xoonya 3.0.0 → 3.1.0

package/lib/default_path_contract.js

@@ -1,380 +1,380 @@
-"use strict";
-
-const packageJson = require("../package.json");
-const proofSdk = require("../proof_sdk");
-const { summarizeProofTruthModelPack } = require("./proof_truth_contract");
-const { summarizeVerificationServicesPack } = require("./verification_service_pack");
-const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
-
-function uniqueSorted(values) {
-  return Array.from(new Set((Array.isArray(values) ? values : []).filter(Boolean))).sort();
-}
-
-function buildStages(stageEntries) {
-  return (Array.isArray(stageEntries) ? stageEntries : []).map((entry, index) => ({
-    stage_index: index + 1,
-    ...entry
-  }));
-}
-
-function buildSurface(entry) {
-  const stages = buildStages(entry.stages);
-  return {
-    surface_id: entry.surface_id,
-    surface_label: entry.surface_label,
-    surface_kind: entry.surface_kind,
-    interaction_modes: uniqueSorted(entry.interaction_modes),
-    actor_classes: uniqueSorted(entry.actor_classes),
-    real_time_ready: true,
-    review_ready: stages.some((stage) => stage.stage_id === "review"),
-    verify_ready: stages.some((stage) => stage.stage_id === "verify"),
-    proof_emit_ready: stages.some((stage) => stage.stage_id === "emit" || stage.stage_id === "run"),
-    governance_followthrough_ready: stages.some((stage) => stage.stage_id === "governance" || stage.stage_id === "inspect"),
-    stage_count: stages.length,
-    primary_entrypoints: uniqueSorted(entry.primary_entrypoints),
-    primary_output_posture: entry.primary_output_posture,
-    default_loop_or_followthrough_ref: entry.default_loop_or_followthrough_ref,
-    stages,
-    supporting_surfaces: uniqueSorted(entry.supporting_surfaces),
-    claim_boundary: entry.claim_boundary
-  };
-}
-
-function buildDefaultPathPack() {
-  const proofTruthSummary = summarizeProofTruthModelPack();
-  const proofCenterSummary = proofSdk.summarizeDefaultProofCenter();
-  const proofLoopSummary = proofSdk.summarizeDefaultProofLoops();
-  const resultPackageHandoffSummary = proofSdk.summarizeInteractionResultPackageHandoffCenter();
-  const bridgeSummary = proofSdk.summarizeBridgeCenter();
-  const governanceSummary = proofSdk.summarizeGovernanceCenter();
-  const verificationServicesSummary = summarizeVerificationServicesPack();
-  const trustPortabilitySummary = summarizeTrustPortabilityPack();
-
-  const surfaces = [
-    buildSurface({
-      surface_id: "cli_terminal",
-      surface_label: "CLI and terminal",
-      surface_kind: "human_or_operator_shell_surface",
-      interaction_modes: ["cli", "terminal"],
-      actor_classes: ["human", "operator", "developer", "agent"],
-      primary_entrypoints: [
-        "xoonya start-here",
-        "xoonya first-run --verify-native --pretty",
-        "xoonya-review --file ./handoff.json --summary",
-        "xoonya conformance --json"
-      ],
-      primary_output_posture: "stdout_json_review_and_local_verification_summary",
-      default_loop_or_followthrough_ref: "default.proof.bundle.loop",
-      stages: [
-        {
-          stage_id: "receive",
-          surface_ref: "xoonya start-here",
-          expected_outcome: "outside builder or operator discovers the proof-side default path immediately after install"
-        },
-        {
-          stage_id: "review",
-          surface_ref: "xoonya-review --file ./handoff.json --summary",
-          expected_outcome: "carried runtime handoff becomes a concise reviewable proof-side intake"
-        },
-        {
-          stage_id: "verify",
-          surface_ref: "xoonya first-run --verify-native --pretty",
-          expected_outcome: "local native verification confirms xoonya proof binding and conformance posture"
-        },
-        {
-          stage_id: "emit",
-          surface_ref: "xoonya conformance --json",
-          expected_outcome: "operator can confirm proof bundle and native artifact posture from the same shell surface"
-        },
-        {
-          stage_id: "inspect",
-          surface_ref: "/v1/proof-center/governance/summary",
-          expected_outcome: "governance and continuity posture remain inspectable after proof review and verification"
-        }
-      ],
-      supporting_surfaces: [
-        "https://www.naxytra.com/v1/first-run-kit",
-        "/v1/proof-center/summary",
