review-council 3.1.0 → 3.2.0

package/README.md

@@ -91,6 +91,7 @@ Review a PR, a local diff, or uncommitted work.
 | `--expect-head-sha <sha>` | Fail fast unless the resolved head commit equals this SHA |
 | `--spec-source <source>` | Where `--spec` came from: `flag`, `repo_file`, or `harness_issue:<ID>` |
 | `--converge-target <key>` / `--round <n>` / `--attempt <n>` | Converge context recorded in the report (or `RCL_CONVERGE_TARGET` / `_ROUND` / `_ATTEMPT`) |
+| `--attest` | GitHub Actions gate workflow only: exchange the job's OIDC token for a run-bound Harness credential and record the review as attested (see below) |
 | `--config <path>` | Path to a config file |
 
 `--role`, `--roles`, and `--reviewer` are mutually exclusive. So are a positional target, `--staged`, and `--working-tree` — pick exactly one review source. Untracked files are invisible to `git diff` and therefore not reviewed.
@@ -292,6 +293,59 @@ harness:
 
 ---
 
+### `--attest`: attested reviews from the gate workflow
+
+Only evidence recorded from the organization's own gate workflow on GitHub
+Actions counts for the enforced gate (epic IO-12475, section 4.1). Inside
+such a job — one that grants `id-token: write` — `rcl review owner/repo#N
+--attest` asks the runner for the job's OIDC token with the Harness origin as
+audience, exchanges it at `POST /api/v1/reviews/attest` for a **run-bound
+credential** (`rbc_…`, thirty minutes, one rcl run id, valid while the
+Actions run is in progress), and records the review under it: the envelope,
+its artifacts, the model keys and the model stats all travel with that
+credential and nothing else. Harness verifies the token, requires the
+workflow file to be on the organization's gate allow-list at its default
+branch, re-reads the pull request through its GitHub App and stores the run
+only if the reviewed head is the pull request's current head and the PR is
+not from a fork — the run is then `credential_kind: attested`.
+
+`--attest` fails loudly, before any token is requested or any reviewer is
+paid: outside Actions (no `ACTIONS_ID_TOKEN_REQUEST_URL` / `_TOKEN`), without
+`HARNESS_API_URL`, off a pull request target, with a telemetry level other
+than `full` (from `RCL_TELEMETRY` or the project config — an attested run
+carries its full report), or when Harness refuses the exchange (the refusal
+names the reason: `workflow_not_allowed`, `reviews_disabled`,
+`run_not_in_progress`, …). It never falls back to `HARNESS_API_TOKEN` or the
+stored login, it implies `--evidence-required`, and nothing recorded under the
+run-bound credential is ever spooled — the credential does not outlive the
+workflow run. A review that outlasts most of the credential's thirty minutes
+mints it again for the same run id before delivery. Pair it with
+`--expect-head-sha` so a moved pull request fails fast instead of being
+refused at ingest.
+
+```yaml
+# .github/workflows/review_gate.yml (dispatched by Harness for one pull request)
+permissions:
+  id-token: write
+  contents: read
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    env:
+      HARNESS_API_URL: https://harness.infra.one
+    steps:
+      - run: npm i -g review-council
+      # Inputs reach the shell through the environment, never by expression
+      # interpolation into the command line.
+      - env:
+          REPO: ${{ inputs.repo }}
+          PR: ${{ inputs.pr }}
+          HEAD_SHA: ${{ inputs.head_sha }}
+        run: rcl review "$REPO#$PR" --attest --expect-head-sha "$HEAD_SHA" --ci
+```
+
+---
+
 ### `rcl evidence status` and `rcl evidence show`
 
