project-tiny-context-harness 0.8.11 → 0.8.13

package/dist/schemas/long-task-delivery-v2/long-task-delivery-v2.schema.json

@@ -8,7 +8,6 @@
         "schema_version",
         "semantic_fact_manifest",
         "task",
-        "source_claims",
         "stages",
         "risk",
         "global"
@@ -54,6 +53,9 @@
             "minItems": 1,
             "items": { "$ref": "#/$defs/sourceClaim" }
         },
+        "compact_semantic_carrier": {
+            "$ref": "#/$defs/longTaskCompactCarrier"
+        },
         "stages": {
             "type": "array",
             "minItems": 1,
@@ -68,9 +70,30 @@
         },
         "outcome_files": { "$ref": "#/$defs/nonEmptyStrings" }
     },
-    "oneOf": [
-        { "required": ["outcomes"], "not": { "required": ["outcome_files"] } },
-        { "required": ["outcome_files"], "not": { "required": ["outcomes"] } }
+    "allOf": [
+        {
+            "oneOf": [
+                {
+                    "required": ["source_claims"],
+                    "not": { "required": ["compact_semantic_carrier"] }
+                },
+                {
+                    "required": ["compact_semantic_carrier", "outcomes"],
+                    "not": {
+                        "anyOf": [
+                            { "required": ["source_claims"] },
+                            { "required": ["outcome_files"] }
+                        ]
+                    }
+                }
+            ]
+        },
+        {
+            "oneOf": [
+                { "required": ["outcomes"], "not": { "required": ["outcome_files"] } },
+                { "required": ["outcome_files"], "not": { "required": ["outcomes"] } }
+            ]
+        }
     ],
     "$defs": {
         "key": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
@@ -94,6 +117,196 @@
                 "sha256": { "$ref": "#/$defs/sha256" }
             }
         },
+        "compactTable": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["defaults", "columns", "rows"],
+            "properties": {
+                "defaults": { "type": "object" },
+                "columns": {
+                    "type": "array",
+                    "uniqueItems": true,
+                    "items": { "type": "string", "pattern": "^[a-z][a-z0-9_]*$" }
+                },
+                "rows": {
+                    "type": "array",
+                    "items": { "type": "array" }
+                }
+            }
+        },
+        "compactFactSet": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["key", "defaults", "columns", "rows"],
+            "properties": {
+                "key": { "$ref": "#/$defs/semanticRef" },
+                "defaults": { "type": "object" },
+                "columns": {
+                    "type": "array",
+                    "uniqueItems": true,
+                    "items": { "type": "string", "pattern": "^[a-z][a-z0-9_]*$" }
+                },
+                "rows": {
+                    "type": "array",
+                    "items": { "type": "array" }
+                }
+            }
+        },
+        "longTaskCompactCapacityCounts": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "claims",
+                "claim_projections",
+                "selector_members",
+                "structure_families",
+                "structure_references",
+                "structure_arguments",
+                "facts",
+                "obligations",
+                "assertions",
+                "canonical_bytes"
+            ],
+            "properties": {
+                "claims": { "type": "integer", "minimum": 0, "maximum": 1000000 },
+                "claim_projections": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 2000000
+                },
+                "selector_members": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 5000000
+                },
+                "structure_families": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 1000000
+                },
+                "structure_references": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 10000000
+                },
+                "structure_arguments": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 50000000
+                },
+                "facts": { "type": "integer", "minimum": 0, "maximum": 1000000 },
+                "obligations": { "type": "integer", "minimum": 0, "maximum": 2000000 },
+                "assertions": { "type": "integer", "minimum": 0, "maximum": 5000000 },
+                "canonical_bytes": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 268435456
+                }
+            }
+        },
+        "longTaskCompactCarrier": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "schema_version",
+                "capacity",
+                "selectors",
+                "shared_structures",
+                "claim_catalog",
+                "claim_projections",
+                "fact_sets",
+                "proof_templates",
+                "obligations",
+                "assertion_projections",
+                "exceptions"
+            ],
+            "properties": {
+                "schema_version": { "const": "long-task-compact-carrier-v1" },
+                "capacity": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": ["theoretical_ground_universe", "measured", "maximum"],
+                    "properties": {
+                        "theoretical_ground_universe": { "const": "not_materialized" },
+                        "measured": { "$ref": "#/$defs/longTaskCompactCapacityCounts" },
+                        "maximum": { "$ref": "#/$defs/longTaskCompactCapacityCounts" }
