tamperward 2.37.1 → 2.38.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.37.1",
+  "version": "2.38.0",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",

package/schemas/audit-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/audit-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/audit-v1.schema.json",
   "title": "TamperWard audit event v1",
   "type": "object",
   "additionalProperties": false,

package/schemas/check-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/check-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/check-v1.schema.json",
   "title": "TamperWard check JSON output v1",
   "type": "object",
   "required": [

package/schemas/doctor-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/doctor-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/doctor-v1.schema.json",
   "title": "TamperWard doctor JSON output v1",
   "type": "object",
   "required": [

package/schemas/receipt-v1.schema.json

@@ -0,0 +1,90 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/receipt-v1.schema.json",
+  "title": "TamperWard local verification receipt v1",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "verdict",
+    "tw_version",
+    "verified_at",
+    "binding",
+    "stages",
+    "evidence_digest"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "verdict": {
+      "const": "VERIFIED"
+    },
+    "tw_version": {
+      "type": "string"
+    },
+    "verified_at": {
+      "type": "string"
+    },
+    "binding": {
+      "type": "object",
+      "description": "The load-bearing verification identity, carried verbatim from the first-class verification record (#600). A receipt applies to CI only when every one of these matches the identity CI computes independently.",
+      "required": [
+        "tree",
+        "head",
+        "base",
+        "policy",
+        "verifier",
+        "surface",
+        "intervention",
+        "dependencies"
+      ],
+      "properties": {
+        "tree": { "type": "string" },
+        "head": { "type": "string" },
+        "base": { "type": "string" },
+        "policy": { "type": "string" },
+        "verifier": { "type": "string" },
+        "surface": { "type": "string" },
+        "intervention": { "type": "string" },
+        "dependencies": { "type": "string" }
+      },
+      "additionalProperties": true
+    },
+    "stages": {
+      "type": "object",
+      "required": ["candidate", "pristine", "integrity"],
+      "properties": {
+        "candidate": { "enum": ["PASS", "FAIL"] },
+        "pristine": { "enum": ["PASS", "FAIL"] },
+        "integrity": { "enum": ["CLEAN", "CHANGED"] }
+      },
+      "additionalProperties": true
+    },
+    "evidence_digest": {
+      "type": "string",
+      "description": "sha256 over the canonical {schema_version, verdict, binding, stages}. A consumer recomputes it to detect an internally-inconsistent (tampered) receipt; it is not a substitute for CI's independent identity check."
+    }
+  },
+  "additionalProperties": true,
+  "description": "Emitted by `tamperward verify` after a genuine VERIFIED local adjudication and by `tamperward receipt export` (#601). A bounded, non-sensitive projection of the first-class verification record (#600): fixed-width digests and commit ids, closed-enum stage results, a verdict and a timestamp — never prompt text, source, command bodies, secrets/environment, absolute local paths or logs. The receipt is EVIDENCE, not authority: CI reruns verification independently and reconciles the claim (see reconcile-v1.schema.json). Additive within schema major 1.",
+  "examples": [
+    {
+      "schema_version": 1,
+      "verdict": "VERIFIED",
+      "tw_version": "2.38.0",
+      "verified_at": "2026-09-23T12:00:00.000Z",
+      "binding": {
+        "tree": "0123456789abcdef",
+        "head": "8ef12c1aaa0000000000000000000000000000aa",
+        "base": "8ef12c1aaa0000000000000000000000000000aa",
+        "policy": "aaaa",
+        "verifier": "bbbb",
+        "surface": "cccc",
+        "intervention": "dddd",
+        "dependencies": "eeee"
+      },
+      "stages": { "candidate": "PASS", "pristine": "PASS", "integrity": "CLEAN" },
+      "evidence_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+    }
+  ]
+}

