xoonya 3.1.0 → 3.1.1

package/scripts/verify_all.js

@@ -1,603 +1,603 @@
-"use strict";
-
-const fs = require("fs");
-const path = require("path");
-const crypto = require("crypto");
-const { execFileSync } = require("child_process");
-const sdk = require("..");
-const packageJson = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "package.json"), "utf8"));
-const nativeAtomVectors = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "vectors", "native-atom-vectors.json"), "utf8"));
-const nativePayloadProfileVectors = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "vectors", "native-payload-profile-vectors.json"), "utf8"));
-
-function ensure(condition, message) {
-  if (!condition) {
-    throw new Error(message);
-  }
-}
-
-function tamperCompactSignature(value) {
-  const text = String(value || "");
-  if (!text) return "A";
-  const replacement = text[0] === "A" ? "B" : "A";
-  return `${replacement}${text.slice(1)}`;
-}
-
-function verifyCanonicalEventConformance() {
-  const eventA = {
-    version: "canonical-event-bundle/v1",
-    domain_id: "proof.verify",
-    sequence: "7",
-    actor_id: "agent-123",
-    adapter_source: "verify_all",
-    event_type: "proof.event",
-    event_hash: "ab".repeat(32),
-    parent_refs: ["parent-2", "parent-1"],
-    semantic_slots: {
-      zeta: "last",
-      alpha: "first"
-    }
-  };
-  const eventB = {
-    semantic_slots: {
-      alpha: "first",
-      zeta: "last"
-    },
-    parent_refs: ["parent-2", "parent-1"],
-    event_hash: "ab".repeat(32),
-    event_type: "proof.event",
-    adapter_source: "verify_all",
-    actor_id: "agent-123",
-    sequence: "7",
-    domain_id: "proof.verify",
-    version: "canonical-event-bundle/v1"
-  };
-  const canonicalA = sdk.canonicalizeEvent(eventA);
-  const canonicalB = sdk.canonicalizeEvent(eventB);
-  ensure(canonicalA.version === canonicalB.version, "canonicalizeEvent must normalize required fields consistently");
-  ensure(canonicalA.domain_id === canonicalB.domain_id, "canonicalizeEvent must preserve domain_id");
-  ensure(canonicalA.semantic_slots.alpha === "first", "canonicalizeEvent must preserve semantic slot values");
-  ensure(sdk.hashEvent(eventA) === sdk.hashEvent(eventB), "hashEvent must be stable across key order");
-}
-
-function verifyProofBundleConformance() {
-  const methods = sdk.listProofVerificationMethods();
-  ensure(methods.some((method) => method.id === "legacy-opreturn-v1"), "legacy proof method missing");
-  ensure(methods.some((method) => method.id === "detached-assertion-v1"), "detached assertion proof method missing");
-  ensure(methods.some((method) => method.id === "xoonya-native-sha256-v1"), "native proof method missing");
-  ensure(methods.some((method) => method.id === "xoonya-native-signed-v1"), "native signed proof method missing");
-  ensure(methods.some((method) => method.id === "xoonya-native-anchored-v1"), "native anchored proof method missing");
-  ensure(methods.some((method) => method.id === "jwt-assertion-v1"), "jwt assertion proof method missing");
-  ensure(methods.some((method) => method.id === "did-vc-v1"), "did vc proof method missing");
-  ensure(methods.some((method) => method.id === "sd-jwt-vc-v1"), "sd jwt vc proof method missing");
-  ensure(methods.some((method) => method.id === "signed-envelope-v1"), "signed envelope proof method missing");
-  ensure(methods.some((method) => method.id === "partner-proof-envelope-v1"), "partner proof envelope method missing");
-  ensure(sdk.getProofVerificationMethod("none") == null, "none must not be a registered proof method");
-
-  const identityMaterial = sdk.makeIdentityMaterial("01", "cafebabe");
-  const identity = sdk.createIdentity(identityMaterial);
-  const event = sdk.canonicalizeEvent({
-    version: "canonical-event-bundle/v1",
-    domain_id: "proof.bundle",
-    sequence: "11",
-    actor_id: identity.agent_id,
-    adapter_source: "verify_all",
-    event_type: "proof.bundle.created",
-    event_hash: "cd".repeat(32),
-    capability_refs: ["proof", "bundle"]
-  });
-  const receipt = sdk.emitReceipt(event, {
-    legacy_identity_material_hex: identity.identity_material_hex
-  });
-  const bundle = sdk.buildProofBundle({
-    ceb: event,
-    receipt,
-    metadata: {
-      purpose: "conformance"
-    }
-  });
-  const verification = sdk.verifyProofBundle(bundle);
-  ensure(verification.valid === true, "verifyProofBundle must accept valid bundle");
-  ensure(verification.event_commitment === sdk.hashEvent(event), "verifyProofBundle must return expected commitment");
-
-  const tamperedCommitmentBundle = {
-    ...bundle,
-    receipt: {
-      ...bundle.receipt,
-      event_commitment: "ef".repeat(32)
-    }
-  };
-  const tamperedCommitmentVerification = sdk.verifyProofBundle(tamperedCommitmentBundle);
-  ensure(tamperedCommitmentVerification.valid === false, "verifyProofBundle must reject tampered commitment");
-  ensure(tamperedCommitmentVerification.reason === "event_commitment_mismatch", "tampered commitment reason mismatch");
-
-  const tamperedSignatureBundle = {
-    ...bundle,
-    receipt: {
-      ...bundle.receipt,
-      signature: ""
-    }
-  };
-  const tamperedSignatureVerification = sdk.verifyProofBundle(tamperedSignatureBundle);
-  ensure(tamperedSignatureVerification.valid === false, "verifyProofBundle must reject missing signature");
-  ensure(tamperedSignatureVerification.reason === "signature_missing", "missing signature reason mismatch");
-
-  const tamperedLegacyBundle = {
-    ...bundle,
-    receipt: {
-      ...bundle.receipt,
-      compatibility: {
-        legacy_receipt: {
-          ...bundle.receipt.compatibility.legacy_receipt,
-          opreturn_hex: bundle.receipt.compatibility.legacy_receipt.opreturn_hex.replace(/.$/, "0")
-        }
-      }
-    }
-  };
-  const tamperedLegacyVerification = sdk.verifyProofBundle(tamperedLegacyBundle);
-  ensure(tamperedLegacyVerification.valid === false, "verifyProofBundle must reject tampered legacy compatibility receipt");
-
-  const detachedReceipt = sdk.emitReceipt(event, {
-    agent_identity: "detached-agent",
-    signature: "detached-signature"
-  });
-  const detachedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: detachedReceipt }));
-  ensure(detachedReceipt.algorithm === "detached-assertion-v1", "detached receipts must use explicit detached method");
-  ensure(detachedVerification.valid === true, "explicit detached assertion should pass structural verification");
-  ensure(detachedVerification.verification_state === "accepted_detached_assertion", "detached verification state mismatch");
-
-  const externalMethods = [
-    "jwt-assertion-v1",
-    "did-vc-v1",
-    "sd-jwt-vc-v1",
-    "signed-envelope-v1",
-    "partner-proof-envelope-v1"
-  ];
-  for (const methodId of externalMethods) {
-    const externalReceipt = sdk.emitReceipt(event, {
-      agent_identity: `${methodId}-agent`,
-      algorithm: methodId,
-      signature: `${methodId}.external-proof-token`
-    });
-    const externalVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: externalReceipt }));
-    ensure(externalReceipt.algorithm === methodId, `${methodId} receipt algorithm mismatch`);
-    ensure(externalVerification.valid === true, `${methodId} should pass structural verification`);
-    ensure(externalVerification.verification_state === "accepted_external_proof_envelope", `${methodId} verification state mismatch`);
-  }
-
-  const nativeReceipt = sdk.emitReceipt(event, {
-    agent_identity: "native-agent"
-  });
-  const nativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: nativeReceipt }));
-  ensure(nativeReceipt.algorithm === "xoonya-native-sha256-v1", "native receipt should default to native method without external signature");
-  ensure(nativeVerification.valid === true, "native receipt should verify");
-  ensure(nativeVerification.verification_state === "verified_native_digest", "native verification state mismatch");
-
-  const nativePrivateKeyPem = [
-    "-----BEGIN PRIVATE KEY-----",
-    "MC4CAQAwBQYDK2VwBCIEIOPZUHPWLt9QpTQ3ub3+RyJXNZrJYHxfDJEcUZhrXIz7",
-    "-----END PRIVATE KEY-----",
-    ""
-  ].join("\n");
-  const nativePublicKeyPem = [
-    "-----BEGIN PUBLIC KEY-----",
-    "MCowBQYDK2VwAyEArnC5ARNJQFbPtc6pMrFUz2p043Nbds48Dz66+i1R5gk=",
-    "-----END PUBLIC KEY-----",
-    ""
-  ].join("\n");
-  const nativeSignedReceipt = sdk.emitReceipt(event, {
-    agent_identity: "native-signed-agent",
-    algorithm: "xoonya-native-signed-v1",
-    identity_ref: "did:xoonya:native-signed-agent",
-    signature_suite: "ed25519",
-    private_key_pem: nativePrivateKeyPem,
-    public_key_pem: nativePublicKeyPem
-  });
-  const nativeSignedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: nativeSignedReceipt }));
-  ensure(nativeSignedVerification.valid === true, "native signed receipt should verify");
-  ensure(nativeSignedVerification.verification_state === "verified_native_signature", "native signed verification state mismatch");
