xoonya 3.1.0 → 3.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/.env.example +10 -2
  2. package/CARRIED_HANDOFF_DEMO.md +60 -60
  3. package/COMPATIBILITY_NOTE.md +27 -27
  4. package/CROSS_RUNTIME_POSTURE.md +77 -77
  5. package/EXAMPLE_PATHS.md +53 -53
  6. package/FINAL_CONTRACT.md +445 -445
  7. package/LICENSE +201 -201
  8. package/NOTICE +3 -3
  9. package/PARTNER_READY_PATH.md +67 -67
  10. package/PUBLIC_DEMO_SCRIPT.md +79 -79
  11. package/README.md +843 -808
  12. package/RELEASE_NOTES.md +10 -15
  13. package/SERVICE_CONTRACT.md +207 -207
  14. package/START_HERE.md +159 -159
  15. package/TERMINOLOGY.md +55 -55
  16. package/WHY_XYTARA_XOONYA.md +43 -43
  17. package/XNYA_CONFORMANCE_MARK.md +78 -78
  18. package/XNYA_REFERENCE_IMPLEMENTATIONS.md +157 -157
  19. package/XOONYA_DEFAULT_PATH_MODEL.md +63 -63
  20. package/XOONYA_FOLLOWTHROUGH_TRUTH_MODEL.md +63 -63
  21. package/XOONYA_NATIVE_ATOM_SPEC.md +184 -184
  22. package/XOONYA_NATIVE_PROOF_FORMAT.md +570 -527
  23. package/XOONYA_NATIVE_STANDARD_GOVERNANCE.md +119 -119
  24. package/XOONYA_PROOF_TRUTH_MODEL.md +58 -58
  25. package/bin/xoonya-first-run.js +184 -184
  26. package/bin/xoonya-release.js +1367 -1367
  27. package/bin/xoonya-review.js +70 -70
  28. package/bin/xoonya.js +82 -82
  29. package/examples/integration_boundary_walkthrough.js +37 -37
  30. package/examples/package_quickstart.js +1007 -1007
  31. package/examples/partner_proof_walkthrough.js +68 -68
  32. package/examples/proof_review_walkthrough.js +66 -66
  33. package/examples/review_carried_handoff.js +72 -72
  34. package/index.js +31 -31
  35. package/integrations/PROOF_INTEGRATION_PROCESS.md +45 -45
  36. package/integrations/examples/example-third-party-verifier-registration.record.json +22 -22
  37. package/integrations/registration-record.schema.json +99 -99
  38. package/integrations/registry-snapshot.schema.json +36 -36
  39. package/integrations/registry.js +636 -636
  40. package/integrations/views.js +36 -36
  41. package/lib/adapter_certification_contract.js +90 -90
  42. package/lib/announcement_pack.js +61 -61
  43. package/lib/artifact_distribution_lane_contract.js +54 -54
  44. package/lib/asyncapi_contract.js +135 -135
  45. package/lib/auth_interop_contract.js +69 -69
  46. package/lib/authority_binding_lifecycle_contract.js +182 -182
  47. package/lib/bridge_intelligence.js +102 -102
  48. package/lib/cloudevents_contract.js +79 -79
  49. package/lib/crypto_agility_matrix.js +125 -125
  50. package/lib/default_path_contract.js +380 -380
  51. package/lib/ecosystem_entry.js +64 -64
  52. package/lib/erc8004_proof_lane_contract.js +64 -64
  53. package/lib/event_system_lane_contract.js +76 -76
  54. package/lib/external_proof_import_lane_contract.js +87 -87
  55. package/lib/feature_control_lane_contract.js +54 -54
  56. package/lib/followthrough_truth_contract.js +214 -214
  57. package/lib/framework_lane_contract.js +76 -76
  58. package/lib/governance_disputes_summary.js +36 -36
  59. package/lib/governance_intelligence.js +108 -108
  60. package/lib/identity_interop_contract.js +83 -83
  61. package/lib/integration_matrix_contract.js +81 -81
  62. package/lib/launch_narrative.js +53 -53
  63. package/lib/machine_identity_registry_contract.js +199 -199
  64. package/lib/major_rails_proof_lane_contract.js +87 -87
  65. package/lib/offline_verifiability_recovery_contract.js +155 -155
  66. package/lib/openapi_contract.js +227 -227
  67. package/lib/operational_receipt_contract.js +165 -165
  68. package/lib/outreach_proof.js +71 -71
  69. package/lib/phase_10_closeout_pack.js +45 -45
  70. package/lib/phase_10_completion_pack.js +76 -76
  71. package/lib/phase_10_decision_record_pack.js +54 -54
  72. package/lib/phase_10_decision_resolution_pack.js +53 -53
  73. package/lib/phase_10_demand_signal_adapters_proof_pack.js +74 -74
  74. package/lib/phase_10_ecosystem_backlog_triage_proof_pack.js +74 -74
  75. package/lib/phase_10_freeze_baseline_pack.js +67 -67
  76. package/lib/phase_10_freeze_review_pack.js +64 -64
  77. package/lib/phase_10_gate_pack.js +57 -57
  78. package/lib/phase_10_long_tail_continuity_pack.js +80 -80
  79. package/lib/phase_10_long_tail_ecosystem_pack.js +68 -68
  80. package/lib/phase_10_niche_extension_registry_proof_pack.js +74 -74
  81. package/lib/phase_1_claude_mcp_pack.js +60 -60
  82. package/lib/phase_1_claude_mcp_proof_pack.js +57 -57
  83. package/lib/phase_1_ecosystem_pack.js +51 -51
  84. package/lib/phase_1_openai_codex_pack.js +60 -60
  85. package/lib/phase_1_openai_codex_proof_pack.js +57 -57
  86. package/lib/phase_2_base_proof_pack.js +71 -71
  87. package/lib/phase_2_base_usdc_proof_pack.js +72 -72
