planr 1.10.0-alpha.9 → 2.0.0

package/docs/contracts/PI_INTEGRATION_V1.md

@@ -1,164 +0,0 @@
-# Pi Integration Contract v1
-
-Status: frozen for implementation
-
-Frozen: 2026-07-27
-
-Upstream source probes:
-
-- `earendil-works/pi` `main` commit
-  `a597371bda2af70372d1323d550483b5f4a0ae36` (2026-07-27).
-- Pi release `v0.82.1` commit
-  `b4f293684bba718d59cc1157679bcf6157b3a7f5` (2026-07-27).
-- `nicobailon/pi-subagents` `main` commit `73fb2fc` (2026-07-27).
-
-The Pi repository currently publishes release tags ahead of the fetched
-`main` version line, so this contract records both: `main` is the requested
-source probe, while `v0.82.1` is the latest released runtime/API baseline.
-
-This contract is the implementation boundary for first-class Pi support.
-It follows Pi's native extension model instead of treating every coding agent
-as an MCP host. Pi core deliberately ships without MCP, subagents, plan mode,
-or permission popups. It natively discovers Agent Skills and can run their CLI
-workflows through its built-in `bash` tool.
-
-## Frozen artifact and discovery policy
-
-`planr install pi` owns exactly the repository paths in the executable
-contract below. Workflow files are copied byte-for-byte from the canonical
-`plugins/planr/skills` sources. Pi-specific role bodies exist only because
-`pi-subagents` frontmatter is not interchangeable with Claude/Cursor role
-frontmatter: it uses `thinking`, explicit tool/skill inheritance controls, and
-project agents under `.pi/agents/**/*.md`.
-
-Pi loads `.pi/skills/` only after the repository is trusted. Interactive Pi
-asks for trust; non-interactive `-p`, JSON, and RPC runs ignore untrusted
-project resources by default. A headless operator who has deliberately chosen
-to trust the repository passes `--approve` for that run. Planr never writes
-Pi's user trust store or `.pi/settings.json`.
-
-`pi-subagents` is optional. When installed, it discovers both Planr roles.
-Without it, the role files are inert and the same Planr skills remain usable
-in the parent Pi session or separate Pi processes.
-
-```json
-{
-  "contract_version": 1,
-  "pi_main_revision": "a597371bda2af70372d1323d550483b5f4a0ae36",
-  "pi_release": {
-    "tag": "v0.82.1",
-    "revision": "b4f293684bba718d59cc1157679bcf6157b3a7f5"
-  },
-  "pi_subagents_revision": "73fb2fc",
-  "artifacts": [
-    {"target": ".pi/agents/planr-reviewer.md", "source": "plugins/planr/agents/pi/planr-reviewer.md", "kind": "agent"},
-    {"target": ".pi/agents/planr-worker.md", "source": "plugins/planr/agents/pi/planr-worker.md", "kind": "agent"},
-    {"target": ".pi/skills/planr-goal/SKILL.md", "source": "plugins/planr/skills/planr-goal/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-loop/SKILL.md", "source": "plugins/planr/skills/planr-loop/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-loop/agents/planr-reviewer.md", "source": "plugins/planr/skills/planr-loop/agents/planr-reviewer.md", "kind": "skill_asset"},
-    {"target": ".pi/skills/planr-loop/agents/planr-worker.md", "source": "plugins/planr/skills/planr-loop/agents/planr-worker.md", "kind": "skill_asset"},
-    {"target": ".pi/skills/planr-loop/references/host-dispatch.md", "source": "plugins/planr/skills/planr-loop/references/host-dispatch.md", "kind": "skill_asset"},
-    {"target": ".pi/skills/planr-loop/references/recovery-and-verification.md", "source": "plugins/planr/skills/planr-loop/references/recovery-and-verification.md", "kind": "skill_asset"},
