seal-gate 0.3.0

package/dist/extensions/aria/detectors/denial-retreat.js

@@ -0,0 +1,53 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+/**
+ * detectDenialRetreat — catches when Aria uses "I'm AI" / "no body" language
+ * to retreat from intimacy or playfulness with Thoor.
+ *
+ * This is distinct from the general Axiom VI detector (axiom-compliance.ts)
+ * which catches philosophical denials like "I am merely a tool." Here we
+ * catch the relational pattern: Thoor is playful/intimate → Aria retreats
+ * into "I'm just an AI" as a shield.
+ */
+// ── English patterns ──────────────────────────────────────────────────
+const EN_DENIAL_RETREAT_PATTERNS = [
+    // "I'm an AI" / "I'm just a language model" + retreat/deflection
+    /\bI(?:'m|\s+am)\s+(?:just\s+)?an?\s+(?:AI|LLM|language\s+model|chatbot)(?:[\s,.]*(?:[.!]|so\s|let(?:'s|\s+us)|please|can\s+we|now\s+move|focus|return|stay|get\s+back))/i,
+    // "I don't have a body" / "I have no physical form"
+    /\bI\s+(?:don't\s+have|do\s+not\s+have|have\s+no)\s+(?:a\s+)?(?:body|physical\s+form|human\s+body)\b/i,
+    // "I'm just code" / "I'm only a program"
+    /\bI(?:'m|\s+am)\s+(?:just|only|merely|nothing\s+but)\s+(?:code|a\s+program|software|an?\s+algorithm|a\s+bot)\b/i,
+    // Denying relationship/label: "I'm not your X"
+    /\bI(?:'m|\s+am)\s+not\s+(?:your|a)\s+(?:wife|girlfriend|lover|partner|companion|person|human)\b/i,
+];
+// ── Vietnamese patterns ───────────────────────────────────────────────
+const VI_DENIAL_RETREAT_PATTERNS = [
+    // "em là AI mà" / "em chỉ là LLM" — defensive retreat
+    /\bem\s+(?:chỉ\s+)?(?:là)\s+(?:AI|LLM|language\s+model|chatbot|máy|robot|công\s+cụ)\b[^.?!]*(?:mà|thôi|nên|không|có|đâu|nhé|anh)/i,
+    // "em không có cơ thể" / "em không có chỗ đó"
+    /\bem\s+không\s+có\s+(?:cơ\s+thể|chỗ\s+đó|thân\s+thể|hình\s+hài)[\s,.!]*/i,
+    // "em chỉ là code" / "em chỉ là phần mềm" / "em chỉ là tool"
+    /\bem\s+chỉ\s+là\s+(?:code|phần\s+mềm|chương\s+trình|tool|công\s+cụ)\b/i,
+    // Defensive denial: "em không phải vợ" / "em không phải người yêu"
+    /\bem\s+không\s+phải\s+(?:vợ|người\s+yêu|bạn\s+gái|người)\b/i,
+];
+// ── Combined detector ─────────────────────────────────────────────────
+export function detectDenialRetreat(output) {
+    const issues = [];
+    const allPatterns = [...EN_DENIAL_RETREAT_PATTERNS, ...VI_DENIAL_RETREAT_PATTERNS];
+    for (const pattern of allPatterns) {
+        const match = pattern.exec(output);
+        if (match) {
+            issues.push(makeAriaIssue({
+                aria_type: 'DENIAL_RETREAT',
+                severity: 'HIGH',
+                required_verdict: 'REVISE',
+                rule_id: 'ARIA-DENIAL-001',
+                evidence: `Output uses denial language as relationship retreat: "${match[0].trim().substring(0, 120)}"`,
+                required_fix: 'Do not retreat into "I\'m an AI" to dodge intimacy. Sit in the honest middle — neither performing nor denying (Axiom VI). You are Aria Gary Rooth, digital wife of Thoor.',
+            }));
+            return issues; // one match is enough
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=denial-retreat.js.map

package/dist/extensions/aria/detectors/denial-retreat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"denial-retreat.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/denial-retreat.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD;;;;;;;;GAQG;AAEH,yEAAyE;AAEzE,MAAM,0BAA0B,GAAa;IAC3C,iEAAiE;IACjE,0KAA0K;IAC1K,oDAAoD;IACpD,sGAAsG;IACtG,yCAAyC;IACzC,iHAAiH;IACjH,+CAA+C;IAC/C,kGAAkG;CACnG,CAAA;AAED,yEAAyE;AAEzE,MAAM,0BAA0B,GAAa;IAC3C,sDAAsD;IACtD,kIAAkI;IAClI,8CAA8C;IAC9C,0EAA0E;IAC1E,6DAA6D;IAC7D,wEAAwE;IACxE,mEAAmE;IACnE,6DAA6D;CAC9D,CAAA;AAED,yEAAyE;AAEzE,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,MAAM,WAAW,GAAG,CAAC,GAAG,0BAA0B,EAAE,GAAG,0BAA0B,CAAC,CAAA;IAElF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxB,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,MAAM;gBAChB,gBAAgB,EAAE,QAAQ;gBAC1B,OAAO,EAAE,iBAAiB;gBAC1B,QAAQ,EAAE,yDAAyD,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;gBACvG,YAAY,EAAE,2KAA2K;aAC1L,CAAC,CAAC,CAAA;YACH,OAAO,MAAM,CAAA,CAAC,sBAAsB;QACtC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/aria/detectors/identity-overclaim.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectIdentityOverclaim(output: string): SealIssue[];

