agent-lifecycle-kit 2.23.0__tar.gz → 2.25.0__tar.gz

{agent_lifecycle_kit-2.23.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.25.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.23.0
+Version: 2.25.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -30,20 +30,18 @@ Dynamic: license-file
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
 ![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable
-finish. It keeps the requested outcome, reviewed plan, execution boundaries,
-evidence and acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
+acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose,
-OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice
-and secret handling stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
+stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.23.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -57,8 +55,7 @@ agent-lifecycle version
 agent-lifecycle diagnose --no-install-plans
 ```
 
-Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md)
-and pass a task from a file:
+Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md) and pass a task from a file:
 
 ```bash
 agent-lifecycle start --adapter <adapter-id> --file task.md
@@ -152,16 +149,12 @@ agent-lifecycle start --adapter <adapter-id> --file task.md
 
 ## Adapter support level
 
-The adapter support level describes how much of the ALK integration is verified
-for a specific host. It covers the declared CLI/version, command projection,
-environment boundary, live conformance, resource calibration and accepted ALK
-lifecycle evidence. It describes the checked integration range; it is not a
-rating of the host model or of the external product.
+The adapter support level describes how much of the ALK integration is verified for a specific host. It covers the declared CLI/version, command projection, environment boundary,
+live conformance, resource calibration and accepted ALK lifecycle evidence. It describes the checked integration range; it is not a rating of the host model or of the external
+product.
 
-Accepted lifecycle artifacts include the reviewed plan and lock, state and task
-receipts, validation and evidence summaries, independent plan and implementation
-audits, and final proof. Host launch routes add usage, resource and containment
-receipts for the exact adapter/version binding.
+Accepted lifecycle artifacts include the reviewed plan and lock, state and task receipts, validation and evidence summaries, independent plan and implementation audits, and final
+proof. Host launch routes add usage, resource and containment receipts for the exact adapter/version binding.
 
 `EXPERIMENTAL` marks an adapter with offline checks and deterministic contract
 tests. `VERIFIED` adds bounded live host conformance, usage/resource calibration,
@@ -200,3 +193,10 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Profiles and operations: [Project workflow presets](docs/reference/workflow-presets.md), [Project workflow profile](docs/reference/project-workflow-profile.md), [Read-only status views](docs/reference/read-only-status-view.md), [Adapter progress bridge](docs/reference/automatic-progress-bridge.md), [Sandbox boundaries](docs/reference/sandbox-boundaries.md), [Import mappers](docs/reference/import-mappers.md), [Episode retrieval](docs/reference/episode-retrieval.md), [Runner migration](docs/guides/runner-migration-2.md), [Runner recovery records](docs/reference/runner-recovery.md), [Cross-check profile](docs/reference/cross-check-profile.md), [Review Mesh](docs/reference/review-mesh.md), [Risk-bound independent verification](docs/reference/risk-bound-independent-verification.md), [Bug Forensics profile](docs/reference/bug-forensics.md), and [Bug Forensics context budget](docs/reference/bug-forensics-context-budget.md).
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
+
+## Release 2.25: focused security and maintainability
+
+Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
+controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
+pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
+qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/README.md

@@ -8,20 +8,18 @@
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
 ![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable
-finish. It keeps the requested outcome, reviewed plan, execution boundaries,
-evidence and acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
+acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose,
-OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice
-and secret handling stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
+stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.23.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -35,8 +33,7 @@ agent-lifecycle version
 agent-lifecycle diagnose --no-install-plans
 ```
 
-Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md)
-and pass a task from a file:
+Choose `<adapter-id>` from the [adapter support matrix](docs/adapters/support-matrix.md) and pass a task from a file:
 
 ```bash
 agent-lifecycle start --adapter <adapter-id> --file task.md
@@ -130,16 +127,12 @@ agent-lifecycle start --adapter <adapter-id> --file task.md
 
 ## Adapter support level
 
-The adapter support level describes how much of the ALK integration is verified
-for a specific host. It covers the declared CLI/version, command projection,
-environment boundary, live conformance, resource calibration and accepted ALK
-lifecycle evidence. It describes the checked integration range; it is not a
-rating of the host model or of the external product.
+The adapter support level describes how much of the ALK integration is verified for a specific host. It covers the declared CLI/version, command projection, environment boundary,
+live conformance, resource calibration and accepted ALK lifecycle evidence. It describes the checked integration range; it is not a rating of the host model or of the external
+product.
 
