xoonya 3.0.0 → 3.1.0

package/lib/shared_signals_lane_contract.js

@@ -1,54 +1,54 @@
-"use strict";
-
-function buildSharedSignalsLanePack() {
-  return {
-    product: "xoonya",
-    category: "proof-shared-signals-lane-pack",
-    pack_version: "xoonya-shared-signals-lane-pack-v1",
-    lane_state: "first_party_shared_signals_lane_present",
-    posture: "real_time_review_and_risk_signal_exchange_lane",
-    standards: ["openid_shared_signals", "caep"],
-    signal_families: ["review_events", "governance_events", "bridge_attention_events", "external_import_attention_events"],
-    supported_surfaces: {
-      auth_profiles_ref: "/v1/auth-profiles",
-      identity_interop_ref: "/v1/identity-interop",
-      proof_bridge_ref: "/v1/proof-bridge",
-      result_package_trust_ref: "/v1/result-package-trust",
-      external_proof_import_ref: "/v1/external-proof-import"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "proof_risk_signal_alignment",
-        recommended_reason: "best path when partner systems need near-real-time signals about review, bridge, or imported-proof trust changes",
-        sequence: [
-          "inspect_shared_signals_lane_summary",
-          "map native proof review and bridge states to shared signal posture",
-          "connect trust attention and import attention states to external signal exchange",
-          "keep proof acceptance and governance decisions canonical inside xoonya"
-        ]
-      }
-    ],
-    guardrails: [
-      "shared signals should export proof-side state changes, not replace review or governance logic",
-      "signal exchange must remain bounded and reviewable"
-    ]
-  };
-}
-
-function summarizeSharedSignalsLanePack() {
-  const pack = buildSharedSignalsLanePack();
-  return {
-    product: "xoonya",
-    category: "proof-shared-signals-lane-pack-summary",
-    summary_version: "xoonya-shared-signals-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    standard_count: pack.standards.length,
-    signal_family_count: pack.signal_families.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildSharedSignalsLanePack,
-  summarizeSharedSignalsLanePack
-};
+"use strict";
+
+function buildSharedSignalsLanePack() {
+  return {
+    product: "xoonya",
+    category: "proof-shared-signals-lane-pack",
+    pack_version: "xoonya-shared-signals-lane-pack-v1",
+    lane_state: "first_party_shared_signals_lane_present",
+    posture: "real_time_review_and_risk_signal_exchange_lane",
+    standards: ["openid_shared_signals", "caep"],
+    signal_families: ["review_events", "governance_events", "bridge_attention_events", "external_import_attention_events"],
+    supported_surfaces: {
+      auth_profiles_ref: "/v1/auth-profiles",
+      identity_interop_ref: "/v1/identity-interop",
+      proof_bridge_ref: "/v1/proof-bridge",
+      result_package_trust_ref: "/v1/result-package-trust",
+      external_proof_import_ref: "/v1/external-proof-import"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "proof_risk_signal_alignment",
+        recommended_reason: "best path when partner systems need near-real-time signals about review, bridge, or imported-proof trust changes",
+        sequence: [
+          "inspect_shared_signals_lane_summary",
+          "map native proof review and bridge states to shared signal posture",
+          "connect trust attention and import attention states to external signal exchange",
+          "keep proof acceptance and governance decisions canonical inside xoonya"
+        ]
+      }
+    ],
+    guardrails: [
+      "shared signals should export proof-side state changes, not replace review or governance logic",
+      "signal exchange must remain bounded and reviewable"
+    ]
+  };
+}
+
+function summarizeSharedSignalsLanePack() {
+  const pack = buildSharedSignalsLanePack();
+  return {
+    product: "xoonya",
+    category: "proof-shared-signals-lane-pack-summary",
+    summary_version: "xoonya-shared-signals-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    standard_count: pack.standards.length,
+    signal_family_count: pack.signal_families.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildSharedSignalsLanePack,
+  summarizeSharedSignalsLanePack
+};