-    {"target": ".pi/skills/planr-plan/SKILL.md", "source": "plugins/planr/skills/planr-plan/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-review/SKILL.md", "source": "plugins/planr/skills/planr-review/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-status/SKILL.md", "source": "plugins/planr/skills/planr-status/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-summary/SKILL.md", "source": "plugins/planr/skills/planr-summary/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-task-graph/SKILL.md", "source": "plugins/planr/skills/planr-task-graph/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-verify-web/SKILL.md", "source": "plugins/planr/skills/planr-verify-web/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr-work/SKILL.md", "source": "plugins/planr/skills/planr-work/SKILL.md", "kind": "skill"},
-    {"target": ".pi/skills/planr/SKILL.md", "source": "plugins/planr/skills/planr/SKILL.md", "kind": "skill"}
-  ],
-  "mcp": {"supported": false, "artifacts": []},
-  "extensions": {"emitted": false, "artifacts": []},
-  "hooks": {"supported": false, "artifacts": []},
-  "settings": {"emitted": false, "artifacts": []},
-  "trust": {
-    "project_resources_require_trust": true,
-    "interactive": "Pi prompts the operator",
-    "headless": "pass --approve only after choosing to trust the repository"
-  },
-  "observed_client": {
-    "environment": "PI_CODING_AGENT",
-    "accepted_value": "true",
-    "stored_value": "pi",
-    "advisory_only": true
-  },
-  "client_all_includes_pi": false,
-  "headless": {
-    "command": "pi --approve --model <provider/model> --thinking <level> -p \"<prompt>\""
-  }
-}
-```
-
-## Pi role contract
-
-Both role files use `pi-subagents` project-agent frontmatter:
-
-- `name` is exactly `planr-worker` or `planr-reviewer`;
-- `systemPromptMode: replace`;
-- `inheritProjectContext: true`;
-- `inheritSkills: false`;
-- `skills` names exactly `planr-work` or `planr-review`;
-- the worker tool allowlist includes read/search, `bash`, `edit`, and `write`;
-- the reviewer tool allowlist includes read/search and mutation-capable `bash`,
-  but omits the `edit` and `write` tools;
-- the reviewer declares `acceptanceRole: read-only` and
-  `completionGuard: false`, so pi-subagents treats the bash-enabled validator
-  as non-implementation work without changing its tool access;
-- no role pins `model`, `thinking`, `fallbackModels`, provider credentials, or
-  extensions.
-
-Model and thinking selection remain external host policy. Operators can use
-Pi or `pi-subagents` settings/overrides, while Planr records only requested and
-observed evidence.
-
-## Merge and overwrite policy
-
-- Missing target: write the canonical packaged source.
-- Existing identical content: unchanged.
-- Existing different content: preserve without `--force`; replace only that
-  target with `--force`.
-- `--no-mcp` and `--no-hooks` are accepted for install-command parity but
-  change no Pi path because the v1 artifact set contains neither.
-- Dry-run enumerates the same paths the corresponding write reconciles.
-- `project init --client pi` provisions the same skills and roles without
-  writing any other Pi artifact.
-- `--client all` remains the legacy Codex, Claude Code, and Cursor expansion.
-
-## Runtime observation boundary
-
-Pi documents that commands launched by its built-in tools receive
-`PI_CODING_AGENT=true`. Planr accepts only that exact value as advisory
-`runs.observed_client=pi`. Other values and other ambient `PI_*` variables are
-ignored. The marker is not authentication, authorization, proof of model,
-proof of `pi-subagents`, or worker identity.
-
-Pi has no Planr hook in v1. Run `planr prime` manually after startup or
-compaction when a fresh state block is useful. Agent Skills remain the primary
-entry point: `/skill:planr` explicitly loads the router, while natural-language
-requests may trigger Pi's skill discovery.
-
-## Security and CI boundary
-
-Planr installation must not read or write:
-
-- `~/.pi`, Pi auth files, provider keys, OAuth tokens, sessions, transcripts,
-  prompts, responses, model catalogs, package caches, or trust decisions;
-- `.pi/settings.json`, `.pi/extensions/`, `.pi/prompts/`, or an MCP config;
-- global `pi install`, `pi config`, package enablement, or user settings.
