xoonya 3.0.1 → 3.1.1

package/lib/operational_receipt_contract.js

@@ -0,0 +1,165 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildOperationalReceiptContractPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-operational-receipt-contract",
+    pack_version: "naxytra-operational-receipt-contract-v1",
+    doctrine: "xoonya_verifies_shared_operational_receipts_as_proof_side_input_without_reabsorbing_runtime_or_treasury_ownership",
+    model_state: "core_now",
+    core_claim: "operational receipts are the shared evidence record that can be reviewed, verified, and carried into proof followthrough",
+    canonical_objects: [
+      {
+        object_id: "operational_receipt",
+        role: "signed_minimal_evidence_record_for_one_important_action",
+        required_fields: [
+          "version",
+          "receipt_id",
+          "timestamp_ns",
+          "actor_id",
+          "action_type",
+          "payload_hash",
+          "signature"
+        ],
+        recommended_fields: [
+          "signature_suite",
+          "source_system",
+          "correlation_id",
+          "parent_receipt_id",
+          "reference_kind",
+          "reference_id"
+        ],
+        optional_fields: [
+          "proof_ref",
+          "anchor_ref",
+          "settlement_ref",
+          "ledger_ref",
+          "payload_uri",
+          "payload_hash_alg",
+          "actor_role",
+          "metadata"
+        ],
+        primary_surfaces: [
+          "/v1/receipts/emit",
+          "/v1/receipts/verify",
+          "/v1/proof-bundles/build",
+          "/v1/proof-bundles/verify",
+          "/v1/proof-center/result-package-handoff/review"
+        ]
+      }
+    ],
+    receipt_kinds: [
+      {
+        receipt_kind: "document_published",
+        description: "binds a published document or release artifact to a signed evidence record"
+      },
+      {
+        receipt_kind: "api_request_completed",
+        description: "binds a completed machine request or API call to a signed evidence record"
+      },
+      {
+        receipt_kind: "payment_received",
+        description: "binds an incoming payment or credited admission event to a signed evidence record"
+      },
+      {
+        receipt_kind: "file_generated",
+        description: "binds a generated file or artifact to a signed evidence record"
+      },
+      {
+        receipt_kind: "agent_task_executed",
+        description: "binds an executed agent task or workflow step to a signed evidence record"
+      },
+      {
+        receipt_kind: "repo_release_created",
+        description: "binds a release tag or package release event to a signed evidence record"
+      },
+      {
+        receipt_kind: "proposal_sent",
+        description: "binds a proposal or offer dispatch to a signed evidence record"
+      },
+      {
+        receipt_kind: "invoice_issued",
+        description: "binds an issued invoice or billable statement to a signed evidence record"
+      },
+      {
+        receipt_kind: "partner_handoff_completed",
+        description: "binds a partner handoff or transfer completion to a signed evidence record"
+      }
+    ],
+    lineage_model: [
+      {
+        layer_id: "receipt_verification",
+        order_index: 1,
+        objects: ["operational_receipt"],
+        invariants: [
+          "the_receipt_can_be_verified_as_minimal_evidence",
+          "the_receipt_does_not_need_a_full_proof_bundle_to_be_valid"
+        ]
+      },
+      {
+        layer_id: "proof_portability",
+        order_index: 2,
+        objects: ["operational_receipt"],
+        invariants: [
+          "the_receipt_can_be_captured_into_a_proof_bundle_or_review_flow",
+          "proof_layers_may_add_anchors_attestations_and_settlement_refs_without_changing_the_receipt_core"
+        ]
+      },
+      {
+        layer_id: "followthrough",
+        order_index: 3,