package/lib/signed_audit_provenance_contract.js

@@ -0,0 +1,93 @@
+"use strict";
+
+const packageJson = require("../package.json");
+const { buildProvenanceLanePack, summarizeProvenanceLanePack } = require("./provenance_lane_contract");
+const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
+
+function buildSignedAuditProvenanceContractPack() {
+  const provenanceLanePack = buildProvenanceLanePack();
+  const provenanceLaneSummary = summarizeProvenanceLanePack();
+  const trustPortabilitySummary = summarizeTrustPortabilityPack();
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-signed-audit-provenance-contract",
+    pack_version: "naxytra-signed-audit-provenance-contract-v1",
+    doctrine: "xoonya_signs_selected_audit_and_provenance_surfaces_without_collapsing_all_telemetry_into_evidence_truth",
+    model_state: "core_now",
+    core_claim: "selected audit and provenance surfaces are signed, exportable, and reviewable evidence channels",
+    evidence_surfaces: [
+      { surface_id: "proof_provenance_lane", surface_label: "proof provenance lane", surface_ref: "/v1/provenance", evidence_class: "proof_provenance" },
+      { surface_id: "proof_bridge_review", surface_label: "proof bridge review", surface_ref: "/v1/proof-bridge", evidence_class: "proof_bridge_review" },
+      { surface_id: "release_provenance", surface_label: "release provenance", surface_ref: "/v1/provenance", evidence_class: "release_supply_chain_provenance" },
+      { surface_id: "artifact_distribution_provenance", surface_label: "artifact distribution provenance", surface_ref: "/v1/artifact-distribution", evidence_class: "artifact_supply_chain_provenance" },
+      { surface_id: "shared_signal_export", surface_label: "shared signal export", surface_ref: "/v1/shared-signals", evidence_class: "shared_signal_export" },
+      { surface_id: "external_proof_import_review", surface_label: "external proof import review", surface_ref: "/v1/proof-center/result-package-handoff/review/summary", evidence_class: "proof_import_review" }
+    ],
+    required_fields: [
+      "timestamp",
+      "actor_id",
+      "action_type",
+      "source_surface",
+      "payload_hash",
+      "signature",
+      "version"
+    ],
+    optional_fields: [
+      "correlation_id",
+      "proof_ref",
+      "anchor_ref",
+      "settlement_ref",
+      "metadata"
+    ],
+    export_rules: [
+      "signed_audit_records_may_be_exported_as_evidence",
+      "provenance_records_may_strengthen_release_and_proof_review",
+      "logs_without_an_explicit_evidence_class_remain_operational_only",
+      "signed_records_must_not_silently_become_proof_validity_themselves"
+    ],
+    linked_surfaces: {
+      provenance_ref: "/v1/provenance",
+      provenance_summary_ref: "/v1/provenance/summary",
+      proof_bridge_ref: "/v1/proof-bridge",
+      trust_portability_ref: "/v1/proof-center/trust-portability",
+      artifact_distribution_ref: "/v1/artifact-distribution",
+      shared_signals_ref: "/v1/shared-signals"
+    },
+    supporting_summary: {
+      provenance_lane_summary: provenanceLaneSummary,
+      trust_portability_summary: trustPortabilitySummary
+    },
+    claim_boundary: "claim_only_selected_audit_and_provenance_surfaces_as_signed_exportable_evidence_without_claiming_all_logs_are_evidence_grade"
+  };
+}
+
+function summarizeSignedAuditProvenanceContractPack() {
+  const pack = buildSignedAuditProvenanceContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-signed-audit-provenance-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    evidence_surface_count: pack.evidence_surfaces.length,
+    required_field_count: pack.required_fields.length,
+    optional_field_count: pack.optional_fields.length,
+    export_rule_count: pack.export_rules.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getSignedAuditProvenanceSurfaceDetail(surfaceId) {
+  const normalized = String(surfaceId || "").trim().toLowerCase();
+  return (buildSignedAuditProvenanceContractPack().evidence_surfaces || []).find((entry) => entry.surface_id === normalized) || null;
+}
+
+module.exports = {
+  buildSignedAuditProvenanceContractPack,
+  summarizeSignedAuditProvenanceContractPack,
+  getSignedAuditProvenanceSurfaceDetail
+};
+