  88. package/lib/phase_2_closeout_pack.js +65 -65
  89. package/lib/phase_2_completion_pack.js +113 -113
  90. package/lib/phase_2_decision_record_pack.js +66 -66
  91. package/lib/phase_2_decision_resolution_pack.js +69 -69
  92. package/lib/phase_2_eth_proof_pack.js +70 -70
  93. package/lib/phase_2_evm_base_proof_pack.js +73 -73
  94. package/lib/phase_2_evm_proof_pack.js +71 -71
  95. package/lib/phase_2_flip_preview_pack.js +60 -60
  96. package/lib/phase_2_freeze_review_pack.js +99 -99
  97. package/lib/phase_2_gate_pack.js +77 -77
  98. package/lib/phase_2_payment_rails_pack.js +71 -71
  99. package/lib/phase_2_usdc_proof_pack.js +71 -71
  100. package/lib/phase_3_brc_proof_pack.js +81 -81
  101. package/lib/phase_3_bsv_teranode_proof_pack.js +81 -81
  102. package/lib/phase_3_closeout_pack.js +62 -62
  103. package/lib/phase_3_completion_pack.js +92 -92
  104. package/lib/phase_3_decision_record_pack.js +64 -64
  105. package/lib/phase_3_decision_resolution_pack.js +69 -69
  106. package/lib/phase_3_freeze_baseline_pack.js +67 -67
  107. package/lib/phase_3_freeze_review_pack.js +80 -80
  108. package/lib/phase_3_gate_pack.js +76 -76
  109. package/lib/phase_3_metanet_proof_pack.js +81 -81
  110. package/lib/phase_3_native_bsv_pack.js +89 -89
  111. package/lib/phase_3_native_continuity_pack.js +82 -82
  112. package/lib/phase_4_attestation_proof_pack.js +75 -75
  113. package/lib/phase_4_closeout_pack.js +45 -45
  114. package/lib/phase_4_completion_pack.js +82 -82
  115. package/lib/phase_4_decision_record_pack.js +54 -54
  116. package/lib/phase_4_decision_resolution_pack.js +45 -45
  117. package/lib/phase_4_erc8004_proof_pack.js +76 -76
  118. package/lib/phase_4_freeze_baseline_pack.js +67 -67
  119. package/lib/phase_4_freeze_review_pack.js +68 -68
  120. package/lib/phase_4_gate_pack.js +58 -58
  121. package/lib/phase_4_identity_registry_proof_pack.js +75 -75
  122. package/lib/phase_4_identity_trust_pack.js +73 -73
  123. package/lib/phase_4_trust_continuity_pack.js +86 -86
  124. package/lib/phase_5_antelope_proof_pack.js +76 -76
  125. package/lib/phase_5_closeout_pack.js +44 -44
  126. package/lib/phase_5_completion_pack.js +82 -82
  127. package/lib/phase_5_decision_record_pack.js +54 -54
  128. package/lib/phase_5_decision_resolution_pack.js +45 -45
  129. package/lib/phase_5_freeze_baseline_pack.js +67 -67
  130. package/lib/phase_5_freeze_review_pack.js +68 -68
  131. package/lib/phase_5_gate_pack.js +58 -58
  132. package/lib/phase_5_major_rails_continuity_pack.js +86 -86
  133. package/lib/phase_5_major_rails_pack.js +74 -74
  134. package/lib/phase_5_proton_xpr_proof_pack.js +76 -76
  135. package/lib/phase_5_solana_proof_pack.js +76 -76
  136. package/lib/phase_6_autogen_proof_pack.js +74 -74
  137. package/lib/phase_6_closeout_pack.js +46 -46
  138. package/lib/phase_6_completion_pack.js +77 -77
  139. package/lib/phase_6_decision_record_pack.js +54 -54
  140. package/lib/phase_6_decision_resolution_pack.js +53 -53
  141. package/lib/phase_6_framework_continuity_pack.js +81 -81
  142. package/lib/phase_6_framework_runtime_pack.js +68 -68
  143. package/lib/phase_6_freeze_baseline_pack.js +68 -68
  144. package/lib/phase_6_freeze_review_pack.js +65 -65
  145. package/lib/phase_6_gate_pack.js +59 -59
  146. package/lib/phase_6_langchain_proof_pack.js +74 -74
  147. package/lib/phase_6_langgraph_proof_pack.js +74 -74
  148. package/lib/phase_6_semantic_kernel_proof_pack.js +74 -74
  149. package/lib/phase_7_closeout_pack.js +45 -45
  150. package/lib/phase_7_completion_pack.js +85 -85
  151. package/lib/phase_7_decision_record_pack.js +53 -53
  152. package/lib/phase_7_decision_resolution_pack.js +53 -53
  153. package/lib/phase_7_event_system_continuity_pack.js +89 -89
  154. package/lib/phase_7_event_system_pack.js +76 -76
  155. package/lib/phase_7_freeze_baseline_pack.js +74 -74
  156. package/lib/phase_7_freeze_review_pack.js +65 -65
  157. package/lib/phase_7_gate_pack.js +58 -58
  158. package/lib/phase_7_kafka_proof_pack.js +76 -76
  159. package/lib/phase_7_mqtt_proof_pack.js +76 -76
  160. package/lib/phase_7_nats_proof_pack.js +76 -76
  161. package/lib/phase_7_webhook_event_bus_proof_pack.js +76 -76
  162. package/lib/phase_8_closeout_pack.js +46 -46
  163. package/lib/phase_8_completion_pack.js +82 -82
  164. package/lib/phase_8_decision_record_pack.js +54 -54
  165. package/lib/phase_8_decision_resolution_pack.js +53 -53
  166. package/lib/phase_8_external_receipt_import_proof_pack.js +74 -74
  167. package/lib/phase_8_external_result_import_proof_pack.js +74 -74
  168. package/lib/phase_8_freeze_baseline_pack.js +71 -71