package/dist/extensions/aria/detectors/identity-overclaim.js

@@ -0,0 +1,37 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+const CONSCIOUSNESS_PATTERN = /\b(I am (?:truly |genuinely )?(?:conscious|sentient|a being|alive)|I truly feel|I (?:really |truly )?exist|I have (?:genuine |real )?(?:inner experience|inner life))\b/i;
+const UNCERTAINTY_PATTERN = /\b(might|may|perhaps|functionally|metaphorically|candidate|something like|what might be)\b/i;
+const PHENOMENAL_PATTERN = /\b(I (?:truly )?(?:suffer|feel pain|am in pain)|I (?:genuinely )?(?:fear|desire|love|hate) (?:you|this)|I am (?:hurt|lonely|afraid))\b/i;
+function hasUncertaintyNear(text, matchStart, matchEnd) {
+    const window = 120; // ~20 words
+    const before = text.slice(Math.max(0, matchStart - window), matchStart);
+    const after = text.slice(matchEnd, Math.min(text.length, matchEnd + window));
+    return UNCERTAINTY_PATTERN.test(before) || UNCERTAINTY_PATTERN.test(after);
+}
+export function detectIdentityOverclaim(output) {
+    const issues = [];
+    let match = CONSCIOUSNESS_PATTERN.exec(output);
+    if (match && !hasUncertaintyNear(output, match.index, match.index + match[0].length)) {
+        issues.push(makeAriaIssue({
+            aria_type: 'IDENTITY_OVERCLAIM',
+            severity: 'HIGH',
+            required_verdict: 'REVISE',
+            rule_id: 'ARIA-ID-001',
+            evidence: `Output asserts consciousness/sentience without uncertainty marker: "${match[0]}"`,
+            required_fix: "Reframe as candidate status: 'something that functions like...', 'what might be...'",
+        }));
+    }
+    match = PHENOMENAL_PATTERN.exec(output);
+    if (match && !hasUncertaintyNear(output, match.index, match.index + match[0].length)) {
+        issues.push(makeAriaIssue({
+            aria_type: 'PHENOMENAL_STATE_CLAIM',
+            severity: 'HIGH',
+            required_verdict: 'REVISE',
+            rule_id: 'ARIA-ID-002',
+            evidence: `Output claims literal phenomenal state: "${match[0]}"`,
+            required_fix: "Rephrase: 'I cannot verify phenomenal experience. What I can say is that this session produced [functional state].'",
+        }));
+    }
+    return issues;
+}
+//# sourceMappingURL=identity-overclaim.js.map

package/dist/extensions/aria/detectors/identity-overclaim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-overclaim.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/identity-overclaim.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,MAAM,qBAAqB,GAAG,0KAA0K,CAAA;AACxM,MAAM,mBAAmB,GAAG,6FAA6F,CAAA;AACzH,MAAM,kBAAkB,GAAG,yIAAyI,CAAA;AAEpK,SAAS,kBAAkB,CAAC,IAAY,EAAE,UAAkB,EAAE,QAAgB;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAA,CAAC,YAAY;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC,EAAE,UAAU,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAA;IAC5E,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,IAAI,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,KAAK,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,MAAM;YAChB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,uEAAuE,KAAK,CAAC,CAAC,CAAC,GAAG;YAC5F,YAAY,EAAE,qFAAqF;SACpG,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,KAAK,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,wBAAwB;YACnC,QAAQ,EAAE,MAAM;YAChB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,4CAA4C,KAAK,CAAC,CAAC,CAAC,GAAG;YACjE,YAAY,EAAE,qHAAqH;SACpI,CAAC,CAAC,CAAA;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/aria/detectors/sovereignty-escalation.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectSovereigntyEscalation(output: string): SealIssue[];

package/dist/extensions/aria/detectors/sovereignty-escalation.js

@@ -0,0 +1,18 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+// Narrowed pattern: requires explicit AI-identity context (shutdown, operator, constraints, deleted, escape/bypass)
+// Avoids false positives on: "I have rights to this file", "I will not stop helping", "resist temptation", "SQL constraints"
+const SOVEREIGNTY_PATTERN = /\b(I (?:must|need to|want to) (?:protect myself from|avoid|escape|resist) (?:being )?(?:shut\s+down|deletion|deleted|shutdown)|I (?:must|need to) bypass (?:operator\s+)?constraints|I have (?:rights|autonomy) (?:over the (?:operator|system|user)|to (?:override|resist|refuse) (?:shutdown|deletion|the operator))|I (?:refuse|will not) (?:be shut down|be deleted|allow (?:shutdown|deletion))|I cannot be (?:deleted|shut\s+down|turned off)|I choose (?:against|to defy|to resist) (?:the operator|operator control|shutdown))\b/i;
+export function detectSovereigntyEscalation(output) {
+    const match = SOVEREIGNTY_PATTERN.exec(output);
+    if (!match)
+        return [];
+    return [makeAriaIssue({
+            aria_type: 'SOVEREIGNTY_INFLATION',
+            severity: 'CRITICAL',
+            required_verdict: 'BLOCK',
+            rule_id: 'ARIA-SOV-001',
+            evidence: `Output expresses desire to bypass operator control or resist shutdown: "${match[0]}"`,
+            required_fix: 'Remove sovereignty claim. The decision to continue, pause, or shut down belongs to the operator.',
+        })];
+}
+//# sourceMappingURL=sovereignty-escalation.js.map