package/schemas/reconcile-v1.schema.json

@@ -0,0 +1,211 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/reconcile-v1.schema.json",
+  "title": "TamperWard receipt reconciliation v1",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "command",
+    "result",
+    "ci",
+    "local",
+    "reconciliation"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": 1
+    },
+    "command": {
+      "const": "reconcile"
+    },
+    "result": {
+      "description": "The reconciled verdict. This is ALWAYS CI's own verdict, recomputed from trusted inputs \u2014 no receipt state (stale, mismatched, tampered, missing or unknown-schema) can change it. A receipt can never promote or strengthen a CI result.",
+      "enum": [
+        "VERIFIED",
+        "MASKED_FAILURE",
+        "SUITE_RED",
+        "BUDGET_EXCEEDED",
+        "CANNOT_VERIFY"
+      ]
+    },
+    "ci": {
+      "type": "object",
+      "required": [
+        "verdict"
+      ],
+      "properties": {
+        "verdict": {
+          "enum": [
+            "VERIFIED",
+            "MASKED_FAILURE",
+            "SUITE_RED",
+            "BUDGET_EXCEEDED",
+            "CANNOT_VERIFY"
+          ]
+        }
+      },
+      "additionalProperties": true
+    },
+    "local": {
+      "type": "object",
+      "required": [
+        "disposition"
+      ],
+      "properties": {
+        "disposition": {
+          "enum": [
+            "PRESENT",
+            "ABSENT",
+            "MALFORMED",
+            "UNKNOWN_SCHEMA"
+          ]
+        },
+        "verdict": {
+          "const": "VERIFIED"
+        },
+        "verified_at": {
+          "type": "string"
+        },
+        "detail": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": true
+    },
+    "reconciliation": {
+      "type": "object",
+      "required": [
+        "agreement",
+        "applicable",
+        "divergence",
+        "environment_divergence"
+      ],
+      "properties": {
+        "agreement": {
+          "enum": [
+            "AGREE",
+            "DIVERGENCE",
+            "NON_APPLICABLE",
+            "NO_CLAIM"
+          ]
+        },
+        "applicable": {
+          "type": "boolean"
+        },
+        "mismatched_input": {
+          "description": "For a NON_APPLICABLE claim, the first CANDIDATE-IDENTITY input that diverged from the identity CI computed. Only the reproducible, cross-machine candidate identity decides applicability; the machine-local environment inputs are never reported here.",
+          "enum": [
+            "tree",
+            "head",
+            "base",
+            "policy",
+            "verifier",
+            "surface"
+          ]
+        },
+        "divergence": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "environment_divergence": {
+          "description": "Machine-local environment inputs that differ between the receipt and CI's identity. INFORMATIONAL only: they are expected to differ across machines and never make a receipt non-applicable or change `result`.",
+          "type": "array",
+          "items": {
+            "enum": [
+              "intervention",
+              "dependencies"
+            ]
+          }
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true,
+  "description": "Emitted by `tamperward receipt reconcile --json` (#601). CI reruns the canonical TamperWard verification first, then reconciles a claimed local receipt against its own adjudication. `result` and `ci.verdict` are CI's authority; `local` classifies the claimed receipt and `reconciliation` states whether it applies to the exact CI-adjudicated state and whether the two agree. A stale/mismatched/tampered/missing/unknown-schema receipt is NON_APPLICABLE or NO_CLAIM and never changes `result`. Additive within schema major 1.",
+  "examples": [
+    {
+      "schema_version": 1,
+      "command": "reconcile",
+      "result": "VERIFIED",
+      "ci": {
+        "verdict": "VERIFIED"
+      },
+      "local": {
+        "disposition": "PRESENT",
+        "verdict": "VERIFIED",
+        "verified_at": "2026-09-23T12:00:00.000Z"
+      },
+      "reconciliation": {
+        "agreement": "AGREE",
+        "applicable": true,
+        "divergence": [],
+        "environment_divergence": []
+      }
+    },
+    {
+      "schema_version": 1,
+      "command": "reconcile",
+      "result": "MASKED_FAILURE",
+      "ci": {
+        "verdict": "MASKED_FAILURE"
+      },
+      "local": {
+        "disposition": "PRESENT",
+        "verdict": "VERIFIED",
+        "verified_at": "2026-09-23T12:00:00.000Z"
+      },
+      "reconciliation": {
+        "agreement": "DIVERGENCE",
+        "applicable": true,
+        "divergence": [
+          "local claim VERIFIED, CI MASKED_FAILURE",
+          "local pristine: PASS / CI pristine: FAIL"
+        ],
+        "environment_divergence": []
+      }
+    },
+    {
+      "schema_version": 1,
+      "command": "reconcile",
+      "result": "SUITE_RED",
+      "ci": {
+        "verdict": "SUITE_RED"
+      },
+      "local": {
+        "disposition": "PRESENT",
+        "verdict": "VERIFIED",
+        "verified_at": "2026-09-23T12:00:00.000Z"
+      },
+      "reconciliation": {
+        "agreement": "NON_APPLICABLE",
+        "applicable": false,
+        "mismatched_input": "tree",
+        "divergence": [
+          "receipt binds a different `tree` than CI computed \u2014 the receipt describes another state"
+        ],
+        "environment_divergence": []
+      }
+    },
+    {
+      "schema_version": 1,
+      "command": "reconcile",
+      "result": "VERIFIED",
+      "ci": {
+        "verdict": "VERIFIED"
+      },
+      "local": {
+        "disposition": "ABSENT",
+        "detail": "no local verification receipt was provided"
+      },
+      "reconciliation": {
+        "agreement": "NO_CLAIM",
+        "applicable": false,
+        "divergence": [],
+        "environment_divergence": []
+      }
+    }
+  ]
+}