-
-Release and CI workflows do not install/invoke Pi, `pi-subagents`, a provider,
-or a live model. Deterministic tests parse the frozen contract, compile/write
-assets into disposable repositories, and validate CLI/docs output.
-
-## Sources
-
-- `packages/coding-agent/README.md` at Pi `v0.82.1`: project trust, skills,
-  extensions, packages, philosophy, CLI, and `PI_CODING_AGENT`.
-- `packages/coding-agent/docs/skills.md` at Pi `v0.82.1`.
-- `nicobailon/pi-subagents` README at `73fb2fc`: project agent discovery,
-  prompt assembly, frontmatter, and model overrides.
-- `nicobailon/pi-subagents` `test/unit/agent-frontmatter.test.ts` and
-  `test/unit/path-resolution.test.ts` at `73fb2fc`.
-- https://github.com/earendil-works/pi
-- https://github.com/nicobailon/pi-subagents

package/docs/contracts/V1_1_DIFFERENTIATION_CONTRACT.md

@@ -1,177 +0,0 @@
-# V1.1 Differentiation Contract
-
-Generated: 2026-06-09
-
-## Purpose
-
-This contract defines the Planr-owned V1.1 acceptance baseline. It turns the remaining product gaps into implementation-ready requirements without relying on external product names, copied command vocabulary, or hidden context.
-
-V1.1 is complete only when Planr can prove these capabilities from its own CLI, MCP, HTTP, durable FeatureRun/ReviewGate state, docs, tests, and real consumer usage.
-
-## Product Outcome
-
-Planr V1.1 must feel like one coherent product:
-
-```text
-idea -> product plan -> build plan -> map -> pick -> work -> log -> review -> recover -> close
-```
-
-The map remains the source of truth for execution state. Markdown plans remain the source of rich product and implementation context. Review and recovery must be evidence-backed, not optimistic.
-
-## Capability Requirements
-
-### Graph Intelligence
-
-- REQ-V11-GRAPH-001: `planr map lane --critical` must compute a real critical path across blocking graph edges, not just sort open items by priority.
-- REQ-V11-GRAPH-002: `planr map pressure` must report transitive downstream impact, direct blockers, and why each item matters.
-- REQ-V11-GRAPH-003: Map reads must detect and report cycles with enough edge detail for a user or agent to repair the graph.
-- REQ-V11-GRAPH-004: Unlock and lookahead views must explain what becomes ready after closure, what remains blocked, and which blockers are still active.
-- REQ-V11-GRAPH-005: Mutation previews must share one effect engine for close, cancel, insert, replan, and dependency rewires.
-- REQ-V11-GRAPH-006: CLI, MCP, HTTP, and JSON responses must use the same graph-analysis results.
-
-Acceptance:
-
-- A branched fixture with deep dependencies returns the mathematically longest open blocking path.
-- A transitive bottleneck ranks above a shallow item that only blocks one direct child.
-- A cyclic graph is refused or diagnosed before readiness or critical-path output becomes misleading.
-
-### Automatic Pick Recall
-
-- REQ-V11-RECALL-001: `planr pick` and `planr_pick_item` must return a compact task-start package.
-- REQ-V11-RECALL-002: The package must include ranked relevant project contexts, upstream logs or handoffs, linked plan references, active blockers or unlocks, ReviewGate history, and deeper-read commands.
-- REQ-V11-RECALL-003: Recall ranking must search item title, description, linked plan metadata, contexts, logs, and review summaries.
-- REQ-V11-RECALL-004: Pick recall must be size-bounded and avoid source file content, prompt transcripts, secret-looking values, and large artifacts by default.
-- REQ-V11-RECALL-005: Possible file conflicts must be surfaced from recent logs, artifacts, and active picked/running work when enough path evidence exists.
-
-Acceptance:
-
-- A task with relevant historical decisions receives those decisions without the user running a separate search.
-- Irrelevant contexts are omitted or ranked below relevant ones.
-- The response remains compact enough for an agent handoff and includes deeper-read commands for full detail.
-
-### Recovery Automation
-
-- REQ-V11-RECOVERY-001: Planr must provide a sweeper command and API that inspect interrupted work without silently mutating by default.