 What Harness holds — never the client's own claim. `rcl evidence status`
@@ -540,7 +594,8 @@ For the full algorithm, see [CONSENSUS_V2_SPEC.md](./CONSENSUS_V2_SPEC.md).
 | `RCL_NO_HARNESS_KEYS` | Set to any value to disable Harness key distribution (below) |
 | `RCL_TELEMETRY` | `off` keeps every review on the machine (see `rcl telemetry`) |
 | `HARNESS_API_TOKEN` | CI credential for evidence delivery; requires `HARNESS_API_URL` — never pairs with the stored login host |
-| `HARNESS_API_URL` | The Harness host `HARNESS_API_TOKEN` was minted by |
+| `HARNESS_API_URL` | The Harness host `HARNESS_API_TOKEN` was minted by; under `--attest` the host attested to (no token needed) |
+| `ACTIONS_ID_TOKEN_REQUEST_URL` / `ACTIONS_ID_TOKEN_REQUEST_TOKEN` | Set by the GitHub Actions runner for jobs with `id-token: write`; `--attest` reads them and refuses to run without them |
 
 The default blocking council is direct-API only (Anthropic, OpenAI, Google) —
 no default review round ever waits on an OpenRouter-routed call. The default

package/dist/config/harness.d.ts

@@ -10,6 +10,15 @@ export interface HarnessKeyOptions {
     env?: Record<string, string | undefined>;
     credentialsPath?: string;
     fetchImpl?: typeof fetch;
+    /**
+     * A credential already in hand — the run-bound one `rcl review --attest`
+     * minted (RCL-40). Used instead of the stored login, and the attestation
+     * stands in for the repository's `.harness-cli/config.json`.
+     */
+    credential?: {
+        url: string;
+        token: string;
+    };
 }
 /** Walk up from `startDir` looking for `.harness-cli/config.json`. */
 export declare function findHarnessRepoConfig(startDir: string): string | null;

package/dist/config/harness.js

@@ -121,9 +121,10 @@ export async function applyHarnessModelKeys(options = {}) {
     const missing = missingProviders(env);
     if (missing.length === 0)
         return { injected: [] };
-    if (findHarnessRepoConfig(options.cwd ?? process.cwd()) === null)
+    if (options.credential === undefined && findHarnessRepoConfig(options.cwd ?? process.cwd()) === null)
         return { injected: [] };
-    const credentials = await readStoredCredentials(options.credentialsPath ?? defaultCredentialsPath(env));
+    const credentials = options.credential ??
+        (await readStoredCredentials(options.credentialsPath ?? defaultCredentialsPath(env)));
     if (credentials === null) {
         return {
             injected: [],

package/dist/config/harness.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/config/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AAEH,6EAA6E;AAC7E,MAAM,iBAAiB,GAA2B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,oBAAoB;CACjC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAiB/B,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,kEAAkE;YAClE,6BAA6B;YAC7B,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QACD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAuC;IAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAiC,CAAC;YACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACvF,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,KAAa,EACb,SAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,oBAAoB,EAAE;YAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAI,IAAsC,EAAE,IAAI,EAAE,IAAI,CAAC;QACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;gBAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuC;IAC/D,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE;QAC7B,0DAA0D;QAC1D,IAAI,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAA6B,EAAE;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEvC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEvE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAElD,IAAI,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE1F,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAC7C,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC,GAAG,CAAC,CACvD,CAAC;IACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6FAA6F;SAClK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IAClG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,mCAAmC,WAAW,CAAC,GAAG,2CAA2C,EAAE,CAAC;IAC/H,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KACjH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/config/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AAEH,6EAA6E;AAC7E,MAAM,iBAAiB,GAA2B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,oBAAoB;CACjC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAuB/B,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,kEAAkE;YAClE,6BAA6B;YAC7B,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QACD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAuC;IAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAiC,CAAC;YACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACvF,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,KAAa,EACb,SAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,oBAAoB,EAAE;YAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAI,IAAsC,EAAE,IAAI,EAAE,IAAI,CAAC;QACjE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;gBAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuC;IAC/D,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE;QAC7B,0DAA0D;QAC1D,IAAI,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAA6B,EAAE;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEvC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEvE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAElD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,qBAAqB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAE9H,MAAM,WAAW,GACf,OAAO,CAAC,UAAU;QAClB,CAAC,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6FAA6F;SAClK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IAClG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,mCAAmC,WAAW,CAAC,GAAG,2CAA2C,EAAE,CAAC;IAC/H,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAE,CAAC,GAAG,GAAG,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KACjH,CAAC;AACJ,CAAC"}