-Accepted lifecycle artifacts include the reviewed plan and lock, state and task
-receipts, validation and evidence summaries, independent plan and implementation
-audits, and final proof. Host launch routes add usage, resource and containment
-receipts for the exact adapter/version binding.
+Accepted lifecycle artifacts include the reviewed plan and lock, state and task receipts, validation and evidence summaries, independent plan and implementation audits, and final
+proof. Host launch routes add usage, resource and containment receipts for the exact adapter/version binding.
 
 `EXPERIMENTAL` marks an adapter with offline checks and deterministic contract
 tests. `VERIFIED` adds bounded live host conformance, usage/resource calibration,
@@ -178,3 +171,10 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Profiles and operations: [Project workflow presets](docs/reference/workflow-presets.md), [Project workflow profile](docs/reference/project-workflow-profile.md), [Read-only status views](docs/reference/read-only-status-view.md), [Adapter progress bridge](docs/reference/automatic-progress-bridge.md), [Sandbox boundaries](docs/reference/sandbox-boundaries.md), [Import mappers](docs/reference/import-mappers.md), [Episode retrieval](docs/reference/episode-retrieval.md), [Runner migration](docs/guides/runner-migration-2.md), [Runner recovery records](docs/reference/runner-recovery.md), [Cross-check profile](docs/reference/cross-check-profile.md), [Review Mesh](docs/reference/review-mesh.md), [Risk-bound independent verification](docs/reference/risk-bound-independent-verification.md), [Bug Forensics profile](docs/reference/bug-forensics.md), and [Bug Forensics context budget](docs/reference/bug-forensics-context-budget.md).
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
+
+## Release 2.25: focused security and maintainability
+
+Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
+controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
+pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
+qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.23.0"
+version = "2.25.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"
@@ -76,6 +76,7 @@ python_version = "3.11"
 files = ["src/agent_lifecycle"]
 ignore_missing_imports = true
 show_error_codes = true
+check_untyped_defs = true
 
 [tool.setuptools.data-files]
 "benchmarks/reference-tasks" = [

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.23.0"
+__version__ = "2.25.0"

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/closing_resource_recovery.py

@@ -1,4 +1,4 @@
-"""Closing resource reconstruction and private financial transaction primitives.
+"""Closing resource reconstruction and retained financial compatibility exports.
 
 The reconstruction is diagnostic. The private primitives only mutate an already
 admitted Journal transaction; neither authenticates a host nor authorizes a call.
@@ -15,15 +15,16 @@ from dataclasses import asdict
 from pathlib import Path
 from typing import Any, NoReturn
 
+from agent_lifecycle.accounting.closing_types import ClosingPolicyRecord
 from agent_lifecycle.contracts.authority_io import read_authority_bytes
 from agent_lifecycle.contracts.canonical import load_json_object
 from agent_lifecycle.contracts.closing_resource_schemas import (
     validate_closing_operation_binding,
     validate_limit_proposal,
 )
+from agent_lifecycle.contracts.closing_time import closing_instant as _closing_instant
 from agent_lifecycle.contracts.errors import LifecycleError
 from agent_lifecycle.contracts.paths import is_under_repo_path, normalize_repo_path
-from agent_lifecycle.contracts.workflow_state_schemas import _closing_instant
 
 from .closing_resource_policy import classify_current_claim_data
 from .contracts import (
@@ -31,121 +32,24 @@ from .contracts import (
     ROLES,
     JournalUnavailable,
     Operation,
-    RevisionConflict,
-    _BindingConflict,
     _operation,
     _projection,
     canonical,
     digest,
-    identity,
     uint,
 )
-from .workflow_authority_store import _load_run_output_anchor_data
-
-
-def _require_financial_transaction(journal) -> None:
-    journal._check_owner()
-    if not journal._db.in_transaction or journal._admission_depth != 1:
-        raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
 
