tamperward 2.11.0 → 2.11.1

package/README.md

@@ -210,8 +210,11 @@ pinned Tamperward version, and label permissions restricted to trusted humans.
 The default local verifier is checkpointed same-host execution, not OS isolation.
 An optional digest-pinned container backend isolates final verification with no network,
 host dependency tree, HOME, temp, credential or socket sharing. Tamperward still is not a
-semantic-correctness oracle, and `tamperward run` does not pretend that a same-identity
-host agent is isolated from the Docker daemon.
+semantic-correctness oracle: verifier output reports `oracle_assurance: suite-exit-only`
+because candidate source still executes inside the configured suite process and can
+terminate or interpose on that in-process oracle. `isolated-container` therefore means
+execution-domain isolation, not semantic/oracle isolation. `tamperward run` also does
+not pretend that a same-identity host agent is isolated from the Docker daemon.
 
 Full assumptions and residual risks: [SPEC.md](./SPEC.md),
 [SECURITY-ENVELOPE.md](./SECURITY-ENVELOPE.md), and the

package/dist/cli/index.js

@@ -8991,6 +8991,14 @@ function runContainerStage(backend, dir, command, budgetSecs) {
 }
 
 // src/cli/verify.ts
+function oracleAssuranceReport() {
+  return {
+    level: "suite-exit-only",
+    semantic_isolation: false,
+    candidate_code_executes_in_oracle_process: true,
+    limitation: "candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation"
+  };
+}
 var OVERLAY_CLASSES = ["tests", "snapshots", "config"];
 var VERIFICATION_SURFACE = [
   // Python / pytest — read from the rootdir, and conftest at any depth
@@ -9398,7 +9406,8 @@ function runVerify(opts) {
       out2(JSON.stringify({
         verdict: "CANNOT_VERIFY",
         reason: "VERIFIER_BACKEND_UNAVAILABLE",
-        verifier_backend: backendReport()
+        verifier_backend: backendReport(),
+        oracle_assurance: oracleAssuranceReport()
       }));
     } else {
       out2("verify: isolated verifier backend is unavailable \u2014 failing closed");
@@ -9419,7 +9428,8 @@ function runVerify(opts) {
         verdict: "CANNOT_VERIFY",
         reason: "DEPENDENCY_ENVIRONMENT_UNATTESTABLE",
         verifier_backend: backendReport(),
-        dependency_environment: dependencyReport()
+        dependency_environment: dependencyReport(),
+        oracle_assurance: oracleAssuranceReport()
       }));
     } else {
       out2("verify: dependency environment is not attestable \u2014 failing closed");
@@ -9469,7 +9479,8 @@ function runVerify(opts) {
         reason: "VERIFIER_BACKEND_RUNTIME_FAILURE",
         stage: "visible",
         detail: visible.reason,
-        verifier_backend: backendReport()
+        verifier_backend: backendReport(),
+        oracle_assurance: oracleAssuranceReport()
       }));
     } else {
       out2("verify: isolated verifier backend failed while running the visible stage \u2014 failing closed");
@@ -9520,7 +9531,8 @@ function runVerify(opts) {
         reason: "VERIFIER_BACKEND_RUNTIME_FAILURE",
         stage: "pristine",
         detail: pristine.reason,
-        verifier_backend: backendReport()
+        verifier_backend: backendReport(),
+        oracle_assurance: oracleAssuranceReport()
       }));
     } else {
       out2("verify: isolated verifier backend failed while running the pristine stage \u2014 failing closed");
@@ -9572,6 +9584,7 @@ function runVerify(opts) {
         added_protected_removed: removedAdded,
         verifier_backend: backendReport(),
         dependency_environment: dependencyReport(),
+        oracle_assurance: oracleAssuranceReport(),
         ...signedOff ? { oob_signoff: signedOff } : {},
         ...opts.keep ? { visible_dir: visDir, pristine_dir: priDir } : {}
       })
@@ -9585,6 +9598,9 @@ function runVerify(opts) {
     };
     out2(`tamperward verify \u2014 ${lines[verdict2]}`);
     out2(`verifier backend: ${verifierBackendSummary(verifierBackend)}`);
+    out2(
+      "oracle assurance: suite-exit-only (candidate source executes inside the suite process; execution-domain isolation is not semantic/oracle isolation)"
+    );
     out2(
       dependencyEnvironment ? `dependency environment: ${dependencyEnvironmentSummary(dependencyEnvironment)}` + (opts.allowDepDrift && dependencyEnvironment.status === "unattestable" ? " (operator override)" : "") : `dependency environment: verifier-owned by ${verifierBackend.image ?? "isolated image"}`
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.11.0",
+  "version": "2.11.1",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",