-        "/v1/proof-center/native-standard/summary",
-        "/v1/proof-center/result-package-handoff/review/summary"
-      ],
-      claim_boundary: "claim_cli_terminal_default_path_only_for_the_listed_review_verify_emit_and_inspection_surfaces_not_as_unbounded_external_chain_or_identity_truth"
-    }),
-    buildSurface({
-      surface_id: "direct_api",
-      surface_label: "Direct API",
-      surface_kind: "http_api_surface",
-      interaction_modes: ["api", "http"],
-      actor_classes: ["agent", "machine", "developer", "enterprise"],
-      primary_entrypoints: [
-        "/v1/proof-center",
-        "/v1/proof-bundles/build",
-        "/v1/proof-bundles/verify"
-      ],
-      primary_output_posture: "json_proof_bundle_and_verification_result",
-      default_loop_or_followthrough_ref: "/v1/proof-center/default-loops/run",
-      stages: [
-        {
-          stage_id: "receive",
-          surface_ref: "/v1/proof-center/summary",
-          expected_outcome: "caller discovers the canonical proof center and proof model through machine-readable HTTP surfaces"
-        },
-        {
-          stage_id: "review",
-          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
-          expected_outcome: "runtime handoff becomes reviewable before proof emission"
-        },
-        {
-          stage_id: "run",
-          surface_ref: "/v1/proof-center/default-loops/run",
-          expected_outcome: "application can emit and verify the canonical proof-native loop in one API path"
-        },
-        {
-          stage_id: "verify",
-          surface_ref: "/v1/proof-bundles/verify",
-          expected_outcome: "proof output is verified through the same public API spine"
-        },
-        {
-          stage_id: "inspect",
-          surface_ref: "/v1/proof-center/verification-services/summary",
-          expected_outcome: "verification service and followthrough posture remain externally inspectable"
-        }
-      ],
-      supporting_surfaces: [
-        "/openapi.json",
-        "/v1/proof-center/default-loops/summary",
-        "/v1/proof-center/native-standard/summary",
-        "/v1/proof-center/trust-portability/summary"
-      ],
-      claim_boundary: "claim_direct_api_default_path_only_for_the_listed_proof_core_review_run_verify_and_inspection_surfaces_not_as_unbounded_external_verifier_or_judgment_truth"
-    }),
-    buildSurface({
-      surface_id: "carried_handoff_review",
-      surface_label: "Carried handoff review",
-      surface_kind: "runtime_to_proof_continuation_surface",
-      interaction_modes: ["handoff", "review", "continuation"],
-      actor_classes: ["agent", "machine", "human", "enterprise", "operator"],
-      primary_entrypoints: [
-        "/v1/proof-center/result-package-handoff",
-        "/v1/proof-center/result-package-handoff/review/summary",
-        "/v1/proof-center/result-package-handoff/run"
-      ],
-      primary_output_posture: "review_summary_then_proof_continuation_bundle",
-      default_loop_or_followthrough_ref: "/v1/proof-center/result-package-handoff/run",
-      stages: [
-        {
-          stage_id: "receive",
-          surface_ref: "/v1/proof-center/result-package-handoff/summary",
-          expected_outcome: "caller discovers the stable runtime-to-proof continuation boundary"
-        },
-        {
-          stage_id: "review",
-          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
-          expected_outcome: "handoff bundle is reviewed for carry, boundary, and proof readiness"
-        },
-        {
-          stage_id: "run",
-          surface_ref: "/v1/proof-center/result-package-handoff/run",
-          expected_outcome: "reviewed handoff continues into canonical proof-side completion"
-        },
-        {
-          stage_id: "verify",
-          surface_ref: "/v1/proof-center/verification-services/summary",
-          expected_outcome: "verification posture for the carried handoff remains first-class and inspectable"
-        },
-        {
-          stage_id: "governance",
-          surface_ref: "/v1/proof-center/bridge/summary",
-          expected_outcome: "bridge carry and operator review posture remain attached to the continuation path"
-        }
-      ],
-      supporting_surfaces: [
-        "/v1/proof-center/result-package-handoff/review/bridge-summary",
-        "/v1/proof-center/governance/summary",