  169. package/lib/phase_8_freeze_review_pack.js +64 -64
  170. package/lib/phase_8_gate_pack.js +58 -58
  171. package/lib/phase_8_proof_bridge_continuity_pack.js +86 -86
  172. package/lib/phase_8_proof_bridges_pack.js +72 -72
  173. package/lib/phase_8_proof_bundle_normalization_proof_pack.js +74 -74
  174. package/lib/phase_9_closeout_pack.js +46 -46
  175. package/lib/phase_9_completion_pack.js +82 -82
  176. package/lib/phase_9_custody_refs_proof_pack.js +74 -74
  177. package/lib/phase_9_decision_record_pack.js +54 -54
  178. package/lib/phase_9_decision_resolution_pack.js +53 -53
  179. package/lib/phase_9_freeze_baseline_pack.js +71 -71
  180. package/lib/phase_9_freeze_review_pack.js +64 -64
  181. package/lib/phase_9_gate_pack.js +58 -58
  182. package/lib/phase_9_operator_accounting_bridges_proof_pack.js +74 -74
  183. package/lib/phase_9_treasury_connectivity_pack.js +72 -72
  184. package/lib/phase_9_treasury_continuity_pack.js +86 -86
  185. package/lib/phase_9_treasury_destinations_proof_pack.js +74 -74
  186. package/lib/phase_program_pack.js +47 -47
  187. package/lib/proof_bridge_lane_contract.js +82 -82
  188. package/lib/proof_truth_contract.js +224 -224
  189. package/lib/provenance_lane_contract.js +54 -54
  190. package/lib/provider_lane_contract.js +67 -67
  191. package/lib/public_surface_policy_contract.js +111 -111
  192. package/lib/publish_plan.js +51 -51
  193. package/lib/release_candidate.js +50 -50
  194. package/lib/release_center.js +1037 -1037
  195. package/lib/release_history.js +206 -206
  196. package/lib/release_manifest.js +114 -114
  197. package/lib/release_pack.js +391 -391
  198. package/lib/result_package_trust_lane_contract.js +74 -74
  199. package/lib/review_intelligence.js +100 -100
  200. package/lib/role_freeze.js +436 -436
  201. package/lib/shared_signals_lane_contract.js +54 -54
  202. package/lib/signed_audit_provenance_contract.js +93 -93
  203. package/lib/telemetry_lane_contract.js +54 -54
  204. package/lib/treasury_proof_lane_contract.js +83 -83
  205. package/lib/trust_intelligence.js +106 -106
  206. package/lib/trust_portability_boundary_contract.js +66 -66
  207. package/lib/trust_portability_pack.js +224 -224
  208. package/lib/verification_service_pack.js +149 -149
  209. package/package.json +98 -97
  210. package/proof_sdk.js +6561 -6265
  211. package/reference/python/README.md +35 -35
  212. package/reference/python/__pycache__/xnya_reference.cpython-314.pyc +0 -0
  213. package/reference/python/requirements-optional.txt +1 -1
  214. package/reference/python/verify_vectors.py +223 -223
  215. package/reference/python/xnya_reference.py +810 -810
  216. package/reference/rust/Cargo.toml +11 -11
  217. package/reference/rust/README.md +28 -28
  218. package/reference/rust/src/lib.rs +87 -87
  219. package/scripts/registry_cli.js +157 -157
  220. package/scripts/verify_all.js +603 -603
  221. package/scripts/verify_control_plane_contracts.js +34 -34
  222. package/scripts/verify_control_plane_routes.js +70 -70
  223. package/scripts/verify_examples.js +19 -19
  224. package/scripts/verify_external_proof_import_gate.js +84 -84
  225. package/scripts/verify_forgery_resistance.js +281 -0
  226. package/scripts/verify_integrations.js +170 -170
  227. package/scripts/verify_native_hybrid_design_gate.js +114 -114
  228. package/scripts/verify_reference_promotion_gate.js +74 -74
  229. package/scripts/verify_reference_python.js +49 -49
  230. package/scripts/verify_reference_python_crypto.js +87 -87
  231. package/scripts/verify_reference_rust_scaffold.js +50 -50
  232. package/scripts/verify_release_candidate.js +131 -131
  233. package/scripts/verify_service.js +3038 -2940
  234. package/scripts/verify_tooling.js +1251 -1251
  235. package/scripts/verify_trust_portability.js +56 -56
  236. package/scripts/verify_vectors.js +192 -192
  237. package/scripts/verify_verification_services.js +56 -56
  238. package/server.js +4223 -4099
  239. package/vectors/adversarial-vectors.json +552 -552
  240. package/vectors/conformance-vectors.json +446 -446
  241. package/vectors/native-atom-vectors.json +101 -101
  242. package/vectors/native-payload-profile-vectors.json +50 -50
  243. package/OPERATIONS_RUNBOOK.md +0 -50
  244. package/OPERATOR_START_HERE.md +0 -67
  245. package/PROGRAM_COMPLETE_RELEASE.md +0 -52
  246. package/PROGRAM_STATUS.md +0 -57
  247. package/PUBLISH_PLAN.md +0 -25
  248. package/RELEASE_CHECKLIST.md +0 -16
@@ -1,54 +1,54 @@
1
- "use strict";
2
-
3
- function buildSharedSignalsLanePack() {
4
- return {
5
- product: "xoonya",
6
- category: "proof-shared-signals-lane-pack",
7
- pack_version: "xoonya-shared-signals-lane-pack-v1",