+        objects: ["operational_receipt"],
+        invariants: [
+          "xoonya_can_preserve_reviewable_context_without_claiming_runtime_ownership",
+          "optional_external_refs_are_followthrough_not_core_validity"
+        ]
+      }
+    ],
+    invariants: [
+      "payload_hash_is_bound_to_the_canonical_payload_or_source_artifact",
+      "signature_covers_the_canonical_receipt_body_without_the_signature_field",
+      "timestamp_ns_is_capture_time_not_authoritative_ordering",
+      "optional_reference_fields_do_not_change_base_receipt_validity",
+      "operational_receipts_are_a_shared_evidence_substrate_not_a_new_proof_standard"
+    ],
+    linked_surfaces: {
+      receipt_emit_ref: "/v1/receipts/emit",
+      receipt_verify_ref: "/v1/receipts/verify",
+      proof_bundle_build_ref: "/v1/proof-bundles/build",
+      proof_bundle_verify_ref: "/v1/proof-bundles/verify",
+      proof_result_package_review_ref: "/v1/proof-center/result-package-handoff/review"
+    },
+    claim_boundary: "claim_the_shared_operational_receipt_review_and_verification_contract_only_without_claiming_runtime_ownership_treasury_ownership_or_universal_identity_truth"
+  };
+}
+
+function summarizeOperationalReceiptContractPack() {
+  const pack = buildOperationalReceiptContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-operational-receipt-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    receipt_kind_count: pack.receipt_kinds.length,
+    canonical_object_count: pack.canonical_objects.length,
+    layer_count: pack.lineage_model.length,
+    invariant_count: pack.invariants.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getOperationalReceiptKindDetail(receiptKind) {
+  const normalized = String(receiptKind || "").trim().toLowerCase();
+  return (buildOperationalReceiptContractPack().receipt_kinds || []).find((entry) => entry.receipt_kind === normalized) || null;
+}
+
+module.exports = {
+  buildOperationalReceiptContractPack,
+  summarizeOperationalReceiptContractPack,
+  getOperationalReceiptKindDetail
+};

package/lib/public_surface_policy_contract.js

@@ -0,0 +1,111 @@
+"use strict";
+
+const packageJson = require("../package.json");
+
+function buildPublicSurfacePolicyContractPack() {
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-public-surface-policy-contract",
+    pack_version: "naxytra-public-surface-policy-contract-v1",
+    doctrine: "xoonya_respects_public_surface_classification_before_accepting_or_reviewing_any_surface",
+    model_state: "core_now",
+    core_claim: "every public surface must declare discovery paid proof_review or operator_only policy before it is treated as part of the public stack",
+    surface_classes: [
+      {
+        surface_class: "discovery_only",
+        description: "public informational and machine-discoverable surfaces",
+        examples: [
+          "/health",
+          "/server.json",
+          "/.well-known/mcp-server.json",
+          "/.well-known/glama.json",
+          "/v1/agent-discovery-index",
+          "/v1/agent-discovery-index/summary"
+        ]
+      },
+      {
+        surface_class: "paid",
+        description: "machine work or runtime invocation surfaces",
+        examples: [
+          "POST /v1/commands/execute",
+          "POST /x402/commands/execute",
+          "POST /v1/mcp/tools/invoke",
+          "POST /x402/mcp/tools/invoke"
+        ]
+      },
+      {
+        surface_class: "proof_review",
+        description: "proof and evidence review surfaces",
+        examples: [
+          "/v1/proof-truth",
+          "/v1/proof-truth/summary",
+          "/v1/followthrough-truth",
+          "/v1/followthrough-truth/summary",
+          "/v1/receipts",
+          "/v1/receipts/:receipt_id"
+        ]
+      },
+      {
+        surface_class: "operator_only",
+        description: "internal control or mutable operator surfaces",
