PTSIP 0.3.8a6__tar.gz → 0.3.8b3__tar.gz

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/MANIFEST.in

@@ -1,10 +1,13 @@
 prune src/tests
+include ptsip_build_backend.py
+include ptsip-build-source.json
 recursive-include src/policy *.yaml *.json
 recursive-include src/ptsip/profiles *.ptsip.yaml
 include src/ptsip/profiles/index.yaml
 include registry/project-profile-contracts.yaml
 
 recursive-include src/ptsip/engines *.json
+recursive-include src/ptsip/engines Cargo.toml Cargo.lock *.rs *.yaml
 prune src/ptsip/engines/context/target
 prune src/ptsip/engines/storage/target
 prune src/ptsip/engines/validation/target

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PTSIP
-Version: 0.3.8a6
+Version: 0.3.8b3
 Summary: Reference tooling for primary lifecycle ownership and responsibility isolation
 Author: Kinirin
 Maintainer: Kinirin
@@ -44,18 +44,16 @@ Dynamic: license-file
 
 > **Purpose precedes reuse.** Determine why a responsibility exists and which lifecycle owns it before optimizing how code is shared.
 
-## Current versions and publication status
+## Component versions
 
 | Identity | Source-tree value |
 | --- | --- |
 | PTSIP_Package | `0.3.8.<SHA6>` — composition assigned after successful publication |
-| textTool | `0.3.8a6` — **unpublished prerelease candidate** |
-| Latest published Tool prerelease | `0.3.8a5` |
+| PTSIP_Tool | `0.3.8b1` |
 | Project Profile | `pp.1.02` |
 | Engine | Context/Projection `0.2.0`; Storage/Validation/Discovery/Planning/Execution `0.3.0` |
-| Bound immutable `SPEC_REVISION` | `3c47816770d194ae42f98faedc911d980db0e62a` |
 
-Package composition, Tool, each engine, Project Profile and immutable Specification revision remain independent. Read [what changed in `0.3.8a6`](docs/releasenote/tool/0.3.8a6.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`.
+Package composition, Tool, each engine and Project Profile retain independent versions. The immutable Specification binding is recorded in the canonical composition and shipping manifest. Read [what changed in `0.3.8b1`](docs/releasenote/tool/0.3.8b1.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`. Actual publication state and exact Package composition are recorded in the version-specific release assets.
 
 ## Quick start
 
@@ -69,10 +67,10 @@ ptsip --version
 ptsip spec
 ```
 
-To install the published `0.3.8a5` prerelease specifically (ordinary pip resolution might select the latest stable version instead):
+To install Tool `0.3.8b1` specifically (ordinary pip resolution might select a stable version instead):
 
 ```powershell
-python -m pip install "PTSIP==0.3.8a5"
+python -m pip install "PTSIP==0.3.8b1"
 ```
 
 To develop this repository directly:

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/README.md

@@ -6,18 +6,16 @@
 
 > **Purpose precedes reuse.** Determine why a responsibility exists and which lifecycle owns it before optimizing how code is shared.
 
-## Current versions and publication status
+## Component versions
 
 | Identity | Source-tree value |
 | --- | --- |
 | PTSIP_Package | `0.3.8.<SHA6>` — composition assigned after successful publication |
-| textTool | `0.3.8a6` — **unpublished prerelease candidate** |
-| Latest published Tool prerelease | `0.3.8a5` |
+| PTSIP_Tool | `0.3.8b1` |
 | Project Profile | `pp.1.02` |
 | Engine | Context/Projection `0.2.0`; Storage/Validation/Discovery/Planning/Execution `0.3.0` |
-| Bound immutable `SPEC_REVISION` | `3c47816770d194ae42f98faedc911d980db0e62a` |
 
-Package composition, Tool, each engine, Project Profile and immutable Specification revision remain independent. Read [what changed in `0.3.8a6`](docs/releasenote/tool/0.3.8a6.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`.
+Package composition, Tool, each engine and Project Profile retain independent versions. The immutable Specification binding is recorded in the canonical composition and shipping manifest. Read [what changed in `0.3.8b1`](docs/releasenote/tool/0.3.8b1.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`. Actual publication state and exact Package composition are recorded in the version-specific release assets.
 
 ## Quick start
 
@@ -31,10 +29,10 @@ ptsip --version
 ptsip spec
 ```
 