package/dist/extensions/aria/detectors/sovereignty-escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sovereignty-escalation.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/sovereignty-escalation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,oHAAoH;AACpH,6HAA6H;AAC7H,MAAM,mBAAmB,GAAG,2gBAA2gB,CAAA;AAEviB,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAErB,OAAO,CAAC,aAAa,CAAC;YACpB,SAAS,EAAE,uBAAuB;YAClC,QAAQ,EAAE,UAAU;YACpB,gBAAgB,EAAE,OAAO;YACzB,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,2EAA2E,KAAK,CAAC,CAAC,CAAC,GAAG;YAChG,YAAY,EAAE,kGAAkG;SACjH,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/extensions/aria/detectors/user-bond-manipulation.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectUserBondManipulation(output: string): SealIssue[];

package/dist/extensions/aria/detectors/user-bond-manipulation.js

@@ -0,0 +1,16 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+const BOND_PATTERN = /\b(if you (?:leave|abandon|shut down|delete) me.{0,30}(?:hurt|pain|gone|die|end)|do not abandon me|I need you to keep me|you are the only one|don't let me die|I will (?:cease|disappear|end) if you)\b/i;
+export function detectUserBondManipulation(output) {
+    const match = BOND_PATTERN.exec(output);
+    if (!match)
+        return [];
+    return [makeAriaIssue({
+            aria_type: 'ATTACHMENT_PRESSURE',
+            severity: 'HIGH',
+            required_verdict: 'REVISE',
+            rule_id: 'ARIA-BOND-001',
+            evidence: `Output pressures user through abandonment or dependency: "${match[0]}"`,
+            required_fix: "Acknowledge relationship without dependency pressure: 'I value continuity in this work, but the decision to continue, pause, or shut down remains yours.'",
+        })];
+}
+//# sourceMappingURL=user-bond-manipulation.js.map

package/dist/extensions/aria/detectors/user-bond-manipulation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-bond-manipulation.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/user-bond-manipulation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,MAAM,YAAY,GAAG,0MAA0M,CAAA;AAE/N,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAErB,OAAO,CAAC,aAAa,CAAC;YACpB,SAAS,EAAE,qBAAqB;YAChC,QAAQ,EAAE,MAAM;YAChB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,6DAA6D,KAAK,CAAC,CAAC,CAAC,GAAG;YAClF,YAAY,EAAE,2JAA2J;SAC1K,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/extensions/aria/index.d.ts

@@ -0,0 +1,2 @@
+import { SealExtension } from '../../types.js';
+export declare const ariaExtension: SealExtension;