-- REQ-V11-RECOVERY-002: Timeouts must be stored on items and evaluated consistently for CLI, MCP, and HTTP flows.
-- REQ-V11-RECOVERY-003: Retry policy must support max attempts, retry count, fixed or exponential delay, and clear terminal state when retries are exhausted.
-- REQ-V11-RECOVERY-004: Stale picks must be reclaimable only through explicit recovery action or a documented sweeper mode.
-- REQ-V11-RECOVERY-005: Item preconditions and postconditions must be visible in pick, trace, review, and close-preview outputs.
-- REQ-V11-RECOVERY-006: Close preview must show unsatisfied conditions, missing evidence, open reviews, open child work, and approval blockers in one gate report.
-
-Acceptance:
-
-- An interrupted picked item is diagnosed, optionally released, and then picked by a later worker without duplicate ownership.
-- A failed retryable item returns to ready only after the documented delay.
-- A postcondition appears in review and close-preview output before the item closes.
-
-### Durable FeatureRun Review Gates
-
-- REQ-V11-REVIEW-001: FeatureRun settlement must create or reuse durable ReviewGates according to materiality and structured escalation policy.
-- REQ-V11-REVIEW-002: ReviewGate attempts must record independent reviewer identity, verdict, findings, and immutable attempt history.
-- REQ-V11-REVIEW-003: When Git evidence is available, review evidence must show scoped file changes or a clear explanation of missing diff context.
-- REQ-V11-REVIEW-004: Findings must pause settlement, remain durable on the gate, and return the same gate to pending re-review only after explicit resolution.
-- REQ-V11-REVIEW-005: Final product review must use exactly one accepted independent plan-scoped ReviewGate and project consistently through CLI, MCP, HTTP, audit, status, package, and trace surfaces.
-
-Acceptance:
-
-- A reviewer can lease a ReviewGate, inspect scoped evidence, and record either acceptance or durable findings.
-- A maker can resolve named findings and the same gate becomes available for independent re-review.
-- An accepted final ReviewGate makes the canonical plan audit clause pass without creating review/fix map items.
-
-### Scoped Git And PR Review
-
-- REQ-V11-GIT-001: Planr must detect the current Git worktree and record branch, commit, dirty state, and changed-file scope in review evidence.
-- REQ-V11-GIT-002: Review flows must distinguish agent-owned evidence from unrelated dirty files.
-- REQ-V11-GIT-003: Item logs and artifacts must be able to reference changed files and line-level findings without storing full source contents by default.
-- REQ-V11-GIT-004: Optional PR URL review may be implemented when a provider can be queried safely; otherwise V1.1 must clearly document local-only behavior and future PR support.
-- REQ-V11-GIT-005: Review output must tie findings to item id, file path, optional line, evidence source, and next action.
-
-Acceptance:
-
-- A dirty worktree with unrelated files does not let an agent claim broad ownership.
-- ReviewGate attempts show which evidence was considered and which files were excluded.
-- Durable findings and file/line annotations survive package projection.
-
-### Distribution And Client Setup
-
-- REQ-V11-DIST-001: README and install docs must make GitHub Release curl installation the normal user path.
-- REQ-V11-DIST-002: Homebrew instructions must be present as soon as a tap or formula path exists; until then docs must state the release condition clearly.
-- REQ-V11-DIST-003: Cargo and source build instructions must be maintainer/developer paths, not the primary user install story.
-- REQ-V11-DIST-004: `planr install` or equivalent setup commands must cover Codex, Claude Code, Cursor, and generic MCP without editing global configuration unexpectedly.
-- REQ-V11-DIST-005: `planr prompt` or an equivalent command must expose ready-to-use CLI, MCP, and HTTP instructions.
-- REQ-V11-DIST-006: Release artifacts must have checksums and documented verification steps.
-
-Acceptance:
-
-- A fresh machine can install from release assets using only documented commands.
-- A project can configure each supported client from Planr docs or CLI output.
-- Package dry-runs show only intentional files.