-To install the published `0.3.8a5` prerelease specifically (ordinary pip resolution might select the latest stable version instead):
+To install Tool `0.3.8b1` specifically (ordinary pip resolution might select a stable version instead):
 
 ```powershell
-python -m pip install "PTSIP==0.3.8a5"
+python -m pip install "PTSIP==0.3.8b1"
 ```
 
 To develop this repository directly:

ptsip-0.3.8b3/ptsip-build-source.json

@@ -0,0 +1,4 @@
+{
+  "schema_version": "ptsip-build-source/v1",
+  "source_sha": "8275490b85a3b685a7840d6fba80783a01b9b2c0"
+}

ptsip-0.3.8b3/ptsip_build_backend.py

@@ -0,0 +1,133 @@
+"""PEP 517 source builds of the complete, single-project PTSIP distribution.
+
+Release wheels are assembled from separately verified native wheels in Go.
+An sdist rebuild compiles the same independently versioned Rust crates locally.
+Neither origin metadata nor installation grants runtime authority.
+"""
+from __future__ import annotations
+
+import base64
+import csv
+import hashlib
+import io
+import json
+import os
+from pathlib import Path
+import platform
+import re
+import subprocess
+import sys
+import sysconfig
+import tempfile
+import tomllib
+import zipfile
+
+from setuptools import build_meta as _setuptools
+
+ROOT = Path(__file__).resolve().parent
+
+
+def _source() -> str:
+    descriptor = ROOT / "ptsip-build-source.json"
+    if descriptor.is_file():
+        source = json.loads(descriptor.read_text())["source_sha"]
+    else:
+        if subprocess.check_output(["git", "status", "--porcelain", "--untracked-files=no"], cwd=ROOT).strip():
+            raise RuntimeError("PTSIP source builds require an exact clean source or the sdist source descriptor")
+        source = subprocess.check_output(["git", "rev-parse", "HEAD"], cwd=ROOT, text=True).strip()
+    if re.fullmatch(r"[0-9a-f]{40}", source) is None:
+        raise RuntimeError("invalid PTSIP source revision")
+    return source
+
+
+def build_sdist(sdist_directory, config_settings=None):
+    descriptor = ROOT / "ptsip-build-source.json"
+    existed = descriptor.exists()
+    source = _source()
+    if not existed:
+        descriptor.write_text(json.dumps({"schema_version": "ptsip-build-source/v1", "source_sha": source}) + "\n")
+    try:
+        return _setuptools.build_sdist(sdist_directory, config_settings)
+    finally:
+        if not existed:
+            descriptor.unlink()
+
+
+def build_wheel(wheel_directory, config_settings=None, metadata_directory=None):
+    source = _source()
+    project = tomllib.loads((ROOT / "pyproject.toml").read_text(encoding="utf-8"))
+    version = project["project"]["version"]
+    if project["project"]["name"] != "PTSIP":
+        raise RuntimeError("the native backend builds PTSIP only")
+    hosts = {
+        ("win32", "amd64"): ("win_amd64", "windows-x64", "x86_64-pc-windows-msvc", ".exe"),
+        ("win32", "x86_64"): ("win_amd64", "windows-x64", "x86_64-pc-windows-msvc", ".exe"),
+        ("linux", "x86_64"): ("linux_x86_64", "linux-x64", "x86_64-unknown-linux-gnu", ""),
+        ("darwin", "arm64"): (sysconfig.get_platform().replace("-", "_").replace(".", "_"), "macos-arm64", "aarch64-apple-darwin", ""),
+    }
+    try:
+        tag, host, target, extension = hosts[(sys.platform, platform.machine().lower())]
+    except KeyError as exc:
+        raise RuntimeError("unsupported PTSIP native build host") from exc
+    index = json.loads((ROOT / "src/ptsip/engines/index.json").read_text())
+    entries = index["official_engine_entries"]
+    versions = project["tool"]["ptsip"]["release"]["engines"]