-        "/v1/proof-center/trust-portability/summary"
-      ],
-      claim_boundary: "claim_carried_handoff_review_only_for_the_listed_review_run_bridge_and_governance_surfaces_not_as_generic_runtime_execution_truth"
-    }),
-    buildSurface({
-      surface_id: "native_proof_loop",
-      surface_label: "Native proof loop",
-      surface_kind: "proof_native_surface",
-      interaction_modes: ["proof_native", "xnya", "bundle"],
-      actor_classes: ["developer", "agent", "machine", "human"],
-      primary_entrypoints: [
-        "/v1/proof-center/default-loops",
-        "/v1/proof-center/default-loops/run",
-        "/v1/proof-center/native-standard/summary"
-      ],
-      primary_output_posture: "deterministic_proof_bundle_or_receipt_loop_output",
-      default_loop_or_followthrough_ref: "default.proof.bundle.loop",
-      stages: [
-        {
-          stage_id: "receive",
-          surface_ref: "/v1/proof-center/default-loops/summary",
-          expected_outcome: "builder sees the default proof-native loops and their canonical stages"
-        },
-        {
-          stage_id: "review",
-          surface_ref: "/v1/proof-center/native-standard/summary",
-          expected_outcome: "native XNYA and proof-standard posture is inspected before emitting proof artifacts"
-        },
-        {
-          stage_id: "run",
-          surface_ref: "/v1/proof-center/default-loops/run",
-          expected_outcome: "proof bundle loop executes through the canonical proof center"
-        },
-        {
-          stage_id: "verify",
-          surface_ref: "/v1/proof-bundles/verify",
-          expected_outcome: "proof output is verified through the canonical bundle contract"
-        },
-        {
-          stage_id: "inspect",
-          surface_ref: "/v1/proof-center/native-anchor-profile/summary",
-          expected_outcome: "native anchor-binding and followthrough posture remain visible after proof emission"
-        }
-      ],
-      supporting_surfaces: [
-        "/v1/proof-center/native-atom-spec/summary",
-        "/v1/proof-center/native-payload-profile/summary",
-        "/v1/proof-center/native-conformance-mark/summary"
-      ],
-      claim_boundary: "claim_native_proof_loop_only_for_the_listed_xnya_and_bundle_surfaces_not_as_forced_identity_or_auth_replacement"
-    }),
-    buildSurface({
-      surface_id: "service_to_service",
-      surface_label: "Service-to-service and embedded review",
-      surface_kind: "backend_review_surface",
-      interaction_modes: ["service_to_service", "embedded_review", "callback"],
-      actor_classes: ["machine", "enterprise", "operator", "agent"],
-      primary_entrypoints: [
-        "/v1/proof-center/result-package-handoff/review/summary",
-        "/v1/proof-center/result-package-handoff/review/handoff-run",
-        "/v1/proof-center/governance/review-link"
-      ],
-      primary_output_posture: "embedded_review_summary_then_proof_followthrough_and_governance_linkage",
-      default_loop_or_followthrough_ref: "/v1/proof-center/result-package-handoff/review/handoff-run",
-      stages: [
-        {
-          stage_id: "receive",
-          surface_ref: "/v1/proof-center/result-package-handoff/review/handoff-intake",
-          expected_outcome: "backend caller receives and normalizes a runtime handoff into the proof review boundary"
-        },
-        {
-          stage_id: "review",
-          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
-          expected_outcome: "embedded service gets a compact proof-readiness and carry summary"
-        },
-        {
-          stage_id: "run",
-          surface_ref: "/v1/proof-center/result-package-handoff/review/handoff-run",
-          expected_outcome: "service advances the handoff into proof-side continuation from the same embedded path"
-        },
-        {
-          stage_id: "verify",
-          surface_ref: "/v1/proof-center/verification-services/summary",
-          expected_outcome: "verification posture remains callable and inspectable for the embedded review path"
-        },
-        {
-          stage_id: "governance",
-          surface_ref: "/v1/proof-center/governance/review-link",
-          expected_outcome: "follow-up review and governance remain linkable for downstream systems"
-        }
-      ],
-      supporting_surfaces: [
-        "/v1/proof-center/bridge/operator-review-pack",