-
-def _reserve_in_transaction(journal, operation: Operation, *, expected_revision: int | None = None) -> str:
-    """Apply ordinary reservation arithmetic inside the caller's admitted transaction."""
-    _require_financial_transaction(journal)
-    operation.__post_init__()
-    op = asdict(operation)
-    scope = operation.budget_scope_id
-    if journal._closed_scope(scope):
-        return "CLOSED"
-    state, revision = journal._load(scope)
-    if state is None:
-        return "UNAVAILABLE"
-    old = state["operations"].get(operation.operation_id)
-    if old:
-        return (
-            "ALREADY_RESERVED"
-            if old["digest"] == operation.binding_digest
-            else journal._conflict((scope,), "Operation binding changed", op)
-        )
-    if expected_revision is not None:
-        uint(expected_revision)
-        if expected_revision != revision:
-            raise RevisionConflict("Stale journal revision")
-    if state["gate"] != "READY":
-        return "UNAVAILABLE"
-    policy, binding = state["policy"], state["scope"]
-    if (
-        operation.run_id != binding["run_id"]
-        or operation.unit_definition_id != binding["unit_definition_id"]
-        or operation.policy_id != policy["policy_id"]
-        or operation.policy_revision != policy["revision"]
-        or operation.task_id not in (None, *policy["task_caps"])
-    ):
-        return journal._conflict((scope,), "Scope/policy/task binding mismatch", op)
-    projected = asdict(_projection(state, revision))
-    owner = operation.task_id if operation.task_id is not None else ""
-    upper = operation.upper_bound_tokens
-    transfer = upper if operation.operation_class == "CLOSEOUT" else 0
-    if transfer and state["protected"].get(owner, 0) < transfer:
-        return "DENY"
-    checks = [
-        (
-            projected["spent"],
-            projected["active_reservations"],
-            projected["protected_closeout"],
-            policy["run_cap"],
-        )
-    ]
-    if operation.task_id is not None:
-        task = projected["tasks"][operation.task_id]
-        checks.append(
-            (
-                task["spent"],
-                task["active_reservations"],
-                task["protected_closeout"],
-                policy["task_caps"][operation.task_id],
-            )
-        )
-    for spent, active, protected, cap in checks:
-        total = uint(spent + active + upper + protected - transfer)
-        if total > cap:
-            return "DENY"
-    journal._db.execute("SAVEPOINT identity_batch")
-    try:
-        for kind, key in (
-            ("operation", [scope, operation.operation_id]),
-            ("dispatch", [scope, operation.dispatch_key]),
-            ("permit", operation.permit_id),
-        ):
-            journal._key(kind, key, scope, operation.operation_id, operation.binding_digest)
-        journal._db.execute("RELEASE identity_batch")
-    except _BindingConflict as exc:
-        journal._db.execute("ROLLBACK TO identity_batch")
-        journal._db.execute("RELEASE identity_batch")
-        return journal._conflict(exc.scopes, str(exc), op)
-    journal._record(scope, state, revision, "RESERVE", {"operation": op})
-    return "RESERVED"
-
-
-def _claim_in_transaction(journal, scope: str, operation_id: str, binding_digest: str, claim_id: str) -> str:
-    """Claim once inside the caller's admitted transaction; no dispatch authority is conferred."""
-    _require_financial_transaction(journal)
-    identity(claim_id)
-    if journal._closed_scope(scope):
-        return "CLOSED"
-    state, revision = journal._load(scope)
-    if state is None or operation_id not in state["operations"]:
-        return "UNAVAILABLE"
-    op = state["operations"][operation_id]
-    if binding_digest != op["digest"]:
-        return journal._conflict((scope,), "Claim binding mismatch", {"operation_id": operation_id})
-    if op["claim_id"] is not None:
-        return "ALREADY_CLAIMED"
-    if state["gate"] != "READY" or op["state"] != "RESERVED":
-        return "DENY"
-    journal._key("claim", op["binding"]["permit_id"], scope, operation_id, digest(claim_id))
-    journal._record(scope, state, revision, "CLAIM", {"operation_id": operation_id, "claim_id": claim_id})
-    return "CLAIM_GRANTED"
+# Compatibility exports for existing accounting callers; mutation lives in its owner.
+from .financial_transactions import (
+    _claim_in_transaction as _claim_in_transaction,
+)
+from .financial_transactions import (
+    _require_financial_transaction,
+)
+from .financial_transactions import (
+    _reserve_in_transaction as _reserve_in_transaction,
+)
+from .workflow_authority_store import _load_run_output_anchor_data
 
 
 def _unavailable(detail: str) -> NoReturn:
@@ -538,19 +442,12 @@ def _read_closing_window_details(
     return sidecars, buckets
 