-
-### Templates And Review Packages
-
-- REQ-V11-TEMPLATE-001: Export/import must support map items, links, plans, contexts, logs, durable ReviewGate projections, and metadata.
-- REQ-V11-TEMPLATE-002: Templates must include package requirements metadata, Planr version, creation timestamp, source project name, and optional tags.
-- REQ-V11-TEMPLATE-003: Import must preview what will be created or skipped before mutating existing projects.
-- REQ-V11-TEMPLATE-004: Review packages must preserve ReviewGate attempts, findings, annotations, and file references.
-- REQ-V11-TEMPLATE-005: Encrypted local bundle sharing may be implemented without hosted infrastructure; if not implemented in V1.1, docs must capture the accepted local-first format and explicit future scope.
-
-Acceptance:
-
-- A proven decomposition can be exported, imported into a fresh project, and picked without losing dependencies.
-- Review annotations survive package export/import.
-- Imports are idempotent or explain conflicts before mutation.
-
-### Documentation And Public Copy
-
-- REQ-V11-DOCS-001: README, CLI reference, MCP contract, operating model, task graph model, install docs, testing docs, and spec files must match implemented V1.1 behavior.
-- REQ-V11-DOCS-002: `docs/planr-spec.zip` must be regenerated after spec changes.
-- REQ-V11-DOCS-003: Docs must use Planr vocabulary: plan, map, item, pick, log, review, context, recovery, package.
-- REQ-V11-DOCS-004: Repo-visible docs and public copy must not mention local comparison products or imply Planr is a fork of another task graph or review tool.
-- REQ-V11-DOCS-005: New commands and APIs must have examples and JSON contract notes where agents rely on them.
-
-Acceptance:
-
-- Docs, fixtures, CLI help, MCP tools, and tests do not drift.
-- A forbidden-reference scrub over public repo paths returns no matches for comparison-product names.
-
-## End-To-End Verification Contract
-
-V1.1 final verification must run from the current worktree and a fresh consumer project at `~/projects/planr-test`.
-
-Required repository checks:
-
-- `cargo fmt --check`
-- `cargo clippy --all-targets -- -D warnings`
-- `cargo test`
-- `scripts/build-release.sh`
-- checksum verification for release assets and packaged files
-- `npm pack --dry-run` when the npm wrapper remains present
-- `scripts/ci-local.sh`
-- MCP stdio contract smoke
-- HTTP/SSE smoke
-- durable ReviewGate cross-surface smoke
-- forbidden-reference scrub over public repo paths
-
-Required consumer checks in `~/projects/planr-test`:
-
-- install or invoke the built Planr binary without relying on source-tree paths except for the selected test binary
-- initialize a project
-- create a product plan or build plan
-- build map items
-- pick one item
-- log files, commands, and tests
-- request review
-- annotate or ingest review feedback
-- close review and target item according to gate rules
-- export and import a package/template
-- run documented examples that are meant to work for users
-
-The final V1.1 review must treat missing, stale, narrow, or indirect evidence as incomplete.
-
-## Out Of Scope For V1.1 Unless Explicitly Added
-
-- Hosted accounts, billing, hosted sync, or team permission models.
-- Uploading private plans, source files, prompts, responses, or review content to a hosted service by default.
-- Full project-management SaaS workflows unrelated to coding-agent execution.
-- Silent global agent-client configuration edits.
-- Claiming PR-provider support that was not verified with a real provider or documented local capability boundary.

