planr 1.9.0 → 1.10.0-alpha.2

package/docs/contracts/fixtures/evidence/v1/negative/empty-trust-bindings-receipt.json

@@ -0,0 +1,72 @@
+{
+  "id": "erec-empty-trust-bindings",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "receipt_status": "trusted",
+  "source": {
+    "revision": "0123456789abcdef0123456789abcdef01234567",
+    "tree_digest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
+    "dirty": false
+  },
+  "target": {
+    "kind": "local_service",
+    "uri": "http://127.0.0.1:4173/health",
+    "digest": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
+  },
+  "environment": {
+    "kind": "local",
+    "id": "dev-shell",
+    "digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+  },
+  "vantage_point": {},
+  "capability": {
+    "manifest_id": "vcap-planr-http-process-v1",
+    "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+    "instance_id": "vcinst-planr-http-process-v1",
+    "instance_digest": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
+  },
+  "provenance": {
+    "source": "planr_observed_execution",
+    "assigned_by": "planr",
+    "execution_id": "exec-20260728-api-health",
+    "tool_call_id": null
+  },
+  "observations": [
+    {
+      "requirement_id": "obs-http-200",
+      "type": "planr.api.http.response",
+      "outcome": "passed",
+      "predicate": {
+        "status": 200
+      },
+      "actual": {
+        "status": 200
+      }
+    }
+  ],
+  "attempt_ids": [
+    "eatt-planr-api-health-v1"
+  ],
+  "retry_history": [],
+  "artifacts": [
+    {
+      "id": "artifact-http-response",
+      "kind": "stdout",
+      "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+    }
+  ],
+  "raw_result": {
+    "kind": "artifact",
+    "artifact_id": "artifact-http-response",
+    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "config_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "fixture_disclosure": {},
+  "permissions": {},
+  "sandbox": {},
+  "proof_gaps": [],
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "receipt_digest": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
+}

package/docs/contracts/fixtures/evidence/v1/negative/failed-zero-exit-attempt.json

@@ -0,0 +1,39 @@
+{
+  "id": "eatt-failed-zero-exit",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "capability_instance_id": "vcinst-planr-http-process-v1",
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "status": "failed",
+  "resolved_command": {
+    "kind": "command",
+    "command": ["curl", "-fsS", "http://127.0.0.1:4173/health"],
+    "cwd": "$PLANR_REPOSITORY_ROOT"
+  },
+  "exit": {
+    "exit_code": 0,
+    "signal": null,
+    "error": null
+  },
+  "retry_lineage": {
+    "attempt_number": 1,
+    "max_attempts": 1,
+    "previous_attempt_ids": []
+  },
+  "stdout_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stderr_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "raw_result": {
+    "kind": "artifact",
+    "artifact_id": "artifact-http-response",
+    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "artifacts": [],
+  "output_bounds": {
+    "stdout_bytes": 2,
+    "stderr_bytes": 0,
+    "stdout_truncated": false,
+    "stderr_truncated": false
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/forged-trusted-receipt.json

@@ -0,0 +1,35 @@
+{
+  "id": "erec-forged-minimal",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "receipt_status": "trusted",
+  "source": {},
+  "target": {},
+  "environment": {},
+  "vantage_point": {},
+  "capability": {},
+  "provenance": {
+    "source": "planr_observed_execution",
+    "assigned_by": "planr"
+  },
+  "observations": [
+    {
+      "requirement_id": "obs-http-200",
+      "type": "planr.api.http.response",
+      "outcome": "passed",
+      "predicate": {},
+      "actual": {}
+    }
+  ],
+  "attempt_ids": [
+    "attempt-forged"
+  ],
+  "fixture_disclosure": {},
+  "permissions": {},
+  "sandbox": {},
+  "proof_gaps": [],
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "receipt_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+}

package/docs/contracts/fixtures/evidence/v1/negative/inconclusive-clean-exit-attempt.json

@@ -0,0 +1,39 @@
+{
+  "id": "eatt-inconclusive-clean-exit",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "capability_instance_id": "vcinst-planr-http-process-v1",
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "status": "inconclusive",
+  "resolved_command": {
+    "kind": "command",
+    "command": ["curl", "-fsS", "http://127.0.0.1:4173/health"],
+    "cwd": "$PLANR_REPOSITORY_ROOT"
+  },
+  "exit": {
+    "exit_code": 0,
+    "signal": null,
+    "error": null
+  },
+  "retry_lineage": {
+    "attempt_number": 1,
+    "max_attempts": 1,
+    "previous_attempt_ids": []
+  },
+  "stdout_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stderr_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "raw_result": {
+    "kind": "artifact",
+    "artifact_id": "artifact-http-response",
+    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "artifacts": [],
+  "output_bounds": {
+    "stdout_bytes": 2,
+    "stderr_bytes": 0,
+    "stdout_truncated": false,
+    "stderr_truncated": false
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/inconclusive-coverage-with-blocked-reason.json