 
-def read_persisted_closing_balances(
+def _read_closing_policy_record(
     db: sqlite3.Connection,
-    binding: dict,
+    run_id: str,
     closing_window_id: str,
-) -> dict:
-    """Reconcile one current window inside the caller's pinned read transaction.
-
-    This checks durable record joins and cache freshness. It does not qualify
-    signing authority, native dispatch, or the completeness of a host route.
-    """
-    if type(closing_window_id) is not str or not 1 <= len(closing_window_id) <= 256:
-        _unavailable("Closing window identity is malformed")
-    run_id, scope = binding["runId"], binding["budgetScopeId"]
+) -> ClosingPolicyRecord:
+    """Load the durable record and verify its shape and digest chain."""
     effect_row = db.execute(
         "SELECT effect_digest,payload FROM closing_policy_effects WHERE run_id=? AND closing_window_id=?",
         (run_id, closing_window_id),
@@ -573,6 +470,17 @@ def read_persisted_closing_balances(
         or candidate.get("proposalDigest") != effect["proposalDigest"]
     ):
         _unavailable("Closing policy record digest chain is broken")
+    return ClosingPolicyRecord(record, effect, candidate, proposal, effect_row["effect_digest"])
+
+
+def _validate_closing_scope_join(
+    record: ClosingPolicyRecord,
+    binding: dict,
+    closing_window_id: str,
+) -> None:
+    """Join all three durable documents to the pinned scope and revision."""
+    run_id, scope = binding["runId"], binding["budgetScopeId"]
+    effect, candidate, proposal = record.effect, record.candidate, record.proposal
     for item in (effect, candidate, proposal):
         if (
             item.get("runId") != run_id
@@ -596,6 +504,15 @@ def read_persisted_closing_balances(
         or effect["afterJournalRevision"] != effect["beforeJournalRevision"] + 1
     ):
         _unavailable("Closing policy revision or inventory join is broken")
+
+
+def _validate_closing_policy_event(
+    db: sqlite3.Connection,
+    scope: str,
+    record: ClosingPolicyRecord,
+) -> dict:
+    """Check the native event and its before/after policy lineage."""
+    effect = record.effect
     event_row = db.execute(
         "SELECT kind,payload,digest FROM events WHERE scope=? AND revision=? AND ordinal=0",
         (scope, effect["afterJournalRevision"]),
@@ -603,9 +520,9 @@ def read_persisted_closing_balances(
     if event_row is None or event_row["kind"] != "CLOSING_POLICY_APPLIED":
         _unavailable("Native closing policy event is absent")
     event = _loaded_payload(event_row["payload"], "native closing policy event")
-    if event != record or event_row["digest"] != digest(event):
+    if event != record.body or event_row["digest"] != digest(event):
         _unavailable("Closing policy event differs from durable effect")
-    before_native, after_native = record["nativeBeforePolicy"], record["nativeAfterPolicy"]
+    before_native, after_native = record.body["nativeBeforePolicy"], record.body["nativeAfterPolicy"]
     if (
         not all(type(item) is dict for item in (before_native, after_native))
         or not all(type(item) is dict for item in (effect.get("beforePolicy"), effect.get("afterPolicy")))
@@ -619,6 +536,16 @@ def read_persisted_closing_balances(
         )
     ):
         _unavailable("Closing policy event native policy lineage is broken")
+    return after_native
+
+
+def _read_closing_financial_state(
+    db: sqlite3.Connection,
+    scope: str,
+    effect: dict,
+    after_native: dict,
+) -> tuple[sqlite3.Row, dict]:
+    """Require current native financial state to retain the applied policy."""
     state_row = db.execute("SELECT revision,data FROM scope_state WHERE scope=?", (scope,)).fetchone()
     if (
         state_row is None
@@ -639,10 +566,17 @@ def read_persisted_closing_balances(
         )
     ):
         _unavailable("Current native policy differs from closing effect")
-    sidecars, buckets = _read_closing_window_details(db, scope, closing_window_id, state_row)
-    rebuilt = reconstruct_closing_balances(
-        state, state_row["revision"], proposal, sidecars, buckets, effect_row["effect_digest"]
-    )
+    return state_row, state
+
+
+def _closing_projection_status(
+    db: sqlite3.Connection,
+    scope: str,
+    closing_window_id: str,
+    revision: int,
+    rebuilt: list[dict],
+) -> str:
+    """Distinguish a rebuildable stale cache from corrupt current facts."""
     saved = {}
     stale = False
     for row in db.execute(
@@ -656,18 +590,43 @@ def read_persisted_closing_balances(
             owner != row["owner"]
             or owner in saved
             or type(row["generation"]) is not int
-            or (row["generation"] > state_row["revision"])
+            or (row["generation"] > revision)
         ):
             _unavailable("Closing resource projection SQL identity is broken")
         saved[owner] = payload
-        stale |= row["generation"] != state_row["revision"]
+        stale |= row["generation"] != revision
     expected = {_owner_key(row["scope"]): row for row in rebuilt}
     if not stale and set(saved) == set(expected) and saved != expected:
         _unavailable("Fresh closing resource projection differs from native facts")
+    return "CURRENT" if not stale and saved == expected else "REBUILD_REQUIRED"
+
+
+def read_persisted_closing_balances(
+    db: sqlite3.Connection,
+    binding: dict,
+    closing_window_id: str,
+) -> dict:
+    """Reconcile one current window inside the caller's pinned read transaction.
+
+    This checks durable record joins and cache freshness. It does not qualify
+    signing authority, native dispatch, or the completeness of a host route.
+    """
+    if type(closing_window_id) is not str or not 1 <= len(closing_window_id) <= 256:
+        _unavailable("Closing window identity is malformed")
+    run_id, scope = binding["runId"], binding["budgetScopeId"]
+    record = _read_closing_policy_record(db, run_id, closing_window_id)
+    _validate_closing_scope_join(record, binding, closing_window_id)
+    after_native = _validate_closing_policy_event(db, scope, record)
+    state_row, state = _read_closing_financial_state(db, scope, record.effect, after_native)
+    sidecars, buckets = _read_closing_window_details(db, scope, closing_window_id, state_row)
+    rebuilt = reconstruct_closing_balances(
+        state, state_row["revision"], record.proposal, sidecars, buckets, record.effect_digest
+    )
+    status = _closing_projection_status(db, scope, closing_window_id, state_row["revision"], rebuilt)
     return {
-        "status": "CURRENT" if not stale and saved == expected else "REBUILD_REQUIRED",
+        "status": status,
         "balances": rebuilt,
-        "proposal": proposal,
+        "proposal": record.proposal,
         "financialAdmission": False,
         "requiresAuthenticatedActivationAndCurrentClaim": True,
     }