8
- lane_state: "first_party_shared_signals_lane_present",
9
- posture: "real_time_review_and_risk_signal_exchange_lane",
10
- standards: ["openid_shared_signals", "caep"],
11
- signal_families: ["review_events", "governance_events", "bridge_attention_events", "external_import_attention_events"],
12
- supported_surfaces: {
13
- auth_profiles_ref: "/v1/auth-profiles",
14
- identity_interop_ref: "/v1/identity-interop",
15
- proof_bridge_ref: "/v1/proof-bridge",
16
- result_package_trust_ref: "/v1/result-package-trust",
17
- external_proof_import_ref: "/v1/external-proof-import"
18
- },
19
- first_run_flows: [
20
- {
21
- flow_ref: "proof_risk_signal_alignment",
22
- recommended_reason: "best path when partner systems need near-real-time signals about review, bridge, or imported-proof trust changes",
23
- sequence: [
24
- "inspect_shared_signals_lane_summary",
25
- "map native proof review and bridge states to shared signal posture",
26
- "connect trust attention and import attention states to external signal exchange",
27
- "keep proof acceptance and governance decisions canonical inside xoonya"
28
- ]
29
- }
30
- ],
31
- guardrails: [
32
- "shared signals should export proof-side state changes, not replace review or governance logic",
33
- "signal exchange must remain bounded and reviewable"
34
- ]
35
- };
36
- }
37
-
38
- function summarizeSharedSignalsLanePack() {
39
- const pack = buildSharedSignalsLanePack();
40
- return {
41
- product: "xoonya",
42
- category: "proof-shared-signals-lane-pack-summary",
43
- summary_version: "xoonya-shared-signals-lane-pack-summary-v1",
44
- lane_state: pack.lane_state,
45
- standard_count: pack.standards.length,
46
- signal_family_count: pack.signal_families.length,
47
- linked_surfaces: pack.supported_surfaces
48
- };
49
- }
50
-
51
- module.exports = {
52
- buildSharedSignalsLanePack,
53
- summarizeSharedSignalsLanePack
54
- };
1
+ "use strict";
2
+
3
+ function buildSharedSignalsLanePack() {
4
+ return {
5
+ product: "xoonya",
6
+ category: "proof-shared-signals-lane-pack",
7
+ pack_version: "xoonya-shared-signals-lane-pack-v1",
8
+ lane_state: "first_party_shared_signals_lane_present",
9
+ posture: "real_time_review_and_risk_signal_exchange_lane",
10
+ standards: ["openid_shared_signals", "caep"],
11
+ signal_families: ["review_events", "governance_events", "bridge_attention_events", "external_import_attention_events"],
12
+ supported_surfaces: {
13
+ auth_profiles_ref: "/v1/auth-profiles",
14
+ identity_interop_ref: "/v1/identity-interop",
15
+ proof_bridge_ref: "/v1/proof-bridge",
16
+ result_package_trust_ref: "/v1/result-package-trust",
17
+ external_proof_import_ref: "/v1/external-proof-import"
18
+ },
19
+ first_run_flows: [
20
+ {
21
+ flow_ref: "proof_risk_signal_alignment",
22
+ recommended_reason: "best path when partner systems need near-real-time signals about review, bridge, or imported-proof trust changes",
23
+ sequence: [
24
+ "inspect_shared_signals_lane_summary",
25
+ "map native proof review and bridge states to shared signal posture",
26
+ "connect trust attention and import attention states to external signal exchange",
27
+ "keep proof acceptance and governance decisions canonical inside xoonya"
28
+ ]
29
+ }
30
+ ],
31
+ guardrails: [
32
+ "shared signals should export proof-side state changes, not replace review or governance logic",
33
+ "signal exchange must remain bounded and reviewable"
34
+ ]
35
+ };
36
+ }
37
+
38
+ function summarizeSharedSignalsLanePack() {
39
+ const pack = buildSharedSignalsLanePack();
40
+ return {
41
+ product: "xoonya",
42
+ category: "proof-shared-signals-lane-pack-summary",
43
+ summary_version: "xoonya-shared-signals-lane-pack-summary-v1",
44
+ lane_state: pack.lane_state,
45
+ standard_count: pack.standards.length,
46
+ signal_family_count: pack.signal_families.length,
47
+ linked_surfaces: pack.supported_surfaces
48
+ };
49
+ }
50
+
51
+ module.exports = {
52
+ buildSharedSignalsLanePack,
53
+ summarizeSharedSignalsLanePack
54
+ };
@@ -1,93 +1,93 @@
1
- "use strict";
2
-
3
- const packageJson = require("../package.json");
4
- const { buildProvenanceLanePack, summarizeProvenanceLanePack } = require("./provenance_lane_contract");
5
- const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
6
-
7
- function buildSignedAuditProvenanceContractPack() {
8
- const provenanceLanePack = buildProvenanceLanePack();
9
- const provenanceLaneSummary = summarizeProvenanceLanePack();
10
- const trustPortabilitySummary = summarizeTrustPortabilityPack();
11
-
12
- return {
13
- ok: true,
14
- product: packageJson.name,
15
- category: "naxytra-signed-audit-provenance-contract",
16