+        examples: [
+          "/v1/business-cockpit",
+          "/business-cockpit",
+          "/v1/operator-shell",
+          "/v1/agent-accounts"
+        ]
+      }
+    ],
+    enforcement_rules: [
+      "discovery_only_surfaces_must_not_require_payment",
+      "paid_surfaces_must_carry_payment_or_challenge_metadata_when_public",
+      "proof_review_surfaces_must_not_mutate_runtime_or_treasury_truth",
+      "operator_only_surfaces_must_not_be_listed_as_public_discovery",
+      "every_new_surface_must_choose_a_class_before_release"
+    ],
+    route_fields: [
+      "surface_path",
+      "surface_class",
+      "requires_payment",
+      "requires_operator_auth",
+      "proof_boundary",
+      "claim_boundary"
+    ],
+    linked_surfaces: {
+      discovery_index_ref: "/v1/agent-discovery-index",
+      discovery_index_summary_ref: "/v1/agent-discovery-index/summary",
+      proof_truth_ref: "/v1/proof-truth",
+      followthrough_truth_ref: "/v1/followthrough-truth",
+      operator_cockpit_ref: "/v1/business-cockpit"
+    },
+    claim_boundary: "claim_the_public_surface_policy_for_xoonya_only_without_claiming_runtime_payment_or_proof_truth_beyond_the_listed_surfaces"
+  };
+}
+
+function summarizePublicSurfacePolicyContractPack() {
+  const pack = buildPublicSurfacePolicyContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-public-surface-policy-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    surface_class_count: pack.surface_classes.length,
+    rule_count: pack.enforcement_rules.length,
+    route_field_count: pack.route_fields.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getPublicSurfaceClassDetail(surfaceClass) {
+  const normalized = String(surfaceClass || "").trim().toLowerCase();
+  return (buildPublicSurfacePolicyContractPack().surface_classes || []).find((entry) => entry.surface_class === normalized) || null;
+}
+
+module.exports = {
+  buildPublicSurfacePolicyContractPack,
+  summarizePublicSurfacePolicyContractPack,
+  getPublicSurfaceClassDetail
+};

package/lib/signed_audit_provenance_contract.js

@@ -0,0 +1,93 @@
+"use strict";
+
+const packageJson = require("../package.json");
+const { buildProvenanceLanePack, summarizeProvenanceLanePack } = require("./provenance_lane_contract");
+const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
+
+function buildSignedAuditProvenanceContractPack() {
+  const provenanceLanePack = buildProvenanceLanePack();
+  const provenanceLaneSummary = summarizeProvenanceLanePack();
+  const trustPortabilitySummary = summarizeTrustPortabilityPack();
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-signed-audit-provenance-contract",
+    pack_version: "naxytra-signed-audit-provenance-contract-v1",
+    doctrine: "xoonya_signs_selected_audit_and_provenance_surfaces_without_collapsing_all_telemetry_into_evidence_truth",
+    model_state: "core_now",
+    core_claim: "selected audit and provenance surfaces are signed, exportable, and reviewable evidence channels",
+    evidence_surfaces: [
+      { surface_id: "proof_provenance_lane", surface_label: "proof provenance lane", surface_ref: "/v1/provenance", evidence_class: "proof_provenance" },
+      { surface_id: "proof_bridge_review", surface_label: "proof bridge review", surface_ref: "/v1/proof-bridge", evidence_class: "proof_bridge_review" },
+      { surface_id: "release_provenance", surface_label: "release provenance", surface_ref: "/v1/provenance", evidence_class: "release_supply_chain_provenance" },
+      { surface_id: "artifact_distribution_provenance", surface_label: "artifact distribution provenance", surface_ref: "/v1/artifact-distribution", evidence_class: "artifact_supply_chain_provenance" },
+      { surface_id: "shared_signal_export", surface_label: "shared signal export", surface_ref: "/v1/shared-signals", evidence_class: "shared_signal_export" },