+                    }
+                },
+                "selectors": {
+                    "type": "array",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": ["key", "members"],
+                        "properties": {
+                            "key": { "$ref": "#/$defs/semanticRef" },
+                            "members": {
+                                "type": "array",
+                                "uniqueItems": true,
+                                "items": { "$ref": "#/$defs/semanticRef" }
+                            }
+                        }
+                    }
+                },
+                "shared_structures": {
+                    "type": "array",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "key",
+                            "digest",
+                            "boundary",
+                            "parameter_count",
+                            "template"
+                        ],
+                        "properties": {
+                            "key": {
+                                "type": "string",
+                                "pattern": "^structure\\.[a-f0-9]{24}$"
+                            },
+                            "digest": { "$ref": "#/$defs/sha256" },
+                            "boundary": { "$ref": "#/$defs/semanticRef" },
+                            "parameter_count": { "type": "integer", "minimum": 0 },
+                            "template": {}
+                        }
+                    }
+                },
+                "claim_catalog": { "$ref": "#/$defs/compactTable" },
+                "claim_projections": { "$ref": "#/$defs/compactTable" },
+                "fact_sets": {
+                    "type": "array",
+                    "items": { "$ref": "#/$defs/compactFactSet" }
+                },
+                "proof_templates": {
+                    "type": "array",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": ["key", "binding"],
+                        "properties": {
+                            "key": { "$ref": "#/$defs/semanticRef" },
+                            "binding": { "type": "object" }
+                        }
+                    }
+                },
+                "obligations": { "$ref": "#/$defs/compactTable" },
+                "assertion_projections": { "$ref": "#/$defs/compactTable" },
+                "exceptions": {
+                    "type": "array",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": ["key", "target_ref", "rationale"],
+                        "properties": {
+                            "key": { "$ref": "#/$defs/semanticRef" },
+                            "target_ref": { "$ref": "#/$defs/semanticRef" },
+                            "rationale": { "$ref": "#/$defs/nonEmpty" }
+                        }
+                    }
+                }
+            }
+        },
         "semanticFactBindings": {
             "type": "object",
             "additionalProperties": false,
@@ -109,6 +322,7 @@
                         "required": ["fact_ref", "claim_ref", "applicability_ref"],
                         "properties": {
                             "fact_ref": { "$ref": "#/$defs/semanticRef" },
+                            "fact_revision_digest": { "$ref": "#/$defs/sha256" },
                             "claim_ref": { "$ref": "#/$defs/semanticRef" },
                             "applicability_ref": { "$ref": "#/$defs/semanticRef" }
                         }
@@ -134,6 +348,7 @@
                                 ],
                                 "properties": {
                                     "proof_ref": { "$ref": "#/$defs/semanticRef" },
+                                    "obligation_revision_digest": { "$ref": "#/$defs/sha256" },
                                     "fact_ref": { "$ref": "#/$defs/semanticRef" },
                                     "method": { "$ref": "#/$defs/semanticRef" },
                                     "proof_surface": { "$ref": "#/$defs/proofSurface" },
@@ -162,6 +377,7 @@
                                 ],
                                 "properties": {
                                     "proof_ref": { "$ref": "#/$defs/semanticRef" },
+                                    "obligation_revision_digest": { "$ref": "#/$defs/sha256" },
                                     "fact_ref": { "$ref": "#/$defs/semanticRef" },
                                     "method": { "$ref": "#/$defs/semanticRef" },
                                     "proof_surface": { "$ref": "#/$defs/proofSurface" },
@@ -281,6 +497,10 @@
                     ]
                 },
                 "root_entrypoint": { "$ref": "#/$defs/nonEmpty" },
+                "root_argv": {
+                    "type": "array",
+                    "items": { "type": "string", "pattern": "^[^\\u0000]*$" }
+                },
                 "capabilities": {
                     "type": "array",
                     "minItems": 1,
@@ -973,8 +1193,35 @@
                 "actual_artifact_path",
                 "comparison_artifact_path"
             ],
+            "oneOf": [
+                {
+                    "not": {
+                        "anyOf": [
+                            { "required": ["fact_model"] },
+                            { "required": ["symbolic_method_bindings"] },
+                            { "required": ["symbolic_certificate_binding"] }
+                        ]
+                    },
+                    "properties": {
+                        "verification_method_bindings": { "minItems": 1 }
+                    }