-        "/v1/proof-center/governance/summary",
-        "/asyncapi.json",
-        "/cloudevents.json"
-      ],
-      claim_boundary: "claim_service_to_service_default_path_only_for_the_listed_embedded_review_run_verify_and_governance_surfaces_not_as_generic_external_case_management_truth"
-    })
-  ];
-
-  return {
-    ok: true,
-    product: packageJson.name,
-    category: "xoonya-default-path-model",
-    pack_version: "xoonya-default-path-model-v1",
-    posture: "multi_surface_proof_followthrough_default_path",
-    model_state: "frozen_for_3_0_0_closeout",
-    doctrine: "every_supported_proof_surface_should_converge_on_one_receive_review_verify_emit_followthrough_spine_so_the_public_proof_story_stays_true_across_cli_api_handoff_and_embedded_review_entrypoints",
-    core_claim: "xoonya can meet callers where they already are while keeping one proof, review, verification, bridge, and governance truth model",
-    default_path_order: [
-      "receive",
-      "review",
-      "run",
-      "verify",
-      "emit",
-      "inspect",
-      "governance"
-    ],
-    supported_surface_count: surfaces.length,
-    real_time_ready_surface_count: surfaces.filter((entry) => entry.real_time_ready).length,
-    review_ready_surface_count: surfaces.filter((entry) => entry.review_ready).length,
-    verify_ready_surface_count: surfaces.filter((entry) => entry.verify_ready).length,
-    proof_emit_ready_surface_count: surfaces.filter((entry) => entry.proof_emit_ready).length,
-    governance_followthrough_ready_surface_count: surfaces.filter((entry) => entry.governance_followthrough_ready).length,
-    surfaces,
-    universal_invariants: [
-      "every_default_path_must_begin_with_public_intake_or_start_here_guidance",
-      "every_default_path_must_make_review_or_verification_possible_before_claiming_completion",
-      "every_default_path_must_converge_back_into_the_same_proof_truth_model",
-      "every_default_path_must_preserve_xnya_and_proof_bundle_posture_without_redefining_runtime_truth",
-      "every_default_path_must_keep_bridge_and_governance_followthrough_available_when_needed"
-    ],
-    linked_summaries: {
-      proof_truth_summary: proofTruthSummary,
-      proof_center_summary: proofCenterSummary,
-      proof_loop_summary: proofLoopSummary,
-      result_package_handoff_summary: resultPackageHandoffSummary,
-      bridge_summary: bridgeSummary,
-      governance_summary: governanceSummary,
-      verification_services_summary: verificationServicesSummary,
-      trust_portability_summary: trustPortabilitySummary
-    },
-    linked_surfaces: {
-      start_here_ref: "START_HERE.md",
-      first_run_kit_ref: "https://www.naxytra.com/v1/first-run-kit",
-      proof_center_ref: "/v1/proof-center",
-      proof_center_summary_ref: "/v1/proof-center/summary",
-      proof_truth_ref: "/v1/proof-truth",
-      proof_loops_ref: "/v1/proof-center/default-loops",
-      result_package_handoff_ref: "/v1/proof-center/result-package-handoff",
-      bridge_summary_ref: "/v1/proof-center/bridge/summary",
-      governance_summary_ref: "/v1/proof-center/governance/summary"
-    },
-    claim_boundary: "claim_only_the_listed_multi_surface_proof_default_paths_and_their_shared_proof_review_verification_and_governance_spine_without_implying_unbounded_runtime_or_external_judgment_truth"
-  };
-}
-
-function summarizeDefaultPathPack() {
-  const pack = buildDefaultPathPack();
-  return {
-    ok: true,
-    product: pack.product,
-    category: pack.category,
-    summary_version: "xoonya-default-path-model-summary-v1",
-    pack_version: pack.pack_version,
-    model_state: pack.model_state,
-    supported_surface_count: pack.supported_surface_count,
-    review_ready_surface_count: pack.review_ready_surface_count,
-    verify_ready_surface_count: pack.verify_ready_surface_count,
-    proof_emit_ready_surface_count: pack.proof_emit_ready_surface_count,
-    governance_followthrough_ready_surface_count: pack.governance_followthrough_ready_surface_count,
-    default_path_stage_count: pack.default_path_order.length,
-    linked_surfaces: pack.linked_surfaces
-  };
-}
-
-function getDefaultPathSurfaceDetail(surfaceId) {
-  const normalized = String(surfaceId || "").trim().toLowerCase();
-  return (buildDefaultPathPack().surfaces || []).find((entry) => entry.surface_id === normalized) || null;
-}
-