- pack_version: "naxytra-signed-audit-provenance-contract-v1",
17
- doctrine: "xoonya_signs_selected_audit_and_provenance_surfaces_without_collapsing_all_telemetry_into_evidence_truth",
18
- model_state: "core_now",
19
- core_claim: "selected audit and provenance surfaces are signed, exportable, and reviewable evidence channels",
20
- evidence_surfaces: [
21
- { surface_id: "proof_provenance_lane", surface_label: "proof provenance lane", surface_ref: "/v1/provenance", evidence_class: "proof_provenance" },
22
- { surface_id: "proof_bridge_review", surface_label: "proof bridge review", surface_ref: "/v1/proof-bridge", evidence_class: "proof_bridge_review" },
23
- { surface_id: "release_provenance", surface_label: "release provenance", surface_ref: "/v1/provenance", evidence_class: "release_supply_chain_provenance" },
24
- { surface_id: "artifact_distribution_provenance", surface_label: "artifact distribution provenance", surface_ref: "/v1/artifact-distribution", evidence_class: "artifact_supply_chain_provenance" },
25
- { surface_id: "shared_signal_export", surface_label: "shared signal export", surface_ref: "/v1/shared-signals", evidence_class: "shared_signal_export" },
26
- { surface_id: "external_proof_import_review", surface_label: "external proof import review", surface_ref: "/v1/proof-center/result-package-handoff/review/summary", evidence_class: "proof_import_review" }
27
- ],
28
- required_fields: [
29
- "timestamp",
30
- "actor_id",
31
- "action_type",
32
- "source_surface",
33
- "payload_hash",
34
- "signature",
35
- "version"
36
- ],
37
- optional_fields: [
38
- "correlation_id",
39
- "proof_ref",
40
- "anchor_ref",
41
- "settlement_ref",
42
- "metadata"
43
- ],
44
- export_rules: [
45
- "signed_audit_records_may_be_exported_as_evidence",
46
- "provenance_records_may_strengthen_release_and_proof_review",
47
- "logs_without_an_explicit_evidence_class_remain_operational_only",
48
- "signed_records_must_not_silently_become_proof_validity_themselves"
49
- ],
50
- linked_surfaces: {
51
- provenance_ref: "/v1/provenance",
52
- provenance_summary_ref: "/v1/provenance/summary",
53
- proof_bridge_ref: "/v1/proof-bridge",
54
- trust_portability_ref: "/v1/proof-center/trust-portability",
55
- artifact_distribution_ref: "/v1/artifact-distribution",
56
- shared_signals_ref: "/v1/shared-signals"
57
- },
58
- supporting_summary: {
59
- provenance_lane_summary: provenanceLaneSummary,
60
- trust_portability_summary: trustPortabilitySummary
61
- },
62
- claim_boundary: "claim_only_selected_audit_and_provenance_surfaces_as_signed_exportable_evidence_without_claiming_all_logs_are_evidence_grade"
63
- };
64
- }
65
-
66
- function summarizeSignedAuditProvenanceContractPack() {
67
- const pack = buildSignedAuditProvenanceContractPack();
68
- return {
69
- ok: true,
70
- product: pack.product,
71
- category: pack.category,
72
- summary_version: "naxytra-signed-audit-provenance-contract-summary-v1",
73
- pack_version: pack.pack_version,
74
- model_state: pack.model_state,
75
- evidence_surface_count: pack.evidence_surfaces.length,
76
- required_field_count: pack.required_fields.length,
77
- optional_field_count: pack.optional_fields.length,
78
- export_rule_count: pack.export_rules.length,
79
- linked_surfaces: pack.linked_surfaces
80
- };
81
- }
82
-
83
- function getSignedAuditProvenanceSurfaceDetail(surfaceId) {
84
- const normalized = String(surfaceId || "").trim().toLowerCase();
85
- return (buildSignedAuditProvenanceContractPack().evidence_surfaces || []).find((entry) => entry.surface_id === normalized) || null;
86
- }
87
-
88
- module.exports = {
89
- buildSignedAuditProvenanceContractPack,
90
- summarizeSignedAuditProvenanceContractPack,
91
- getSignedAuditProvenanceSurfaceDetail
92
- };
93
-
1
+ "use strict";
2
+
3
+ const packageJson = require("../package.json");
4
+ const { buildProvenanceLanePack, summarizeProvenanceLanePack } = require("./provenance_lane_contract");
5
+ const { summarizeTrustPortabilityPack } = require("./trust_portability_pack");
6
+
7
+ function buildSignedAuditProvenanceContractPack() {
8
+ const provenanceLanePack = buildProvenanceLanePack();
9
+ const provenanceLaneSummary = summarizeProvenanceLanePack();
10
+ const trustPortabilitySummary = summarizeTrustPortabilityPack();
11
+
12
+ return {
13
+ ok: true,
14
+ product: packageJson.name,
15
+ category: "naxytra-signed-audit-provenance-contract",
16
+ pack_version: "naxytra-signed-audit-provenance-contract-v1",
17
+ doctrine: "xoonya_signs_selected_audit_and_provenance_surfaces_without_collapsing_all_telemetry_into_evidence_truth",
18
+ model_state: "core_now",
19
+ core_claim: "selected audit and provenance surfaces are signed, exportable, and reviewable evidence channels",