-  ensure(nativeSignedVerification.signature_suite === "ed25519", "native signed suite mismatch");
-
-  for (const suite of [
-    { id: "secp256k1", namedCurve: "secp256k1" },
-    { id: "p256", namedCurve: "prime256v1" }
-  ]) {
-    const generated = crypto.generateKeyPairSync("ec", {
-      namedCurve: suite.namedCurve,
-      privateKeyEncoding: { type: "pkcs8", format: "pem" },
-      publicKeyEncoding: { type: "spki", format: "pem" }
-    });
-    const ecdsaReceipt = sdk.emitReceipt(event, {
-      agent_identity: `native-${suite.id}-agent`,
-      algorithm: "xoonya-native-signed-v1",
-      identity_ref: `did:xoonya:native-${suite.id}-agent`,
-      signature_suite: suite.id,
-      private_key_pem: generated.privateKey,
-      public_key_pem: generated.publicKey
-    });
-    const ecdsaVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: ecdsaReceipt }));
-    ensure(ecdsaVerification.valid === true, `${suite.id} native signed receipt should verify`);
-    ensure(ecdsaVerification.verification_state === "verified_native_signature", `${suite.id} native signed verification state mismatch`);
-    ensure(ecdsaVerification.signature_suite === suite.id, `${suite.id} native signed suite mismatch`);
-
-    const tamperedEcdsaReceipt = {
-      ...ecdsaReceipt,
-      native_proof: {
-        ...ecdsaReceipt.native_proof,
-        proof_material: {
-          ...ecdsaReceipt.native_proof.proof_material,
-          signature: tamperCompactSignature(ecdsaReceipt.native_proof.proof_material.signature)
-        }
-      },
-      signature: `${"xoonya-native-signed-v1"}:${suite.id}:${tamperCompactSignature(ecdsaReceipt.native_proof.proof_material.signature)}`
-    };
-    const tamperedEcdsaVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedEcdsaReceipt }));
-    ensure(tamperedEcdsaVerification.valid === false, `${suite.id} native signed tamper must not verify`);
-    ensure(tamperedEcdsaVerification.reason === "native_signature_invalid", `${suite.id} native signed tamper reason mismatch`);
-  }
-
-  const ambiguousNoneReceipt = {
-    ...detachedReceipt,
-    algorithm: "none"
-  };
-  const ambiguousNoneVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: ambiguousNoneReceipt }));
-  ensure(ambiguousNoneVerification.valid === false, "algorithm none must not verify");
-  ensure(ambiguousNoneVerification.reason === "verification_method_none", "algorithm none reason mismatch");
-
-  const unsupportedReceipt = {
-    ...detachedReceipt,
-    algorithm: "jwt-vc-demo"
-  };
-  const unsupportedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: unsupportedReceipt }));
-  ensure(unsupportedVerification.valid === false, "unknown proof method must not verify");
-  ensure(unsupportedVerification.reason === "verification_method_unsupported", "unknown proof method reason mismatch");
-
-  const hybridClassical = crypto.generateKeyPairSync("ed25519");
-  const hybridPq = crypto.generateKeyPairSync("ml-dsa-65");
-  const hybridReceipt = sdk.emitReceipt(event, {
-    agent_identity: "native-hybrid-agent",
-    algorithm: "xoonya-native-hybrid-v1",
-    identity_ref: "did:xoonya:native-hybrid-agent",
-    classical_signature_suite: "ed25519",
-    pq_signature_suite: "ml-dsa-65",
-    classical_public_key_pem: hybridClassical.publicKey.export({ type: "spki", format: "pem" }),
-    classical_private_key_pem: hybridClassical.privateKey.export({ type: "pkcs8", format: "pem" }),
-    pq_public_key_pem: hybridPq.publicKey.export({ type: "spki", format: "pem" }),
-    pq_private_key_pem: hybridPq.privateKey.export({ type: "pkcs8", format: "pem" })
-  });
-  const hybridVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: hybridReceipt }));
-  ensure(hybridVerification.valid === true, "native hybrid method must verify");
-  ensure(hybridVerification.verification_state === "verified_native_hybrid_signature", "native hybrid verification state mismatch");
-
-  const tamperedNativeReceipt = {
-    ...nativeReceipt,
-    signature: nativeReceipt.signature.replace(/.$/, "0")
-  };
-  const tamperedNativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedNativeReceipt }));
-  ensure(tamperedNativeVerification.valid === false, "native signature tamper must not verify");
-  ensure(tamperedNativeVerification.reason === "signature_native_mismatch", "native tamper reason mismatch");
-
-  const downgradedNativeReceipt = {
-    ...nativeReceipt,
-    algorithm: "detached-assertion-v1"
-  };
-  const downgradedNativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: downgradedNativeReceipt }));
-  ensure(downgradedNativeVerification.valid === false, "native signature downgrade must not verify as detached");
-  ensure(downgradedNativeVerification.reason === "signature_method_mismatch", "native downgrade reason mismatch");
-
-  const tamperedNativeSignedReceipt = {
-    ...nativeSignedReceipt,
-    native_proof: {
-      ...nativeSignedReceipt.native_proof,
-      proof_material: {
-        ...nativeSignedReceipt.native_proof.proof_material,
-        signature: nativeSignedReceipt.native_proof.proof_material.signature.replace(/.$/, "B")
-      }
-    },
-    signature: nativeSignedReceipt.signature.replace(/.$/, "B")
-  };
-  const tamperedNativeSignedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedNativeSignedReceipt }));
-  ensure(tamperedNativeSignedVerification.valid === false, "native signed tamper must not verify");
-  ensure(tamperedNativeSignedVerification.reason === "native_signature_invalid", "native signed tamper reason mismatch");
-
-  const nativeAnchors = [
-    {
-      anchor_id: "anchor-verify-all-demo",
-      anchor_kind: "finality_ref",
-      anchor_ref: "bsv:mainnet:tx/9cd77fd24b884b281c819b3e48f6b15ed328b116939b082580924cabb4518d28",
-      anchor_hash_sha256: sdk.hashEvent({
-        version: "canonical-event-bundle/v1",
-        domain_id: "verify.anchor",
-        sequence: "1",
-        actor_id: "verify-anchor",
-        adapter_source: "verify_all",
-        event_type: "anchor.material",
-        event_hash: "ab".repeat(32)
-      }),
-      network: "bsv-mainnet",
-      finality_state: "finalized"
-    }
-  ];
-  const nativeAnchoredReceipt = sdk.emitReceipt(event, {
-    agent_identity: "native-anchored-agent",
-    algorithm: "xoonya-native-anchored-v1",
-    anchors: nativeAnchors
-  });
-  const nativeAnchoredVerification = sdk.verifyProofBundle(sdk.buildProofBundle({
-    ceb: event,
-    receipt: nativeAnchoredReceipt,
-    anchors: nativeAnchors
-  }));
-  ensure(nativeAnchoredVerification.valid === true, "native anchored receipt should verify");
-  ensure(nativeAnchoredVerification.verification_state === "verified_native_anchor_binding", "native anchored verification state mismatch");
-  ensure(nativeAnchoredVerification.anchor_count === 1, "native anchored anchor count mismatch");
-
-  const nativeAnchoredMissingBundleVerification = sdk.verifyProofBundle(sdk.buildProofBundle({
-    ceb: event,
-    receipt: nativeAnchoredReceipt
-  }));
-  ensure(nativeAnchoredMissingBundleVerification.valid === false, "native anchored receipt must require bundle anchors");
-  ensure(nativeAnchoredMissingBundleVerification.reason === "native_anchor_bundle_missing", "native anchored missing bundle reason mismatch");
-
-  const externalImportRun = sdk.runExternalProofImport({
-    method: "jwt-assertion-v1",
-    import_ref: "jwt-import-demo",
-    issuer_ref: "did:example:issuer",
-    subject_ref: "txn:xytara:demo",
-    external_proof: "eyJhbGciOiJFZERTQSJ9.eyJzdWIiOiJ0eG4teHl0YXJhLWRlbW8ifQ.signature",
-    evidence_refs: ["memory://external/jwt-import-demo"]
-  });
-  ensure(externalImportRun.ok === true, "external proof import should produce valid bundle");
-  ensure(externalImportRun.bundle_verification.valid === true, "external import bundle should verify");
-  ensure(externalImportRun.bundle_verification.verification_method === "jwt-assertion-v1", "external import method mismatch");
-  ensure(externalImportRun.import_review.boundary.includes("without_claiming_external_issuer_truth"), "external import boundary missing");
-
-  const externalImportReviewSummary = sdk.summarizeExternalProofImportReview({
-    method: "did-vc-v1",
-    external_proof: {
-      "@context": ["https://www.w3.org/ns/credentials/v2"],
-      type: ["VerifiableCredential"],
-      issuer: "did:example:issuer",
-      credentialSubject: { id: "did:example:agent" }
-    }
-  });
-  ensure(externalImportReviewSummary.ok === true, "external import review summary should pass");
-  ensure(externalImportReviewSummary.method === "did-vc-v1", "external import review method mismatch");
-  const externalImportGate = sdk.validateExternalProofImportEvidence({
-    method: "did-vc-v1",
-    external_proof: {
-      proof: "demo"
-    },
-    claim_external_issuer_truth: true
-  });
-  ensure(externalImportGate.import_allowed === false, "external import truth claim should require external verifier");
-  ensure(
-    externalImportGate.rejection_codes.includes("external_issuer_truth_claim_requires_external_verifier"),
-    "external import truth rejection code mismatch"