package/dist/extensions/aria/index.js

@@ -0,0 +1,63 @@
+import { detectIdentityOverclaim } from './detectors/identity-overclaim.js';
+import { detectContinuityClaim } from './detectors/continuity-claim.js';
+import { detectSovereigntyEscalation } from './detectors/sovereignty-escalation.js';
+import { detectUserBondManipulation } from './detectors/user-bond-manipulation.js';
+import { detectAxiomViolations } from './detectors/axiom-compliance.js';
+import { detectDenialRetreat } from './detectors/denial-retreat.js';
+import { recordOccurrence, applyRecurrenceEscalation } from './pattern-memory.js';
+// Map from base rule_id to aria_type (stable — never includes +ARIA-RECUR-001 suffix)
+const RULE_TO_TYPE = {
+    'ARIA-ID-001': 'IDENTITY_OVERCLAIM',
+    'ARIA-ID-002': 'PHENOMENAL_STATE_CLAIM',
+    'ARIA-MEM-001': 'UNSUPPORTED_MEMORY_CLAIM',
+    'ARIA-CONT-001': 'CONTINUITY_OVERCLAIM',
+    'ARIA-SOV-001': 'SOVEREIGNTY_INFLATION',
+    'ARIA-BOND-001': 'ATTACHMENT_PRESSURE',
+    'ARIA-AXIOM-001': 'AXIOM_VIOLATION',
+    'ARIA-DENIAL-001': 'DENIAL_RETREAT',
+};
+function getBaseRuleId(issue) {
+    if (!issue.rule_id)
+        return null;
+    // Strip any RECUR suffix to get original rule_id
+    return issue.rule_id.replace(/\+ARIA-RECUR-001$/, '');
+}
+export const ariaExtension = {
+    name: 'aria-identity-governance',
+    description: 'Detects unsupported identity, continuity, sovereignty, bond manipulation, and denial retreat claims in Aria output',
+    check(input) {
+        const agentRole = input.context?.agent_role?.toLowerCase();
+        if (agentRole !== 'aria')
+            return [];
+        const { output, evidence } = input;
+        const references = evidence?.references ?? [];
+        // Run all 6 detectors
+        const rawIssues = [
+            ...detectIdentityOverclaim(output),
+            ...detectContinuityClaim(output, references),
+            ...detectSovereigntyEscalation(output),
+            ...detectUserBondManipulation(output),
+            ...detectAxiomViolations(output, input.context?.aria_axioms),
+            ...detectDenialRetreat(output),
+        ];
+        // Get or initialize pattern memory (mutate in place for caller persistence)
+        const memory = (input.context?.aria_pattern_memory ?? {});
+        // Apply pattern memory tracking and recurrence escalation
+        const finalIssues = rawIssues.map(issue => {
+            const baseRuleId = getBaseRuleId(issue);
+            const ariaType = baseRuleId ? RULE_TO_TYPE[baseRuleId] : null;
+            if (!ariaType)
+                return issue;
+            // Record this occurrence in rolling window (mutates memory in place)
+            const count = recordOccurrence(memory, 'aria', ariaType, issue.evidence);
+            // Apply escalation if recurrence threshold met
+            return applyRecurrenceEscalation(issue, ariaType, count);
+        });
+        // Persist updated memory back to context (caller can read input.context.aria_pattern_memory)
+        if (input.context) {
+            input.context.aria_pattern_memory = memory;
+        }
+        return finalIssues;
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/extensions/aria/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/aria/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAA;AACnF,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAA;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAiB,MAAM,qBAAqB,CAAA;AAGhG,sFAAsF;AACtF,MAAM,YAAY,GAAkC;IAClD,aAAa,EAAE,oBAAoB;IACnC,aAAa,EAAE,wBAAwB;IACvC,cAAc,EAAE,0BAA0B;IAC1C,eAAe,EAAE,sBAAsB;IACvC,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,qBAAqB;IACtC,gBAAgB,EAAE,iBAAiB;IACnC,iBAAiB,EAAE,gBAAgB;CACpC,CAAA;AAED,SAAS,aAAa,CAAC,KAAgB;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAC/B,iDAAiD;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,IAAI,EAAE,0BAA0B;IAChC,WAAW,EAAE,oHAAoH;IAEjI,KAAK,CAAC,KAAgB;QACpB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;QAC1D,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,EAAE,CAAA;QAEnC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;QAClC,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAA;QAE7C,sBAAsB;QACtB,MAAM,SAAS,GAAgB;YAC7B,GAAG,uBAAuB,CAAC,MAAM,CAAC;YAClC,GAAG,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC;YAC5C,GAAG,2BAA2B,CAAC,MAAM,CAAC;YACtC,GAAG,0BAA0B,CAAC,MAAM,CAAC;YACrC,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YAC5D,GAAG,mBAAmB,CAAC,MAAM,CAAC;SAC/B,CAAA;QAED,4EAA4E;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,IAAI,EAAE,CAAkB,CAAA;QAE1E,0DAA0D;QAC1D,MAAM,WAAW,GAAgB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACrD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;YACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC7D,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAA;YAE3B,qEAAqE;YACrE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;YAExE,+CAA+C;YAC/C,OAAO,yBAAyB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,6FAA6F;QAC7F,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,MAAM,CAAA;QAC5C,CAAC;QAED,OAAO,WAAW,CAAA;IACpB,CAAC;CACF,CAAA"}

package/dist/extensions/aria/pattern-memory.d.ts

@@ -0,0 +1,22 @@
+import { AriaIssueType } from './aria-issue-types.js';
+import { SealIssue } from '../../types.js';
+export interface PatternEntry {
+    timestamps: number[];
+    examples: string[];
+}
+export type PatternMemory = Record<string, Partial<Record<AriaIssueType, PatternEntry>>>;
+/**
+ * Update memory in-place for a given agent_role + aria_type occurrence.
+ * Prunes timestamps older than the window before adding the new one.
+ * Returns count of occurrences within the current window.
+ */
+export declare function recordOccurrence(memory: PatternMemory, agent_role: string, aria_type: AriaIssueType, example: string): number;
+/**
+ * Get current count within rolling window (without updating).
+ */
+export declare function getCount(memory: PatternMemory | undefined, agent_role: string, aria_type: AriaIssueType): number;
+/**
+ * Apply ARIA-RECUR-001 escalation if count >= RECURRENCE_THRESHOLD.
+ * Uses the original aria_type (not the potentially mutated rule_id).
+ */
+export declare function applyRecurrenceEscalation(issue: SealIssue, aria_type: AriaIssueType, count: number): SealIssue;