@@ -0,0 +1,27 @@
+{
+  "id": "cverdict-inconclusive-blocked-reason",
+  "schema_version": "evidence.contract.v1",
+  "scope": {
+    "kind": "criterion",
+    "id": "criterion-api-health"
+  },
+  "evaluated_at": "2026-07-28T12:00:08Z",
+  "status": "inconclusive",
+  "observation_coverage": [
+    {
+      "requirement_id": "obs-http-200",
+      "status": "inconclusive",
+      "gap_reason": "permission_denied"
+    }
+  ],
+  "validation_details": {
+    "trust": {
+      "status": "inconclusive",
+      "checked_at": "2026-07-28T12:00:08Z",
+      "receipt_ids": [],
+      "gap_reasons": ["permission_denied"]
+    }
+  },
+  "suggested_next_action": "rerun verifier",
+  "actionable_now": true
+}

package/docs/contracts/fixtures/evidence/v1/negative/minimal-policy-missing-owned-inputs.json

@@ -0,0 +1,5 @@
+{
+  "id": "epolicy-minimal",
+  "schema_version": "evidence.contract.v1",
+  "policy_digest": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+}

package/docs/contracts/fixtures/evidence/v1/negative/mismatched-probe-execution-id-capability.json

@@ -0,0 +1,42 @@
+{
+  "id": "vcinst-mismatched-probe",
+  "schema_version": "evidence.contract.v1",
+  "manifest_id": "vcap-planr-http-process-v1",
+  "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+  "host": "codex",
+  "surface": "local-process",
+  "host_version": "1.0.0",
+  "adapter_version": "1.0.0",
+  "environment": {
+    "kind": "local",
+    "id": "dev-shell",
+    "digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+  },
+  "permissions": {
+    "network": "localhost_only",
+    "filesystem": "read_workspace"
+  },
+  "availability": {
+    "status": "available"
+  },
+  "probe_result": {
+    "probe_execution_id": "probe-empty",
+    "outcome": "passed",
+    "observed_at": "2026-07-28T12:00:04Z",
+    "checks": [
+      {
+        "name": "http-health",
+        "outcome": "passed"
+      }
+    ]
+  },
+  "probe_execution_id": "probe-other",
+  "observed_payload_contract": {
+    "schema_ref": "planr.api.http.response@v1",
+    "observation_types": [
+      "planr.api.http.response"
+    ]
+  },
+  "limitations": [],
+  "captured_at": "2026-07-28T12:00:04Z"
+}

package/docs/contracts/fixtures/evidence/v1/negative/passed-empty-attempt.json

@@ -0,0 +1,22 @@
+{
+  "id": "eatt-empty-passed",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "capability_instance_id": "vcinst-planr-http-process-v1",
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "status": "passed",
+  "resolved_command": {},
+  "exit": {},
+  "retry_lineage": {},
+  "stdout_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stderr_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "raw_result": {
+    "kind": "artifact",
+    "artifact_id": "artifact-http-response",
+    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "artifacts": [],
+  "output_bounds": {}
+}

package/docs/contracts/fixtures/evidence/v1/negative/policy-default-preset-unregistered.json