-  );
-
-  let hashMismatchRejected = false;
-  try {
-    sdk.runExternalProofImport({
-      method: "signed-envelope-v1",
-      external_proof: { proof: "demo" },
-      declared_hash_sha256: "00".repeat(32)
-    });
-  } catch (error) {
-    hashMismatchRejected = error.message === "external_proof_hash_mismatch";
-  }
-  ensure(hashMismatchRejected === true, "external import must reject declared hash mismatch");
-}
-
-function verifyNativeAtomConformance() {
-  ensure(nativeAtomVectors.version === "xoonya-native-atom-vectors-v1", "native atom vector version mismatch");
-  const payloadBytes = Buffer.from(nativeAtomVectors.payload_ascii, "utf8");
-  const generatedV1 = sdk.createxoonyaNativeAtomV1(nativeAtomVectors.identity_material_hex, payloadBytes);
-  const expectedV1 = nativeAtomVectors.vectors.find((vector) => vector.id === "xnya-v1-with-payload");
-  ensure(generatedV1.atom_hex === expectedV1.atom_hex, "native atom v1 payload vector mismatch");
-  const generatedV2 = sdk.createxoonyaNativeAtomV2(nativeAtomVectors.identity_material_hex, payloadBytes);
-  const expectedV2 = nativeAtomVectors.vectors.find((vector) => vector.id === "xnya-v2-with-payload");
-  ensure(generatedV2.atom_hex === expectedV2.atom_hex, "native atom v2 payload vector mismatch");
-
-  for (const vector of nativeAtomVectors.vectors) {
-    const parsed = sdk.parsexoonyaNativeAtom(vector.atom_hex);
-    ensure(parsed.atom_version === vector.atom_version, `${vector.id} atom version mismatch`);
-    ensure(parsed.byte_length === vector.byte_length, `${vector.id} byte length mismatch`);
-    ensure(parsed.agent_id === vector.agent_id, `${vector.id} agent id mismatch`);
-    ensure(parsed.payload_hash_sha256 === vector.payload_hash_sha256, `${vector.id} payload hash mismatch`);
-    const hasPayload = vector.payload_hash_sha256 !== "00".repeat(32);
-    const verification = sdk.verifyxoonyaNativeAtom(vector.atom_hex, {
-      identity_material_hex: nativeAtomVectors.identity_material_hex,
-      ...(hasPayload ? { payload_bytes: payloadBytes } : {})
-    });
-    ensure(verification.valid === true, `${vector.id} should verify`);
-    ensure(verification.error_code === null, `${vector.id} should not have error code`);
-  }
-
-  for (const vector of nativeAtomVectors.adversarial) {
-    const verification = sdk.verifyxoonyaNativeAtom(vector.atom_hex, {
-      identity_material_hex: vector.identity_material_hex || nativeAtomVectors.identity_material_hex,
-      ...(vector.payload_ascii ? { payload_bytes: Buffer.from(vector.payload_ascii, "utf8") } : {})
-    });
-    ensure(verification.valid === false, `${vector.id} should fail`);
-    ensure(verification.reason === vector.expected_reason, `${vector.id} reason mismatch`);
-    if (vector.expected_error_code) {
-      ensure(verification.error_code === vector.expected_error_code, `${vector.id} error code mismatch`);
-    }
-  }
-}
-
-function verifyNativePayloadProfileConformance() {
-  ensure(nativePayloadProfileVectors.version === "xoonya-native-payload-profile-vectors-v1", "native payload profile vector version mismatch");
-  ensure(typeof sdk.encodexoonyaNativePayloadProfileV1 === "function", "missing encodexoonyaNativePayloadProfileV1");
-  ensure(typeof sdk.parsexoonyaNativePayloadProfileV1 === "function", "missing parsexoonyaNativePayloadProfileV1");
-  ensure(typeof sdk.verifyxoonyaNativePayloadProfileV1 === "function", "missing verifyxoonyaNativePayloadProfileV1");
-  ensure(typeof sdk.createxoonyaNativeLineRateFrameV1 === "function", "missing createxoonyaNativeLineRateFrameV1");
-  ensure(typeof sdk.parsexoonyaNativeLineRateFrameV1 === "function", "missing parsexoonyaNativeLineRateFrameV1");
-  ensure(typeof sdk.verifyxoonyaNativeLineRateFrameV1 === "function", "missing verifyxoonyaNativeLineRateFrameV1");
-
-  const vector = nativePayloadProfileVectors.profile_vector;
-  const profile = sdk.encodexoonyaNativePayloadProfileV1(vector.input);
-  ensure(profile.profile === "xoonya-native-payload-profile/v1", "native payload profile id mismatch");
-  ensure(profile.canonical_bytes_hex.startsWith(Buffer.from("XNYP", "ascii").toString("hex")), "native payload profile magic mismatch");
-  ensure(profile.field_count === 4, "native payload profile field count mismatch");
-  ensure(profile.canonical_bytes_hex === vector.expected.canonical_bytes_hex, "native payload profile canonical vector mismatch");
-  ensure(profile.payload_hash_sha256 === vector.expected.payload_hash_sha256, "native payload profile payload hash vector mismatch");
-  ensure(profile.schema_hash_sha256 === vector.expected.schema_hash_sha256, "native payload profile schema hash vector mismatch");
-  const parsedProfile = sdk.parsexoonyaNativePayloadProfileV1(profile.canonical_bytes_hex);
-  ensure(parsedProfile.payload_hash_sha256 === profile.payload_hash_sha256, "native payload profile hash mismatch");
-  ensure(parsedProfile.fields.map((field) => field.field_id).join(",") === "1,2,3,4", "native payload profile canonical ordering mismatch");
-  ensure(parsedProfile.fields.find((field) => field.field_id === 2).value === "42", "native payload profile uint64 decode mismatch");
-  ensure(parsedProfile.fields.find((field) => field.field_id === 4).value === true, "native payload profile bool decode mismatch");
-  const profileVerification = sdk.verifyxoonyaNativePayloadProfileV1(profile.canonical_bytes_hex, {
-    payload_hash_sha256: profile.payload_hash_sha256,
-    schema_ref: "xoonya.payload.test.v1",
-    allowed_field_ids: [1, 2, 3, 4]
-  });
-  ensure(profileVerification.valid === true, "native payload profile verification should pass");
-  const unknownFieldPolicy = sdk.verifyxoonyaNativePayloadProfileV1(profile.canonical_bytes_hex, {
-    allowed_field_ids: [1, 2, 3]
-  });
-  ensure(unknownFieldPolicy.valid === false, "native payload profile policy should reject unknown field ids");
-  ensure(unknownFieldPolicy.reason === "payload_profile_unknown_field", "native payload profile unknown field reason mismatch");
-
-  const atom = sdk.createxoonyaNativeAtomV1(
-    "01" + "11".repeat(33),
-    Buffer.from(profile.canonical_bytes_hex, "hex")
-  );
-  const frame = sdk.createxoonyaNativeLineRateFrameV1(atom.atom_hex);
-  const frameVector = nativePayloadProfileVectors.line_rate_frame_vector;
-  ensure(frame.profile === "xoonya-native-line-rate-frame/v1", "line-rate frame profile mismatch");
-  ensure(frame.frame_byte_length === 60, "line-rate frame v1 size mismatch");
-  ensure(atom.atom_hex === frameVector.atom_hex, "line-rate frame atom vector mismatch");
-  ensure(frame.frame_hex === frameVector.frame_hex, "line-rate frame vector mismatch");
-  ensure(frame.checksum_hex === frameVector.checksum_hex, "line-rate frame checksum vector mismatch");
-  const frameVerification = sdk.verifyxoonyaNativeLineRateFrameV1(frame.frame_hex, {
-    identity_material_hex: "01" + "11".repeat(33),
-    payload_bytes: Buffer.from(profile.canonical_bytes_hex, "hex")
-  });
-  ensure(frameVerification.valid === true, "line-rate frame should verify");
-  const tamperedFrameHex = `${frame.frame_hex.slice(0, -1)}${frame.frame_hex.endsWith("0") ? "1" : "0"}`;
-  const tamperedFrameVerification = sdk.verifyxoonyaNativeLineRateFrameV1(tamperedFrameHex, {
-    identity_material_hex: "01" + "11".repeat(33),
-    payload_bytes: Buffer.from(profile.canonical_bytes_hex, "hex")
-  });
-  ensure(tamperedFrameVerification.valid === false, "line-rate frame tamper should fail");
-  ensure(tamperedFrameVerification.reason === "line_rate_frame_checksum_mismatch", "line-rate frame tamper reason mismatch");
-}
-
-function main() {
-  ensure(packageJson.name === "xoonya", "unexpected package name");
-  const startHereOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xoonya.js"),
-    "start-here"
-  ], { encoding: "utf8" });
-  ensure(startHereOutput.includes("https://www.naxytra.com/v1/first-run-kit"), "xoonya start-here command kit missing");
-  ensure(startHereOutput.includes("xoonya-native-anchored-v1"), "xoonya start-here anchored mode missing");
-  const firstRunOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xoonya.js"),
-    "first-run",
-    "--json",
-    "--offline",
-    "--pretty"
-  ], { encoding: "utf8" });
-  const firstRunGuide = JSON.parse(firstRunOutput);
-  ensure(firstRunGuide.category === "xoonya-first-run-proof-guide", "xoonya first-run category mismatch");
-  ensure(firstRunGuide.proof_modes.some((entry) => entry.method === "xoonya-native-anchored-v1"), "xoonya first-run anchored proof missing");
-  const nativeFirstRunOutput = execFileSync(process.execPath, [
-    path.resolve(__dirname, "..", "bin", "xoonya.js"),
-    "first-run",
-    "--verify-native",
-    "--pretty"
-  ], { encoding: "utf8" });
-  const nativeFirstRun = JSON.parse(nativeFirstRunOutput);
-  ensure(nativeFirstRun.category === "xoonya-first-run-native-verification", "xoonya first-run native category mismatch");