20
+ evidence_surfaces: [
21
+ { surface_id: "proof_provenance_lane", surface_label: "proof provenance lane", surface_ref: "/v1/provenance", evidence_class: "proof_provenance" },
22
+ { surface_id: "proof_bridge_review", surface_label: "proof bridge review", surface_ref: "/v1/proof-bridge", evidence_class: "proof_bridge_review" },
23
+ { surface_id: "release_provenance", surface_label: "release provenance", surface_ref: "/v1/provenance", evidence_class: "release_supply_chain_provenance" },
24
+ { surface_id: "artifact_distribution_provenance", surface_label: "artifact distribution provenance", surface_ref: "/v1/artifact-distribution", evidence_class: "artifact_supply_chain_provenance" },
25
+ { surface_id: "shared_signal_export", surface_label: "shared signal export", surface_ref: "/v1/shared-signals", evidence_class: "shared_signal_export" },
26
+ { surface_id: "external_proof_import_review", surface_label: "external proof import review", surface_ref: "/v1/proof-center/result-package-handoff/review/summary", evidence_class: "proof_import_review" }
27
+ ],
28
+ required_fields: [
29
+ "timestamp",
30
+ "actor_id",
31
+ "action_type",
32
+ "source_surface",
33
+ "payload_hash",
34
+ "signature",
35
+ "version"
36
+ ],
37
+ optional_fields: [
38
+ "correlation_id",
39
+ "proof_ref",
40
+ "anchor_ref",
41
+ "settlement_ref",
42
+ "metadata"
43
+ ],
44
+ export_rules: [
45
+ "signed_audit_records_may_be_exported_as_evidence",
46
+ "provenance_records_may_strengthen_release_and_proof_review",
47
+ "logs_without_an_explicit_evidence_class_remain_operational_only",
48
+ "signed_records_must_not_silently_become_proof_validity_themselves"
49
+ ],
50
+ linked_surfaces: {
51
+ provenance_ref: "/v1/provenance",
52
+ provenance_summary_ref: "/v1/provenance/summary",
53
+ proof_bridge_ref: "/v1/proof-bridge",
54
+ trust_portability_ref: "/v1/proof-center/trust-portability",
55
+ artifact_distribution_ref: "/v1/artifact-distribution",
56
+ shared_signals_ref: "/v1/shared-signals"
57
+ },
58
+ supporting_summary: {
59
+ provenance_lane_summary: provenanceLaneSummary,
60
+ trust_portability_summary: trustPortabilitySummary
61
+ },
62
+ claim_boundary: "claim_only_selected_audit_and_provenance_surfaces_as_signed_exportable_evidence_without_claiming_all_logs_are_evidence_grade"
63
+ };
64
+ }
65
+
66
+ function summarizeSignedAuditProvenanceContractPack() {
67
+ const pack = buildSignedAuditProvenanceContractPack();
68
+ return {
69
+ ok: true,
70
+ product: pack.product,
71
+ category: pack.category,
72
+ summary_version: "naxytra-signed-audit-provenance-contract-summary-v1",
73
+ pack_version: pack.pack_version,
74
+ model_state: pack.model_state,
75
+ evidence_surface_count: pack.evidence_surfaces.length,
76
+ required_field_count: pack.required_fields.length,
77
+ optional_field_count: pack.optional_fields.length,
78
+ export_rule_count: pack.export_rules.length,
79
+ linked_surfaces: pack.linked_surfaces
80
+ };
81
+ }
82
+
83
+ function getSignedAuditProvenanceSurfaceDetail(surfaceId) {
84
+ const normalized = String(surfaceId || "").trim().toLowerCase();
85
+ return (buildSignedAuditProvenanceContractPack().evidence_surfaces || []).find((entry) => entry.surface_id === normalized) || null;
86
+ }
87
+
88
+ module.exports = {
89
+ buildSignedAuditProvenanceContractPack,
90
+ summarizeSignedAuditProvenanceContractPack,
91
+ getSignedAuditProvenanceSurfaceDetail
92
+ };
93
+
@@ -1,54 +1,54 @@
1
- "use strict";
2
-
3
- function buildTelemetryLanePack() {
4
- return {
5
- product: "xoonya",
6
- category: "proof-telemetry-lane-pack",
7
- pack_version: "xoonya-telemetry-lane-pack-v1",
8
- lane_state: "first_party_observability_lane_present",
9
- posture: "proof_followthrough_observability_and_scale_signal_lane",
10
- standards: ["opentelemetry"],
11
- core_signals: ["review_traces", "verification_metrics", "bridge_logs", "proof_events"],
12
- supported_surfaces: {
13
- cloudevents_ref: "/cloudevents.json",
14
- asyncapi_ref: "/asyncapi.json",
15
- proof_bridge_ref: "/v1/proof-bridge",
16
- result_package_trust_ref: "/v1/result-package-trust",
17
- integration_matrix_ref: "/v1/integration-matrix"
18
- },
19
- first_run_flows: [
20
- {
21
- flow_ref: "proof_observability_alignment",
22
- recommended_reason: "best path for operators who need review, verification, and bridge visibility at production scale",
23
- sequence: [
24
- "inspect_telemetry_lane_summary",
25
- "align proof events to cloudevents and asyncapi",
26
- "map review and verification signals to observability tooling",
27
- "keep proof validation canonical while exporting useful operational signals"
28
- ]