-module.exports = {
-  buildDefaultPathPack,
-  summarizeDefaultPathPack,
-  getDefaultPathSurfaceDetail
-};
+"use strict";
+
+const packageJson = require("../package.json");
+const proofSdk = require("../proof_sdk");
+const { summarizeProofTruthModelPack } = require("./proof_truth_contract");
+const { summarizeVerificationServicesPack } = require("./verification_service_pack");
+const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
+
+function uniqueSorted(values) {
+  return Array.from(new Set((Array.isArray(values) ? values : []).filter(Boolean))).sort();
+}
+
+function buildStages(stageEntries) {
+  return (Array.isArray(stageEntries) ? stageEntries : []).map((entry, index) => ({
+    stage_index: index + 1,
+    ...entry
+  }));
+}
+
+function buildSurface(entry) {
+  const stages = buildStages(entry.stages);
+  return {
+    surface_id: entry.surface_id,
+    surface_label: entry.surface_label,
+    surface_kind: entry.surface_kind,
+    interaction_modes: uniqueSorted(entry.interaction_modes),
+    actor_classes: uniqueSorted(entry.actor_classes),
+    real_time_ready: true,
+    review_ready: stages.some((stage) => stage.stage_id === "review"),
+    verify_ready: stages.some((stage) => stage.stage_id === "verify"),
+    proof_emit_ready: stages.some((stage) => stage.stage_id === "emit" || stage.stage_id === "run"),
+    governance_followthrough_ready: stages.some((stage) => stage.stage_id === "governance" || stage.stage_id === "inspect"),
+    stage_count: stages.length,
+    primary_entrypoints: uniqueSorted(entry.primary_entrypoints),
+    primary_output_posture: entry.primary_output_posture,
+    default_loop_or_followthrough_ref: entry.default_loop_or_followthrough_ref,
+    stages,
+    supporting_surfaces: uniqueSorted(entry.supporting_surfaces),
+    claim_boundary: entry.claim_boundary
+  };
+}
+
+function buildDefaultPathPack() {
+  const proofTruthSummary = summarizeProofTruthModelPack();
+  const proofCenterSummary = proofSdk.summarizeDefaultProofCenter();
+  const proofLoopSummary = proofSdk.summarizeDefaultProofLoops();
+  const resultPackageHandoffSummary = proofSdk.summarizeInteractionResultPackageHandoffCenter();
+  const bridgeSummary = proofSdk.summarizeBridgeCenter();
+  const governanceSummary = proofSdk.summarizeGovernanceCenter();
+  const verificationServicesSummary = summarizeVerificationServicesPack();
+  const trustPortabilitySummary = summarizeTrustPortabilityPack();
+
+  const surfaces = [
+    buildSurface({
+      surface_id: "cli_terminal",
+      surface_label: "CLI and terminal",
+      surface_kind: "human_or_operator_shell_surface",
+      interaction_modes: ["cli", "terminal"],
+      actor_classes: ["human", "operator", "developer", "agent"],
+      primary_entrypoints: [
+        "xoonya start-here",
+        "xoonya first-run --verify-native --pretty",
+        "xoonya-review --file ./handoff.json --summary",
+        "xoonya conformance --json"
+      ],
+      primary_output_posture: "stdout_json_review_and_local_verification_summary",
+      default_loop_or_followthrough_ref: "default.proof.bundle.loop",
+      stages: [
+        {
+          stage_id: "receive",
+          surface_ref: "xoonya start-here",
+          expected_outcome: "outside builder or operator discovers the proof-side default path immediately after install"
+        },
+        {
+          stage_id: "review",
+          surface_ref: "xoonya-review --file ./handoff.json --summary",
+          expected_outcome: "carried runtime handoff becomes a concise reviewable proof-side intake"
+        },
+        {
+          stage_id: "verify",
+          surface_ref: "xoonya first-run --verify-native --pretty",
+          expected_outcome: "local native verification confirms xoonya proof binding and conformance posture"
+        },
+        {
+          stage_id: "emit",
+          surface_ref: "xoonya conformance --json",
+          expected_outcome: "operator can confirm proof bundle and native artifact posture from the same shell surface"
+        },
+        {
+          stage_id: "inspect",
+          surface_ref: "/v1/proof-center/governance/summary",
+          expected_outcome: "governance and continuity posture remain inspectable after proof review and verification"
+        }
+      ],
+      supporting_surfaces: [
+        "https://www.naxytra.com/v1/first-run-kit",
+        "/v1/proof-center/summary",
