project-tiny-context-harness 0.8.12 → 0.8.16

package/dist/schemas/long-task-delivery-v2/long-task-delivery-v2.schema.json

@@ -169,15 +169,39 @@
             ],
             "properties": {
                 "claims": { "type": "integer", "minimum": 0, "maximum": 1000000 },
-                "claim_projections": { "type": "integer", "minimum": 0, "maximum": 2000000 },
-                "selector_members": { "type": "integer", "minimum": 0, "maximum": 5000000 },
-                "structure_families": { "type": "integer", "minimum": 0, "maximum": 1000000 },
-                "structure_references": { "type": "integer", "minimum": 0, "maximum": 10000000 },
-                "structure_arguments": { "type": "integer", "minimum": 0, "maximum": 50000000 },
+                "claim_projections": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 2000000
+                },
+                "selector_members": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 5000000
+                },
+                "structure_families": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 1000000
+                },
+                "structure_references": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 10000000
+                },
+                "structure_arguments": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 50000000
+                },
                 "facts": { "type": "integer", "minimum": 0, "maximum": 1000000 },
                 "obligations": { "type": "integer", "minimum": 0, "maximum": 2000000 },
                 "assertions": { "type": "integer", "minimum": 0, "maximum": 5000000 },
-                "canonical_bytes": { "type": "integer", "minimum": 0, "maximum": 268435456 }
+                "canonical_bytes": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 268435456
+                }
             }
         },
         "longTaskCompactCarrier": {
@@ -229,9 +253,18 @@
                     "items": {
                         "type": "object",
                         "additionalProperties": false,
-                        "required": ["key", "digest", "boundary", "parameter_count", "template"],
+                        "required": [
+                            "key",
+                            "digest",
+                            "boundary",
+                            "parameter_count",
+                            "template"
+                        ],
                         "properties": {
-                            "key": { "type": "string", "pattern": "^structure\\.[a-f0-9]{24}$" },
+                            "key": {
+                                "type": "string",
+                                "pattern": "^structure\\.[a-f0-9]{24}$"
+                            },
                             "digest": { "$ref": "#/$defs/sha256" },
                             "boundary": { "$ref": "#/$defs/semanticRef" },
                             "parameter_count": { "type": "integer", "minimum": 0 },
@@ -464,6 +497,10 @@
                     ]
                 },
                 "root_entrypoint": { "$ref": "#/$defs/nonEmpty" },
+                "root_argv": {
+                    "type": "array",
+                    "items": { "type": "string", "pattern": "^[^\\u0000]*$" }
+                },
                 "capabilities": {
                     "type": "array",
                     "minItems": 1,
@@ -2011,6 +2048,10 @@
                 "check_key": { "$ref": "#/$defs/key" },
                 "expected_assertion_failures": { "$ref": "#/$defs/keys" },
                 "preserved_assertions": { "$ref": "#/$defs/keys", "default": [] },
+                "allowed_fanout_assertions": {
+                    "$ref": "#/$defs/keys",
+                    "default": []
+                },
                 "mutation": {
                     "oneOf": [
                         {
@@ -2091,6 +2132,10 @@
                     "uniqueItems": true
                 },
                 "preserved_assertions": { "$ref": "#/$defs/keys", "default": [] },
+                "allowed_fanout_assertions": {
+                    "$ref": "#/$defs/keys",
+                    "default": []
+                },
                 "mutation": {
                     "oneOf": [
                         {