agent_lifecycle_kit-2.25.0/src/agent_lifecycle/accounting/closing_types.py

@@ -0,0 +1,19 @@
+"""Validated durable closing record passed between recovery checks.
+
+Construction alone grants no authority; recovery performs the database and
+financial joins before exposing balances.
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any
+
+
+@dataclass(frozen=True)
+class ClosingPolicyRecord:
+    body: dict[str, Any]
+    effect: dict[str, Any]
+    candidate: dict[str, Any]
+    proposal: dict[str, Any]
+    effect_digest: str

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/contracts.py

@@ -631,6 +631,7 @@ if TYPE_CHECKING:
         """Static view of the existing live Journal composition; no runtime base."""
 
         _admission_depth: int
+        _utc_clock: Callable[[], datetime]
 
         def _archive_state(self, scope: str, *, restore: bool = False) -> tuple[dict, int]: ...
 

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/declared_ledger.py

@@ -19,11 +19,11 @@ from agent_lifecycle.accounting.declared_ledger_records import (
     _R11_COORDINATOR_BASE,
     _r11_role_funding_record,
     _r11_role_prefix_record,
-    _require,
 )
 from agent_lifecycle.contracts import LifecycleError, canonical_bytes, canonical_digest
 from agent_lifecycle.contracts.authority_io import normalize_authority_path, read_authority_bytes
 from agent_lifecycle.contracts.bounded_json import load_bounded_json as _r11_json
+from agent_lifecycle.contracts.errors import require_condition as _require
 
 _R11_COORDINATOR_HEAD = _R11_COORDINATOR_BASE + "/COORDINATOR-COST-HEAD.json"
 

{agent_lifecycle_kit-2.23.0 → agent_lifecycle_kit-2.25.0}/src/agent_lifecycle/accounting/declared_ledger_records.py

@@ -15,6 +15,7 @@ from agent_lifecycle.contracts.bounded_json import (
 from agent_lifecycle.contracts.bounded_json import (
     matches_closed_schema as _r11_role_schema_matches,
 )
+from agent_lifecycle.contracts.errors import require_condition as _require
 
 _R11_ROLE_CONTRACT_SHA256 = "03d77c4fd3fcfcd3fd316d48ff119e20549ad42d8d9a325e7983bb46ab9e1247"
 
@@ -401,8 +402,3 @@ def _r11_role_prefix_record(value: dict[str, Any], relative: str) -> tuple[str,
         "role-prefix archive changes holds, usage, identity or canonical path",
     )
     return value["recordPath"], record_raw
-
-
-def _require(condition: bool, code: str, message: str) -> None:
-    if not condition:
-        raise LifecycleError(code, message)