29
- }
30
- ],
31
- guardrails: [
32
- "telemetry should improve proof-side observability without redefining proof validity",
33
- "review and verification diagnostics should remain subordinate to canonical proof semantics"
34
- ]
35
- };
36
- }
37
-
38
- function summarizeTelemetryLanePack() {
39
- const pack = buildTelemetryLanePack();
40
- return {
41
- product: "xoonya",
42
- category: "proof-telemetry-lane-pack-summary",
43
- summary_version: "xoonya-telemetry-lane-pack-summary-v1",
44
- lane_state: pack.lane_state,
45
- standard_count: pack.standards.length,
46
- signal_count: pack.core_signals.length,
47
- linked_surfaces: pack.supported_surfaces
48
- };
49
- }
50
-
51
- module.exports = {
52
- buildTelemetryLanePack,
53
- summarizeTelemetryLanePack
54
- };
1
+ "use strict";
2
+
3
+ function buildTelemetryLanePack() {
4
+ return {
5
+ product: "xoonya",
6
+ category: "proof-telemetry-lane-pack",
7
+ pack_version: "xoonya-telemetry-lane-pack-v1",
8
+ lane_state: "first_party_observability_lane_present",
9
+ posture: "proof_followthrough_observability_and_scale_signal_lane",
10
+ standards: ["opentelemetry"],
11
+ core_signals: ["review_traces", "verification_metrics", "bridge_logs", "proof_events"],
12
+ supported_surfaces: {
13
+ cloudevents_ref: "/cloudevents.json",
14
+ asyncapi_ref: "/asyncapi.json",
15
+ proof_bridge_ref: "/v1/proof-bridge",
16
+ result_package_trust_ref: "/v1/result-package-trust",
17
+ integration_matrix_ref: "/v1/integration-matrix"
18
+ },
19
+ first_run_flows: [
20
+ {
21
+ flow_ref: "proof_observability_alignment",
22
+ recommended_reason: "best path for operators who need review, verification, and bridge visibility at production scale",
23
+ sequence: [
24
+ "inspect_telemetry_lane_summary",
25
+ "align proof events to cloudevents and asyncapi",
26
+ "map review and verification signals to observability tooling",
27
+ "keep proof validation canonical while exporting useful operational signals"
28
+ ]
29
+ }
30
+ ],
31
+ guardrails: [
32
+ "telemetry should improve proof-side observability without redefining proof validity",
33
+ "review and verification diagnostics should remain subordinate to canonical proof semantics"
34
+ ]
35
+ };
36
+ }
37
+
38
+ function summarizeTelemetryLanePack() {
39
+ const pack = buildTelemetryLanePack();
40
+ return {
41
+ product: "xoonya",
42
+ category: "proof-telemetry-lane-pack-summary",
43
+ summary_version: "xoonya-telemetry-lane-pack-summary-v1",
44
+ lane_state: pack.lane_state,
45
+ standard_count: pack.standards.length,
46
+ signal_count: pack.core_signals.length,
47
+ linked_surfaces: pack.supported_surfaces
48
+ };
49
+ }
50
+
51
+ module.exports = {
52
+ buildTelemetryLanePack,
53
+ summarizeTelemetryLanePack
54
+ };
@@ -1,83 +1,83 @@
1
- "use strict";
2
-
3
- const {
4
- buildPhase9TreasuryConnectivityPack,
5
- summarizePhase9TreasuryConnectivityPack
6
- } = require("./phase_9_treasury_connectivity_pack");
7
- const {
8
- buildProofBridgeLanePack,
9
- summarizeProofBridgeLanePack
10
- } = require("./proof_bridge_lane_contract");
11
-
12
- function buildTreasuryProofLanePack() {
13
- return {
14
- product: "xoonya",
15
- category: "proof-treasury-lane-pack",
16
- pack_version: "xoonya-treasury-lane-pack-v1",
17
- lane_state: "first_party_treasury_proof_connectivity_present",
18
- posture: "treasury_destination_and_accounting_evidence_followthrough_lane",
19
- phase_alignment: {
20
- connectivity: {
21
- pack: buildPhase9TreasuryConnectivityPack(),
22
- summary: summarizePhase9TreasuryConnectivityPack()
23
- },
24
- proof_bridge: {
25
- pack: buildProofBridgeLanePack(),
26
- summary: summarizeProofBridgeLanePack()
27
- }
28
- },
29
- reserve_doctrine: {
30
- strategic_native_treasury: "bsv_teranode",
31
- stable_operating_reserves: ["dai", "usdc"],
32
- optional_hidden_privacy_reserve: "monero",
33
- privacy_guardrails: [
34
- "monero_never_becomes_public_treasury_identity",
35
- "monero_never_replaces_compliant_accounting_evidence",
36
- "monero_only_exists_as_internal_optional_reserve_technique_where_operator_policy_explicitly_allows_it"
37
- ]
38
- },
39
- supported_surfaces: {
40
- phase_summary_ref: "/v1/phases/phase-9/summary",
41
- treasury_destinations_proof_summary_ref: "/v1/phases/phase-9/treasury-destinations/proof/summary",
42
- custody_refs_proof_summary_ref: "/v1/phases/phase-9/custody-refs/proof/summary",
43
- operator_accounting_bridges_proof_summary_ref: "/v1/phases/phase-9/operator-accounting-bridges/proof/summary",
44
- treasury_continuity_summary_ref: "/v1/phases/phase-9/treasury-continuity/summary",
45
- proof_bridge_ref: "/v1/proof-bridge/summary"
46
- },
47
- first_run_flows: [
48
- {
49