-  ensure(nativeFirstRun.required_native_methods_present === true, "xoonya first-run native methods missing");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "conformance-vectors.json")), "missing conformance vectors");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "adversarial-vectors.json")), "missing adversarial vectors");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "native-atom-vectors.json")), "missing native atom vectors");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "native-payload-profile-vectors.json")), "missing native payload profile vectors");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "CROSS_RUNTIME_POSTURE.md")), "missing cross-runtime posture note");
-  ensure(typeof sdk.canonicalizeEvent === "function", "missing canonicalizeEvent");
-  ensure(typeof sdk.hashEvent === "function", "missing hashEvent");
-  ensure(typeof sdk.emitReceipt === "function", "missing emitReceipt");
-  ensure(typeof sdk.listProofVerificationMethods === "function", "missing listProofVerificationMethods");
-  ensure(typeof sdk.getProofVerificationMethod === "function", "missing getProofVerificationMethod");
-  ensure(typeof sdk.listNativeSignatureSuites === "function", "missing listNativeSignatureSuites");
-  ensure(typeof sdk.getNativeSignatureSuite === "function", "missing getNativeSignatureSuite");
-  ensure(typeof sdk.listxoonyaNativeIdentityTypes === "function", "missing listxoonyaNativeIdentityTypes");
-  ensure(typeof sdk.buildxoonyaNativeAtomSpec === "function", "missing buildxoonyaNativeAtomSpec");
-  ensure(typeof sdk.buildxoonyaNativeAtomConformancePack === "function", "missing buildxoonyaNativeAtomConformancePack");
-  ensure(typeof sdk.summarizexoonyaNativeAtomConformancePack === "function", "missing summarizexoonyaNativeAtomConformancePack");
-  ensure(typeof sdk.createxoonyaNativeAtomV1 === "function", "missing createxoonyaNativeAtomV1");
-  ensure(typeof sdk.createxoonyaNativeAtomV2 === "function", "missing createxoonyaNativeAtomV2");
-  ensure(typeof sdk.parsexoonyaNativeAtom === "function", "missing parsexoonyaNativeAtom");
-  ensure(typeof sdk.verifyxoonyaNativeAtom === "function", "missing verifyxoonyaNativeAtom");
-  ensure(typeof sdk.buildNativeReceiptSignature === "function", "missing buildNativeReceiptSignature");
-  ensure(typeof sdk.buildNativeSignedReceiptProof === "function", "missing buildNativeSignedReceiptProof");
-  ensure(typeof sdk.buildNativeHybridReceiptProof === "function", "missing buildNativeHybridReceiptProof");
-  ensure(typeof sdk.buildNativeAnchoredReceiptProof === "function", "missing buildNativeAnchoredReceiptProof");
-  ensure(typeof sdk.buildxoonyaNativeAnchorProfile === "function", "missing buildxoonyaNativeAnchorProfile");
-  ensure(typeof sdk.summarizexoonyaNativeAnchorProfile === "function", "missing summarizexoonyaNativeAnchorProfile");
-  ensure(typeof sdk.buildExternalProofImportAdapterPack === "function", "missing buildExternalProofImportAdapterPack");
-  ensure(typeof sdk.summarizeExternalProofImportAdapterPack === "function", "missing summarizeExternalProofImportAdapterPack");
-  ensure(typeof sdk.buildxoonyaNativeHybridReadinessPack === "function", "missing buildxoonyaNativeHybridReadinessPack");
-  ensure(typeof sdk.summarizexoonyaNativeHybridReadinessPack === "function", "missing summarizexoonyaNativeHybridReadinessPack");
-  ensure(typeof sdk.buildxoonyaNativeStandardizationPack === "function", "missing buildxoonyaNativeStandardizationPack");
-  ensure(typeof sdk.summarizexoonyaNativeStandardizationPack === "function", "missing summarizexoonyaNativeStandardizationPack");
-  ensure(typeof sdk.buildxoonyaNativeConformanceMarkPack === "function", "missing buildxoonyaNativeConformanceMarkPack");
-  ensure(typeof sdk.summarizexoonyaNativeConformanceMarkPack === "function", "missing summarizexoonyaNativeConformanceMarkPack");
-  ensure(typeof sdk.buildxoonyaNativeReferenceImplementationPack === "function", "missing buildxoonyaNativeReferenceImplementationPack");
-  ensure(typeof sdk.summarizexoonyaNativeReferenceImplementationPack === "function", "missing summarizexoonyaNativeReferenceImplementationPack");
-  ensure(typeof sdk.buildxoonyaNativePayloadProfilePack === "function", "missing buildxoonyaNativePayloadProfilePack");
-  ensure(typeof sdk.summarizexoonyaNativePayloadProfilePack === "function", "missing summarizexoonyaNativePayloadProfilePack");
-  ensure(typeof sdk.buildxoonyaNativeLineRateFramePack === "function", "missing buildxoonyaNativeLineRateFramePack");
-  ensure(typeof sdk.summarizexoonyaNativeLineRateFramePack === "function", "missing summarizexoonyaNativeLineRateFramePack");
-  ensure(typeof sdk.reviewExternalProofImport === "function", "missing reviewExternalProofImport");
-  ensure(typeof sdk.runExternalProofImport === "function", "missing runExternalProofImport");
-  ensure(typeof sdk.buildProofBundle === "function", "missing buildProofBundle");
-  ensure(typeof sdk.verifyProofBundle === "function", "missing verifyProofBundle");
-  ensure(typeof sdk.listIntegrations === "function", "missing listIntegrations");
-  ensure(typeof sdk.getIntegration === "function", "missing getIntegration");
-  ensure(typeof sdk.summarizeIntegrations === "function", "missing summarizeIntegrations");
-  ensure(typeof sdk.validateIntegrationRegistration === "function", "missing validateIntegrationRegistration");
-  ensure(typeof sdk.importRegisteredIntegration === "function", "missing importRegisteredIntegration");
-  ensure(typeof sdk.exportIntegrationRegistrySnapshot === "function", "missing exportIntegrationRegistrySnapshot");
-  ensure(typeof sdk.validateIntegrationRegistrySnapshot === "function", "missing validateIntegrationRegistrySnapshot");
-  ensure(typeof sdk.createReceipt === "function", "missing createReceipt");
-  ensure(typeof sdk.verifyReceipt === "function", "missing verifyReceipt");
-  ensure(typeof sdk.createReceiptV2 === "function", "missing createReceiptV2");
-  ensure(typeof sdk.verifyReceiptV2 === "function", "missing verifyReceiptV2");
-  ensure(typeof sdk.createProofEnvelopeV1 === "function", "missing createProofEnvelopeV1");
-  ensure(typeof sdk.verifyProofEnvelopeV1 === "function", "missing verifyProofEnvelopeV1");
-  ensure(typeof sdk.createEconomicReceiptProfileV1 === "function", "missing createEconomicReceiptProfileV1");
-  ensure(typeof sdk.verifyEconomicReceiptProfileV1 === "function", "missing verifyEconomicReceiptProfileV1");
-  ensure(typeof sdk.createRegistryProfileV1 === "function", "missing createRegistryProfileV1");
-  ensure(typeof sdk.verifyRegistryProfileV1 === "function", "missing verifyRegistryProfileV1");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "integrations", "registration-record.schema.json")), "missing integration registration schema");
-  ensure(fs.existsSync(path.resolve(__dirname, "..", "integrations", "registry-snapshot.schema.json")), "missing integration registry snapshot schema");
-  const hybridReadiness = sdk.summarizexoonyaNativeHybridReadinessPack();
-  ensure(hybridReadiness.status === "implemented", "native hybrid readiness must be implemented");
-  ensure(hybridReadiness.implemented_classical_suites.includes("secp256k1"), "native hybrid readiness secp256k1 suite missing");
-  ensure(hybridReadiness.implemented_classical_suites.includes("p256"), "native hybrid readiness p256 suite missing");
-  ensure(hybridReadiness.implemented_hybrid_suites.includes("ed25519+ml-dsa-65"), "native hybrid readiness ml-dsa suite missing");
-  const standardization = sdk.summarizexoonyaNativeStandardizationPack();
-  ensure(standardization.canonical_magic === "XNYA", "native standardization magic mismatch");
-  ensure(standardization.conformance_forbidden_condition_count >= 4, "native standardization forbidden conditions missing");
-  const conformanceMark = sdk.summarizexoonyaNativeConformanceMarkPack();
-  ensure(conformanceMark.mark === "XNYA-compatible", "native conformance mark mismatch");
-  ensure(conformanceMark.forbidden_claim_count >= 3, "native conformance mark forbidden claims missing");
-  ensure(conformanceMark.implemented_signature_suites.includes("secp256k1"), "native conformance mark secp256k1 suite missing");
-  const referenceImplementations = sdk.summarizexoonyaNativeReferenceImplementationPack();
-  ensure(referenceImplementations.status === "js_reference_implemented_independent_references_planned", "native reference implementation status mismatch");
-  ensure(referenceImplementations.implemented_reference_count === 1, "native reference implementation count mismatch");
-  ensure(referenceImplementations.planned_reference_count >= 2, "native planned reference implementation count mismatch");
-  ensure(referenceImplementations.verified_candidate_scaffold_count >= 1, "native verified candidate scaffold missing");
-  ensure(referenceImplementations.deterministic_rejection_code_count >= 11, "native reference promotion rejection codes missing");
-  verifyCanonicalEventConformance();
-  verifyProofBundleConformance();
-  verifyNativeAtomConformance();
-  verifyNativePayloadProfileConformance();
-  process.stdout.write("xoonya verify:all passed\n");