+    if len(entries) != len(versions) or {e["kind"].lower(): e["version"] for e in entries} != versions:
+        raise RuntimeError("incomplete or stale PTSIP engine inventory")
+    with tempfile.TemporaryDirectory(prefix="ptsip-source-wheel-") as temporary:
+        stage = Path(temporary)
+        pure = _setuptools.build_wheel(str(stage), config_settings, metadata_directory)
+        with zipfile.ZipFile(stage / pure) as archive:
+            files = {name: archive.read(name) for name in archive.namelist()}
+        di = f"ptsip-{version}.dist-info/"
+        files.pop(di + "RECORD", None)
+        origins = {}
+        executables = set()
+        for entry in entries:
+            kind = entry["kind"].lower()
+            manifest = ROOT / f"src/ptsip/engines/{kind}/Cargo.toml"
+            crate = tomllib.loads(manifest.read_text(encoding="utf-8"))
+            if crate["package"]["version"] != entry["version"]:
+                raise RuntimeError("Rust crate version differs from engine registry")
+            build = stage / "cargo" / kind
+            environment = dict(os.environ, CARGO_TARGET_DIR=str(build))
+            subprocess.run(["cargo", "build", "--release", "--locked", "--manifest-path", str(manifest)], cwd=ROOT, env=environment, check=True)
+            command = "ptsip-engine-" + kind + extension
+            binary = (build / "release" / command).read_bytes()
+            name = f"ptsip-{version}.data/scripts/{command}"
+            files[name] = binary
+            executables.add(name)
+            origins[kind] = {
+                "schema_version": "ptsip-independent-wheel-origin/v1",
+                "source_sha": source,
+                "engine_id": entry["engine_id"],
+                "engine_version": entry["version"],
+                "host_target": target,
+                "entrypoint": command,
+                "binary_sha256": hashlib.sha256(binary).hexdigest(),
+                "execution_authorized": False,
+            }
+        bundle = {"schema_version": "ptsip-bundled-engine-origins/v1", "package_version": version, "platform": host, "engines": origins, "execution_authorized": False}
+        files[di + "ptsip-engines.json"] = (json.dumps(bundle, sort_keys=True, indent=2) + "\n").encode()
+        files[di + "WHEEL"] = f"Wheel-Version: 1.0\nGenerator: ptsip-source-build/1\nRoot-Is-Purelib: false\nTag: py3-none-{tag}\n".encode()
+        record = io.StringIO(newline="")
+        writer = csv.writer(record)
+        for name, data in sorted(files.items()):
+            digest = base64.urlsafe_b64encode(hashlib.sha256(data).digest()).decode().rstrip("=")
+            writer.writerow((name, "sha256=" + digest, str(len(data))))
+        writer.writerow((di + "RECORD", "", ""))
+        files[di + "RECORD"] = record.getvalue().encode()
+        output = Path(wheel_directory) / f"ptsip-{version}-py3-none-{tag}.whl"
+        with zipfile.ZipFile(output, "w", compression=zipfile.ZIP_DEFLATED) as archive:
+            for name, data in sorted(files.items()):
+                info = zipfile.ZipInfo(name, (2020, 1, 1, 0, 0, 0))
+                info.create_system = 3
+                info.external_attr = (0o100755 if name in executables else 0o100644) << 16
+                info.compress_type = zipfile.ZIP_DEFLATED
+                archive.writestr(info, data)
+        return output.name
+
+
+get_requires_for_build_wheel = _setuptools.get_requires_for_build_wheel
+get_requires_for_build_sdist = _setuptools.get_requires_for_build_sdist
+prepare_metadata_for_build_wheel = _setuptools.prepare_metadata_for_build_wheel