package/lib/telemetry_lane_contract.js

@@ -1,54 +1,54 @@
-"use strict";
-
-function buildTelemetryLanePack() {
-  return {
-    product: "xoonya",
-    category: "proof-telemetry-lane-pack",
-    pack_version: "xoonya-telemetry-lane-pack-v1",
-    lane_state: "first_party_observability_lane_present",
-    posture: "proof_followthrough_observability_and_scale_signal_lane",
-    standards: ["opentelemetry"],
-    core_signals: ["review_traces", "verification_metrics", "bridge_logs", "proof_events"],
-    supported_surfaces: {
-      cloudevents_ref: "/cloudevents.json",
-      asyncapi_ref: "/asyncapi.json",
-      proof_bridge_ref: "/v1/proof-bridge",
-      result_package_trust_ref: "/v1/result-package-trust",
-      integration_matrix_ref: "/v1/integration-matrix"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "proof_observability_alignment",
-        recommended_reason: "best path for operators who need review, verification, and bridge visibility at production scale",
-        sequence: [
-          "inspect_telemetry_lane_summary",
-          "align proof events to cloudevents and asyncapi",
-          "map review and verification signals to observability tooling",
-          "keep proof validation canonical while exporting useful operational signals"
-        ]
-      }
-    ],
-    guardrails: [
-      "telemetry should improve proof-side observability without redefining proof validity",
-      "review and verification diagnostics should remain subordinate to canonical proof semantics"
-    ]
-  };
-}
-
-function summarizeTelemetryLanePack() {
-  const pack = buildTelemetryLanePack();
-  return {
-    product: "xoonya",
-    category: "proof-telemetry-lane-pack-summary",
-    summary_version: "xoonya-telemetry-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    standard_count: pack.standards.length,
-    signal_count: pack.core_signals.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildTelemetryLanePack,
-  summarizeTelemetryLanePack
-};
+"use strict";
+
+function buildTelemetryLanePack() {
+  return {
+    product: "xoonya",
+    category: "proof-telemetry-lane-pack",
+    pack_version: "xoonya-telemetry-lane-pack-v1",
+    lane_state: "first_party_observability_lane_present",
+    posture: "proof_followthrough_observability_and_scale_signal_lane",
+    standards: ["opentelemetry"],
+    core_signals: ["review_traces", "verification_metrics", "bridge_logs", "proof_events"],
+    supported_surfaces: {
+      cloudevents_ref: "/cloudevents.json",
+      asyncapi_ref: "/asyncapi.json",
+      proof_bridge_ref: "/v1/proof-bridge",
+      result_package_trust_ref: "/v1/result-package-trust",
+      integration_matrix_ref: "/v1/integration-matrix"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "proof_observability_alignment",
+        recommended_reason: "best path for operators who need review, verification, and bridge visibility at production scale",
+        sequence: [
+          "inspect_telemetry_lane_summary",
+          "align proof events to cloudevents and asyncapi",
+          "map review and verification signals to observability tooling",
+          "keep proof validation canonical while exporting useful operational signals"
+        ]
+      }
+    ],
+    guardrails: [
+      "telemetry should improve proof-side observability without redefining proof validity",
+      "review and verification diagnostics should remain subordinate to canonical proof semantics"
+    ]
+  };
+}
+
+function summarizeTelemetryLanePack() {
+  const pack = buildTelemetryLanePack();
+  return {
+    product: "xoonya",
+    category: "proof-telemetry-lane-pack-summary",
+    summary_version: "xoonya-telemetry-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    standard_count: pack.standards.length,
+    signal_count: pack.core_signals.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildTelemetryLanePack,
+  summarizeTelemetryLanePack
+};