package/dist/index.js

@@ -41,8 +41,10 @@ import { assertExpectedHead, resolveReviewTarget } from './resolver/target.js';
 import { createTelemetryRuntime, deliverRun, evidenceRequirementConflict, emitConvergeEvents, flushOutbox, flushOutboxAtStart, loadHarnessSettings, resolveTelemetryLevel, } from './telemetry/deliver.js';
 import { sanitizeForDelivery } from './telemetry/envelope.js';
 import { scrubText } from './telemetry/scrub.js';
-import { buildEvent } from './telemetry/events.js';
+import { buildEvent, roundIdentities } from './telemetry/events.js';
 import { credentialHost } from './telemetry/credentials.js';
+import { attestRun, renewAttestation } from './telemetry/attest.js';
+import { uuidv7 } from './report/uuid.js';
 import { runEvidenceStatus } from './evidence/status.js';
 import { runEvidenceShow } from './evidence/show.js';
 import { fetchServerModelStats, loadMergedWeights, mergeWeights } from './models/server-stats.js';
@@ -96,10 +98,15 @@ function assertEvidenceCanBeRequired(opts, config) {
  * reviewer is paid: an unmanaged repository or a missing credential makes
  * delivery impossible, and that is worth knowing at once.
  */
-async function assertEvidenceDeliverable(opts, config) {
+async function assertEvidenceDeliverable(opts, config, credential) {
     if (!opts.evidenceRequired)
         return;
-    const runtime = await createTelemetryRuntime({ rclVersion: RCL_VERSION, config, noTelemetry: opts.telemetry === false });
+    const runtime = await createTelemetryRuntime({
+        rclVersion: RCL_VERSION,
+        config,
+        noTelemetry: opts.telemetry === false,
+        ...(credential ? { credential } : {}),
+    });
     if (!runtime.repoManaged) {
         throw new Error('--evidence-required needs a Harness-managed repository (one carrying .harness-cli/config.json); this one is not.');
     }
@@ -108,6 +115,34 @@ async function assertEvidenceDeliverable(opts, config) {
     if (!runtime.sink)
         throw new Error(`--evidence-required needs a Harness credential: ${runtime.note ?? 'none available'}.`);
 }
+/** `--attest` records the full report or nothing: the resolved telemetry level must be `full`. */
+function attestLevelMessage(level) {
+    return `--attest needs the telemetry level full (resolved: ${level}): an attested run carries its full report as evidence. Check RCL_TELEMETRY and harness.telemetry in the project config.`;
+}
+/**
+ * `--attest` (RCL-40), before any key, config or reviewer work: the target
+ * must be a pull request, the telemetry level must resolve to `full` from the
+ * environment and the project config (the file `--config` names included),
+ * and only then is the job's OIDC token requested and exchanged. An attested
+ * review is recorded or it does not run; the caller treats evidence as
+ * required from here on.
+ */
+async function attestBeforeReview(spinner, opts, target, gitMode) {
+    if (gitMode || target === undefined || !isGitHubTarget(target)) {
+        throw new Error('--attest applies to a pull request target (owner/repo#N or a GitHub PR URL): Harness attests a run of the pull request it re-reads, not a local diff or a patch file.');
+    }
+    if (opts.telemetry === false) {
+        throw new Error('--attest contradicts --no-telemetry: an attested review is recorded or it does not run.');
+    }
+    const level = resolveTelemetryLevel(await loadHarnessSettings(process.cwd(), opts.config), { noTelemetry: false }, process.env);
+    if (level !== 'full')
+        throw new Error(attestLevelMessage(level));
+    spinner.text = 'Attesting to Harness as this GitHub Actions run...';
+    const attestation = await attestRun({ runId: uuidv7(), rclVersion: RCL_VERSION });
+    spinner.info(`Attested: run-bound credential from ${credentialHost(attestation.credential)} for run ${attestation.runId} (expires ${attestation.expiresAt})`);
