual retained native bytes when available. A valid header followed
-  by a partial/invalid tail may still have retained bytes, but its status is `truncated`/`invalid`, and
-  no active branch is promoted. Bad or mismatched headers do not admit bytes.
-- `nativeSession.status:"verified"` means stable private native-format bytes passed header/tree checks.
-  It is **not authentication**, successful execution, accepted work, or proof the active branch is known.
-- `branchState:"observed"` is possible only on a matching live manager observation; `unknown` always
-  has a null leaf. `lastPersistedEntryId` is separately labelled and never elected as active.
-- The first native session ID and opened inode pin that observation. Replacement/mismatch clears the
-  current reference/branch, records a gap and leaves previously written blob bytes intact.
-
-Public call IDs come from the actual tool execute argument on delegate/all/chain, not output labels.
-Execution IDs/parent execution IDs remain separate from native session parent pointers. Two concurrent
-calls with the same logical name do not share attempts, sessions or archive directories. Terminal outcome
-and check receipts are never acceptance authority. Every manifest keeps `acceptance:"not-assessed"` and
-`coverage.complete:false`. P03 must independently reconstruct P01 authority before claiming accepted work.
-
-## Bounds, interruption and consumer obligations
-
-At most 32 archive observations are active. Stream/snapshot bytes share 1 MiB; assembled result, complete
-check receipt and native-session bytes each have their own 1 MiB ceiling. A single native read is active
-per observation, with one coalesced latest request; there is no growing read queue or polling timer.
-Worker control never awaits these reads/writes. External `flush()` waits at quiescence only, with a host-
-owned timeout. Archive admission/write loss, missing/truncated/changed native state, and initial coverage
-gaps remain explicit. Loss strings are historical observations, not a recomputed assurance score.
-
-An interrupted worker retains available output/check/session bytes already observed; a producer-process
-crash may leave only a running checkpoint. That must stay incomplete. A successful tool return can have
-pending archive writes; failed required provisioning/lease/check ledger receipts retain their existing
-failure semantics. Receipt bytes available before a mandatory append failure do not turn that failure
-into success. No receipt is partially published as a complete receipt.
-
-The archive never harvests environment or auth state. Raw worker/session content can itself contain
-sensitive data: explicit private-root consent and an access-controlled external archive are required;
-no universal secret-redaction guarantee is made.
-
-A public consumer must validate the manifest, enforce basename/size limits, then verify **actual bytes**:
-
-```js
-import { readFile } from 'node:fs/promises';
-import { dirname, join } from 'node:path';
-import { parseExecutionRetentionManifest, verifyRetainedBytes } from 'pi-daddy/execution-retention';
-const manifest = parseExecutionRetentionManifest(await readFile(manifestPath, 'utf8'));
-const reference = manifest.content.session;
-let bytes;
-if (reference.path) {
-  try { bytes = await readFile(join(dirname(manifestPath), reference.path)); } catch { /* missing */ }
-}
-const retained = verifyRetainedBytes(reference, bytes); // retained | missing | mismatch
-// A path/digest/status alone returns missing. Even verified retained bytes are not accepted work.
-```
-
-Use bounded reads in an untrusted archive. Installed/compiled consumption needs a fresh build; historical
-owner `dist` was preserved, not reused as proof of the new API. The native tests invoke real installed
-SessionManager persistence/navigation without creating an AgentSession or model runtime; Herdr tests use
-schema-shaped deterministic replies. Neither is live pi/Herdr/model qualification.

package/contracts/execution-retention/v2/fixtures/interrupted-native-bytes.json

@@ -1,91 +0,0 @@
-{
-  "version": "2.0",
-  "archiveId": "00000000-0000-4000-8000-000000000005",
-  "identity": {
-    "executionId": "exec:00000000-0000-4000-8000-000000000005",
-    "parentExecutionId": "exec:00000000-0000-4000-8000-000000000099",
-    "childId": "layout-worker",
-    "toolCallId": "call:layout:5",
-    "executor": "herdr",
-    "taskDigest": "043fd4cb12f188c5bd67ae5274e2afe936cf22d8cf6b133504992023117e6cc5",
-    "definitionDigest": null,
-    "configurationDigest": "dd4f902362cd72e3601b2440aa9cf3a8bcc913eeace499d284b6a067e032e22a",
-    "workspaceId": "layout"
-  },
-  "native": {
-    "pid": null,
-    "paneId": "w1:p5",
-    "agentName": "layout-worker",
-    "tabId": "w1:t5",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "branchLeafId": null
-  },
-  "nativeSession": {
-    "source": "herdr-path",
-    "status": "truncated",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "parentSessionPath": "/fixture/private/parent.jsonl",
-    "branchLeafId": null,
-    "branchState": "unknown",
-    "lastPersistedEntryId": null,
-    "sha256": "2ec1f134bc739984434f7fca689e1c3d1c39fce2dcadae709e9b6faedfcc4ac7",
-    "reason": "native-session-incomplete-bytes"
-  },
-  "state": "terminal",
-  "outcome": {
-    "code": null,
-    "signal": "SIGTERM",
-    "timedOut": false,
-    "aborted": true,
-    "truncated": true,
-    "failed": true
-  },
-  "content": {
-    "stdout": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "stderr": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "paneSnapshot": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "result": {
-      "status": "retained",
-      "path": "result-82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a.bin",
-      "sha256": "82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a",
-      "bytes": 9
-    },
-    "checkReceipt": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "session": {
-      "status": "retained",
-      "path": "session-2ec1f134bc739984434f7fca689e1c3d1c39fce2dcadae709e9b6faedfcc4ac7.bin",
-      "sha256": "2ec1f134bc739984434f7fca689e1c3d1c39fce2dcadae709e9b6faedfcc4ac7",
-      "bytes": 772
-    }
-  },
-  "coverage": {
-    "complete": false,
-    "losses": [
-      "not-acceptance-evidence",
-      "native-session-incomplete-bytes"
-    ]
-  },
-  "acceptance": "not-assessed"
-}