+        "/v1/proof-center/native-standard/summary",
+        "/v1/proof-center/result-package-handoff/review/summary"
+      ],
+      claim_boundary: "claim_cli_terminal_default_path_only_for_the_listed_review_verify_emit_and_inspection_surfaces_not_as_unbounded_external_chain_or_identity_truth"
+    }),
+    buildSurface({
+      surface_id: "direct_api",
+      surface_label: "Direct API",
+      surface_kind: "http_api_surface",
+      interaction_modes: ["api", "http"],
+      actor_classes: ["agent", "machine", "developer", "enterprise"],
+      primary_entrypoints: [
+        "/v1/proof-center",
+        "/v1/proof-bundles/build",
+        "/v1/proof-bundles/verify"
+      ],
+      primary_output_posture: "json_proof_bundle_and_verification_result",
+      default_loop_or_followthrough_ref: "/v1/proof-center/default-loops/run",
+      stages: [
+        {
+          stage_id: "receive",
+          surface_ref: "/v1/proof-center/summary",
+          expected_outcome: "caller discovers the canonical proof center and proof model through machine-readable HTTP surfaces"
+        },
+        {
+          stage_id: "review",
+          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
+          expected_outcome: "runtime handoff becomes reviewable before proof emission"
+        },
+        {
+          stage_id: "run",
+          surface_ref: "/v1/proof-center/default-loops/run",
+          expected_outcome: "application can emit and verify the canonical proof-native loop in one API path"
+        },
+        {
+          stage_id: "verify",
+          surface_ref: "/v1/proof-bundles/verify",
+          expected_outcome: "proof output is verified through the same public API spine"
+        },
+        {
+          stage_id: "inspect",
+          surface_ref: "/v1/proof-center/verification-services/summary",
+          expected_outcome: "verification service and followthrough posture remain externally inspectable"
+        }
+      ],
+      supporting_surfaces: [
+        "/openapi.json",
+        "/v1/proof-center/default-loops/summary",
+        "/v1/proof-center/native-standard/summary",
+        "/v1/proof-center/trust-portability/summary"
+      ],
+      claim_boundary: "claim_direct_api_default_path_only_for_the_listed_proof_core_review_run_verify_and_inspection_surfaces_not_as_unbounded_external_verifier_or_judgment_truth"
+    }),
+    buildSurface({
+      surface_id: "carried_handoff_review",
+      surface_label: "Carried handoff review",
+      surface_kind: "runtime_to_proof_continuation_surface",
+      interaction_modes: ["handoff", "review", "continuation"],
+      actor_classes: ["agent", "machine", "human", "enterprise", "operator"],
+      primary_entrypoints: [
+        "/v1/proof-center/result-package-handoff",
+        "/v1/proof-center/result-package-handoff/review/summary",
+        "/v1/proof-center/result-package-handoff/run"
+      ],
+      primary_output_posture: "review_summary_then_proof_continuation_bundle",
+      default_loop_or_followthrough_ref: "/v1/proof-center/result-package-handoff/run",
+      stages: [
+        {
+          stage_id: "receive",
+          surface_ref: "/v1/proof-center/result-package-handoff/summary",
+          expected_outcome: "caller discovers the stable runtime-to-proof continuation boundary"
+        },
+        {
+          stage_id: "review",
+          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
+          expected_outcome: "handoff bundle is reviewed for carry, boundary, and proof readiness"
+        },
+        {
+          stage_id: "run",
+          surface_ref: "/v1/proof-center/result-package-handoff/run",
+          expected_outcome: "reviewed handoff continues into canonical proof-side completion"
+        },
+        {
+          stage_id: "verify",
+          surface_ref: "/v1/proof-center/verification-services/summary",
+          expected_outcome: "verification posture for the carried handoff remains first-class and inspectable"
+        },
+        {
+          stage_id: "governance",
+          surface_ref: "/v1/proof-center/bridge/summary",
+          expected_outcome: "bridge carry and operator review posture remain attached to the continuation path"
+        }
+      ],
+      supporting_surfaces: [
+        "/v1/proof-center/result-package-handoff/review/bridge-summary",
+        "/v1/proof-center/governance/summary",
