agent-lifecycle-kit 2.25.0__tar.gz → 2.27.0__tar.gz

{agent_lifecycle_kit-2.25.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.27.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.25.0
+Version: 2.27.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -13,8 +13,9 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Typing :: Typed
-Requires-Python: <3.15,>=3.11
+Requires-Python: <3.16,>=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
@@ -41,7 +42,7 @@ ALK provides a verifiable finish for external-agent work with proportionate cont
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.27.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -194,9 +195,9 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
 
-## Release 2.25: focused security and maintainability
+## Release 2.26: bounded discovery and precise quality gates
 
-Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
-controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
-pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
-qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.
+Markdown imports bound examined entries, directories, depth and cooperative elapsed time; see the [security control map](docs/security/release-security.md). Tracked-source checks
+reuse the existing bare-token families. [Quality controls](docs/architecture/system-architecture.md)
+require both combined and statement coverage of 76 percent and retain legacy policy interpretation. The existing [reading pilot](docs/guides/controlled-technical-english.md) and host limits
+remain; measurements do not establish token savings or host enforcement.

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/README.md

@@ -19,7 +19,7 @@ ALK provides a verifiable finish for external-agent work with proportionate cont
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.25.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.27.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 
@@ -172,9 +172,9 @@ Adapter installation and support-level details live in [Adapter install](docs/ad
 - Release assets: [Task templates](templates/tasks/README.md), [Neutrality scanning](docs/reference/neutrality.md), and [Release security](docs/security/release-security.md).
 Apache-2.0. See [LICENSE](LICENSE).
 
-## Release 2.25: focused security and maintainability
+## Release 2.26: bounded discovery and precise quality gates
 
-Release 2.25 hardens sensitive imports and launcher checks, repairs named ownership seams, and checks untyped Python function bodies with mypy. See the [current security
-controls](docs/security/release-security.md) and [architecture map](docs/architecture/system-architecture.md). The [staged reading
-pilot](docs/guides/controlled-technical-english.md) preserves full references and approval gates; byte/word measurements do not prove token savings. Existing OpenCode 1.x/2.x
-qualification and unsupported host routes remain unchanged. Local preparation, exact-candidate CI, native final proof and public publication are separate gates.
+Markdown imports bound examined entries, directories, depth and cooperative elapsed time; see the [security control map](docs/security/release-security.md). Tracked-source checks
+reuse the existing bare-token families. [Quality controls](docs/architecture/system-architecture.md)
+require both combined and statement coverage of 76 percent and retain legacy policy interpretation. The existing [reading pilot](docs/guides/controlled-technical-english.md) and host limits
+remain; measurements do not establish token savings or host enforcement.

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/pyproject.toml

@@ -4,10 +4,10 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.25.0"
+version = "2.27.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
-requires-python = ">=3.11,<3.15"
+requires-python = ">=3.11,<3.16"
 license = { text = "Apache-2.0" }
 authors = [{ name = "Agent Lifecycle Kit contributors" }]
 keywords = [
@@ -35,6 +35,7 @@ classifiers = [
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
   "Programming Language :: Python :: 3.14",
+  "Programming Language :: Python :: 3.15",
   "Typing :: Typed",
 ]
 dependencies = []

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.25.0"
+__version__ = "2.27.0"

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/accounting/contracts.py

@@ -627,7 +627,24 @@ if TYPE_CHECKING:
     from contextlib import AbstractContextManager
     from typing import Protocol
 
-    class _JournalStoragePort(Protocol):
+    class _FinancialTransactionPort(Protocol):
+        """Only the capabilities used by admitted reservation and claim rules."""
+
+        def _require_financial_transaction(self) -> None: ...
+
+        def _reserve_identity_keys(self, operation: Operation) -> None: ...
+
+        def _closed_scope(self, scope: str) -> object | None: ...
+
+        def _conflict(self, scopes: tuple[str, ...], reason: str, payload: dict) -> str: ...
+
+        def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool: ...
+
+        def _load(self, scope: str) -> tuple[dict | None, int]: ...
+
+        def _record(self, scope: str, state: dict | None, revision: int, kind: str, payload: dict) -> int: ...
+
+    class _JournalStoragePort(_FinancialTransactionPort, Protocol):
         """Static view of the existing live Journal composition; no runtime base."""
 
         _admission_depth: int
@@ -669,8 +686,6 @@ if TYPE_CHECKING:
         @staticmethod
         def _compile_opening(scope: BudgetScope, policy: BudgetPolicy, value: OpeningImport) -> dict: ...
 
-        def _conflict(self, scopes: tuple[str, ...], reason: str, payload: dict) -> str: ...
-
         @staticmethod
         def _create_v4_schema(db: sqlite3.Connection, *, writer_version: int = 4) -> None: ...
 