+                },
+                {
+                    "required": [
+                        "fact_model",
+                        "symbolic_method_bindings",
+                        "symbolic_certificate_binding"
+                    ],
+                    "properties": {
+                        "fact_model": { "const": "symbolic_rules_v2" },
+                        "verification_method_bindings": { "maxItems": 0 },
+                        "symbolic_method_bindings": { "minItems": 1 }
+                    }
+                }
+            ],
             "properties": {
                 "key": { "$ref": "#/$defs/key" },
+                "fact_model": { "const": "symbolic_rules_v2" },
                 "interpretation": { "enum": ["exact_target", "constraint"] },
                 "source_paths": { "$ref": "#/$defs/nonEmptyStrings" },
                 "condition_keys": { "$ref": "#/$defs/keys" },
@@ -983,7 +1230,6 @@
                 "conformance_assertion_ref": { "$ref": "#/$defs/key" },
                 "verification_method_bindings": {
                     "type": "array",
-                    "minItems": 1,
                     "uniqueItems": true,
                     "items": {
                         "type": "object",
@@ -1021,6 +1267,14 @@
                         }
                     }
                 },
+                "symbolic_method_bindings": {
+                    "type": "array",
+                    "uniqueItems": true,
+                    "items": { "$ref": "#/$defs/designSymbolicVerificationBinding" }
+                },
+                "symbolic_certificate_binding": {
+                    "$ref": "#/$defs/designSymbolicCertificateBinding"
+                },
                 "actual_artifact_path": { "$ref": "#/$defs/nonEmpty" },
                 "comparison_artifact_path": { "$ref": "#/$defs/nonEmpty" }
             }
@@ -1132,6 +1386,173 @@
                 }
             }
         },
+        "designQuantifier": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["kind", "minimum", "maximum"],
+            "properties": {
+                "kind": {
+                    "enum": [
+                        "one",
+                        "all",
+                        "any",
+                        "none",
+                        "exactly",
+                        "at_least",
+                        "at_most",
+                        "range"
+                    ]
+                },
+                "minimum": {
+                    "oneOf": [{ "type": "null" }, { "type": "integer", "minimum": 0 }]
+                },
+                "maximum": {
+                    "oneOf": [{ "type": "null" }, { "type": "integer", "minimum": 0 }]
+                }
+            }
+        },
+        "designSymbolicRuleExpectation": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "obligation_ref",
+                "fact_rule_ref",
+                "region_sha256",
+                "subject_or_relation_ref",
+                "property_ref",
+                "population_ref",
+                "quantifier",
+                "observation_sensitivity",
+                "expected",
+                "proof_surface",
+                "observation_boundary",
+                "comparison",
+                "oracle",
+                "environment",
+                "protected_value_policy",
+                "completion_effect"
+            ],
+            "properties": {
+                "obligation_ref": { "$ref": "#/$defs/designFactKey" },
+                "fact_rule_ref": { "$ref": "#/$defs/designFactKey" },
+                "region_sha256": { "$ref": "#/$defs/sha256" },
+                "subject_or_relation_ref": { "$ref": "#/$defs/designFactKey" },
+                "property_ref": { "$ref": "#/$defs/designFactKey" },
+                "population_ref": {
+                    "oneOf": [{ "type": "null" }, { "$ref": "#/$defs/designFactKey" }]
+                },
+                "quantifier": { "$ref": "#/$defs/designQuantifier" },
+                "observation_sensitivity": { "enum": ["plain", "protected"] },
+                "expected": { "$ref": "#/$defs/designLocatedDigest" },
+                "proof_surface": { "$ref": "#/$defs/nonEmpty" },
+                "observation_boundary": { "$ref": "#/$defs/nonEmpty" },
+                "comparison": {
+                    "$ref": "#/$defs/designFactExpectation/properties/comparison"
+                },
+                "oracle": {
+                    "$ref": "#/$defs/designFactExpectation/properties/oracle"
+                },
+                "environment": {
+                    "$ref": "#/$defs/designFactExpectation/properties/environment"
+                },
+                "protected_value_policy": { "$ref": "#/$defs/nonEmpty" },
+                "completion_effect": { "$ref": "#/$defs/nonEmpty" }
+            }
+        },
+        "designSymbolicVerificationBinding": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "method",
+                "assertion_ref",
+                "artifact_path",
+                "observation_path",
+                "rule_expectations"
+            ],
+            "properties": {
+                "method": { "$ref": "#/$defs/designVerificationMethod" },
+                "assertion_ref": { "$ref": "#/$defs/key" },
+                "artifact_path": { "$ref": "#/$defs/nonEmpty" },
+                "observation_path": { "$ref": "#/$defs/nonEmpty" },
+                "rule_expectations": {
+                    "type": "array",
+                    "minItems": 1,
+                    "items": { "$ref": "#/$defs/designSymbolicRuleExpectation" }