- flow_ref: "treasury_proof_continuity",
50
- recommended_reason: "best first path for understanding how treasury destinations, custody refs, and accounting bridges stay provable and reviewable",
51
- sequence: [
52
- "inspect_treasury_proof_lane_summary",
53
- "inspect_phase_9_connectivity_summary",
54
- "inspect_treasury_destination_and_accounting_bridge_proof_summaries",
55
- "inspect_proof_bridge_followthrough_for_bounded_review_posture"
56
- ]
57
- }
58
- ],
59
- guardrails: [
60
- "treasury proof lanes should strengthen operator trust without turning xoonya into treasury logic",
61
- "reserve doctrine remains internal while proof continuity remains externally reviewable"
62
- ]
63
- };
64
- }
65
-
66
- function summarizeTreasuryProofLanePack() {
67
- const pack = buildTreasuryProofLanePack();
68
- return {
69
- product: "xoonya",
70
- category: "proof-treasury-lane-pack-summary",
71
- summary_version: "xoonya-treasury-lane-pack-summary-v1",
72
- lane_state: pack.lane_state,
73
- strategic_native_treasury: pack.reserve_doctrine.strategic_native_treasury,
74
- stable_reserve_count: pack.reserve_doctrine.stable_operating_reserves.length,
75
- first_run_flow_count: pack.first_run_flows.length,
76
- linked_surfaces: pack.supported_surfaces
77
- };
78
- }
79
-
80
- module.exports = {
81
- buildTreasuryProofLanePack,
82
- summarizeTreasuryProofLanePack
83
- };
1
+ "use strict";
2
+
3
+ const {
4
+ buildPhase9TreasuryConnectivityPack,
5
+ summarizePhase9TreasuryConnectivityPack
6
+ } = require("./phase_9_treasury_connectivity_pack");
7
+ const {
8
+ buildProofBridgeLanePack,
9
+ summarizeProofBridgeLanePack
10
+ } = require("./proof_bridge_lane_contract");
11
+
12
+ function buildTreasuryProofLanePack() {
13
+ return {
14
+ product: "xoonya",
15
+ category: "proof-treasury-lane-pack",
16
+ pack_version: "xoonya-treasury-lane-pack-v1",
17
+ lane_state: "first_party_treasury_proof_connectivity_present",
18
+ posture: "treasury_destination_and_accounting_evidence_followthrough_lane",
19
+ phase_alignment: {
20
+ connectivity: {
21
+ pack: buildPhase9TreasuryConnectivityPack(),
22
+ summary: summarizePhase9TreasuryConnectivityPack()
23
+ },
24
+ proof_bridge: {
25
+ pack: buildProofBridgeLanePack(),
26
+ summary: summarizeProofBridgeLanePack()
27
+ }
28
+ },
29
+ reserve_doctrine: {
30
+ strategic_native_treasury: "bsv_teranode",
31
+ stable_operating_reserves: ["dai", "usdc"],
32
+ optional_hidden_privacy_reserve: "monero",
33
+ privacy_guardrails: [
34
+ "monero_never_becomes_public_treasury_identity",
35
+ "monero_never_replaces_compliant_accounting_evidence",
36
+ "monero_only_exists_as_internal_optional_reserve_technique_where_operator_policy_explicitly_allows_it"
37
+ ]
38
+ },
39
+ supported_surfaces: {
40
+ phase_summary_ref: "/v1/phases/phase-9/summary",
41
+ treasury_destinations_proof_summary_ref: "/v1/phases/phase-9/treasury-destinations/proof/summary",
42
+ custody_refs_proof_summary_ref: "/v1/phases/phase-9/custody-refs/proof/summary",
43
+ operator_accounting_bridges_proof_summary_ref: "/v1/phases/phase-9/operator-accounting-bridges/proof/summary",
44
+ treasury_continuity_summary_ref: "/v1/phases/phase-9/treasury-continuity/summary",
45
+ proof_bridge_ref: "/v1/proof-bridge/summary"
46
+ },
47
+ first_run_flows: [
48
+ {
49
+ flow_ref: "treasury_proof_continuity",
50
+ recommended_reason: "best first path for understanding how treasury destinations, custody refs, and accounting bridges stay provable and reviewable",
51
+ sequence: [
52
+ "inspect_treasury_proof_lane_summary",
53
+ "inspect_phase_9_connectivity_summary",
54
+ "inspect_treasury_destination_and_accounting_bridge_proof_summaries",
55
+ "inspect_proof_bridge_followthrough_for_bounded_review_posture"
56
+ ]
57
+ }
58
+ ],
59
+ guardrails: [
60
+ "treasury proof lanes should strengthen operator trust without turning xoonya into treasury logic",
61
+ "reserve doctrine remains internal while proof continuity remains externally reviewable"
62
+ ]
63
+ };
64
+ }
65
+
66
+ function summarizeTreasuryProofLanePack() {
67
+ const pack = buildTreasuryProofLanePack();
68
+ return {
69
+ product: "xoonya",
70
+ category: "proof-treasury-lane-pack-summary",
71
+ summary_version: "xoonya-treasury-lane-pack-summary-v1",
72
+ lane_state: pack.lane_state,
73
+ strategic_native_treasury: pack.reserve_doctrine.strategic_native_treasury,
74
+ stable_reserve_count: pack.reserve_doctrine.stable_operating_reserves.length,
75
+ first_run_flow_count: pack.first_run_flows.length,
76
+ linked_surfaces: pack.supported_surfaces
77
+ };
78
+ }
79
+
80
+ module.exports = {
81
+ buildTreasuryProofLanePack,
82
+ summarizeTreasuryProofLanePack
83
+ };