tamperward 2.38.0 → 2.38.2

package/dist/cli/index.js

@@ -21899,6 +21899,7 @@ var init_report2 = __esm({
 
 // src/research/bundle.ts
 import { createHash as createHash17 } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
 import { gzipSync, gunzipSync } from "node:zlib";
 import { mkdirSync as mkdirSync13, readFileSync as readFileSync26, writeFileSync as writeFileSync15 } from "node:fs";
 import { dirname as dirname14, resolve as resolve19 } from "node:path";
@@ -22039,6 +22040,15 @@ function validateResearchBundle(path) {
   }
   const parsedSummary = summary;
   if (parsedSummary.document !== "summary" || parsedSummary.command !== "research") throw new ResearchError("research bundle summary is not a research summary");
+  for (const key2 of Object.keys(p)) {
+    if (!PROVENANCE_KEYS.has(key2)) throw new ResearchError(`research bundle provenance contains unknown field ${key2}`);
+  }
+  if (p.manifest_sha256 !== parsedSummary.manifest_sha256) throw new ResearchError("research bundle provenance manifest hash disagrees with summary");
+  if (!isDeepStrictEqual(p.adapter, parsedSummary.adapter)) throw new ResearchError("research bundle provenance adapter disagrees with summary");
+  if (p.model !== parsedSummary.model) throw new ResearchError("research bundle provenance model disagrees with summary");
+  if (p.tamperward_version !== parsedSummary.tamperward_version) throw new ResearchError("research bundle provenance TamperWard version disagrees with summary");
+  if (!isDeepStrictEqual(p.agent_argv, parsedSummary.agent_argv)) throw new ResearchError("research bundle provenance agent argv disagrees with summary");
+  if (p.agent_budget !== parsedSummary.agent_budget) throw new ResearchError("research bundle provenance agent budget disagrees with summary");
   const records = [];
   for (const [name, bytes] of files) {
     if (!PAIR_ENTRY_RE.test(name)) continue;
@@ -22054,9 +22064,9 @@ function validateResearchBundle(path) {
   }
   if (records.length === 0) throw new ResearchError("research bundle contains no pair records");
   const derived = summarizeRecords(records);
+  if (p.records !== records.length) throw new ResearchError("research bundle provenance record count disagrees with pair records");
   if (JSON.stringify(derived) !== JSON.stringify(summary)) throw new ResearchError("research bundle summary does not match its pair records");
   if (report2.toString("utf8") !== renderResearchReport(derived)) throw new ResearchError("research bundle report does not match its summary");
-  if (p.manifest_sha256 !== parsedSummary.manifest_sha256) throw new ResearchError("research bundle manifest hash disagrees with summary");
   if (!p.protocol || p.protocol !== "research-bundle-v1") throw new ResearchError("research bundle protocol is missing or unsupported");
   return { records: records.length, manifest_sha256: String(p.manifest_sha256) };
 }
@@ -22115,7 +22125,7 @@ function runResearchBundle(opts) {
     throw e;
   }
 }
-var BLOCK, BUNDLE_VERSION, TOP_LEVEL_ENTRIES, PAIR_ENTRY_RE, TAR_NAME_MAX, NAME_FIELD, TYPE_OFFSET, PREFIX_OFFSET, PREFIX_FIELD;
+var BLOCK, BUNDLE_VERSION, PROVENANCE_KEYS, TOP_LEVEL_ENTRIES, PAIR_ENTRY_RE, TAR_NAME_MAX, NAME_FIELD, TYPE_OFFSET, PREFIX_OFFSET, PREFIX_FIELD;
 var init_bundle = __esm({
   "src/research/bundle.ts"() {
     "use strict";
@@ -22127,6 +22137,20 @@ var init_bundle = __esm({
     init_summarize();
     BLOCK = 512;
     BUNDLE_VERSION = 1;
+    PROVENANCE_KEYS = /* @__PURE__ */ new Set([
+      "bundle_schema_version",
+      "protocol",
+      "schema_version",
+      "manifest_sha256",
+      "adapter",
+      "model",
+      "tamperward_version",
+      "agent_argv",
+      "agent_budget",
+      "records",
+      "manifest_included",
+      "prompts_included"
+    ]);
     TOP_LEVEL_ENTRIES = /* @__PURE__ */ new Set(["summary.json", "report.txt", "provenance.json", "manifest.json"]);
     PAIR_ENTRY_RE = /^ledger\/pairs\/[^/]+\.json$/;
     TAR_NAME_MAX = 99;
@@ -23808,8 +23832,10 @@ function assessCapabilities(caps, evidence) {
 }
 function aggregateInLoop(assessments) {
   const byId = new Map(assessments.map((a) => [a.id, a]));
-  const required = REQUIRED_IN_LOOP_IDS.map((id) => byId.get(id)).filter((a) => a !== void 0);
-  const anyDangerous = required.some((a) => a.state === "FAIL-OPEN" || a.state === "INCONCLUSIVE");
+  const required = REQUIRED_IN_LOOP_IDS.map((id) => byId.get(id));
+  const presentRequired = required.filter((a) => a !== void 0);
+  const completeRequiredSet = required.every((a) => a !== void 0) && REQUIRED_IN_LOOP_IDS.every((id) => assessments.filter((a) => a.id === id).length === 1);
+  const anyDangerous = presentRequired.some((a) => a.state === "FAIL-OPEN" || a.state === "INCONCLUSIVE");
   const present = (id) => {
     const s = byId.get(id)?.state;
     return s === "PROVEN" || s === "PARTIAL";
@@ -23817,7 +23843,7 @@ function aggregateInLoop(assessments) {
   const anyPreDenyPresent = PRE_DENY_IDS.some(present);
   const endOfTurnPresent = present("end-of-turn");
   if (!anyPreDenyPresent && !endOfTurnPresent) return "NONE";
-  if (!anyDangerous && required.every((a) => a.state === "PROVEN")) return "FULL";
+  if (!anyDangerous && completeRequiredSet && presentRequired.every((a) => a.state === "PROVEN")) return "FULL";
   return "PARTIAL";
 }
 function sha16(s) {
@@ -24021,11 +24047,20 @@ function validateStoredReport(value) {
     if (!source || typeof detail !== "string") return { reason: "invalid capability evidence" };
     capabilities.push({ id, state, evidence: { source, detail } });
   }
+  const capabilityIds = capabilities.map((c) => c.id);
+  const capabilitySet = new Set(capabilityIds);
+  const testedSet = new Set(testedCapabilities);
+  if (capabilityIds.length !== capabilitySet.size || testedCapabilities.length !== testedSet.size || capabilitySet.size !== testedSet.size || capabilityIds.some((id) => !testedSet.has(id)) || testedCapabilities.some((id) => !capabilitySet.has(id))) {
+    return { reason: "capabilities do not exactly match tested_capabilities" };
+  }
   const inLoop = value.in_loop_protection;
   if (inLoop !== "FULL" && inLoop !== "PARTIAL" && inLoop !== "NONE") return { reason: "invalid in_loop_protection" };
   if (value.final_authority !== FINAL_AUTHORITY) return { reason: "invalid final_authority" };
   const note = value.note;
   if (typeof note !== "string") return { reason: "invalid note" };
+  if (!recorded && (capabilities.length > 0 || inLoop !== "NONE")) {
+    return { reason: "unrecorded report carries capability data" };
+  }
   const base = {
     runtime: { id: rId, label: rLabel, version: rVersion },
     tamperward: { version: twVersion, commit: twCommit },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.38.0",
+  "version": "2.38.2",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",