@@ -697,12 +712,8 @@ if TYPE_CHECKING:
 
         def _index(self, table: str, key: str, scope: str, owner: str, payload: dict) -> dict: ...
 
-        def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool: ...
-
         def _live_facts(self, scope: str, *, restore: bool = False) -> tuple[dict, int, list, list]: ...
 
-        def _load(self, scope: str) -> tuple[dict | None, int]: ...
-
         _observation_scope: str | None
 
         def _observed_candidates(self, scope: str, evidence: dict) -> list[dict]: ...
@@ -714,8 +725,6 @@ if TYPE_CHECKING:
 
         def _preflight_supplied_finals(self, scope: str, receipts: list[dict]) -> None: ...
 
-        def _record(self, scope: str, state: dict | None, revision: int, kind: str, payload: dict) -> int: ...
-
         def _retained(self, table: str, key: str) -> dict | None: ...
 
         def _source_preflight(self, receipt: dict) -> None: ...
@@ -755,6 +764,7 @@ if TYPE_CHECKING:
         writer: EvidenceRef
 else:
     # Preserve the exact nominal runtime bases and authority checks.
+    _FinancialTransactionPort = object
     _JournalStoragePort = object
 
 

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/accounting/declared_ledger_legacy.py

@@ -21,6 +21,7 @@ from agent_lifecycle.accounting.declared_ledger_records import (
 from agent_lifecycle.contracts import LifecycleError, canonical_bytes, canonical_digest
 from agent_lifecycle.contracts.authority_io import normalize_authority_path, read_authority_bytes
 from agent_lifecycle.contracts.bounded_json import load_bounded_json as _r11_json
+from agent_lifecycle.contracts.private_storage_compat import read_compat_private_bytes
 
 _MAX_REQUEST_BYTES = 131_072
 
@@ -32,42 +33,15 @@ def _read_private(
     allowed_modes: tuple[int, ...] = (0o600,),
     max_bytes: int = _MAX_REQUEST_BYTES,
 ) -> bytes:
-    if os.name == "nt":
-        from agent_lifecycle.contracts.private_storage import read_private_bytes
-
-        try:
-            return read_private_bytes(path, root=root, modes=allowed_modes, max_bytes=max_bytes)
-        except LifecycleError as exc:
-            raise LifecycleError("codex-exact-private-path-unsafe", exc.message) from exc
-    if not path.is_relative_to(root):
-        raise LifecycleError("codex-exact-private-path-unsafe", "private artifact lies outside root")
-    current = path.parent
-    while current != root:
-        info = current.lstat()
-        relative = current.relative_to(root).parts
-        shared_parent = relative in {("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}
-        if not stat.S_ISDIR(info.st_mode) or (not shared_parent and stat.S_IMODE(info.st_mode) != 0o700):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private parent is not mode 0700")
-        current = current.parent
-    info = path.lstat()
-    if not stat.S_ISREG(info.st_mode) or stat.S_IMODE(info.st_mode) not in allowed_modes or info.st_size > max_bytes:
-        raise LifecycleError("codex-exact-private-path-unsafe", "private file has unsafe mode, type or size")
-    flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
-    fd = os.open(path, flags)
-    with os.fdopen(fd, "rb") as stream:
-        opened = os.fstat(stream.fileno())
-
-        def identity(item: os.stat_result) -> tuple[int, int, int, int, int]:
-            return (item.st_dev, item.st_ino, item.st_mode, item.st_size, item.st_mtime_ns)
-
-        if identity(opened) != identity(info):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed before reading")
-        raw = stream.read(max_bytes + 1)
-        if identity(os.fstat(stream.fileno())) != identity(opened):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed while reading")
-    if len(raw) > max_bytes:
-        raise LifecycleError("codex-exact-private-overflow", "private artifact exceeds byte limit")
-    return raw
+    return read_compat_private_bytes(
+        path,
+        root=root,
+        allowed_modes=allowed_modes,
+        max_bytes=max_bytes,
+        shared_parents=frozenset({("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}),
+        unsafe_code="codex-exact-private-path-unsafe",
+        overflow_code="codex-exact-private-overflow",
+    )
 
 
 def _r11_git(root: Path, *args: str) -> bytes:

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/accounting/financial_transactions.py

@@ -6,11 +6,10 @@ These primitives confer no host, provider or dispatch authority.
 from dataclasses import asdict
 
 from .contracts import (
-    JournalUnavailable,
     Operation,
     RevisionConflict,
     _BindingConflict,
-    _JournalStoragePort,
+    _FinancialTransactionPort,
     _projection,
     digest,
     identity,
@@ -18,14 +17,12 @@ from .contracts import (
 )
 