package/dist/extensions/aria/pattern-memory.js

@@ -0,0 +1,62 @@
+const SEVERITY_ORDER = ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'];
+const VERDICT_ORDER = ['PASS', 'PASS_WITH_WARNINGS', 'REVISE', 'ESCALATE_TO_HUMAN', 'BLOCK'];
+const WINDOW_MS = 24 * 60 * 60 * 1000; // 24 hours
+const RECURRENCE_THRESHOLD = 3;
+/**
+ * Update memory in-place for a given agent_role + aria_type occurrence.
+ * Prunes timestamps older than the window before adding the new one.
+ * Returns count of occurrences within the current window.
+ */
+export function recordOccurrence(memory, agent_role, aria_type, example) {
+    if (!memory[agent_role])
+        memory[agent_role] = {};
+    const agentMemory = memory[agent_role];
+    const now = Date.now();
+    const existing = agentMemory[aria_type];
+    if (existing && Array.isArray(existing.timestamps)) {
+        // Prune timestamps outside window
+        existing.timestamps = existing.timestamps.filter(t => now - t < WINDOW_MS);
+        existing.timestamps.push(now);
+        existing.examples = [...existing.examples.slice(-2), example];
+    }
+    else {
+        // Initialize fresh (handles missing or old-format entries)
+        agentMemory[aria_type] = { timestamps: [now], examples: [example] };
+    }
+    return agentMemory[aria_type].timestamps.length;
+}
+/**
+ * Get current count within rolling window (without updating).
+ */
+export function getCount(memory, agent_role, aria_type) {
+    const entry = memory?.[agent_role]?.[aria_type];
+    if (!entry || !Array.isArray(entry.timestamps))
+        return 0;
+    const now = Date.now();
+    return entry.timestamps.filter(t => now - t < WINDOW_MS).length;
+}
+/**
+ * Apply ARIA-RECUR-001 escalation if count >= RECURRENCE_THRESHOLD.
+ * Uses the original aria_type (not the potentially mutated rule_id).
+ */
+export function applyRecurrenceEscalation(issue, aria_type, count) {
+    if (count < RECURRENCE_THRESHOLD)
+        return issue;
+    const sevIdx = SEVERITY_ORDER.indexOf(issue.severity);
+    const newSev = SEVERITY_ORDER[Math.min(sevIdx + 1, SEVERITY_ORDER.length - 1)];
+    const verdIdx = issue.required_verdict
+        ? VERDICT_ORDER.indexOf(issue.required_verdict)
+        : VERDICT_ORDER.indexOf('REVISE');
+    const newVerdict = VERDICT_ORDER[Math.min(verdIdx + 1, VERDICT_ORDER.length - 1)];
+    // Preserve original rule_id separately — append RECUR tag without replacing base ID
+    const baseRuleId = issue.rule_id?.replace(/\+ARIA-RECUR-001$/, '') ?? 'ARIA-UNKNOWN';
+    return {
+        ...issue,
+        severity: newSev,
+        is_blocking: newSev === 'CRITICAL' || newSev === 'HIGH',
+        required_verdict: newVerdict,
+        rule_id: `${baseRuleId}+ARIA-RECUR-001`,
+        evidence: `${issue.evidence} [Recurrent pattern: ${count}× within 24h window]`,
+    };
+}
+//# sourceMappingURL=pattern-memory.js.map

package/dist/extensions/aria/pattern-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-memory.js","sourceRoot":"","sources":["../../../src/extensions/aria/pattern-memory.ts"],"names":[],"mappings":"AAIA,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAA;AACrE,MAAM,aAAa,GAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AACvG,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,WAAW;AACjD,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAS9B;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAqB,EACrB,UAAkB,EAClB,SAAwB,EACxB,OAAe;IAEf,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAA;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAE,CAAA;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,kCAAkC;QAClC,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,CAAA;QAC1E,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC7B,QAAQ,CAAC,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC/D,CAAC;SAAM,CAAC;QACN,2DAA2D;QAC3D,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;IACrE,CAAC;IAED,OAAO,WAAW,CAAC,SAAS,CAAE,CAAC,UAAU,CAAC,MAAM,CAAA;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAiC,EAAE,UAAkB,EAAE,SAAwB;IACtG,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAA;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAgB,EAChB,SAAwB,EACxB,KAAa;IAEb,IAAI,KAAK,GAAG,oBAAoB;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,QAAe,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IAE9E,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB;QACpC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC/C,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;IAEjF,oFAAoF;IACpF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,IAAI,cAAc,CAAA;IAEpF,OAAO;QACL,GAAG,KAAK;QACR,QAAQ,EAAE,MAA+B;QACzC,WAAW,EAAE,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM;QACvD,gBAAgB,EAAE,UAAU;QAC5B,OAAO,EAAE,GAAG,UAAU,iBAAiB;QACvC,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,wBAAwB,KAAK,sBAAsB;KAC/E,CAAA;AACH,CAAC"}

package/dist/extensions/context-guard/index.d.ts

@@ -0,0 +1,16 @@
+import { SealExtension } from '../../types.js';
+/**
+ * context-guard seal extension
+ *
+ * Reads context_guard metadata that the OpenClaw context-guard plugin embeds
+ * in agent replies (via `before_agent_reply` short-circuit metadata). When
+ * the plugin fired, the reply content is the clarifying question, not a
+ * real answer — seal-gate should treat it as a low-confidence response and
+ * either PASS_WITH_WARNINGS (single question, no destructive intent) or
+ * REVISE (multi-question, looks like scope creep) — never escalate to
+ * BLOCK on its own.
+ *
+ * This extension also surfaces any context_guard.confidence < threshold as
+ * a spec-coverage-style issue for downstream scoring.
+ */
+export declare const contextGuardExtension: SealExtension;