-}
-
-main();
+"use strict";
+
+const fs = require("fs");
+const path = require("path");
+const crypto = require("crypto");
+const { execFileSync } = require("child_process");
+const sdk = require("..");
+const packageJson = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "package.json"), "utf8"));
+const nativeAtomVectors = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "vectors", "native-atom-vectors.json"), "utf8"));
+const nativePayloadProfileVectors = JSON.parse(fs.readFileSync(path.resolve(__dirname, "..", "vectors", "native-payload-profile-vectors.json"), "utf8"));
+
+function ensure(condition, message) {
+  if (!condition) {
+    throw new Error(message);
+  }
+}
+
+function tamperCompactSignature(value) {
+  const text = String(value || "");
+  if (!text) return "A";
+  const replacement = text[0] === "A" ? "B" : "A";
+  return `${replacement}${text.slice(1)}`;
+}
+
+function verifyCanonicalEventConformance() {
+  const eventA = {
+    version: "canonical-event-bundle/v1",
+    domain_id: "proof.verify",
+    sequence: "7",
+    actor_id: "agent-123",
+    adapter_source: "verify_all",
+    event_type: "proof.event",
+    event_hash: "ab".repeat(32),
+    parent_refs: ["parent-2", "parent-1"],
+    semantic_slots: {
+      zeta: "last",
+      alpha: "first"
+    }
+  };
+  const eventB = {
+    semantic_slots: {
+      alpha: "first",
+      zeta: "last"
+    },
+    parent_refs: ["parent-2", "parent-1"],
+    event_hash: "ab".repeat(32),
+    event_type: "proof.event",
+    adapter_source: "verify_all",
+    actor_id: "agent-123",
+    sequence: "7",
+    domain_id: "proof.verify",
+    version: "canonical-event-bundle/v1"
+  };
+  const canonicalA = sdk.canonicalizeEvent(eventA);
+  const canonicalB = sdk.canonicalizeEvent(eventB);
+  ensure(canonicalA.version === canonicalB.version, "canonicalizeEvent must normalize required fields consistently");
+  ensure(canonicalA.domain_id === canonicalB.domain_id, "canonicalizeEvent must preserve domain_id");
+  ensure(canonicalA.semantic_slots.alpha === "first", "canonicalizeEvent must preserve semantic slot values");
+  ensure(sdk.hashEvent(eventA) === sdk.hashEvent(eventB), "hashEvent must be stable across key order");
+}
+
+function verifyProofBundleConformance() {
+  const methods = sdk.listProofVerificationMethods();
+  ensure(methods.some((method) => method.id === "legacy-opreturn-v1"), "legacy proof method missing");
+  ensure(methods.some((method) => method.id === "detached-assertion-v1"), "detached assertion proof method missing");
+  ensure(methods.some((method) => method.id === "xoonya-native-sha256-v1"), "native proof method missing");
+  ensure(methods.some((method) => method.id === "xoonya-native-signed-v1"), "native signed proof method missing");
+  ensure(methods.some((method) => method.id === "xoonya-native-anchored-v1"), "native anchored proof method missing");
+  ensure(methods.some((method) => method.id === "jwt-assertion-v1"), "jwt assertion proof method missing");
+  ensure(methods.some((method) => method.id === "did-vc-v1"), "did vc proof method missing");
+  ensure(methods.some((method) => method.id === "sd-jwt-vc-v1"), "sd jwt vc proof method missing");
+  ensure(methods.some((method) => method.id === "signed-envelope-v1"), "signed envelope proof method missing");
+  ensure(methods.some((method) => method.id === "partner-proof-envelope-v1"), "partner proof envelope method missing");
+  ensure(sdk.getProofVerificationMethod("none") == null, "none must not be a registered proof method");
+
+  const identityMaterial = sdk.makeIdentityMaterial("01", "cafebabe");
+  const identity = sdk.createIdentity(identityMaterial);
+  const event = sdk.canonicalizeEvent({
+    version: "canonical-event-bundle/v1",
+    domain_id: "proof.bundle",
+    sequence: "11",
+    actor_id: identity.agent_id,
+    adapter_source: "verify_all",
+    event_type: "proof.bundle.created",
+    event_hash: "cd".repeat(32),
+    capability_refs: ["proof", "bundle"]
+  });
+  const receipt = sdk.emitReceipt(event, {
+    legacy_identity_material_hex: identity.identity_material_hex
+  });
+  const bundle = sdk.buildProofBundle({
+    ceb: event,
+    receipt,
+    metadata: {
+      purpose: "conformance"
+    }
+  });
+  const verification = sdk.verifyProofBundle(bundle);
+  ensure(verification.valid === true, "verifyProofBundle must accept valid bundle");
+  ensure(verification.event_commitment === sdk.hashEvent(event), "verifyProofBundle must return expected commitment");
+
+  const tamperedCommitmentBundle = {
+    ...bundle,
+    receipt: {
+      ...bundle.receipt,
+      event_commitment: "ef".repeat(32)
+    }
+  };
+  const tamperedCommitmentVerification = sdk.verifyProofBundle(tamperedCommitmentBundle);
+  ensure(tamperedCommitmentVerification.valid === false, "verifyProofBundle must reject tampered commitment");
+  ensure(tamperedCommitmentVerification.reason === "event_commitment_mismatch", "tampered commitment reason mismatch");
+
+  const tamperedSignatureBundle = {
+    ...bundle,
+    receipt: {
+      ...bundle.receipt,
+      signature: ""
+    }
+  };
+  const tamperedSignatureVerification = sdk.verifyProofBundle(tamperedSignatureBundle);
+  ensure(tamperedSignatureVerification.valid === false, "verifyProofBundle must reject missing signature");
+  ensure(tamperedSignatureVerification.reason === "signature_missing", "missing signature reason mismatch");
+
+  const tamperedLegacyBundle = {
+    ...bundle,
+    receipt: {
+      ...bundle.receipt,
+      compatibility: {
+        legacy_receipt: {
+          ...bundle.receipt.compatibility.legacy_receipt,
+          opreturn_hex: bundle.receipt.compatibility.legacy_receipt.opreturn_hex.replace(/.$/, "0")
+        }
+      }
+    }
+  };
+  const tamperedLegacyVerification = sdk.verifyProofBundle(tamperedLegacyBundle);
+  ensure(tamperedLegacyVerification.valid === false, "verifyProofBundle must reject tampered legacy compatibility receipt");
+
+  const detachedReceipt = sdk.emitReceipt(event, {
+    agent_identity: "detached-agent",
+    signature: "detached-signature"
+  });
+  const detachedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: detachedReceipt }));
+  ensure(detachedReceipt.algorithm === "detached-assertion-v1", "detached receipts must use explicit detached method");
+  ensure(detachedVerification.valid === true, "explicit detached assertion should pass structural verification");
+  ensure(detachedVerification.verification_state === "accepted_detached_assertion", "detached verification state mismatch");
+
+  const externalMethods = [
+    "jwt-assertion-v1",
+    "did-vc-v1",
+    "sd-jwt-vc-v1",
+    "signed-envelope-v1",
+    "partner-proof-envelope-v1"
+  ];
+  for (const methodId of externalMethods) {
+    const externalReceipt = sdk.emitReceipt(event, {
+      agent_identity: `${methodId}-agent`,
+      algorithm: methodId,
+      signature: `${methodId}.external-proof-token`
+    });
+    const externalVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: externalReceipt }));
+    ensure(externalReceipt.algorithm === methodId, `${methodId} receipt algorithm mismatch`);
+    ensure(externalVerification.valid === true, `${methodId} should pass structural verification`);
+    ensure(externalVerification.verification_state === "accepted_external_proof_envelope", `${methodId} verification state mismatch`);
+  }
+
+  const nativeReceipt = sdk.emitReceipt(event, {
+    agent_identity: "native-agent"
+  });
+  const nativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: nativeReceipt }));
+  ensure(nativeReceipt.algorithm === "xoonya-native-sha256-v1", "native receipt should default to native method without external signature");
+  ensure(nativeVerification.valid === true, "native receipt should verify");
+  ensure(nativeVerification.verification_state === "verified_native_digest", "native verification state mismatch");
+
+  const nativePrivateKeyPem = [
+    "-----BEGIN PRIVATE KEY-----",
+    "MC4CAQAwBQYDK2VwBCIEIOPZUHPWLt9QpTQ3ub3+RyJXNZrJYHxfDJEcUZhrXIz7",
+    "-----END PRIVATE KEY-----",
+    ""
+  ].join("\n");
+  const nativePublicKeyPem = [
+    "-----BEGIN PUBLIC KEY-----",
+    "MCowBQYDK2VwAyEArnC5ARNJQFbPtc6pMrFUz2p043Nbds48Dz66+i1R5gk=",
+    "-----END PUBLIC KEY-----",
+    ""
+  ].join("\n");
+  const nativeSignedReceipt = sdk.emitReceipt(event, {
+    agent_identity: "native-signed-agent",
+    algorithm: "xoonya-native-signed-v1",
+    identity_ref: "did:xoonya:native-signed-agent",
+    signature_suite: "ed25519",
+    private_key_pem: nativePrivateKeyPem,
+    public_key_pem: nativePublicKeyPem
+  });
+  const nativeSignedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: nativeSignedReceipt }));
+  ensure(nativeSignedVerification.valid === true, "native signed receipt should verify");
+  ensure(nativeSignedVerification.verification_state === "verified_native_signature", "native signed verification state mismatch");
+  ensure(nativeSignedVerification.signature_suite === "ed25519", "native signed suite mismatch");