+      { surface_id: "external_proof_import_review", surface_label: "external proof import review", surface_ref: "/v1/proof-center/result-package-handoff/review/summary", evidence_class: "proof_import_review" }
+    ],
+    required_fields: [
+      "timestamp",
+      "actor_id",
+      "action_type",
+      "source_surface",
+      "payload_hash",
+      "signature",
+      "version"
+    ],
+    optional_fields: [
+      "correlation_id",
+      "proof_ref",
+      "anchor_ref",
+      "settlement_ref",
+      "metadata"
+    ],
+    export_rules: [
+      "signed_audit_records_may_be_exported_as_evidence",
+      "provenance_records_may_strengthen_release_and_proof_review",
+      "logs_without_an_explicit_evidence_class_remain_operational_only",
+      "signed_records_must_not_silently_become_proof_validity_themselves"
+    ],
+    linked_surfaces: {
+      provenance_ref: "/v1/provenance",
+      provenance_summary_ref: "/v1/provenance/summary",
+      proof_bridge_ref: "/v1/proof-bridge",
+      trust_portability_ref: "/v1/proof-center/trust-portability",
+      artifact_distribution_ref: "/v1/artifact-distribution",
+      shared_signals_ref: "/v1/shared-signals"
+    },
+    supporting_summary: {
+      provenance_lane_summary: provenanceLaneSummary,
+      trust_portability_summary: trustPortabilitySummary
+    },
+    claim_boundary: "claim_only_selected_audit_and_provenance_surfaces_as_signed_exportable_evidence_without_claiming_all_logs_are_evidence_grade"
+  };
+}
+
+function summarizeSignedAuditProvenanceContractPack() {
+  const pack = buildSignedAuditProvenanceContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-signed-audit-provenance-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    evidence_surface_count: pack.evidence_surfaces.length,
+    required_field_count: pack.required_fields.length,
+    optional_field_count: pack.optional_fields.length,
+    export_rule_count: pack.export_rules.length,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getSignedAuditProvenanceSurfaceDetail(surfaceId) {
+  const normalized = String(surfaceId || "").trim().toLowerCase();
+  return (buildSignedAuditProvenanceContractPack().evidence_surfaces || []).find((entry) => entry.surface_id === normalized) || null;
+}
+
+module.exports = {
+  buildSignedAuditProvenanceContractPack,
+  summarizeSignedAuditProvenanceContractPack,
+  getSignedAuditProvenanceSurfaceDetail
+};
+

package/lib/trust_portability_boundary_contract.js

@@ -0,0 +1,66 @@
+"use strict";
+
+const packageJson = require("../package.json");
+const { buildTrustPortabilityPack, summarizeTrustPortabilityPack } = require("./trust_portability_pack");
+
+function buildTrustPortabilityBoundaryContractPack() {
+  const trustPortabilityPack = buildTrustPortabilityPack();
+  const trustPortabilitySummary = summarizeTrustPortabilityPack();
+
+  return {
+    ok: true,
+    product: packageJson.name,
+    category: "naxytra-trust-portability-boundary-contract",
+    pack_version: "naxytra-trust-portability-boundary-contract-v1",
+    doctrine: "xoonya_treats_trust_portability_as_bounded_followthrough_and_not_as_global_identity_or_custody_truth",
+    model_state: "core_now",
+    core_claim: "trust portability is portable evidence across bounded axes, not universal authority or universal login truth",
+    portable_axes: trustPortabilityPack.portability_profiles,
+    non_claims: trustPortabilityPack.public_claim_boundaries,
+    evidence_requirements: [
+      "identity_interop_surface",
+      "auth_interop_surface",
+      "result_package_or_handoff_review_surface",
+      "proof_bridge_or_proof_followthrough_surface",
+      "receipt_or_verification_surface"
+    ],
+    linked_surfaces: {
+      trust_portability_ref: "/v1/proof-center/trust-portability",
+      trust_portability_summary_ref: "/v1/proof-center/trust-portability/summary",
+      identity_interop_ref: "/v1/identity-interop",