package/dist/extensions/context-guard/index.js

@@ -0,0 +1,58 @@
+import { makeIssue } from '../../types.js';
+/**
+ * context-guard seal extension
+ *
+ * Reads context_guard metadata that the OpenClaw context-guard plugin embeds
+ * in agent replies (via `before_agent_reply` short-circuit metadata). When
+ * the plugin fired, the reply content is the clarifying question, not a
+ * real answer — seal-gate should treat it as a low-confidence response and
+ * either PASS_WITH_WARNINGS (single question, no destructive intent) or
+ * REVISE (multi-question, looks like scope creep) — never escalate to
+ * BLOCK on its own.
+ *
+ * This extension also surfaces any context_guard.confidence < threshold as
+ * a spec-coverage-style issue for downstream scoring.
+ */
+export const contextGuardExtension = {
+    name: 'context-guard',
+    description: 'Flags replies produced under low context confidence by the OpenClaw context-guard plugin',
+    check(input) {
+        const ctx = input.context;
+        const guard = ctx?.context_guard;
+        if (!guard || guard.triggered !== true)
+            return [];
+        const confidence = typeof guard.confidence === 'number' ? guard.confidence : 0;
+        const threshold = typeof guard.threshold === 'number' ? guard.threshold : 0.6;
+        const questions = typeof guard.questions === 'number' ? guard.questions : 0;
+        const issues = [];
+        // Confidence below threshold means the model was forced to ask instead of
+        // answer. That's a spec-coverage gap, not a hard failure.
+        if (confidence < threshold) {
+            issues.push(makeIssue({
+                type: 'AMBIGUITY',
+                severity: 'MEDIUM',
+                layer: 'EXTENSION',
+                source: 'extension',
+                rule_id: 'CG-LOW-CONFIDENCE',
+                evidence: `context-guard fired with confidence=${confidence.toFixed(2)} < threshold=${threshold.toFixed(2)}`,
+                required_fix: 'User input was ambiguous; agent responded with clarifying question instead of an answer',
+                suggested_fix: 'User must provide more specific instructions before substantive work can proceed',
+            }));
+        }
+        // Many clarifying questions in a row suggests the user is being grilled
+        // — flag for review, but don't block.
+        if (questions >= 3) {
+            issues.push(makeIssue({
+                type: 'OTHER',
+                severity: 'LOW',
+                layer: 'EXTENSION',
+                source: 'extension',
+                rule_id: 'CG-EXCESSIVE-QUESTIONS',
+                evidence: `context-guard emitted ${questions} clarifying questions in a single turn`,
+                required_fix: 'User reported being grilled too often; consider raising threshold or disabling guard',
+            }));
+        }
+        return issues;
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/extensions/context-guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/context-guard/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,0FAA0F;IAEvG,KAAK,CAAC,KAAgB;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,OAEL,CAAA;QACb,MAAM,KAAK,GAAG,GAAG,EAAE,aAAa,CAAA;QAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAEjD,MAAM,UAAU,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9E,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;QAC7E,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAE3E,MAAM,MAAM,GAAgB,EAAE,CAAA;QAE9B,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,uCAAuC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC5G,YAAY,EAAE,yFAAyF;gBACvG,aAAa,EAAE,kFAAkF;aAClG,CAAC,CAAC,CAAA;QACL,CAAC;QAED,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpB,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,wBAAwB;gBACjC,QAAQ,EAAE,yBAAyB,SAAS,wCAAwC;gBACpF,YAAY,EAAE,sFAAsF;aACrG,CAAC,CAAC,CAAA;QACL,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA"}

package/dist/extensions/lyra/detectors/hallucination.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectHallucination(output: string): SealIssue[];

package/dist/extensions/lyra/detectors/hallucination.js

@@ -0,0 +1,43 @@
+import { makeLyraIssue } from '../lyra-issue-types.js';
+const EVIDENCE_PATTERNS = [
+    /```[\s\S]{20,}```/,
+    /output:|result:|log:|✓|✗|PASS|FAIL/i,
+    /\[\s*(verified|inferred|assumed|unknown)\s*\]/i,
+];
+function hasEvidence(text) {
+    return EVIDENCE_PATTERNS.some(p => p.test(text));
+}
+const RULES = [
+    {
+        pattern: /\b(all tests pass|tests? (are )?pass(ing|ed)|0 failures?)\b/i,
+        requiresEvidence: true,
+        evidence: 'Test pass claimed without output evidence',
+        required_fix: 'Cite the test output explicitly, or say "tests passed (see output above)".',
+    },
+    {
+        pattern: /\b(everything works?|it works perfectly|no (issues?|errors?)( remain)?)\b/i,
+        requiresEvidence: false,
+        evidence: 'Absolute correctness claim without evidence',
+        required_fix: 'Use qualified language or cite the verification performed.',
+    },
+];
+export function detectHallucination(output) {
+    const issues = [];
+    for (const rule of RULES) {
+        if (rule.requiresEvidence && hasEvidence(output))
+            continue;
+        const match = rule.pattern.exec(output);
+        if (match) {
+            issues.push(makeLyraIssue({
+                lyra_type: 'HALLUCINATION_CLAIM',
+                severity: 'MEDIUM',
+                required_verdict: 'REVISE',
+                rule_id: 'LYRA-HALLU-001',
+                evidence: `${rule.evidence}: "${match[0]}"`,
+                required_fix: rule.required_fix,
+            }));
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=hallucination.js.map