+                }
+            }
+        },
+        "designSymbolicCertificateExpectation": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "certificate_ref",
+                "fact_rule_refs",
+                "omitted_axis_refs",
+                "dependency_edge_refs",
+                "canonical_rule_dag_sha256"
+            ],
+            "properties": {
+                "certificate_ref": { "$ref": "#/$defs/designFactKey" },
+                "fact_rule_refs": { "$ref": "#/$defs/designFactRefs" },
+                "omitted_axis_refs": { "$ref": "#/$defs/designFactRefs" },
+                "dependency_edge_refs": { "$ref": "#/$defs/designFactRefs" },
+                "canonical_rule_dag_sha256": { "$ref": "#/$defs/sha256" },
+                "source_noninterference_proof_sha256": { "$ref": "#/$defs/sha256" },
+                "production_noninterference_proof_sha256": { "$ref": "#/$defs/sha256" }
+            }
+        },
+        "designSymbolicCertificateBinding": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["assertion_ref", "artifact_path", "expectations", "metrics"],
+            "properties": {
+                "assertion_ref": { "$ref": "#/$defs/key" },
+                "artifact_path": { "$ref": "#/$defs/nonEmpty" },
+                "expectations": {
+                    "type": "array",
+                    "minItems": 1,
+                    "items": {
+                        "$ref": "#/$defs/designSymbolicCertificateExpectation"
+                    }
+                },
+                "metrics": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "semantic_obligations",
+                        "certificate_obligations",
+                        "certificate_covered_omitted_axes",
+                        "certificate_covered_dependency_edges",
+                        "canonical_dag_nodes",
+                        "canonical_partition_edges",
+                        "canonical_bytes",
+                        "theoretical_ground_cardinality"
+                    ],
+                    "properties": {
+                        "semantic_obligations": { "type": "integer", "minimum": 0 },
+                        "certificate_obligations": { "type": "integer", "minimum": 0 },
+                        "certificate_covered_omitted_axes": {
+                            "type": "integer",
+                            "minimum": 0
+                        },
+                        "certificate_covered_dependency_edges": {
+                            "type": "integer",
+                            "minimum": 0
+                        },
+                        "canonical_dag_nodes": { "type": "integer", "minimum": 0 },
+                        "canonical_partition_edges": {
+                            "type": "integer",
+                            "minimum": 0
+                        },
+                        "canonical_bytes": { "type": "integer", "minimum": 0 },
+                        "theoretical_ground_cardinality": {
+                            "type": "string",
+                            "pattern": "^[1-9][0-9]*$"
+                        }
+                    }
+                }
+            }
+        },
         "designAcceptanceBlocker": {
             "type": "object",
             "additionalProperties": false,
@@ -1541,6 +1962,7 @@
                 "visual_render",
                 "design_conformance",
                 "design_method",
+                "design_symbolic_certificate",
                 "semantic_fact",
                 "target_runtime",
                 "input_variation"
@@ -1626,6 +2048,10 @@
                 "check_key": { "$ref": "#/$defs/key" },
                 "expected_assertion_failures": { "$ref": "#/$defs/keys" },
                 "preserved_assertions": { "$ref": "#/$defs/keys", "default": [] },
+                "allowed_fanout_assertions": {
+                    "$ref": "#/$defs/keys",
+                    "default": []
+                },
                 "mutation": {
                     "oneOf": [
                         {
@@ -1706,6 +2132,10 @@
                     "uniqueItems": true
                 },
                 "preserved_assertions": { "$ref": "#/$defs/keys", "default": [] },
+                "allowed_fanout_assertions": {
+                    "$ref": "#/$defs/keys",
+                    "default": []
+                },
                 "mutation": {
                     "oneOf": [
                         {

package/migrations/README.md

@@ -1,15 +1,92 @@
-# Migrations
-
-Schema migrations for Harness config and managed file layout belong here.
-
-Version 0.6.0 includes `long-task-v1-retirement`. It safely removes the
-retired repo-local Hook, reports a legacy active projection as
-`manual_required`, and deliberately does not import V1 progress or receipts
-into the V2 Claim/Evidence authority.
-
-Version 0.7.2 includes `long-task-v2-semantic-drift-authority`. It reports a
-conventional `.long-task/delivery-contract.yaml` as `manual_required` when the
-V2 file predates explicit Stage, target-profile/root-runtime, journey-scenario,
-success/degradation, evidence-capability or external-impact authority. Those
-meanings must be re-authored from Source; migration never infers them from old
-Progress or Receipts.
+# Migrations
+
+Schema migrations for Harness config and managed file layout belong here.
+
+Version 0.6.0 includes `long-task-v1-retirement`. It safely removes the
+retired repo-local Hook, reports a legacy active projection as
+`manual_required`, and deliberately does not import V1 progress or receipts
+into the V2 Claim/Evidence authority.