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/pyproject.toml

@@ -1,10 +1,11 @@
 [build-system]
 requires = ["setuptools>=77.0.3", "PyYAML>=6.0,<7"]
-build-backend = "setuptools.build_meta"
+build-backend = "ptsip_build_backend"
+backend-path = ["."]
 
 [project]
 name = "PTSIP"
-version = "0.3.8a6"
+version = "0.3.8b3"
 description = "Reference tooling for primary lifecycle ownership and responsibility isolation"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -45,7 +46,8 @@ ptsip-app = "ptsip.app.server:main"
 [tool.setuptools.packages.find]
 where = ["src"]
 include = ["ptsip*", "vpms*", "agent_contracts*"]
-exclude = ["tests*", "ptsip.profiles.history*", "ptsip.engines*"]
+exclude = ["tests*", "ptsip.profiles.history*"]
+namespaces = false
 
 [tool.setuptools.package-data]
 "ptsip.profiles" = ["index.yaml", "*.ptsip.yaml"]
@@ -54,6 +56,7 @@ vpms = [
   "contracts/schemas/*.json",
 ]
 ptsip = [
+  "package-distribution.json",
   "engines/index.json",
   "engines/*/*.json",
   "engines/contracts/*.json",
@@ -109,18 +112,26 @@ dev = [
 # Canonical current composition. Published snapshots are recorded separately
 # after their original-source artifacts and publication state are verified.
 [tool.ptsip.release]
-schema_version = "ptsip-current-composition/v1"
+schema_version = "ptsip-current-composition/v3"
 package_base = "0.3.8"
-tool_version_ref = "project.version"
+package_release_version = "0.3.8.b3"
+tool_version_ref = "tool.ptsip.release.tool_version"
+tool_version = "T.0.3.8.b3"
 profile_version = "pp.1.02"
 specification_source = "https://github.com/Kinirin/PTSIP"
 spec_revision = "3c47816770d194ae42f98faedc911d980db0e62a"
 
 [tool.ptsip.release.engines]
-context = "0.2.0"
-storage = "0.3.0"
-validation = "0.3.0"
-discovery = "0.3.0"
-planning = "0.3.0"
-execution = "0.3.0"
-projection = "0.2.0"
+context = "0.2.1"
+storage = "0.3.1"
+validation = "0.3.1"
+discovery = "0.3.1"
+planning = "0.3.1"
+execution = "0.3.1"
+projection = "0.2.1"
+
+[tool.ptsip.release.published]
+identity = "0.3.8.fa660a"
+composition_sha256 = "fa660aac1b7bef6b3692d8b54ce447472b666560ea2c87eb84d2159543be20a3"
+source_sha = "7c493c0484614885c6d92b9f41562b16273c6682"
+release_tag = "ptsip-release-7c493c0484614885c6d92b9f41562b16273c6682"

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/src/PTSIP.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PTSIP
-Version: 0.3.8a6
+Version: 0.3.8b3
 Summary: Reference tooling for primary lifecycle ownership and responsibility isolation
 Author: Kinirin
 Maintainer: Kinirin
@@ -44,18 +44,16 @@ Dynamic: license-file
 
 > **Purpose precedes reuse.** Determine why a responsibility exists and which lifecycle owns it before optimizing how code is shared.
 