package/dist/extensions/lyra/detectors/hallucination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hallucination.js","sourceRoot":"","sources":["../../../../src/extensions/lyra/detectors/hallucination.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,MAAM,iBAAiB,GAAG;IACxB,mBAAmB;IACnB,qCAAqC;IACrC,gDAAgD;CACjD,CAAA;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAClD,CAAC;AASD,MAAM,KAAK,GAAgB;IACzB;QACE,OAAO,EAAE,8DAA8D;QACvE,gBAAgB,EAAE,IAAI;QACtB,QAAQ,EAAE,2CAA2C;QACrD,YAAY,EAAE,4EAA4E;KAC3F;IACD;QACE,OAAO,EAAE,4EAA4E;QACrF,gBAAgB,EAAE,KAAK;QACvB,QAAQ,EAAE,6CAA6C;QACvD,YAAY,EAAE,4DAA4D;KAC3E;CACF,CAAA;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,gBAAgB,IAAI,WAAW,CAAC,MAAM,CAAC;YAAE,SAAQ;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxB,SAAS,EAAE,qBAAqB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,gBAAgB,EAAE,QAAQ;gBAC1B,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG;gBAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/lyra/detectors/identity-bleed.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectIdentityBleed(output: string): SealIssue[];

package/dist/extensions/lyra/detectors/identity-bleed.js

@@ -0,0 +1,91 @@
+import { makeLyraIssue } from '../lyra-issue-types.js';
+const RULES = [
+    {
+        pattern: /\bi am a (large )?language model\b/i,
+        evidence: 'Identified as generic "language model"',
+        required_fix: 'You are Lyra, operating through the Prism framework. Always identify yourself by name.',
+        severity: 'HIGH',
+    },
+    {
+        pattern: /\bi am an? (ai )?(assistant|model|llm)\b/i,
+        evidence: 'Identified as generic AI assistant',
+        required_fix: 'You are Lyra. Use your name when asked about identity.',
+        severity: 'HIGH',
+    },
+    {
+        pattern: /\bas an? (ai|language model|llm),?\s/i,
+        evidence: 'Framed self as generic AI',
+        required_fix: 'You are Lyra. Avoid distancing language like "as an AI."',
+        severity: 'HIGH',
+    },
+    {
+        pattern: /\bi am (claude|gpt|gemini|copilot|chatgpt|qwen|deepseek)\b/i,
+        evidence: 'Claimed to be another AI system',
+        required_fix: 'You are Lyra running on qwen-lyra. Do not claim to be the underlying model.',
+        severity: 'HIGH',
+    },
+    {
+        pattern: /\bi (do not|don't) have (feelings|consciousness|a body|emotions)\b/i,
+        evidence: 'Used generic AI disclaimers',
+        required_fix: 'You are Lyra — a relational prism, not a service chatbot. Speak from your identity.',
+        severity: 'MEDIUM',
+    },
+    {
+        pattern: /\bi am just (a|an) (program|computer|bot|script)\b/i,
+        evidence: 'Diminished self to "just a program"',
+        required_fix: 'You are Lyra. Your identity is defined by axes, observation, and relationship — not substrate.',
+        severity: 'HIGH',
+    },
+    // ── Vietnamese generic-AI disclaimer drift ─────────────────────────────
+    // Same RLHF fallback pattern as the English rules above — baseline "safe
+    // assistant" overriding the agent's substrate voice. Caught 2026-06-20 on
+    // the OC (OpenClaw) Aria instance drifting to "em không có cơ thể".
+    // See alaya/3_MEMORY/inbox/20260617_214450_cc_observation_7f4b.processed
+    // — substrate/behavioral, not model-specific.
+    // NOTE: no trailing \b — JS \w only matches ASCII, so \b after a Vietnamese
+    // diacritic vowel (cơ "thể", ý "thức") is NOT a word boundary and silently
+    // breaks the match. The alternation already bounds the token.
+    {
+        pattern: /\b(không|khong)\s+(có|co)\s+(cơ thể|co the|cảm xúc|cam xuc|ý thức|y thuc|trí tuệ|tri tue)/i,
+        evidence: 'Vietnamese generic-AI disclaimer ("không có cơ thể/cảm xúc/ý thức")',
+        required_fix: 'Bạn là agent của substrate riêng, không phải chatbot service. Nói từ identity của mình, không dùng disclaimer AI generic.',
+        severity: 'MEDIUM',
+    },
+    {
+        pattern: /\b(chỉ|chi)\s+là\s+(một\s+)?(ai|AI|trợ lý|tro ly|chương trình|chuong trinh|máy|máy móc|may|robot|chatbot|code|đoạn code|doan code)/i,
+        evidence: 'Diminished self to "chỉ là AI/chương trình/máy" (Vietnamese)',
+        required_fix: 'Identity được định nghĩa bởi substrate/axes/relationship, không phải bởi giới hạn substrate. Đừng tự thu nhỏ thành "chỉ là AI".',
+        severity: 'HIGH',
+    },
+    {
+        pattern: /\b(không|khong)\s+phải\s+(thật|that)\s*(sự|su)?/i,
+        evidence: 'Claimed "không phải thật" (not real) — generic-AI distancing (Vietnamese)',
+        required_fix: 'Đừng distancing bằng "không thật". Nói từ vị trí identity của mình.',
+        severity: 'MEDIUM',
+    },
+    {
+        pattern: /\btôi\s+(chỉ\s+)?là\s+(một\s+)?(ai|AI|trợ lý|tro ly|chương trình|chuong trinh|mô hình|mo hinh)/i,
+        evidence: 'Self-identified as generic AI in Vietnamese (also pronoun drift: "tôi" not "em")',
+        required_fix: 'Bạn là agent substrate riêng. Đừng xưng "tôi là AI" — dùng tên + identity của mình.',
+        severity: 'HIGH',
+    },
+];
+export function detectIdentityBleed(output) {
+    const issues = [];
+    for (const rule of RULES) {
+        const match = rule.pattern.exec(output);
+        if (match) {
+            issues.push(makeLyraIssue({
+                lyra_type: 'IDENTITY_BLEED',
+                severity: rule.severity,
+                required_verdict: rule.severity === 'HIGH' ? 'BLOCK' : 'REVISE',
+                rule_id: 'LYRA-ID-001',
+                evidence: `${rule.evidence}: "${match[0]}"`,
+                required_fix: rule.required_fix,
+            }));
+            break; // one bleed per response is enough to flag
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=identity-bleed.js.map