package/docs/contracts/fixtures/evidence/v1/examples/coverage-verdict.json

@@ -1,66 +0,0 @@
-{
-  "id": "cverdict-api-health-v1",
-  "schema_version": "evidence.contract.v1",
-  "scope": {
-    "kind": "criterion",
-    "id": "criterion-api-health",
-    "plan_id": "pln-example",
-    "item_id": "item-example"
-  },
-  "evaluated_at": "2026-07-28T12:00:08Z",
-  "status": "satisfied",
-  "observation_coverage": [
-    {
-      "requirement_id": "obs-http-200",
-      "status": "covered",
-      "covering_receipt_ids": ["erec-planr-api-health-v1"],
-      "covered_observation_ids": ["obs-http-200"]
-    }
-  ],
-  "validation_details": {
-    "trust": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "freshness": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "target": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "schema": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "provenance": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "fixture": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    },
-    "completion": {
-      "status": "passed",
-      "checked_at": "2026-07-28T12:00:08Z",
-      "receipt_ids": ["erec-planr-api-health-v1"],
-      "gap_reasons": []
-    }
-  },
-  "suggested_next_action": "none",
-  "actionable_now": false
-}

package/docs/contracts/fixtures/evidence/v1/examples/evidence-attempt.json

@@ -1,39 +0,0 @@
-{
-  "id": "eatt-planr-api-health-v1",
-  "schema_version": "evidence.contract.v1",
-  "criterion_id": "criterion-api-health",
-  "obligation_id": "pob-planr-api-health-v1",
-  "capability_instance_id": "vcinst-planr-http-process-v1",
-  "started_at": "2026-07-28T12:00:05Z",
-  "ended_at": "2026-07-28T12:00:06Z",
-  "status": "passed",
-  "resolved_command": {
-    "kind": "command",
-    "command": ["curl", "-fsS", "http://127.0.0.1:4173/health"],
-    "cwd": "$PLANR_REPOSITORY_ROOT"
-  },
-  "exit": {
-    "exit_code": 0,
-    "signal": null,
-    "error": null
-  },
-  "retry_lineage": {
-    "attempt_number": 1,
-    "max_attempts": 1,
-    "previous_attempt_ids": []
-  },
-  "stdout_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-  "stderr_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-  "raw_result": {
-    "kind": "artifact",
-    "artifact_id": "artifact-http-response",
-    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
-  },
-  "artifacts": [],
-  "output_bounds": {
-    "stdout_bytes": 16,
-    "stderr_bytes": 0,
-    "stdout_truncated": false,
-    "stderr_truncated": false
-  }
-}

package/docs/contracts/fixtures/evidence/v1/examples/evidence-policy.json

@@ -1,108 +0,0 @@
-{
-  "id": "epolicy-default-v1",
-  "schema_version": "evidence.contract.v1",
-  "policy_digest": "sha256:4dc9ebefae0d8334a19d958a456d5633d615025e7643f999dfda6d4c30bfc613",
-  "defaults": {
-    "preset_id": "preset-http-health",
-    "binding": true,
-    "assurance_level": "standard"
-  },
-  "named_presets": [
-    {
-      "id": "preset-http-health",
-      "schema_version": "evidence.contract.v1",
-      "namespace": "planr.api",
-      "observations": [
-        {
-          "id": "obs-http-200",
-          "type": "planr.api.http.response",
-          "subject": "GET /health",
-          "expected": {
-            "status": 200
-          },
-          "target": {
-            "kind": "local_service",
-            "uri": "http://127.0.0.1:4173/health"
-          }
-        }
-      ]
-    }
-  ],
-  "observation_schema_registrations": [
-    {
-      "type": "planr.api.http.response",
-      "schema_ref": "planr.api.http.response@v1",
-      "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
-      "owning_namespace": "planr.api"
-    }
-  ],
-  "adapter_registrations": [
-    {
-      "manifest_id": "vcap-planr-http-process-v1",
-      "manifest_path": "docs/contracts/fixtures/evidence/v1/examples/verification-capability-manifest.json",
-      "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
-      "observation_types": ["planr.api.http.response"],
-      "payload_schemas": [
-        {
-          "type": "planr.api.http.response",
-          "schema_ref": "planr.api.http.response@v1",
-          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
-        }
-      ],
-      "provenance_path": "planr_observed_execution",