-## Current versions and publication status
+## Component versions
 
 | Identity | Source-tree value |
 | --- | --- |
 | PTSIP_Package | `0.3.8.<SHA6>` — composition assigned after successful publication |
-| textTool | `0.3.8a6` — **unpublished prerelease candidate** |
-| Latest published Tool prerelease | `0.3.8a5` |
+| PTSIP_Tool | `0.3.8b1` |
 | Project Profile | `pp.1.02` |
 | Engine | Context/Projection `0.2.0`; Storage/Validation/Discovery/Planning/Execution `0.3.0` |
-| Bound immutable `SPEC_REVISION` | `3c47816770d194ae42f98faedc911d980db0e62a` |
 
-Package composition, Tool, each engine, Project Profile and immutable Specification revision remain independent. Read [what changed in `0.3.8a6`](docs/releasenote/tool/0.3.8a6.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`.
+Package composition, Tool, each engine and Project Profile retain independent versions. The immutable Specification binding is recorded in the canonical composition and shipping manifest. Read [what changed in `0.3.8b1`](docs/releasenote/tool/0.3.8b1.md), the [Tool release history](docs/releasenote/tool/README.md), or [the release workflow](.github/workflows/tooling-release.yml). Release verification is selected from `.github/test_modes.yaml` and runs exclusively in `tooling-test.yml`; publication consumes that exact-source evidence in `tooling-release.yml`. Actual publication state and exact Package composition are recorded in the version-specific release assets.
 
 ## Quick start
 
@@ -69,10 +67,10 @@ ptsip --version
 ptsip spec
 ```
 
-To install the published `0.3.8a5` prerelease specifically (ordinary pip resolution might select the latest stable version instead):
+To install Tool `0.3.8b1` specifically (ordinary pip resolution might select a stable version instead):
 