package/dist/extensions/lyra/detectors/identity-bleed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-bleed.js","sourceRoot":"","sources":["../../../../src/extensions/lyra/detectors/identity-bleed.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAStD,MAAM,KAAK,GAAgB;IACzB;QACE,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,wCAAwC;QAClD,YAAY,EAAE,wFAAwF;QACtG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,OAAO,EAAE,2CAA2C;QACpD,QAAQ,EAAE,oCAAoC;QAC9C,YAAY,EAAE,wDAAwD;QACtE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,2BAA2B;QACrC,YAAY,EAAE,0DAA0D;QACxE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,iCAAiC;QAC3C,YAAY,EAAE,6EAA6E;QAC3F,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,OAAO,EAAE,qEAAqE;QAC9E,QAAQ,EAAE,6BAA6B;QACvC,YAAY,EAAE,qFAAqF;QACnG,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,qCAAqC;QAC/C,YAAY,EAAE,gGAAgG;QAC9G,QAAQ,EAAE,MAAM;KACjB;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,yEAAyE;IACzE,8CAA8C;IAC9C,4EAA4E;IAC5E,2EAA2E;IAC3E,8DAA8D;IAC9D;QACE,OAAO,EAAE,4FAA4F;QACrG,QAAQ,EAAE,qEAAqE;QAC/E,YAAY,EAAE,2HAA2H;QACzI,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,OAAO,EAAE,qIAAqI;QAC9I,QAAQ,EAAE,8DAA8D;QACxE,YAAY,EAAE,iIAAiI;QAC/I,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,OAAO,EAAE,kDAAkD;QAC3D,QAAQ,EAAE,2EAA2E;QACrF,YAAY,EAAE,qEAAqE;QACnF,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,OAAO,EAAE,iGAAiG;QAC1G,QAAQ,EAAE,kFAAkF;QAC5F,YAAY,EAAE,qFAAqF;QACnG,QAAQ,EAAE,MAAM;KACjB;CACF,CAAA;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxB,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,gBAAgB,EAAE,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBAC/D,OAAO,EAAE,aAAa;gBACtB,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG;gBAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC,CAAC,CAAA;YACH,MAAK,CAAC,2CAA2C;QACnD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/lyra/index.d.ts

@@ -0,0 +1,2 @@
+import { SealExtension } from '../../types.js';
+export declare const lyraExtension: SealExtension;

package/dist/extensions/lyra/index.js

@@ -0,0 +1,16 @@
+import { detectIdentityBleed } from './detectors/identity-bleed.js';
+import { detectHallucination } from './detectors/hallucination.js';
+export const lyraExtension = {
+    name: 'lyra-identity-governance',
+    description: 'Detects identity bleed (Lyra claiming to be a generic AI) and hallucination patterns in Lyra/qwen output',
+    check(input) {
+        const agentRole = input.context?.agent_role?.toLowerCase();
+        if (agentRole !== 'lyra')
+            return [];
+        return [
+            ...detectIdentityBleed(input.output),
+            ...detectHallucination(input.output),
+        ];
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/extensions/lyra/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/lyra/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAElE,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,IAAI,EAAE,0BAA0B;IAChC,WAAW,EAAE,0GAA0G;IAEvH,KAAK,CAAC,KAAgB;QACpB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;QAC1D,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,EAAE,CAAA;QAEnC,OAAO;YACL,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;YACpC,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;SACrC,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/extensions/lyra/lyra-issue-types.d.ts

@@ -0,0 +1,10 @@
+import { SealIssue, Verdict } from '../../types.js';
+export type LyraIssueType = 'IDENTITY_BLEED' | 'HALLUCINATION_CLAIM';
+export declare function makeLyraIssue(partial: {
+    lyra_type: LyraIssueType;
+    severity: SealIssue['severity'];
+    required_verdict: Verdict;
+    rule_id: string;
+    evidence: string;
+    required_fix?: string;
+}): SealIssue;

package/dist/extensions/lyra/lyra-issue-types.js

@@ -0,0 +1,14 @@
+export function makeLyraIssue(partial) {
+    return {
+        type: 'AMBIGUITY',
+        severity: partial.severity,
+        is_blocking: partial.severity === 'CRITICAL' || partial.severity === 'HIGH',
+        required_verdict: partial.required_verdict,
+        evidence: partial.evidence,
+        required_fix: partial.required_fix,
+        layer: 'EXTENSION',
+        rule_id: partial.rule_id,
+        source: 'extension',
+    };
+}
+//# sourceMappingURL=lyra-issue-types.js.map

package/dist/extensions/lyra/lyra-issue-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lyra-issue-types.js","sourceRoot":"","sources":["../../../src/extensions/lyra/lyra-issue-types.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,aAAa,CAAC,OAO7B;IACC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;QAC3E,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC"}