+      auth_interop_ref: "/v1/auth-profiles",
+      result_package_trust_ref: "/v1/result-package-trust",
+      verification_services_ref: "/v1/proof-center/verification-services"
+    },
+    supporting_summary: trustPortabilitySummary,
+    claim_boundary: "claim_only_the_listed_portable_axes_and_listed_surfaces_without_claiming_universal_login_session_or_custody_truth"
+  };
+}
+
+function summarizeTrustPortabilityBoundaryContractPack() {
+  const pack = buildTrustPortabilityBoundaryContractPack();
+  return {
+    ok: true,
+    product: pack.product,
+    category: pack.category,
+    summary_version: "naxytra-trust-portability-boundary-contract-summary-v1",
+    pack_version: pack.pack_version,
+    model_state: pack.model_state,
+    portable_axis_count: Array.isArray(pack.portable_axes) ? pack.portable_axes.length : 0,
+    non_claim_count: Array.isArray(pack.non_claims) ? pack.non_claims.length : 0,
+    evidence_requirement_count: Array.isArray(pack.evidence_requirements) ? pack.evidence_requirements.length : 0,
+    linked_surfaces: pack.linked_surfaces
+  };
+}
+
+function getTrustPortabilityAxisDetail(axisId) {
+  const normalized = String(axisId || "").trim().toLowerCase();
+  return (buildTrustPortabilityBoundaryContractPack().portable_axes || []).find((entry) => entry.profile_id === normalized || entry.portability_axis === normalized) || null;
+}
+
+module.exports = {
+  buildTrustPortabilityBoundaryContractPack,
+  summarizeTrustPortabilityBoundaryContractPack,
+  getTrustPortabilityAxisDetail
+};
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xoonya",
-  "version": "3.0.1",
+  "version": "3.1.1",
   "description": "Deterministic proof and review engine for receipts, handoffs, governance, and verification.",
   "main": "index.js",
   "bin": {
@@ -85,11 +85,14 @@
     "verify:native-hybrid-gate": "node scripts/verify_native_hybrid_design_gate.js",
     "verify:verification-services": "node scripts/verify_verification_services.js",
     "verify:trust-portability": "node scripts/verify_trust_portability.js",
+    "verify:control-plane-contracts": "node scripts/verify_control_plane_contracts.js",
+    "verify:control-plane-routes": "node scripts/verify_control_plane_routes.js",
     "verify:vectors": "node scripts/verify_vectors.js",
     "verify:examples": "node scripts/verify_examples.js",
     "verify:service": "node scripts/verify_service.js",
+    "verify:forgery-resistance": "node scripts/verify_forgery_resistance.js",
     "verify:release-candidate": "node scripts/verify_release_candidate.js",
-    "verify:all": "node scripts/verify_all.js && node scripts/verify_external_proof_import_gate.js && node scripts/verify_integrations.js && node scripts/verify_tooling.js && node scripts/verify_vectors.js && node scripts/verify_reference_python.js && node scripts/verify_reference_promotion_gate.js && node scripts/verify_reference_rust_scaffold.js && node scripts/verify_native_hybrid_design_gate.js && node scripts/verify_verification_services.js && node scripts/verify_trust_portability.js && node scripts/verify_examples.js && node scripts/verify_service.js",
+    "verify:all": "node scripts/verify_all.js && node scripts/verify_external_proof_import_gate.js && node scripts/verify_integrations.js && node scripts/verify_tooling.js && node scripts/verify_vectors.js && node scripts/verify_reference_python.js && node scripts/verify_reference_promotion_gate.js && node scripts/verify_reference_rust_scaffold.js && node scripts/verify_native_hybrid_design_gate.js && node scripts/verify_verification_services.js && node scripts/verify_trust_portability.js && node scripts/verify_control_plane_contracts.js && node scripts/verify_control_plane_routes.js && node scripts/verify_examples.js && node scripts/verify_service.js && node scripts/verify_forgery_resistance.js",
     "prepublishOnly": "npm run verify:release-candidate"
   }
 }