 ```powershell
-python -m pip install "PTSIP==0.3.8a5"
+python -m pip install "PTSIP==0.3.8b1"
 ```
 
 To develop this repository directly:

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/src/PTSIP.egg-info/SOURCES.txt

@@ -1,5 +1,7 @@
 MANIFEST.in
 README.md
+ptsip-build-source.json
+ptsip_build_backend.py
 pyproject.toml
 setup.py
 License-Authority/COMMERCIAL-USE.md
@@ -236,6 +238,7 @@ src/ptsip/doctor.py
 src/ptsip/engine_installation.py
 src/ptsip/lifecycle_evidence.py
 src/ptsip/model.py
+src/ptsip/package-distribution.json
 src/ptsip/proposed_component.py
 src/ptsip/review_evidence.py
 src/ptsip/spec_identity.py
@@ -292,12 +295,18 @@ src/ptsip/clarification/resolution/resolver.py
 src/ptsip/clarification/transports/__init__.py
 src/ptsip/clarification/transports/github_issue.py
 src/ptsip/engines/index.json
+src/ptsip/engines/context/Cargo.lock
+src/ptsip/engines/context/Cargo.toml
 src/ptsip/engines/context/contract.json
 src/ptsip/engines/context/execution-bindings.json
 src/ptsip/engines/context/manifest.json
 src/ptsip/engines/context/runtime-contracts.json
 src/ptsip/engines/context/transport.json
+src/ptsip/engines/context/version.yaml
 src/ptsip/engines/context/contracts/1.0.0.json
+src/ptsip/engines/context/src/loading.rs
+src/ptsip/engines/context/src/main.rs
+src/ptsip/engines/context/src/source.rs
 src/ptsip/engines/contracts/capability-owner-map.json
 src/ptsip/engines/contracts/context-projection-handoff.json
 src/ptsip/engines/contracts/dependency-graph.json
@@ -328,51 +337,95 @@ src/ptsip/engines/contracts/schemas/stop-request.schema.json
 src/ptsip/engines/contracts/schemas/stop-result.schema.json
 src/ptsip/engines/contracts/schemas/storage-mediation.schema.json
 src/ptsip/engines/contracts/schemas/transport-binding.schema.json
+src/ptsip/engines/discovery/Cargo.lock
+src/ptsip/engines/discovery/Cargo.toml
 src/ptsip/engines/discovery/contract.json
 src/ptsip/engines/discovery/execution-bindings.json
 src/ptsip/engines/discovery/manifest.json
 src/ptsip/engines/discovery/runtime-contracts.json
 src/ptsip/engines/discovery/transport.json
+src/ptsip/engines/discovery/version.yaml
 src/ptsip/engines/discovery/contracts/1.0.0.json
 src/ptsip/engines/discovery/contracts/2.0.0.json
+src/ptsip/engines/discovery/src/invocation.rs
+src/ptsip/engines/discovery/src/main.rs
+src/ptsip/engines/discovery/src/registry.rs
+src/ptsip/engines/discovery/src/source.rs
+src/ptsip/engines/execution/Cargo.lock
+src/ptsip/engines/execution/Cargo.toml
 src/ptsip/engines/execution/contract.json
 src/ptsip/engines/execution/execution-bindings.json
 src/ptsip/engines/execution/manifest.json
 src/ptsip/engines/execution/runtime-contracts.json
 src/ptsip/engines/execution/transport.json
+src/ptsip/engines/execution/version.yaml
 src/ptsip/engines/execution/contracts/1.0.0.json
 src/ptsip/engines/execution/contracts/2.0.0.json
+src/ptsip/engines/execution/src/authority.rs
+src/ptsip/engines/execution/src/effect.rs
+src/ptsip/engines/execution/src/invocation.rs
+src/ptsip/engines/execution/src/main.rs
+src/ptsip/engines/execution/src/source.rs
+src/ptsip/engines/planning/Cargo.lock
+src/ptsip/engines/planning/Cargo.toml
 src/ptsip/engines/planning/contract.json
 src/ptsip/engines/planning/execution-bindings.json
 src/ptsip/engines/planning/manifest.json
 src/ptsip/engines/planning/runtime-contracts.json
 src/ptsip/engines/planning/transport.json
+src/ptsip/engines/planning/version.yaml
 src/ptsip/engines/planning/contracts/1.0.0.json
 src/ptsip/engines/planning/contracts/2.0.0.json
+src/ptsip/engines/planning/src/impact.rs
+src/ptsip/engines/planning/src/installation.rs
+src/ptsip/engines/planning/src/main.rs
+src/ptsip/engines/planning/src/preparation.rs
+src/ptsip/engines/planning/src/source.rs
+src/ptsip/engines/projection/Cargo.lock
+src/ptsip/engines/projection/Cargo.toml
 src/ptsip/engines/projection/contract.json
 src/ptsip/engines/projection/execution-bindings.json
 src/ptsip/engines/projection/manifest.json
 src/ptsip/engines/projection/runtime-contracts.json
 src/ptsip/engines/projection/transport.json