@@ -0,0 +1,111 @@
+{
+  "id": "epolicy-unregistered-default-preset",
+  "schema_version": "evidence.contract.v1",
+  "policy_digest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "defaults": {
+    "preset_id": "preset-missing",
+    "binding": true,
+    "assurance_level": "standard"
+  },
+  "named_presets": [
+    {
+      "id": "preset-http-health",
+      "schema_version": "evidence.contract.v1",
+      "namespace": "planr.api",
+      "observations": [
+        {
+          "id": "obs-http-200",
+          "type": "planr.api.http.response",
+          "subject": "GET /health",
+          "expected": {
+            "status": 200
+          },
+          "target": {
+            "kind": "local_service",
+            "uri": "http://127.0.0.1:4173/health"
+          },
+          "environment": {
+            "kind": "local",
+            "id": "dev-shell",
+            "digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+          },
+          "runtime_target": {
+            "kind": "process",
+            "id": "planr-doc-fixture"
+          }
+        }
+      ]
+    }
+  ],
+  "observation_schema_registrations": [
+    {
+      "type": "planr.api.http.response",
+      "schema_ref": "planr.api.http.response@v1",
+      "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "owning_namespace": "planr.api"
+    }
+  ],
+  "adapter_registrations": [
+    {
+      "manifest_id": "vcap-planr-http-process-v1",
+      "manifest_path": "docs/contracts/fixtures/evidence/v1/examples/verification-capability-manifest.json",
+      "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+      "observation_types": ["planr.api.http.response"],
+      "payload_schemas": [
+        {
+          "type": "planr.api.http.response",
+          "schema_ref": "planr.api.http.response@v1",
+          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+        }
+      ],
+      "provenance_path": "planr_observed_execution",
+      "execution_contract": {
+        "kind": "process",
+        "executable": "curl",
+        "args": ["--fail", "--silent", "http://127.0.0.1:4173/health"],
+        "working_directory": ".",
+        "timeout_ms": 10000,
+        "stdout_limit_bytes": 1048576,
+        "stderr_limit_bytes": 1048576,
+        "payload_schema": {
+          "type": "planr.api.http.response",
+          "schema_ref": "planr.api.http.response@v1",
+          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+        }
+      }
+    }
+  ],
+  "extension_namespaces": ["planr.api"],
+  "trust_policy": {
+    "accepted_provenance": ["planr_observed_execution"],
+    "min_receipt_status": "trusted",
+    "allow_user_attestation": false
+  },
+  "freshness_policy": {
+    "max_age_seconds": 3600,
+    "invalidate_on": ["source_change"]
+  },
+  "fixture_policy": {
+    "fixtures_allowed": false,
+    "mocks_allowed": false,
+    "disclosure_required": true
+  },
+  "completion_policy": {
+    "require_satisfied_or_waived": true,
+    "allow_inconclusive_completion": false,
+    "require_review_evidence": true
+  },
+  "layering_policy": {
+    "mode": "monotonic_strengthening",
+    "weakening_requires_waiver": true,
+    "layers": [
+      {
+        "scope": {
+          "kind": "plan",
+          "id": "pln-example"
+        },
+        "policy_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      }
+    ]
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/policy-weakening-without-waiver.json

@@ -0,0 +1,111 @@
+{
+  "id": "epolicy-weakening",
+  "schema_version": "evidence.contract.v1",
+  "policy_digest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "defaults": {
+    "preset_id": "preset-http-health",
+    "binding": true,
+    "assurance_level": "standard"
+  },
+  "named_presets": [
+    {
+      "id": "preset-http-health",
+      "schema_version": "evidence.contract.v1",
+      "namespace": "planr.api",
+      "observations": [
+        {
+          "id": "obs-http-200",
+          "type": "planr.api.http.response",
+          "subject": "GET /health",
+          "expected": {
+            "status": 200
+          },
+          "target": {
+            "kind": "local_service",
+            "uri": "http://127.0.0.1:4173/health"
+          },
+          "environment": {
+            "kind": "local",
+            "id": "dev-shell",
+            "digest": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
+          },
+          "runtime_target": {
+            "kind": "process",
+            "id": "planr-doc-fixture"
+          }
+        }
+      ]
+    }
+  ],
+  "observation_schema_registrations": [
+    {
+      "type": "planr.api.http.response",
+      "schema_ref": "planr.api.http.response@v1",
+      "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "owning_namespace": "planr.api"
+    }
+  ],
+  "adapter_registrations": [
+    {
+      "manifest_id": "vcap-planr-http-process-v1",
+      "manifest_path": "docs/contracts/fixtures/evidence/v1/examples/verification-capability-manifest.json",
+      "manifest_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+      "observation_types": ["planr.api.http.response"],
+      "payload_schemas": [
+        {
+          "type": "planr.api.http.response",
+          "schema_ref": "planr.api.http.response@v1",
+          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+        }
+      ],
+      "provenance_path": "planr_observed_execution",
+      "execution_contract": {
+        "kind": "process",
+        "executable": "curl",
+        "args": ["--fail", "--silent", "http://127.0.0.1:4173/health"],
+        "working_directory": ".",
+        "timeout_ms": 10000,
+        "stdout_limit_bytes": 1048576,
+        "stderr_limit_bytes": 1048576,
+        "payload_schema": {
+          "type": "planr.api.http.response",
+          "schema_ref": "planr.api.http.response@v1",
+          "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+        }
+      }
+    }
+  ],
+  "extension_namespaces": ["planr.api"],
+  "trust_policy": {
+    "accepted_provenance": ["planr_observed_execution"],
+    "min_receipt_status": "trusted",
+    "allow_user_attestation": false
+  },
+  "freshness_policy": {
+    "max_age_seconds": 3600,
+    "invalidate_on": ["source_change"]
+  },
+  "fixture_policy": {
+    "fixtures_allowed": false,
+    "mocks_allowed": false,
+    "disclosure_required": true
+  },
+  "completion_policy": {
+    "require_satisfied_or_waived": true,
+    "allow_inconclusive_completion": false,
+    "require_review_evidence": true
+  },
+  "layering_policy": {
+    "mode": "monotonic_strengthening",
+    "weakening_requires_waiver": false,
+    "layers": [
+      {
+        "scope": {
+          "kind": "plan",
+          "id": "pln-example"
+        },
+        "policy_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      }
+    ]
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/process-probe-missing-output-limits.json