+    spinner.start('Loading configuration...');
+    return attestation;
+}
 /** Converge commands report their events fail-soft; nothing they do depends on it. */
 async function reportConvergeEvents(events) {
     try {
@@ -154,6 +189,7 @@ program
     .option('--no-telemetry', 'Do not deliver this review as evidence to Harness')
     .option('--evidence-required', 'Exit 4 unless Harness acknowledged the evidence (spools first; retry with rcl telemetry flush)')
     .option('--config <path>', 'Path to config file')
+    .option('--attest', 'GitHub Actions gate workflow only: exchange the job OIDC token for a run-bound Harness credential and record this review as attested (needs id-token: write and HARNESS_API_URL; implies --evidence-required; no fallback to another credential)')
     .action(async (target, opts) => {
     await runReview(target, opts);
 });
@@ -361,7 +397,15 @@ program
                 convergeTarget: opts.target,
                 round,
                 ...(runId !== undefined ? { runId } : {}),
-                payload: { round, round_cap: result.roundCap, counts: result.counts, actionable_gating: actionable.length },
+                payload: {
+                    round,
+                    round_cap: result.roundCap,
+                    counts: result.counts,
+                    actionable_gating: actionable.length,
+                    // Which identity each sighting was matched to, so the server
+                    // can apply standing verdicts to keys that moved (IO-12601).
+                    identities: roundIdentities(result.findings),
+                },
             }),
             ...(maxRounds !== undefined
                 ? [buildEvent({ kind: 'cap_changed', convergeTarget: opts.target, round, payload: { kind: 'rounds', to: result.roundCap } })]
@@ -901,19 +945,19 @@ rolesCmd
  * degradation (dropping openrouter models without OPENROUTER_API_KEY) must
  * see any injected keys.
  */
-async function fetchHarnessKeys(spinner) {
-    const { note } = await applyHarnessModelKeys();
+async function fetchHarnessKeys(spinner, credential) {
+    const { note } = await applyHarnessModelKeys(credential ? { credential } : {});
     if (note) {
         spinner.info(note);
         spinner.start('Loading configuration...');
     }
 }
-async function prepareCouncil(spinner, opts, fallbackRoles) {
+async function prepareCouncil(spinner, opts, fallbackRoles, attestation) {
     const startedAt = new Date();
     // Validate the converge context first: a bad --round must fail before any
     // model time is spent, not after the council has run.
     const converge = resolveConvergeContext({ convergeTarget: opts.convergeTarget, round: opts.round, attempt: opts.attempt }, process.env);
-    await fetchHarnessKeys(spinner);
+    await fetchHarnessKeys(spinner, attestation?.credential);
     const config = await loadConfig(opts.config);
     // Validate mutually exclusive role options
     const roleOptionCount = [opts.role, opts.roles, opts.reviewer?.length].filter(Boolean).length;
@@ -1090,11 +1134,24 @@ async function runReview(target, opts) {
         if (opts.evidenceRequired && patchTarget && opts.headSha === undefined) {
             throw new Error('--evidence-required needs --head-sha for a patch file: evidence must bind to the commit it reviewed.');
         }
+        // --attest (RCL-40) runs before any key, config or reviewer work; an
+        // attested review is recorded or it does not run, so evidence is required.
+        let attestation;
+        if (opts.attest) {
+            attestation = await attestBeforeReview(spinner, opts, target, gitMode);
+            opts = { ...opts, evidenceRequired: true };
+        }
         assertEvidenceCanBeRequired(opts);
-        const prepared = await prepareCouncil(spinner, opts);