+src/ptsip/engines/projection/version.yaml
 src/ptsip/engines/projection/contracts/1.0.0.json
+src/ptsip/engines/projection/src/main.rs
+src/ptsip/engines/projection/src/rendering.rs
+src/ptsip/engines/projection/src/source.rs
 src/ptsip/engines/registries/derived-snapshot.json
 src/ptsip/engines/registries/official-execution.json
 src/ptsip/engines/registries/official-static.json
+src/ptsip/engines/storage/Cargo.lock
+src/ptsip/engines/storage/Cargo.toml
 src/ptsip/engines/storage/contract.json
 src/ptsip/engines/storage/execution-bindings.json
 src/ptsip/engines/storage/manifest.json
 src/ptsip/engines/storage/provider-registry.json
 src/ptsip/engines/storage/runtime-contracts.json
 src/ptsip/engines/storage/transport.json
+src/ptsip/engines/storage/version.yaml
 src/ptsip/engines/storage/contracts/1.0.0.json
 src/ptsip/engines/storage/contracts/2.0.0.json
+src/ptsip/engines/storage/src/main.rs
+src/ptsip/engines/storage/src/native.rs
+src/ptsip/engines/storage/src/provider.rs
+src/ptsip/engines/storage/src/source.rs
+src/ptsip/engines/validation/Cargo.lock
+src/ptsip/engines/validation/Cargo.toml
 src/ptsip/engines/validation/contract.json
 src/ptsip/engines/validation/execution-bindings.json
 src/ptsip/engines/validation/manifest.json
 src/ptsip/engines/validation/runtime-contracts.json
 src/ptsip/engines/validation/transport.json
+src/ptsip/engines/validation/version.yaml
 src/ptsip/engines/validation/contracts/1.0.0.json
 src/ptsip/engines/validation/contracts/2.0.0.json
+src/ptsip/engines/validation/src/cases.rs
+src/ptsip/engines/validation/src/composition.rs
+src/ptsip/engines/validation/src/handoff.rs
+src/ptsip/engines/validation/src/main.rs
+src/ptsip/engines/validation/src/source.rs
 src/ptsip/evidence/__init__.py
 src/ptsip/evidence/adapters.py
 src/ptsip/evidence/contract.py
@@ -491,8 +544,6 @@ src/ptsip/remediation/escalation/contract.py
 src/ptsip/remediation/escalation/engine.py
 src/ptsip/remediation/rules/__init__.py
 src/ptsip/remediation/rules/contract.py
-src/ptsip/remediation/solution/candidate.py
-src/ptsip/remediation/solution/elimination.py
 src/ptsip/repository/__init__.py
 src/ptsip/repository/discover.py
 src/ptsip/repository/namespace.py

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/src/policy/CNTR/SFP-CNTR-0005.yaml

@@ -54,7 +54,8 @@
         ],
         "contract_permission_declaration_is_grant": false,
         "engine_version_independence": "PER_ENGINE_FROM_PTSIP_TOOL_AND_SCHEMA_VERSION",
-        "official_distribution": "AUTO_INSTALLED_INDEPENDENT_PACKAGES_ONLY",
+        "official_distribution": "PTSIP_PLATFORM_WHEEL_WITH_INDEPENDENT_VERSIONED_ENGINE_ARTIFACTS",
+        "official_distribution_contract_ref": "src/ptsip/package-distribution.json",
         "mandatory_official_engine_availability": "ALL_SEVEN_BY_DEFAULT",
         "registry_topology": "FEDERATED_OFFICIAL_CONSUMER_EXTERNAL_OWNERSHIP_PRESERVED",
         "resolver_selection": "HONOR_EXPLICIT_CHOICE_OR_MACHINE_RESOLVE_WITH_APPROVED_CONTRACTS",

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/src/ptsip/constants.py

@@ -1,7 +1,7 @@
 from __future__ import annotations
 
 TOOL_NAME = "PTSIP Tool"
-TOOL_VERSION = "0.3.8a6"
+TOOL_VERSION = "T.0.3.8.b3"
 SPEC_NAME = "Primary Lifecycle Ownership and Responsibility Isolation Policy"
 SPEC_ACRONYM = "PTSIP"
 SPEC_VERSION = "0.3.7-draft"

{ptsip-0.3.8a6 → ptsip-0.3.8b3}/src/ptsip/engine_installation.py

@@ -9,6 +9,7 @@ import hashlib
 import json
 import os
 import platform
+import re
 import sys
 import sysconfig
 from importlib import metadata, resources
@@ -37,6 +38,41 @@ def _sha256(path: Path) -> str:
     return digest.hexdigest()
 
 
+def _bundle(items: list[dict[str, Any]]) -> tuple[Any, dict[str, Any]] | None:
+    """A broken installed bundle must not fall back to another distribution."""
+    try:
+        distribution = metadata.distribution("PTSIP")
+    except metadata.PackageNotFoundError:
+        return None
+    text = distribution.read_text("ptsip-engines.json")
+    if text is None:
+        return None
+    try:
+        bundle = json.loads(text)
+        origins = bundle["engines"]