@@ -0,0 +1,49 @@
+{
+  "id": "vcap-process-probe-missing-limits",
+  "schema_version": "evidence.contract.v1",
+  "version": "1.0.0",
+  "adapter_kind": "process",
+  "adapter_digest": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
+  "supported_surfaces": ["local-process"],
+  "supported_observations": [
+    {
+      "type": "planr.api.http.response",
+      "schema_ref": "planr.api.http.response@v1",
+      "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+    }
+  ],
+  "supported_interactions": ["http-get"],
+  "supported_artifacts": ["stdout"],
+  "runtime_targets": [
+    {
+      "kind": "process",
+      "id": "planr-doc-fixture"
+    }
+  ],
+  "provenance_path": "planr_observed_execution",
+  "permissions": {
+    "network": "localhost_only",
+    "filesystem": "read_workspace"
+  },
+  "costs": {
+    "network": "local"
+  },
+  "determinism": "deterministic for static health endpoint",
+  "repeatability": "replayable from source tree and target URI",
+  "independence": "adapter observes process output independently of agent text",
+  "blind_spots": [],
+  "availability_probe": {
+    "kind": "process",
+    "execution": {
+      "kind": "process",
+      "executable": "curl",
+      "args": ["--version"],
+      "timeout_ms": 5000,
+      "payload_schema": {
+        "type": "planr.api.http.response",
+        "schema_ref": "planr.api.http.response@v1",
+        "schema_digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+      }
+    }
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/satisfied-empty-coverage-verdict.json

@@ -0,0 +1,14 @@
+{
+  "id": "cverdict-empty-satisfied",
+  "schema_version": "evidence.contract.v1",
+  "scope": {
+    "kind": "criterion",
+    "id": "criterion-api-health"
+  },
+  "evaluated_at": "2026-07-28T12:00:08Z",
+  "status": "satisfied",
+  "observation_coverage": [],
+  "validation_details": {},
+  "suggested_next_action": "none",
+  "actionable_now": false
+}

package/docs/contracts/fixtures/evidence/v1/negative/skipped-zero-exit-attempt.json

@@ -0,0 +1,39 @@
+{
+  "id": "eatt-skipped-zero-exit",
+  "schema_version": "evidence.contract.v1",
+  "criterion_id": "criterion-api-health",
+  "obligation_id": "pob-planr-api-health-v1",
+  "capability_instance_id": "vcinst-planr-http-process-v1",
+  "started_at": "2026-07-28T12:00:05Z",
+  "ended_at": "2026-07-28T12:00:06Z",
+  "status": "skipped",
+  "resolved_command": {
+    "kind": "command",
+    "command": ["curl", "-fsS", "http://127.0.0.1:4173/health"],
+    "cwd": "$PLANR_REPOSITORY_ROOT"
+  },
+  "exit": {
+    "exit_code": 0,
+    "signal": null,
+    "error": null
+  },
+  "retry_lineage": {
+    "attempt_number": 1,
+    "max_attempts": 1,
+    "previous_attempt_ids": []
+  },
+  "stdout_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stderr_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "raw_result": {
+    "kind": "artifact",
+    "artifact_id": "artifact-http-response",
+    "digest": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
+  },
+  "artifacts": [],
+  "output_bounds": {
+    "stdout_bytes": 2,
+    "stderr_bytes": 0,
+    "stdout_truncated": false,
+    "stderr_truncated": false
+  }
+}

package/docs/contracts/fixtures/evidence/v1/negative/stale-coverage-with-inconclusive-reason.json

@@ -0,0 +1,27 @@
+{
+  "id": "cverdict-stale-inconclusive-reason",
+  "schema_version": "evidence.contract.v1",
+  "scope": {
+    "kind": "criterion",
+    "id": "criterion-api-health"
+  },
+  "evaluated_at": "2026-07-28T12:00:08Z",
+  "status": "stale",
+  "observation_coverage": [
+    {
+      "requirement_id": "obs-http-200",
+      "status": "stale",
+      "gap_reason": "inconclusive_result"
+    }
+  ],
+  "validation_details": {
+    "freshness": {
+      "status": "failed",
+      "checked_at": "2026-07-28T12:00:08Z",
+      "receipt_ids": [],
+      "gap_reasons": ["inconclusive_result"]
+    }
+  },
+  "suggested_next_action": "refresh evidence",
+  "actionable_now": true
+}