+        "/v1/proof-center/trust-portability/summary"
+      ],
+      claim_boundary: "claim_carried_handoff_review_only_for_the_listed_review_run_bridge_and_governance_surfaces_not_as_generic_runtime_execution_truth"
+    }),
+    buildSurface({
+      surface_id: "native_proof_loop",
+      surface_label: "Native proof loop",
+      surface_kind: "proof_native_surface",
+      interaction_modes: ["proof_native", "xnya", "bundle"],
+      actor_classes: ["developer", "agent", "machine", "human"],
+      primary_entrypoints: [
+        "/v1/proof-center/default-loops",
+        "/v1/proof-center/default-loops/run",
+        "/v1/proof-center/native-standard/summary"
+      ],
+      primary_output_posture: "deterministic_proof_bundle_or_receipt_loop_output",
+      default_loop_or_followthrough_ref: "default.proof.bundle.loop",
+      stages: [
+        {
+          stage_id: "receive",
+          surface_ref: "/v1/proof-center/default-loops/summary",
+          expected_outcome: "builder sees the default proof-native loops and their canonical stages"
+        },
+        {
+          stage_id: "review",
+          surface_ref: "/v1/proof-center/native-standard/summary",
+          expected_outcome: "native XNYA and proof-standard posture is inspected before emitting proof artifacts"
+        },
+        {
+          stage_id: "run",
+          surface_ref: "/v1/proof-center/default-loops/run",
+          expected_outcome: "proof bundle loop executes through the canonical proof center"
+        },
+        {
+          stage_id: "verify",
+          surface_ref: "/v1/proof-bundles/verify",
+          expected_outcome: "proof output is verified through the canonical bundle contract"
+        },
+        {
+          stage_id: "inspect",
+          surface_ref: "/v1/proof-center/native-anchor-profile/summary",
+          expected_outcome: "native anchor-binding and followthrough posture remain visible after proof emission"
+        }
+      ],
+      supporting_surfaces: [
+        "/v1/proof-center/native-atom-spec/summary",
+        "/v1/proof-center/native-payload-profile/summary",
+        "/v1/proof-center/native-conformance-mark/summary"
+      ],
+      claim_boundary: "claim_native_proof_loop_only_for_the_listed_xnya_and_bundle_surfaces_not_as_forced_identity_or_auth_replacement"
+    }),
+    buildSurface({
+      surface_id: "service_to_service",
+      surface_label: "Service-to-service and embedded review",
+      surface_kind: "backend_review_surface",
+      interaction_modes: ["service_to_service", "embedded_review", "callback"],
+      actor_classes: ["machine", "enterprise", "operator", "agent"],
+      primary_entrypoints: [
+        "/v1/proof-center/result-package-handoff/review/summary",
+        "/v1/proof-center/result-package-handoff/review/handoff-run",
+        "/v1/proof-center/governance/review-link"
+      ],
+      primary_output_posture: "embedded_review_summary_then_proof_followthrough_and_governance_linkage",
+      default_loop_or_followthrough_ref: "/v1/proof-center/result-package-handoff/review/handoff-run",
+      stages: [
+        {
+          stage_id: "receive",
+          surface_ref: "/v1/proof-center/result-package-handoff/review/handoff-intake",
+          expected_outcome: "backend caller receives and normalizes a runtime handoff into the proof review boundary"
+        },
+        {
+          stage_id: "review",
+          surface_ref: "/v1/proof-center/result-package-handoff/review/summary",
+          expected_outcome: "embedded service gets a compact proof-readiness and carry summary"
+        },
+        {
+          stage_id: "run",
+          surface_ref: "/v1/proof-center/result-package-handoff/review/handoff-run",
+          expected_outcome: "service advances the handoff into proof-side continuation from the same embedded path"
+        },
+        {
+          stage_id: "verify",
+          surface_ref: "/v1/proof-center/verification-services/summary",
+          expected_outcome: "verification posture remains callable and inspectable for the embedded review path"
+        },
+        {
+          stage_id: "governance",
+          surface_ref: "/v1/proof-center/governance/review-link",
+          expected_outcome: "follow-up review and governance remain linkable for downstream systems"
+        }
+      ],
+      supporting_surfaces: [