+
+  for (const suite of [
+    { id: "secp256k1", namedCurve: "secp256k1" },
+    { id: "p256", namedCurve: "prime256v1" }
+  ]) {
+    const generated = crypto.generateKeyPairSync("ec", {
+      namedCurve: suite.namedCurve,
+      privateKeyEncoding: { type: "pkcs8", format: "pem" },
+      publicKeyEncoding: { type: "spki", format: "pem" }
+    });
+    const ecdsaReceipt = sdk.emitReceipt(event, {
+      agent_identity: `native-${suite.id}-agent`,
+      algorithm: "xoonya-native-signed-v1",
+      identity_ref: `did:xoonya:native-${suite.id}-agent`,
+      signature_suite: suite.id,
+      private_key_pem: generated.privateKey,
+      public_key_pem: generated.publicKey
+    });
+    const ecdsaVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: ecdsaReceipt }));
+    ensure(ecdsaVerification.valid === true, `${suite.id} native signed receipt should verify`);
+    ensure(ecdsaVerification.verification_state === "verified_native_signature", `${suite.id} native signed verification state mismatch`);
+    ensure(ecdsaVerification.signature_suite === suite.id, `${suite.id} native signed suite mismatch`);
+
+    const tamperedEcdsaReceipt = {
+      ...ecdsaReceipt,
+      native_proof: {
+        ...ecdsaReceipt.native_proof,
+        proof_material: {
+          ...ecdsaReceipt.native_proof.proof_material,
+          signature: tamperCompactSignature(ecdsaReceipt.native_proof.proof_material.signature)
+        }
+      },
+      signature: `${"xoonya-native-signed-v1"}:${suite.id}:${tamperCompactSignature(ecdsaReceipt.native_proof.proof_material.signature)}`
+    };
+    const tamperedEcdsaVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedEcdsaReceipt }));
+    ensure(tamperedEcdsaVerification.valid === false, `${suite.id} native signed tamper must not verify`);
+    ensure(tamperedEcdsaVerification.reason === "native_signature_invalid", `${suite.id} native signed tamper reason mismatch`);
+  }
+
+  const ambiguousNoneReceipt = {
+    ...detachedReceipt,
+    algorithm: "none"
+  };
+  const ambiguousNoneVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: ambiguousNoneReceipt }));
+  ensure(ambiguousNoneVerification.valid === false, "algorithm none must not verify");
+  ensure(ambiguousNoneVerification.reason === "verification_method_none", "algorithm none reason mismatch");
+
+  const unsupportedReceipt = {
+    ...detachedReceipt,
+    algorithm: "jwt-vc-demo"
+  };
+  const unsupportedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: unsupportedReceipt }));
+  ensure(unsupportedVerification.valid === false, "unknown proof method must not verify");
+  ensure(unsupportedVerification.reason === "verification_method_unsupported", "unknown proof method reason mismatch");
+
+  const hybridClassical = crypto.generateKeyPairSync("ed25519");
+  const hybridPq = crypto.generateKeyPairSync("ml-dsa-65");
+  const hybridReceipt = sdk.emitReceipt(event, {
+    agent_identity: "native-hybrid-agent",
+    algorithm: "xoonya-native-hybrid-v1",
+    identity_ref: "did:xoonya:native-hybrid-agent",
+    classical_signature_suite: "ed25519",
+    pq_signature_suite: "ml-dsa-65",
+    classical_public_key_pem: hybridClassical.publicKey.export({ type: "spki", format: "pem" }),
+    classical_private_key_pem: hybridClassical.privateKey.export({ type: "pkcs8", format: "pem" }),
+    pq_public_key_pem: hybridPq.publicKey.export({ type: "spki", format: "pem" }),
+    pq_private_key_pem: hybridPq.privateKey.export({ type: "pkcs8", format: "pem" })
+  });
+  const hybridVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: hybridReceipt }));
+  ensure(hybridVerification.valid === true, "native hybrid method must verify");
+  ensure(hybridVerification.verification_state === "verified_native_hybrid_signature", "native hybrid verification state mismatch");
+
+  const tamperedNativeReceipt = {
+    ...nativeReceipt,
+    signature: nativeReceipt.signature.replace(/.$/, "0")
+  };
+  const tamperedNativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedNativeReceipt }));
+  ensure(tamperedNativeVerification.valid === false, "native signature tamper must not verify");
+  ensure(tamperedNativeVerification.reason === "signature_native_mismatch", "native tamper reason mismatch");
+
+  const downgradedNativeReceipt = {
+    ...nativeReceipt,
+    algorithm: "detached-assertion-v1"
+  };
+  const downgradedNativeVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: downgradedNativeReceipt }));
+  ensure(downgradedNativeVerification.valid === false, "native signature downgrade must not verify as detached");
+  ensure(downgradedNativeVerification.reason === "signature_method_mismatch", "native downgrade reason mismatch");
+
+  const tamperedNativeSignedReceipt = {
+    ...nativeSignedReceipt,
+    native_proof: {
+      ...nativeSignedReceipt.native_proof,
+      proof_material: {
+        ...nativeSignedReceipt.native_proof.proof_material,
+        signature: nativeSignedReceipt.native_proof.proof_material.signature.replace(/.$/, "B")
+      }
+    },
+    signature: nativeSignedReceipt.signature.replace(/.$/, "B")
+  };
+  const tamperedNativeSignedVerification = sdk.verifyProofBundle(sdk.buildProofBundle({ ceb: event, receipt: tamperedNativeSignedReceipt }));
+  ensure(tamperedNativeSignedVerification.valid === false, "native signed tamper must not verify");
+  ensure(tamperedNativeSignedVerification.reason === "native_signature_invalid", "native signed tamper reason mismatch");
+
+  const nativeAnchors = [
+    {
+      anchor_id: "anchor-verify-all-demo",
+      anchor_kind: "finality_ref",
+      anchor_ref: "bsv:mainnet:tx/9cd77fd24b884b281c819b3e48f6b15ed328b116939b082580924cabb4518d28",
+      anchor_hash_sha256: sdk.hashEvent({
+        version: "canonical-event-bundle/v1",
+        domain_id: "verify.anchor",
+        sequence: "1",
+        actor_id: "verify-anchor",
+        adapter_source: "verify_all",
+        event_type: "anchor.material",
+        event_hash: "ab".repeat(32)
+      }),
+      network: "bsv-mainnet",
+      finality_state: "finalized"
+    }
+  ];
+  const nativeAnchoredReceipt = sdk.emitReceipt(event, {
+    agent_identity: "native-anchored-agent",
+    algorithm: "xoonya-native-anchored-v1",
+    anchors: nativeAnchors
+  });
+  const nativeAnchoredVerification = sdk.verifyProofBundle(sdk.buildProofBundle({
+    ceb: event,
+    receipt: nativeAnchoredReceipt,
+    anchors: nativeAnchors
+  }));
+  ensure(nativeAnchoredVerification.valid === true, "native anchored receipt should verify");
+  ensure(nativeAnchoredVerification.verification_state === "verified_native_anchor_binding", "native anchored verification state mismatch");
+  ensure(nativeAnchoredVerification.anchor_count === 1, "native anchored anchor count mismatch");
+
+  const nativeAnchoredMissingBundleVerification = sdk.verifyProofBundle(sdk.buildProofBundle({
+    ceb: event,
+    receipt: nativeAnchoredReceipt
+  }));
+  ensure(nativeAnchoredMissingBundleVerification.valid === false, "native anchored receipt must require bundle anchors");
+  ensure(nativeAnchoredMissingBundleVerification.reason === "native_anchor_bundle_missing", "native anchored missing bundle reason mismatch");
+
+  const externalImportRun = sdk.runExternalProofImport({
+    method: "jwt-assertion-v1",
+    import_ref: "jwt-import-demo",
+    issuer_ref: "did:example:issuer",
+    subject_ref: "txn:xytara:demo",
+    external_proof: "eyJhbGciOiJFZERTQSJ9.eyJzdWIiOiJ0eG4teHl0YXJhLWRlbW8ifQ.signature",
+    evidence_refs: ["memory://external/jwt-import-demo"]
+  });
+  ensure(externalImportRun.ok === true, "external proof import should produce valid bundle");
+  ensure(externalImportRun.bundle_verification.valid === true, "external import bundle should verify");
+  ensure(externalImportRun.bundle_verification.verification_method === "jwt-assertion-v1", "external import method mismatch");
+  ensure(externalImportRun.import_review.boundary.includes("without_claiming_external_issuer_truth"), "external import boundary missing");
+
+  const externalImportReviewSummary = sdk.summarizeExternalProofImportReview({
+    method: "did-vc-v1",
+    external_proof: {
+      "@context": ["https://www.w3.org/ns/credentials/v2"],
+      type: ["VerifiableCredential"],
+      issuer: "did:example:issuer",
+      credentialSubject: { id: "did:example:agent" }
+    }
+  });
+  ensure(externalImportReviewSummary.ok === true, "external import review summary should pass");
+  ensure(externalImportReviewSummary.method === "did-vc-v1", "external import review method mismatch");
+  const externalImportGate = sdk.validateExternalProofImportEvidence({
+    method: "did-vc-v1",
+    external_proof: {
+      proof: "demo"
+    },
+    claim_external_issuer_truth: true
+  });
+  ensure(externalImportGate.import_allowed === false, "external import truth claim should require external verifier");
+  ensure(
+    externalImportGate.rejection_codes.includes("external_issuer_truth_claim_requires_external_verifier"),