+        const prepared = await prepareCouncil(spinner, opts, undefined, attestation);
         const { config } = prepared;
+        if (attestation) {
+            // The loaded config is the authority; the pre-exchange check read the same file.
+            const level = resolveTelemetryLevel(config, { noTelemetry: opts.telemetry === false }, process.env);
+            if (level !== 'full')
+                throw new Error(attestLevelMessage(level));
+        }
         assertEvidenceCanBeRequired(opts, config);
-        await assertEvidenceDeliverable(opts, config);
+        await assertEvidenceDeliverable(opts, config, attestation?.credential);
         spinner.text = `Resolving diff for: ${target ?? `--${gitMode}`}`;
         // Resolve diff. Git modes bracket the read with two HEAD resolutions: a
         // commit landing between them would bind the diff to a commit it was
@@ -1165,6 +1222,7 @@ async function runReview(target, opts) {
             command: 'review',
             target: runTarget,
             asyncTargetLabel,
+            ...(attestation ? { attestation } : {}),
         });
     }
     catch (err) {
@@ -1345,10 +1403,29 @@ async function executeCouncil(spinner, prepared, diff, opts, extra) {
     // Telemetry off means nothing leaves the machine for weights either. The
     // server side is bounded to three seconds; the settings file and the local
     // store are read as local files.
+    // An attested review may outlast its credential: from here on — the
+    // weights read, then delivery — the credential is renewed for the same run
+    // id when little of it remains (RCL-40).
+    let attestation = extra.attestation;
+    if (attestation) {
+        const renewal = await renewAttestation(attestation, { rclVersion: RCL_VERSION });
+        attestation = renewal.attestation;
+        if (renewal.renewed) {
+            process.stderr.write(chalk.dim(`Attestation renewed for run ${attestation.runId} (expires ${attestation.expiresAt})`) + '\n');
+        }
+        else if (renewal.failure !== undefined) {
+            process.stderr.write(chalk.dim(`Attestation not renewed (${renewal.failure}); continuing with the credential in hand`) + '\n');
+        }
+    }
     let modelWeights;
     try {
-        const level = resolveTelemetryLevel(await loadHarnessSettings(process.cwd()), { noTelemetry: opts.telemetry === false }, process.env);
-        const loaded = await loadMergedWeights({ rclVersion: RCL_VERSION, timeoutMs: 3_000, serverEnabled: level !== 'off' });
+        const level = resolveTelemetryLevel(await loadHarnessSettings(process.cwd(), opts.config), { noTelemetry: opts.telemetry === false }, process.env);
+        const loaded = await loadMergedWeights({
+            rclVersion: RCL_VERSION,
+            timeoutMs: 3_000,
+            serverEnabled: level !== 'off',
+            ...(attestation ? { credential: attestation.credential } : {}),
+        });
         if (loaded.size > 0)
             modelWeights = loaded;
     }
@@ -1442,6 +1519,8 @@ async function executeCouncil(spinner, prepared, diff, opts, extra) {
     // Self-describing run header (IO-12475 section 5.1), built once the body
     // exists so the CI verdict is recorded uniformly — with or without --ci.
     const run = buildRunHeader({
+        // An attested run carries the id its credential was minted for.
+        ...(extra.attestation ? { id: extra.attestation.runId } : {}),
         rclVersion: RCL_VERSION,
         command: extra.command,
         target: extra.target,
@@ -1493,6 +1572,7 @@ async function executeCouncil(spinner, prepared, diff, opts, extra) {
             rclVersion: RCL_VERSION,
             config,
             noTelemetry: opts.telemetry === false,
+            ...(attestation ? { credential: attestation.credential } : {}),
         });
     }
     catch (err) {