package/lib/treasury_proof_lane_contract.js

@@ -1,83 +1,83 @@
-"use strict";
-
-const {
-  buildPhase9TreasuryConnectivityPack,
-  summarizePhase9TreasuryConnectivityPack
-} = require("./phase_9_treasury_connectivity_pack");
-const {
-  buildProofBridgeLanePack,
-  summarizeProofBridgeLanePack
-} = require("./proof_bridge_lane_contract");
-
-function buildTreasuryProofLanePack() {
-  return {
-    product: "xoonya",
-    category: "proof-treasury-lane-pack",
-    pack_version: "xoonya-treasury-lane-pack-v1",
-    lane_state: "first_party_treasury_proof_connectivity_present",
-    posture: "treasury_destination_and_accounting_evidence_followthrough_lane",
-    phase_alignment: {
-      connectivity: {
-        pack: buildPhase9TreasuryConnectivityPack(),
-        summary: summarizePhase9TreasuryConnectivityPack()
-      },
-      proof_bridge: {
-        pack: buildProofBridgeLanePack(),
-        summary: summarizeProofBridgeLanePack()
-      }
-    },
-    reserve_doctrine: {
-      strategic_native_treasury: "bsv_teranode",
-      stable_operating_reserves: ["dai", "usdc"],
-      optional_hidden_privacy_reserve: "monero",
-      privacy_guardrails: [
-        "monero_never_becomes_public_treasury_identity",
-        "monero_never_replaces_compliant_accounting_evidence",
-        "monero_only_exists_as_internal_optional_reserve_technique_where_operator_policy_explicitly_allows_it"
-      ]
-    },
-    supported_surfaces: {
-      phase_summary_ref: "/v1/phases/phase-9/summary",
-      treasury_destinations_proof_summary_ref: "/v1/phases/phase-9/treasury-destinations/proof/summary",
-      custody_refs_proof_summary_ref: "/v1/phases/phase-9/custody-refs/proof/summary",
-      operator_accounting_bridges_proof_summary_ref: "/v1/phases/phase-9/operator-accounting-bridges/proof/summary",
-      treasury_continuity_summary_ref: "/v1/phases/phase-9/treasury-continuity/summary",
-      proof_bridge_ref: "/v1/proof-bridge/summary"
-    },
-    first_run_flows: [
-      {
-        flow_ref: "treasury_proof_continuity",
-        recommended_reason: "best first path for understanding how treasury destinations, custody refs, and accounting bridges stay provable and reviewable",
-        sequence: [
-          "inspect_treasury_proof_lane_summary",
-          "inspect_phase_9_connectivity_summary",
-          "inspect_treasury_destination_and_accounting_bridge_proof_summaries",
-          "inspect_proof_bridge_followthrough_for_bounded_review_posture"
-        ]
-      }
-    ],
-    guardrails: [
-      "treasury proof lanes should strengthen operator trust without turning xoonya into treasury logic",
-      "reserve doctrine remains internal while proof continuity remains externally reviewable"
-    ]
-  };
-}
-
-function summarizeTreasuryProofLanePack() {
-  const pack = buildTreasuryProofLanePack();
-  return {
-    product: "xoonya",
-    category: "proof-treasury-lane-pack-summary",
-    summary_version: "xoonya-treasury-lane-pack-summary-v1",
-    lane_state: pack.lane_state,
-    strategic_native_treasury: pack.reserve_doctrine.strategic_native_treasury,
-    stable_reserve_count: pack.reserve_doctrine.stable_operating_reserves.length,
-    first_run_flow_count: pack.first_run_flows.length,
-    linked_surfaces: pack.supported_surfaces
-  };
-}
-
-module.exports = {
-  buildTreasuryProofLanePack,
-  summarizeTreasuryProofLanePack
-};
+"use strict";
+
+const {
+  buildPhase9TreasuryConnectivityPack,
+  summarizePhase9TreasuryConnectivityPack
+} = require("./phase_9_treasury_connectivity_pack");
+const {
+  buildProofBridgeLanePack,
+  summarizeProofBridgeLanePack
+} = require("./proof_bridge_lane_contract");
+
+function buildTreasuryProofLanePack() {
+  return {
+    product: "xoonya",
+    category: "proof-treasury-lane-pack",
+    pack_version: "xoonya-treasury-lane-pack-v1",
+    lane_state: "first_party_treasury_proof_connectivity_present",
+    posture: "treasury_destination_and_accounting_evidence_followthrough_lane",
+    phase_alignment: {
+      connectivity: {
+        pack: buildPhase9TreasuryConnectivityPack(),
+        summary: summarizePhase9TreasuryConnectivityPack()
+      },
+      proof_bridge: {
+        pack: buildProofBridgeLanePack(),
+        summary: summarizeProofBridgeLanePack()
+      }
+    },
+    reserve_doctrine: {
+      strategic_native_treasury: "bsv_teranode",
+      stable_operating_reserves: ["dai", "usdc"],
+      optional_hidden_privacy_reserve: "monero",
+      privacy_guardrails: [
+        "monero_never_becomes_public_treasury_identity",
+        "monero_never_replaces_compliant_accounting_evidence",
+        "monero_only_exists_as_internal_optional_reserve_technique_where_operator_policy_explicitly_allows_it"
+      ]
+    },
+    supported_surfaces: {
+      phase_summary_ref: "/v1/phases/phase-9/summary",
+      treasury_destinations_proof_summary_ref: "/v1/phases/phase-9/treasury-destinations/proof/summary",
+      custody_refs_proof_summary_ref: "/v1/phases/phase-9/custody-refs/proof/summary",
+      operator_accounting_bridges_proof_summary_ref: "/v1/phases/phase-9/operator-accounting-bridges/proof/summary",
+      treasury_continuity_summary_ref: "/v1/phases/phase-9/treasury-continuity/summary",
+      proof_bridge_ref: "/v1/proof-bridge/summary"
+    },
+    first_run_flows: [
+      {
+        flow_ref: "treasury_proof_continuity",
+        recommended_reason: "best first path for understanding how treasury destinations, custody refs, and accounting bridges stay provable and reviewable",
+        sequence: [
+          "inspect_treasury_proof_lane_summary",
+          "inspect_phase_9_connectivity_summary",
+          "inspect_treasury_destination_and_accounting_bridge_proof_summaries",
+          "inspect_proof_bridge_followthrough_for_bounded_review_posture"
+        ]
+      }
+    ],
+    guardrails: [
+      "treasury proof lanes should strengthen operator trust without turning xoonya into treasury logic",
+      "reserve doctrine remains internal while proof continuity remains externally reviewable"
+    ]
+  };
+}
+
+function summarizeTreasuryProofLanePack() {
+  const pack = buildTreasuryProofLanePack();
+  return {
+    product: "xoonya",
+    category: "proof-treasury-lane-pack-summary",
+    summary_version: "xoonya-treasury-lane-pack-summary-v1",
+    lane_state: pack.lane_state,
+    strategic_native_treasury: pack.reserve_doctrine.strategic_native_treasury,
+    stable_reserve_count: pack.reserve_doctrine.stable_operating_reserves.length,
+    first_run_flow_count: pack.first_run_flows.length,
+    linked_surfaces: pack.supported_surfaces
+  };
+}
+
+module.exports = {
+  buildTreasuryProofLanePack,
+  summarizeTreasuryProofLanePack
+};