package/contracts/execution-retention/v2/fixtures/missing-native-session.json

@@ -1,91 +0,0 @@
-{
-  "version": "2.0",
-  "archiveId": "00000000-0000-4000-8000-000000000001",
-  "identity": {
-    "executionId": "exec:00000000-0000-4000-8000-000000000001",
-    "parentExecutionId": "exec:00000000-0000-4000-8000-000000000099",
-    "childId": "layout-worker",
-    "toolCallId": "call:layout:1",
-    "executor": "herdr",
-    "taskDigest": "043fd4cb12f188c5bd67ae5274e2afe936cf22d8cf6b133504992023117e6cc5",
-    "definitionDigest": null,
-    "configurationDigest": "dd4f902362cd72e3601b2440aa9cf3a8bcc913eeace499d284b6a067e032e22a",
-    "workspaceId": "layout"
-  },
-  "native": {
-    "pid": null,
-    "paneId": "w1:p1",
-    "agentName": "layout-worker",
-    "tabId": "w1:t1",
-    "sessionId": null,
-    "sessionPath": null,
-    "branchLeafId": null
-  },
-  "nativeSession": {
-    "source": null,
-    "status": "missing",
-    "sessionId": null,
-    "sessionPath": null,
-    "parentSessionPath": null,
-    "branchLeafId": null,
-    "branchState": "unknown",
-    "lastPersistedEntryId": null,
-    "sha256": null,
-    "reason": "native-session-unavailable"
-  },
-  "state": "terminal",
-  "outcome": {
-    "code": 0,
-    "signal": null,
-    "timedOut": false,
-    "aborted": false,
-    "truncated": false,
-    "failed": false
-  },
-  "content": {
-    "stdout": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "stderr": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "paneSnapshot": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "result": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "checkReceipt": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "session": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    }
-  },
-  "coverage": {
-    "complete": false,
-    "losses": [
-      "native-session-unavailable",
-      "active-branch-unknown"
-    ]
-  },
-  "acceptance": "not-assessed"
-}

package/contracts/execution-retention/v2/fixtures/native-file-unknown-branch.json

@@ -1,91 +0,0 @@
-{
-  "version": "2.0",
-  "archiveId": "00000000-0000-4000-8000-000000000003",
-  "identity": {
-    "executionId": "exec:00000000-0000-4000-8000-000000000003",
-    "parentExecutionId": "exec:00000000-0000-4000-8000-000000000099",
-    "childId": "layout-worker",
-    "toolCallId": "call:layout:3",
-    "executor": "herdr",
-    "taskDigest": "043fd4cb12f188c5bd67ae5274e2afe936cf22d8cf6b133504992023117e6cc5",
-    "definitionDigest": null,
-    "configurationDigest": "dd4f902362cd72e3601b2440aa9cf3a8bcc913eeace499d284b6a067e032e22a",
-    "workspaceId": "layout"
-  },
-  "native": {
-    "pid": null,
-    "paneId": "w1:p3",
-    "agentName": "layout-worker",
-    "tabId": "w1:t3",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "branchLeafId": null
-  },
-  "nativeSession": {
-    "source": "herdr-path",
-    "status": "verified",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "parentSessionPath": "/fixture/private/parent.jsonl",
-    "branchLeafId": null,
-    "branchState": "unknown",
-    "lastPersistedEntryId": "bbbbbbbb",
-    "sha256": "9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f",
-    "reason": "active-branch-unknown"
-  },
-  "state": "terminal",
-  "outcome": {
-    "code": 0,
-    "signal": null,
-    "timedOut": false,
-    "aborted": false,
-    "truncated": false,
-    "failed": false
-  },
-  "content": {
-    "stdout": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "stderr": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "paneSnapshot": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "result": {
-      "status": "retained",
-      "path": "result-82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a.bin",
-      "sha256": "82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a",
-      "bytes": 9
-    },
-    "checkReceipt": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "session": {
-      "status": "retained",
-      "path": "session-9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f.bin",
-      "sha256": "9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f",
-      "bytes": 782
-    }
-  },
-  "coverage": {
-    "complete": false,
-    "losses": [
-      "not-acceptance-evidence",
-      "active-branch-unknown"
-    ]
-  },
-  "acceptance": "not-assessed"
-}