+        "/v1/proof-center/bridge/operator-review-pack",
+        "/v1/proof-center/governance/summary",
+        "/asyncapi.json",
+        "/cloudevents.json"
+      ],
+      claim_boundary: "claim_service_to_service_default_path_only_for_the_listed_embedded_review_run_verify_and_governance_surfaces_not_as_generic_external_case_management_truth"
+    })
+  ];
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "xoonya-default-path-model",
+    pack_version: "xoonya-default-path-model-v1",
+    posture: "multi_surface_proof_followthrough_default_path",
+    model_state: "frozen_for_3_0_0_closeout",
+    doctrine: "every_supported_proof_surface_should_converge_on_one_receive_review_verify_emit_followthrough_spine_so_the_public_proof_story_stays_true_across_cli_api_handoff_and_embedded_review_entrypoints",
+    core_claim: "xoonya can meet callers where they already are while keeping one proof, review, verification, bridge, and governance truth model",
+    default_path_order: [
+      "receive",
+      "review",
+      "run",
+      "verify",
+      "emit",
+      "inspect",
+      "governance"
+    ],
+    supported_surface_count: surfaces.length,
+    real_time_ready_surface_count: surfaces.filter((entry) => entry.real_time_ready).length,
+    review_ready_surface_count: surfaces.filter((entry) => entry.review_ready).length,
+    verify_ready_surface_count: surfaces.filter((entry) => entry.verify_ready).length,
+    proof_emit_ready_surface_count: surfaces.filter((entry) => entry.proof_emit_ready).length,
+    governance_followthrough_ready_surface_count: surfaces.filter((entry) => entry.governance_followthrough_ready).length,
+    surfaces,
+    universal_invariants: [
+      "every_default_path_must_begin_with_public_intake_or_start_here_guidance",
+      "every_default_path_must_make_review_or_verification_possible_before_claiming_completion",
+      "every_default_path_must_converge_back_into_the_same_proof_truth_model",
+      "every_default_path_must_preserve_xnya_and_proof_bundle_posture_without_redefining_runtime_truth",
+      "every_default_path_must_keep_bridge_and_governance_followthrough_available_when_needed"
+    ],
+    linked_summaries: {
+      proof_truth_summary: proofTruthSummary,
+      proof_center_summary: proofCenterSummary,
+      proof_loop_summary: proofLoopSummary,
+      result_package_handoff_summary: resultPackageHandoffSummary,
+      bridge_summary: bridgeSummary,
+      governance_summary: governanceSummary,
+      verification_services_summary: verificationServicesSummary,
+      trust_portability_summary: trustPortabilitySummary
+    },
+    linked_surfaces: {
+      start_here_ref: "START_HERE.md",
+      first_run_kit_ref: "https://www.naxytra.com/v1/first-run-kit",
+      proof_center_ref: "/v1/proof-center",
+      proof_center_summary_ref: "/v1/proof-center/summary",
+      proof_truth_ref: "/v1/proof-truth",
+      proof_loops_ref: "/v1/proof-center/default-loops",
+      result_package_handoff_ref: "/v1/proof-center/result-package-handoff",
+      bridge_summary_ref: "/v1/proof-center/bridge/summary",
+      governance_summary_ref: "/v1/proof-center/governance/summary"
+    },
+    claim_boundary: "claim_only_the_listed_multi_surface_proof_default_paths_and_their_shared_proof_review_verification_and_governance_spine_without_implying_unbounded_runtime_or_external_judgment_truth"
+  };
+}
+
+function summarizeDefaultPathPack() {
+  const pack = buildDefaultPathPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "xoonya-default-path-model-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    supported_surface_count: pack.supported_surface_count,
+    review_ready_surface_count: pack.review_ready_surface_count,
+    verify_ready_surface_count: pack.verify_ready_surface_count,
+    proof_emit_ready_surface_count: pack.proof_emit_ready_surface_count,
+    governance_followthrough_ready_surface_count: pack.governance_followthrough_ready_surface_count,
+    default_path_stage_count: pack.default_path_order.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getDefaultPathSurfaceDetail(surfaceId) {
+  const normalized = String(surfaceId || "").trim().toLowerCase();
+  return (buildDefaultPathPack().surfaces || []).find((entry) => entry.surface_id === normalized) || null;
+}
+
+module.exports = {
+  buildDefaultPathPack,
+  summarizeDefaultPathPack,
+  getDefaultPathSurfaceDetail
+};