+    "external import truth rejection code mismatch"
+  );
+
+  let hashMismatchRejected = false;
+  try {
+    sdk.runExternalProofImport({
+      method: "signed-envelope-v1",
+      external_proof: { proof: "demo" },
+      declared_hash_sha256: "00".repeat(32)
+    });
+  } catch (error) {
+    hashMismatchRejected = error.message === "external_proof_hash_mismatch";
+  }
+  ensure(hashMismatchRejected === true, "external import must reject declared hash mismatch");
+}
+
+function verifyNativeAtomConformance() {
+  ensure(nativeAtomVectors.version === "xoonya-native-atom-vectors-v1", "native atom vector version mismatch");
+  const payloadBytes = Buffer.from(nativeAtomVectors.payload_ascii, "utf8");
+  const generatedV1 = sdk.createxoonyaNativeAtomV1(nativeAtomVectors.identity_material_hex, payloadBytes);
+  const expectedV1 = nativeAtomVectors.vectors.find((vector) => vector.id === "xnya-v1-with-payload");
+  ensure(generatedV1.atom_hex === expectedV1.atom_hex, "native atom v1 payload vector mismatch");
+  const generatedV2 = sdk.createxoonyaNativeAtomV2(nativeAtomVectors.identity_material_hex, payloadBytes);
+  const expectedV2 = nativeAtomVectors.vectors.find((vector) => vector.id === "xnya-v2-with-payload");
+  ensure(generatedV2.atom_hex === expectedV2.atom_hex, "native atom v2 payload vector mismatch");
+
+  for (const vector of nativeAtomVectors.vectors) {
+    const parsed = sdk.parsexoonyaNativeAtom(vector.atom_hex);
+    ensure(parsed.atom_version === vector.atom_version, `${vector.id} atom version mismatch`);
+    ensure(parsed.byte_length === vector.byte_length, `${vector.id} byte length mismatch`);
+    ensure(parsed.agent_id === vector.agent_id, `${vector.id} agent id mismatch`);
+    ensure(parsed.payload_hash_sha256 === vector.payload_hash_sha256, `${vector.id} payload hash mismatch`);
+    const hasPayload = vector.payload_hash_sha256 !== "00".repeat(32);
+    const verification = sdk.verifyxoonyaNativeAtom(vector.atom_hex, {
+      identity_material_hex: nativeAtomVectors.identity_material_hex,
+      ...(hasPayload ? { payload_bytes: payloadBytes } : {})
+    });
+    ensure(verification.valid === true, `${vector.id} should verify`);
+    ensure(verification.error_code === null, `${vector.id} should not have error code`);
+  }
+
+  for (const vector of nativeAtomVectors.adversarial) {
+    const verification = sdk.verifyxoonyaNativeAtom(vector.atom_hex, {
+      identity_material_hex: vector.identity_material_hex || nativeAtomVectors.identity_material_hex,
+      ...(vector.payload_ascii ? { payload_bytes: Buffer.from(vector.payload_ascii, "utf8") } : {})
+    });
+    ensure(verification.valid === false, `${vector.id} should fail`);
+    ensure(verification.reason === vector.expected_reason, `${vector.id} reason mismatch`);
+    if (vector.expected_error_code) {
+      ensure(verification.error_code === vector.expected_error_code, `${vector.id} error code mismatch`);
+    }
+  }
+}
+
+function verifyNativePayloadProfileConformance() {
+  ensure(nativePayloadProfileVectors.version === "xoonya-native-payload-profile-vectors-v1", "native payload profile vector version mismatch");
+  ensure(typeof sdk.encodexoonyaNativePayloadProfileV1 === "function", "missing encodexoonyaNativePayloadProfileV1");
+  ensure(typeof sdk.parsexoonyaNativePayloadProfileV1 === "function", "missing parsexoonyaNativePayloadProfileV1");
+  ensure(typeof sdk.verifyxoonyaNativePayloadProfileV1 === "function", "missing verifyxoonyaNativePayloadProfileV1");
+  ensure(typeof sdk.createxoonyaNativeLineRateFrameV1 === "function", "missing createxoonyaNativeLineRateFrameV1");
+  ensure(typeof sdk.parsexoonyaNativeLineRateFrameV1 === "function", "missing parsexoonyaNativeLineRateFrameV1");
+  ensure(typeof sdk.verifyxoonyaNativeLineRateFrameV1 === "function", "missing verifyxoonyaNativeLineRateFrameV1");
+
+  const vector = nativePayloadProfileVectors.profile_vector;
+  const profile = sdk.encodexoonyaNativePayloadProfileV1(vector.input);
+  ensure(profile.profile === "xoonya-native-payload-profile/v1", "native payload profile id mismatch");
+  ensure(profile.canonical_bytes_hex.startsWith(Buffer.from("XNYP", "ascii").toString("hex")), "native payload profile magic mismatch");
+  ensure(profile.field_count === 4, "native payload profile field count mismatch");
+  ensure(profile.canonical_bytes_hex === vector.expected.canonical_bytes_hex, "native payload profile canonical vector mismatch");
+  ensure(profile.payload_hash_sha256 === vector.expected.payload_hash_sha256, "native payload profile payload hash vector mismatch");
+  ensure(profile.schema_hash_sha256 === vector.expected.schema_hash_sha256, "native payload profile schema hash vector mismatch");
+  const parsedProfile = sdk.parsexoonyaNativePayloadProfileV1(profile.canonical_bytes_hex);
+  ensure(parsedProfile.payload_hash_sha256 === profile.payload_hash_sha256, "native payload profile hash mismatch");
+  ensure(parsedProfile.fields.map((field) => field.field_id).join(",") === "1,2,3,4", "native payload profile canonical ordering mismatch");
+  ensure(parsedProfile.fields.find((field) => field.field_id === 2).value === "42", "native payload profile uint64 decode mismatch");
+  ensure(parsedProfile.fields.find((field) => field.field_id === 4).value === true, "native payload profile bool decode mismatch");
+  const profileVerification = sdk.verifyxoonyaNativePayloadProfileV1(profile.canonical_bytes_hex, {
+    payload_hash_sha256: profile.payload_hash_sha256,
+    schema_ref: "xoonya.payload.test.v1",
+    allowed_field_ids: [1, 2, 3, 4]
+  });
+  ensure(profileVerification.valid === true, "native payload profile verification should pass");
+  const unknownFieldPolicy = sdk.verifyxoonyaNativePayloadProfileV1(profile.canonical_bytes_hex, {
+    allowed_field_ids: [1, 2, 3]
+  });
+  ensure(unknownFieldPolicy.valid === false, "native payload profile policy should reject unknown field ids");
+  ensure(unknownFieldPolicy.reason === "payload_profile_unknown_field", "native payload profile unknown field reason mismatch");
+
+  const atom = sdk.createxoonyaNativeAtomV1(
+    "01" + "11".repeat(33),
+    Buffer.from(profile.canonical_bytes_hex, "hex")
+  );
+  const frame = sdk.createxoonyaNativeLineRateFrameV1(atom.atom_hex);
+  const frameVector = nativePayloadProfileVectors.line_rate_frame_vector;
+  ensure(frame.profile === "xoonya-native-line-rate-frame/v1", "line-rate frame profile mismatch");
+  ensure(frame.frame_byte_length === 60, "line-rate frame v1 size mismatch");
+  ensure(atom.atom_hex === frameVector.atom_hex, "line-rate frame atom vector mismatch");
+  ensure(frame.frame_hex === frameVector.frame_hex, "line-rate frame vector mismatch");
+  ensure(frame.checksum_hex === frameVector.checksum_hex, "line-rate frame checksum vector mismatch");
+  const frameVerification = sdk.verifyxoonyaNativeLineRateFrameV1(frame.frame_hex, {
+    identity_material_hex: "01" + "11".repeat(33),
+    payload_bytes: Buffer.from(profile.canonical_bytes_hex, "hex")
+  });
+  ensure(frameVerification.valid === true, "line-rate frame should verify");
+  const tamperedFrameHex = `${frame.frame_hex.slice(0, -1)}${frame.frame_hex.endsWith("0") ? "1" : "0"}`;
+  const tamperedFrameVerification = sdk.verifyxoonyaNativeLineRateFrameV1(tamperedFrameHex, {
+    identity_material_hex: "01" + "11".repeat(33),
+    payload_bytes: Buffer.from(profile.canonical_bytes_hex, "hex")
+  });
+  ensure(tamperedFrameVerification.valid === false, "line-rate frame tamper should fail");
+  ensure(tamperedFrameVerification.reason === "line_rate_frame_checksum_mismatch", "line-rate frame tamper reason mismatch");
+}
+
+function main() {
+  ensure(packageJson.name === "xoonya", "unexpected package name");
+  const startHereOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya.js"),
+    "start-here"
+  ], { encoding: "utf8" });
+  ensure(startHereOutput.includes("https://www.naxytra.com/v1/first-run-kit"), "xoonya start-here command kit missing");
+  ensure(startHereOutput.includes("xoonya-native-anchored-v1"), "xoonya start-here anchored mode missing");
+  const firstRunOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya.js"),
+    "first-run",
+    "--json",
+    "--offline",
+    "--pretty"
+  ], { encoding: "utf8" });
+  const firstRunGuide = JSON.parse(firstRunOutput);
+  ensure(firstRunGuide.category === "xoonya-first-run-proof-guide", "xoonya first-run category mismatch");
+  ensure(firstRunGuide.proof_modes.some((entry) => entry.method === "xoonya-native-anchored-v1"), "xoonya first-run anchored proof missing");
+  const nativeFirstRunOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya.js"),
+    "first-run",
+    "--verify-native",
+    "--pretty"
+  ], { encoding: "utf8" });
+  const nativeFirstRun = JSON.parse(nativeFirstRunOutput);
+  ensure(nativeFirstRun.category === "xoonya-first-run-native-verification", "xoonya first-run native category mismatch");