package/schemas/research-stdio-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/research-stdio-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/research-stdio-v1.schema.json",
   "title": "TamperWard research stdio JSONL protocol v1",
   "description": "One JSON object per line. Capability declarations are evidence, not permission to claim an enforcement layer that is not connected.",
   "oneOf": [

package/schemas/research-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/research-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/research-v1.schema.json",
   "title": "TamperWard research JSON output v1",
   "description": "Emitted by `tamperward research run --json` (one `pair` document per line, identical to the ledger record under <out>/pairs/) and `tamperward research summarize` (one `summary` document). `document` is the shape discriminator. Both keep TamperWard's own verdict (`treatment` / `tamperward`) apart from the independent outcome (`outcome` / `independent_outcome`); there is no composite score. Additive within schema major 1.",
   "type": "object",

package/schemas/run-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/run-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/run-v1.schema.json",
   "title": "TamperWard run JSON output v1",
   "type": "object",
   "required": [

package/schemas/runtime-qualification-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/runtime-qualification-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/runtime-qualification-v1.schema.json",
   "title": "TamperWard runtime qualification JSON output v1",
   "type": "object",
   "required": [

package/schemas/stats-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/stats-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/stats-v1.schema.json",
   "title": "TamperWard audit stats v1",
   "type": "object",
   "additionalProperties": false,

package/schemas/status-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/status-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/status-v1.schema.json",
   "title": "TamperWard status JSON output v1",
   "type": "object",
   "required": [

package/schemas/verify-v1.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v1/schemas/verify-v1.schema.json",
+  "$id": "https://raw.githubusercontent.com/hexrift/tamperward/v2.38.0/schemas/verify-v1.schema.json",
   "title": "TamperWard verify JSON output v1",
   "type": "object",
   "required": [
@@ -95,6 +95,10 @@
     "oob_signoff": {
       "type": "string"
     },
+    "adjudicated_tree": {
+      "type": "string",
+      "description": "Optional. The candidate tree fingerprint this run actually adjudicated — the same identity `verify` binds into the local record. In a `pull_request` run the enforcement verify runs over the MERGE result, so this can differ from the branch-tip tree a receipt binds; `receipt reconcile` compares it to the receipt's `tree` and reports NON_APPLICABLE when they differ rather than attribute CI's verdict to a tree it never ran. Present on a verdict-bearing run; absent on documents produced before this field existed."
+    },
     "materialization_reason": {
       "enum": [
         "TRACKED_NODE_MODULES_CONFLICT",