package/contracts/execution-retention/v2/fixtures/native-id-without-bytes.json

@@ -1,91 +0,0 @@
-{
-  "version": "2.0",
-  "archiveId": "00000000-0000-4000-8000-000000000002",
-  "identity": {
-    "executionId": "exec:00000000-0000-4000-8000-000000000002",
-    "parentExecutionId": "exec:00000000-0000-4000-8000-000000000099",
-    "childId": "layout-worker",
-    "toolCallId": "call:layout:2",
-    "executor": "herdr",
-    "taskDigest": "043fd4cb12f188c5bd67ae5274e2afe936cf22d8cf6b133504992023117e6cc5",
-    "definitionDigest": null,
-    "configurationDigest": "dd4f902362cd72e3601b2440aa9cf3a8bcc913eeace499d284b6a067e032e22a",
-    "workspaceId": "layout"
-  },
-  "native": {
-    "pid": null,
-    "paneId": "w1:p2",
-    "agentName": "layout-worker",
-    "tabId": "w1:t2",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": null,
-    "branchLeafId": null
-  },
-  "nativeSession": {
-    "source": "herdr-id",
-    "status": "missing",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": null,
-    "parentSessionPath": null,
-    "branchLeafId": null,
-    "branchState": "unknown",
-    "lastPersistedEntryId": null,
-    "sha256": null,
-    "reason": "native-session-path-unavailable"
-  },
-  "state": "terminal",
-  "outcome": {
-    "code": 0,
-    "signal": null,
-    "timedOut": false,
-    "aborted": false,
-    "truncated": false,
-    "failed": false
-  },
-  "content": {
-    "stdout": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "stderr": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "paneSnapshot": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "result": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "checkReceipt": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "session": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    }
-  },
-  "coverage": {
-    "complete": false,
-    "losses": [
-      "native-session-unavailable",
-      "active-branch-unknown"
-    ]
-  },
-  "acceptance": "not-assessed"
-}

package/contracts/execution-retention/v2/fixtures/native-live-branch.json

@@ -1,90 +0,0 @@
-{
-  "version": "2.0",
-  "archiveId": "00000000-0000-4000-8000-000000000004",
-  "identity": {
-    "executionId": "exec:00000000-0000-4000-8000-000000000004",
-    "parentExecutionId": "exec:00000000-0000-4000-8000-000000000099",
-    "childId": "layout-worker",
-    "toolCallId": "call:layout:4",
-    "executor": "herdr",
-    "taskDigest": "043fd4cb12f188c5bd67ae5274e2afe936cf22d8cf6b133504992023117e6cc5",
-    "definitionDigest": null,
-    "configurationDigest": "dd4f902362cd72e3601b2440aa9cf3a8bcc913eeace499d284b6a067e032e22a",
-    "workspaceId": "layout"
-  },
-  "native": {
-    "pid": null,
-    "paneId": "w1:p4",
-    "agentName": "layout-worker",
-    "tabId": "w1:t4",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "branchLeafId": "aaaaaaaa"
-  },
-  "nativeSession": {
-    "source": "pi-session-manager",
-    "status": "verified",
-    "sessionId": "11111111-1111-4111-8111-111111111111",
-    "sessionPath": "/fixture/private/child.jsonl",
-    "parentSessionPath": "/fixture/private/parent.jsonl",
-    "branchLeafId": "aaaaaaaa",
-    "branchState": "observed",
-    "lastPersistedEntryId": "bbbbbbbb",
-    "sha256": "9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f",
-    "reason": null
-  },
-  "state": "terminal",
-  "outcome": {
-    "code": 0,
-    "signal": null,
-    "timedOut": false,
-    "aborted": false,
-    "truncated": false,
-    "failed": false
-  },
-  "content": {
-    "stdout": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "stderr": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "paneSnapshot": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "result": {
-      "status": "retained",
-      "path": "result-82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a.bin",
-      "sha256": "82c620cdfeb8ca6b858cf653d7f5e2eedca5315d6244216d60e8b36f03223d6a",
-      "bytes": 9
-    },
-    "checkReceipt": {
-      "status": "missing",
-      "path": null,
-      "sha256": null,
-      "bytes": null
-    },
-    "session": {
-      "status": "retained",
-      "path": "session-9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f.bin",
-      "sha256": "9bdb4bd16a901da31580acf056bda525225259e15ec409e0410480109011772f",
-      "bytes": 782
-    }
-  },
-  "coverage": {
-    "complete": false,
-    "losses": [
-      "not-acceptance-evidence"
-    ]
-  },
-  "acceptance": "not-assessed"
-}