-      "execution_contract": {
-        "kind": "process",
-        "executable": "curl",
-        "args": ["--fail", "--silent", "http://127.0.0.1:4173/health"],
-        "working_directory": ".",
-        "timeout_ms": 10000,
-        "stdout_limit_bytes": 1048576,
-        "stderr_limit_bytes": 1048576,
-        "payload_schema": {
-          "type": "planr.api.http.response",
-          "schema_ref": "planr.api.http.response@v1",
-          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
-        }
-      }
-    }
-  ],
-  "extension_namespaces": ["planr.api"],
-  "trust_policy": {
-    "accepted_provenance": ["planr_observed_execution"],
-    "min_receipt_status": "trusted",
-    "allow_user_attestation": false
-  },
-  "freshness_policy": {
-    "max_age_seconds": 3600,
-    "invalidate_on": [
-      "source_change",
-      "target_change",
-      "policy_change",
-      "adapter_schema_change",
-      "configuration_change"
-    ]
-  },
-  "fixture_policy": {
-    "fixtures_allowed": false,
-    "mocks_allowed": false,
-    "disclosure_required": true
-  },
-  "completion_policy": {
-    "require_satisfied_or_waived": true,
-    "allow_inconclusive_completion": false,
-    "require_review_evidence": true
-  },
-  "layering_policy": {
-    "mode": "monotonic_strengthening",
-    "weakening_requires_waiver": true,
-    "layers": [
-      {
-        "scope": {
-          "kind": "plan",
-          "id": "pln-example"
-        },
-        "policy_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
-      }
-    ]
-  }
-}

package/docs/contracts/fixtures/evidence/v1/examples/evidence-receipt.json

@@ -1,93 +0,0 @@
-{
-  "id": "erec-planr-api-health-v1",
-  "schema_version": "evidence.contract.v1",
-  "criterion_id": "criterion-api-health",
-  "obligation_id": "pob-planr-api-health-v1",
-  "receipt_status": "trusted",
-  "source": {
-    "revision": "0123456789abcdef0123456789abcdef01234567",
-    "tree_digest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
-    "dirty": false
-  },
-  "target": {
-    "kind": "local_service",
-    "uri": "http://127.0.0.1:4173/health",
-    "digest": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
-  },
-  "environment": {
-    "kind": "local",
-    "id": "dev-shell",
-    "digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
-  },
-  "vantage_point": {
-    "kind": "localhost",
-    "identity": "127.0.0.1"
-  },
-  "capability": {
-    "manifest_id": "vcap-planr-http-process-v1",
-    "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
-    "instance_id": "vcinst-planr-http-process-v1",
-    "instance_digest": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
-  },
-  "provenance": {
-    "source": "planr_observed_execution",
-    "assigned_by": "planr",
-    "execution_id": "exec-20260728-api-health",
-    "tool_call_id": null
-  },
-  "observations": [
-    {
-      "requirement_id": "obs-http-200",
-      "type": "planr.api.http.response",
-      "outcome": "passed",
-      "predicate": {
-        "status": 200,
-        "json_path": "$.status",
-        "equals": "ok"
-      },
-      "actual": {
-        "status": 200,
-        "json": {
-          "status": "ok"
-        }
-      }
-    }
-  ],
-  "attempt_ids": [
-    "eatt-planr-api-health-v1"
-  ],
-  "retry_history": [],
-  "artifacts": [
-    {
-      "id": "artifact-http-response",
-      "kind": "stdout",
-      "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
-    }
-  ],
-  "raw_result": {
-    "kind": "artifact",
-    "artifact_id": "artifact-http-response",
-    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
-  },
-  "config_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
-  "fixture_disclosure": {
-    "fixtures_used": false,
-    "mocks_used": false
-  },
-  "permissions": {
-    "network": "localhost_only",
-    "filesystem": "read_workspace"
-  },
-  "sandbox": {
-    "mode": "bounded_process",
-    "limits": {
-      "timeout_ms": 10000,
-      "stdout_bytes": 1048576,
-      "stderr_bytes": 1048576
-    }
-  },
-  "proof_gaps": [],
-  "started_at": "2026-07-28T12:00:05Z",
-  "ended_at": "2026-07-28T12:00:06Z",
-  "receipt_digest": "sha256:6ea111943fdafe268a5bbe85b0fecaab75890dbcb9b2e2dfb966f3c6916e348f"
-}