package/migrations/README.md

@@ -13,3 +13,80 @@ V2 file predates explicit Stage, target-profile/root-runtime, journey-scenario,
 success/degradation, evidence-capability or external-impact authority. Those
 meanings must be re-authored from Source; migration never infers them from old
 Progress or Receipts.
+
+## Admitted-observation/runtime-TCB revision
+
+The next Long-Task compatibility boundary intentionally does not provide a
+mechanical Contract rewrite. Machine evidence that depends on a custom Oracle,
+a project-submitted runtime/interaction/state/verdict row, a runner-created or
+runner-modified carrier, an indirect wrapper, an unsupported target family or
+a Counterfactual with no package-admitted actual must be re-authored explicitly.
+Migration must never silently:
+
+- replace a custom Oracle with a package Oracle;
+- turn machine proof into `external_confirmation`;
+- replace a verifier wrapper with a product root entrypoint;
+- infer a static structure carrier from `Binding`/`input_paths` alone; or
+- infer a process runtime dependency from `input_paths`, runner or verification membership;
+- invent a Source-backed execution target or production Binding for an old root; or
+- preserve a known false-acceptance path as compatibility behavior.
+
+Greenfield authoring may declare an exact process root, argv repository file
+or production carrier as `planned`. Its exact Source/Binding declaration is
+stable through Preflight/Compile and later materialization, but Final Gate
+requires every compiled closure member to exist. A glob, a manifest sibling or
+an undeclared repository-file argv token cannot substitute; migration does not
+invent these exact declarations or parse language dependencies.
+
+Preflight and doctor should report the narrow failing obligation and an
+actionable manual route through diagnostics such as
+`machine_observer_not_admitted`,
+`semantic_fact_machine_observer_not_admitted`,
+`unsupported_observer_requires_external_confirmation`,
+`custom_oracle_machine_completion_forbidden`,
+`static_observation_not_in_pre_run_snapshot`,
+`static_observation_changed_by_runner`,
+`process_observer_direct_root_required`,
+`process_observer_root_invocation_required`,
+`process_observer_root_argv_mismatch`,
+`process_observation_input_changed_by_runner`,
+`process_runtime_input_expected_authority_forbidden`,
+`process_runtime_input_verification_role_forbidden`,
+`process_runtime_input_evidence_role_forbidden`,
+`process_root_source_binding_required`,
+`process_root_production_binding_required`,
+`process_root_source_identity_mismatch`,
+`process_runtime_carrier_exact_path_required`,
+`process_runtime_input_missing`,
+`process_runtime_closure_identity_mismatch`,
+`legacy_target_runtime_non_authoritative`,
+`counterfactual_admitted_observation_required`,
+`counterfactual_runtime_reachability_unproven` and
+`project_submitted_verdict_disagrees_with_harness`. The user or Agent must then
+choose an admitted static/direct-process observation or the existing blocking
+External Confirmation. That semantic choice is `manual_required`, not ordinary
+`sync` or a migration-registry inference; release guidance must therefore use
+the `manual-required` update mode for affected consumers.
+
+When the whole affected Outcome is unsupported, re-author it explicitly as an
+external-only route: set `success_path_required: false`, remove machine Checks,
+bind every ordinary/global and Semantic Fact Claim through exact
+`impact_claims`, keep every Semantic Fact proof's explicit `confirmation_ref`,
+and ensure a `blocks_target: true` confirmation impacts each
+Stage Gate result Claim. A non-blocking confirmation or one missing gate-result
+lineage cannot replace a Stage Gate, and migration never invents these choices.
+The valid route ends as `blocked_external`, not either machine-accepted status.
+
+Changing verifier identity, Compile admission policy or the observation TCB
+invalidates the prior Active Authority. The Contract must be recompiled or
+adopted through an explicit Authority Revision; old Progress, evidence and
+Receipt are not reusable on the new boundary. Public
+`long-task-check-result-v3` remains the compatibility payload, but its
+project-authored actual/pass/verdict/runtime fields are non-authoritative. The
+Harness-owned process adapter captures the separate
+`ty-context-product-observation-v1` envelope from bounded stdout inside an
+isolated frozen runtime-closure snapshot. It exposes no output-path, challenge
+or protocol environment variable to the child; any execution nonce remains
+internal host-attestation data. No v4 is introduced by this revision; a future
+v4 requires a distinct need to carry a live browser/native session handle
+across processes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "project-tiny-context-harness",
-  "version": "0.8.12",
+  "version": "0.8.16",
   "description": "Minimal project memory and validation harness for AI coding agents.",
   "license": "MIT",
   "author": "Seven128",