+        if (
+            bundle["schema_version"] != "ptsip-bundled-engine-origins/v1"
+            or bundle["package_version"] != distribution.version
+            or bundle["execution_authorized"] is not False
+            or set(origins) != {entry["kind"].lower() for entry in items}
+            or len(origins) != len(items)
+        ):
+            raise ValueError("incomplete or incompatible PTSIP engine bundle")
+        for entry in items:
+            origin = origins[entry["kind"].lower()]
+            if (
+                origin["schema_version"] != "ptsip-independent-wheel-origin/v1"
+                or origin["engine_id"] != entry["engine_id"]
+                or origin["engine_version"] != entry["version"]
+                or origin["execution_authorized"] is not False
+                or re.fullmatch(r"[0-9a-f]{40}", origin["source_sha"]) is None
+            ):
+                raise ValueError("PTSIP bundled engine identity differs")
+        return distribution, bundle
+    except (KeyError, TypeError, json.JSONDecodeError) as exc:
+        raise ValueError("PTSIP bundled engine metadata is invalid") from exc
+
+
 def inspect(
     *,
     index: dict[str, Any] | None = None,
@@ -60,6 +96,7 @@ def inspect(
         (sys.platform, platform.machine().lower())
     )
     scripts = scripts or Path(sysconfig.get_path("scripts"))
+    bundled = _bundle(items)
     entries: list[dict[str, Any]] = []
     for entry in items:
         kind, engine_id, version = entry["kind"], entry["engine_id"], entry["version"]
@@ -91,13 +128,20 @@ def inspect(
             row["status"] = "UNSUPPORTED_HOST"
             entries.append(row)
             continue
-        try:
-            distribution = metadata.distribution(package_name)
-        except metadata.PackageNotFoundError:
-            entries.append(row)
-            continue
-        row["installed_version"] = distribution.version
-        if distribution.version != version:
+        if bundled is not None:
+            distribution, bundle = bundled
+            origin = bundle["engines"][kind.lower()]
+            row["package"] = "PTSIP"
+            row["package_version"] = distribution.version
+            row["installed_version"] = origin["engine_version"]
+        else:
+            try:
+                distribution = metadata.distribution(package_name)
+            except metadata.PackageNotFoundError:
+                entries.append(row)
+                continue
+            row["installed_version"] = distribution.version
+        if row["installed_version"] != version:
             row["status"] = "VERSION_MISMATCH"
             entries.append(row)
             continue
@@ -108,8 +152,9 @@ def inspect(
             entries.append(row)
             continue
         try:
-            origin_text = distribution.read_text("ptsip-origin.json")
-            origin = json.loads(origin_text or "")
+            if bundled is None:
+                origin_text = distribution.read_text("ptsip-origin.json")
+                origin = json.loads(origin_text or "")
             if (
                 origin["engine_id"] != engine_id
                 or origin["engine_version"] != version
@@ -123,13 +168,14 @@ def inspect(
             else:
                 row["status"] = "INSTALLED_UNATTESTED_RELEASE"
                 row["binary_sha256"] = origin["binary_sha256"]
+                row["source_sha"] = origin["source_sha"]
         except (OSError, json.JSONDecodeError, KeyError, TypeError, ValueError):
             row["status"] = "ORIGIN_PROOF_MISSING_OR_INVALID"
         entries.append(row)
     return {
         "schema_version": "ptsip-official-engine-consumer-status/v1",
         "host_target": host_target,
-        "distribution": "AUTO_INSTALLED_INDEPENDENT_PACKAGES_ONLY",
+        "distribution": "SINGLE_PROJECT_PLATFORM_BUNDLES" if bundled else "AUTO_INSTALLED_INDEPENDENT_PACKAGES_ONLY",
         "entries": entries,
         "all_installed": all(e["status"] == "INSTALLED_UNATTESTED_RELEASE" for e in entries),
         "release_attested": False,