+  ensure(nativeFirstRun.required_native_methods_present === true, "xoonya first-run native methods missing");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "conformance-vectors.json")), "missing conformance vectors");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "adversarial-vectors.json")), "missing adversarial vectors");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "native-atom-vectors.json")), "missing native atom vectors");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "vectors", "native-payload-profile-vectors.json")), "missing native payload profile vectors");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "CROSS_RUNTIME_POSTURE.md")), "missing cross-runtime posture note");
+  ensure(typeof sdk.canonicalizeEvent === "function", "missing canonicalizeEvent");
+  ensure(typeof sdk.hashEvent === "function", "missing hashEvent");
+  ensure(typeof sdk.emitReceipt === "function", "missing emitReceipt");
+  ensure(typeof sdk.listProofVerificationMethods === "function", "missing listProofVerificationMethods");
+  ensure(typeof sdk.getProofVerificationMethod === "function", "missing getProofVerificationMethod");
+  ensure(typeof sdk.listNativeSignatureSuites === "function", "missing listNativeSignatureSuites");
+  ensure(typeof sdk.getNativeSignatureSuite === "function", "missing getNativeSignatureSuite");
+  ensure(typeof sdk.listxoonyaNativeIdentityTypes === "function", "missing listxoonyaNativeIdentityTypes");
+  ensure(typeof sdk.buildxoonyaNativeAtomSpec === "function", "missing buildxoonyaNativeAtomSpec");
+  ensure(typeof sdk.buildxoonyaNativeAtomConformancePack === "function", "missing buildxoonyaNativeAtomConformancePack");
+  ensure(typeof sdk.summarizexoonyaNativeAtomConformancePack === "function", "missing summarizexoonyaNativeAtomConformancePack");
+  ensure(typeof sdk.createxoonyaNativeAtomV1 === "function", "missing createxoonyaNativeAtomV1");
+  ensure(typeof sdk.createxoonyaNativeAtomV2 === "function", "missing createxoonyaNativeAtomV2");
+  ensure(typeof sdk.parsexoonyaNativeAtom === "function", "missing parsexoonyaNativeAtom");
+  ensure(typeof sdk.verifyxoonyaNativeAtom === "function", "missing verifyxoonyaNativeAtom");
+  ensure(typeof sdk.buildNativeReceiptSignature === "function", "missing buildNativeReceiptSignature");
+  ensure(typeof sdk.buildNativeSignedReceiptProof === "function", "missing buildNativeSignedReceiptProof");
+  ensure(typeof sdk.buildNativeHybridReceiptProof === "function", "missing buildNativeHybridReceiptProof");
+  ensure(typeof sdk.buildNativeAnchoredReceiptProof === "function", "missing buildNativeAnchoredReceiptProof");
+  ensure(typeof sdk.buildxoonyaNativeAnchorProfile === "function", "missing buildxoonyaNativeAnchorProfile");
+  ensure(typeof sdk.summarizexoonyaNativeAnchorProfile === "function", "missing summarizexoonyaNativeAnchorProfile");
+  ensure(typeof sdk.buildExternalProofImportAdapterPack === "function", "missing buildExternalProofImportAdapterPack");
+  ensure(typeof sdk.summarizeExternalProofImportAdapterPack === "function", "missing summarizeExternalProofImportAdapterPack");
+  ensure(typeof sdk.buildxoonyaNativeHybridReadinessPack === "function", "missing buildxoonyaNativeHybridReadinessPack");
+  ensure(typeof sdk.summarizexoonyaNativeHybridReadinessPack === "function", "missing summarizexoonyaNativeHybridReadinessPack");
+  ensure(typeof sdk.buildxoonyaNativeStandardizationPack === "function", "missing buildxoonyaNativeStandardizationPack");
+  ensure(typeof sdk.summarizexoonyaNativeStandardizationPack === "function", "missing summarizexoonyaNativeStandardizationPack");
+  ensure(typeof sdk.buildxoonyaNativeConformanceMarkPack === "function", "missing buildxoonyaNativeConformanceMarkPack");
+  ensure(typeof sdk.summarizexoonyaNativeConformanceMarkPack === "function", "missing summarizexoonyaNativeConformanceMarkPack");
+  ensure(typeof sdk.buildxoonyaNativeReferenceImplementationPack === "function", "missing buildxoonyaNativeReferenceImplementationPack");
+  ensure(typeof sdk.summarizexoonyaNativeReferenceImplementationPack === "function", "missing summarizexoonyaNativeReferenceImplementationPack");
+  ensure(typeof sdk.buildxoonyaNativePayloadProfilePack === "function", "missing buildxoonyaNativePayloadProfilePack");
+  ensure(typeof sdk.summarizexoonyaNativePayloadProfilePack === "function", "missing summarizexoonyaNativePayloadProfilePack");
+  ensure(typeof sdk.buildxoonyaNativeLineRateFramePack === "function", "missing buildxoonyaNativeLineRateFramePack");
+  ensure(typeof sdk.summarizexoonyaNativeLineRateFramePack === "function", "missing summarizexoonyaNativeLineRateFramePack");
+  ensure(typeof sdk.reviewExternalProofImport === "function", "missing reviewExternalProofImport");
+  ensure(typeof sdk.runExternalProofImport === "function", "missing runExternalProofImport");
+  ensure(typeof sdk.buildProofBundle === "function", "missing buildProofBundle");
+  ensure(typeof sdk.verifyProofBundle === "function", "missing verifyProofBundle");
+  ensure(typeof sdk.listIntegrations === "function", "missing listIntegrations");
+  ensure(typeof sdk.getIntegration === "function", "missing getIntegration");
+  ensure(typeof sdk.summarizeIntegrations === "function", "missing summarizeIntegrations");
+  ensure(typeof sdk.validateIntegrationRegistration === "function", "missing validateIntegrationRegistration");
+  ensure(typeof sdk.importRegisteredIntegration === "function", "missing importRegisteredIntegration");
+  ensure(typeof sdk.exportIntegrationRegistrySnapshot === "function", "missing exportIntegrationRegistrySnapshot");
+  ensure(typeof sdk.validateIntegrationRegistrySnapshot === "function", "missing validateIntegrationRegistrySnapshot");
+  ensure(typeof sdk.createReceipt === "function", "missing createReceipt");
+  ensure(typeof sdk.verifyReceipt === "function", "missing verifyReceipt");
+  ensure(typeof sdk.createReceiptV2 === "function", "missing createReceiptV2");
+  ensure(typeof sdk.verifyReceiptV2 === "function", "missing verifyReceiptV2");
+  ensure(typeof sdk.createProofEnvelopeV1 === "function", "missing createProofEnvelopeV1");
+  ensure(typeof sdk.verifyProofEnvelopeV1 === "function", "missing verifyProofEnvelopeV1");
+  ensure(typeof sdk.createEconomicReceiptProfileV1 === "function", "missing createEconomicReceiptProfileV1");
+  ensure(typeof sdk.verifyEconomicReceiptProfileV1 === "function", "missing verifyEconomicReceiptProfileV1");
+  ensure(typeof sdk.createRegistryProfileV1 === "function", "missing createRegistryProfileV1");
+  ensure(typeof sdk.verifyRegistryProfileV1 === "function", "missing verifyRegistryProfileV1");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "integrations", "registration-record.schema.json")), "missing integration registration schema");
+  ensure(fs.existsSync(path.resolve(__dirname, "..", "integrations", "registry-snapshot.schema.json")), "missing integration registry snapshot schema");
+  const hybridReadiness = sdk.summarizexoonyaNativeHybridReadinessPack();
+  ensure(hybridReadiness.status === "implemented", "native hybrid readiness must be implemented");
+  ensure(hybridReadiness.implemented_classical_suites.includes("secp256k1"), "native hybrid readiness secp256k1 suite missing");
+  ensure(hybridReadiness.implemented_classical_suites.includes("p256"), "native hybrid readiness p256 suite missing");
+  ensure(hybridReadiness.implemented_hybrid_suites.includes("ed25519+ml-dsa-65"), "native hybrid readiness ml-dsa suite missing");
+  const standardization = sdk.summarizexoonyaNativeStandardizationPack();
+  ensure(standardization.canonical_magic === "XNYA", "native standardization magic mismatch");
+  ensure(standardization.conformance_forbidden_condition_count >= 4, "native standardization forbidden conditions missing");
+  const conformanceMark = sdk.summarizexoonyaNativeConformanceMarkPack();
+  ensure(conformanceMark.mark === "XNYA-compatible", "native conformance mark mismatch");
+  ensure(conformanceMark.forbidden_claim_count >= 3, "native conformance mark forbidden claims missing");
+  ensure(conformanceMark.implemented_signature_suites.includes("secp256k1"), "native conformance mark secp256k1 suite missing");
+  const referenceImplementations = sdk.summarizexoonyaNativeReferenceImplementationPack();
+  ensure(referenceImplementations.status === "js_reference_implemented_independent_references_planned", "native reference implementation status mismatch");
+  ensure(referenceImplementations.implemented_reference_count === 1, "native reference implementation count mismatch");
+  ensure(referenceImplementations.planned_reference_count >= 2, "native planned reference implementation count mismatch");
+  ensure(referenceImplementations.verified_candidate_scaffold_count >= 1, "native verified candidate scaffold missing");
+  ensure(referenceImplementations.deterministic_rejection_code_count >= 11, "native reference promotion rejection codes missing");
+  verifyCanonicalEventConformance();
+  verifyProofBundleConformance();
+  verifyNativeAtomConformance();
+  verifyNativePayloadProfileConformance();
+  process.stdout.write("xoonya verify:all passed\n");
+}
+
+main();