+
+Version 0.7.2 includes `long-task-v2-semantic-drift-authority`. It reports a
+conventional `.long-task/delivery-contract.yaml` as `manual_required` when the
+V2 file predates explicit Stage, target-profile/root-runtime, journey-scenario,
+success/degradation, evidence-capability or external-impact authority. Those
+meanings must be re-authored from Source; migration never infers them from old
+Progress or Receipts.
+
+## Admitted-observation/runtime-TCB revision
+
+The next Long-Task compatibility boundary intentionally does not provide a
+mechanical Contract rewrite. Machine evidence that depends on a custom Oracle,
+a project-submitted runtime/interaction/state/verdict row, a runner-created or
+runner-modified carrier, an indirect wrapper, an unsupported target family or
+a Counterfactual with no package-admitted actual must be re-authored explicitly.
+Migration must never silently:
+
+- replace a custom Oracle with a package Oracle;
+- turn machine proof into `external_confirmation`;
+- replace a verifier wrapper with a product root entrypoint;
+- infer a static structure carrier from `Binding`/`input_paths` alone; or
+- infer a process runtime dependency from `input_paths`, runner or verification membership;
+- invent a Source-backed execution target or production Binding for an old root; or
+- preserve a known false-acceptance path as compatibility behavior.
+
+Greenfield authoring may declare an exact process root, argv repository file
+or production carrier as `planned`. Its exact Source/Binding declaration is
+stable through Preflight/Compile and later materialization, but Final Gate
+requires every compiled closure member to exist. A glob, a manifest sibling or
+an undeclared repository-file argv token cannot substitute; migration does not
+invent these exact declarations or parse language dependencies.
+
+Preflight and doctor should report the narrow failing obligation and an
+actionable manual route through diagnostics such as
+`machine_observer_not_admitted`,
+`semantic_fact_machine_observer_not_admitted`,
+`unsupported_observer_requires_external_confirmation`,
+`custom_oracle_machine_completion_forbidden`,
+`static_observation_not_in_pre_run_snapshot`,
+`static_observation_changed_by_runner`,
+`process_observer_direct_root_required`,
+`process_observer_root_invocation_required`,
+`process_observer_root_argv_mismatch`,
+`process_observation_input_changed_by_runner`,
+`process_runtime_input_expected_authority_forbidden`,
+`process_runtime_input_verification_role_forbidden`,
+`process_runtime_input_evidence_role_forbidden`,
+`process_root_source_binding_required`,
+`process_root_production_binding_required`,
+`process_root_source_identity_mismatch`,
+`process_runtime_carrier_exact_path_required`,
+`process_runtime_input_missing`,
+`process_runtime_closure_identity_mismatch`,
+`legacy_target_runtime_non_authoritative`,
+`counterfactual_admitted_observation_required`,
+`counterfactual_runtime_reachability_unproven` and
+`project_submitted_verdict_disagrees_with_harness`. The user or Agent must then
+choose an admitted static/direct-process observation or the existing blocking
+External Confirmation. That semantic choice is `manual_required`, not ordinary
+`sync` or a migration-registry inference; release guidance must therefore use
+the `manual-required` update mode for affected consumers.
+
+When the whole affected Outcome is unsupported, re-author it explicitly as an
+external-only route: set `success_path_required: false`, remove machine Checks,
+bind every ordinary/global and Semantic Fact Claim through exact
+`impact_claims`, keep every Semantic Fact proof's explicit `confirmation_ref`,
+and ensure a `blocks_target: true` confirmation impacts each
+Stage Gate result Claim. A non-blocking confirmation or one missing gate-result
+lineage cannot replace a Stage Gate, and migration never invents these choices.
+The valid route ends as `blocked_external`, not either machine-accepted status.
+
+Changing verifier identity, Compile admission policy or the observation TCB
+invalidates the prior Active Authority. The Contract must be recompiled or
+adopted through an explicit Authority Revision; old Progress, evidence and
+Receipt are not reusable on the new boundary. Public
+`long-task-check-result-v3` remains the compatibility payload, but its
+project-authored actual/pass/verdict/runtime fields are non-authoritative. The
+Harness-owned process adapter captures the separate
+`ty-context-product-observation-v1` envelope from bounded stdout inside an
+isolated frozen runtime-closure snapshot. It exposes no output-path, challenge
+or protocol environment variable to the child; any execution nonce remains
+internal host-attestation data. No v4 is introduced by this revision; a future
+v4 requires a distinct need to carry a live browser/native session handle
+across processes.