 
-def _require_financial_transaction(journal: _JournalStoragePort) -> None:
-    journal._check_owner()
-    if not journal._db.in_transaction or journal._admission_depth != 1:
-        raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
+def _require_financial_transaction(journal: _FinancialTransactionPort) -> None:
+    journal._require_financial_transaction()
 
 
 def _reserve_in_transaction(
-    journal: _JournalStoragePort, operation: Operation, *, expected_revision: int | None = None
+    journal: _FinancialTransactionPort, operation: Operation, *, expected_revision: int | None = None
 ) -> str:
     """Apply ordinary reservation arithmetic inside the caller's admitted transaction."""
     _require_financial_transaction(journal)
@@ -61,25 +58,16 @@ def _reserve_in_transaction(
         return journal._conflict((scope,), "Scope/policy/task binding mismatch", op)
     if not _reservation_fits(state, revision, operation):
         return "DENY"
-    journal._db.execute("SAVEPOINT identity_batch")
     try:
-        for kind, key in (
-            ("operation", [scope, operation.operation_id]),
-            ("dispatch", [scope, operation.dispatch_key]),
-            ("permit", operation.permit_id),
-        ):
-            journal._key(kind, key, scope, operation.operation_id, operation.binding_digest)
-        journal._db.execute("RELEASE identity_batch")
+        journal._reserve_identity_keys(operation)
     except _BindingConflict as exc:
-        journal._db.execute("ROLLBACK TO identity_batch")
-        journal._db.execute("RELEASE identity_batch")
         return journal._conflict(exc.scopes, str(exc), op)
     journal._record(scope, state, revision, "RESERVE", {"operation": op})
     return "RESERVED"
 
 
 def _claim_in_transaction(
-    journal: _JournalStoragePort, scope: str, operation_id: str, binding_digest: str, claim_id: str
+    journal: _FinancialTransactionPort, scope: str, operation_id: str, binding_digest: str, claim_id: str
 ) -> str:
     """Claim once inside the caller's admitted transaction; no dispatch authority is conferred."""
     _require_financial_transaction(journal)

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/accounting/journal.py

@@ -32,6 +32,7 @@ from .contracts import (
     EvidenceRef,
     JournalEvent,
     JournalHandle,
+    Operation,
     UsageOutcome,
     canonical,
     digest,
@@ -270,6 +271,29 @@ class Journal(
             return self._archive_state(scope)
         return None, 0
 
+    def _require_financial_transaction(self) -> None:
+        self._check_owner()
+        if not self._db.in_transaction or self._admission_depth != 1:
+            raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
+
+    def _reserve_identity_keys(self, operation: Operation) -> None:
+        """Keep a reservation's immutable identities atomic inside admission."""
+        self._require_financial_transaction()
+        scope = operation.budget_scope_id
+        self._db.execute("SAVEPOINT identity_batch")
+        try:
+            for kind, key in (
+                ("operation", [scope, operation.operation_id]),
+                ("dispatch", [scope, operation.dispatch_key]),
+                ("permit", operation.permit_id),
+            ):
+                self._key(kind, key, scope, operation.operation_id, operation.binding_digest)
+            self._db.execute("RELEASE identity_batch")
+        except _BindingConflict:
+            self._db.execute("ROLLBACK TO identity_batch")
+            self._db.execute("RELEASE identity_batch")
+            raise
+
     def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool:
         """Reserve/check a global immutable key inside the current transaction."""
         encoded = canonical(key)

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/adapter_sessions/private_input.py

@@ -8,6 +8,7 @@ import stat
 from pathlib import Path
 
 from agent_lifecycle.contracts import LifecycleError
+from agent_lifecycle.contracts.private_storage_compat import read_compat_private_bytes
 
 _MAX_REQUEST_BYTES = 131_072
 
@@ -102,42 +103,15 @@ def _read_private(
     allowed_modes: tuple[int, ...] = (0o600,),
     max_bytes: int = _MAX_REQUEST_BYTES,
 ) -> bytes:
-    if os.name == "nt":
-        from agent_lifecycle.contracts.private_storage import read_private_bytes
-
-        try:
-            return read_private_bytes(path, root=root, modes=allowed_modes, max_bytes=max_bytes)
-        except LifecycleError as exc:
-            raise LifecycleError("codex-exact-private-path-unsafe", exc.message) from exc
-    if not path.is_relative_to(root):
-        raise LifecycleError("codex-exact-private-path-unsafe", "private artifact lies outside root")
-    current = path.parent
-    while current != root:
-        info = current.lstat()
-        relative = current.relative_to(root).parts
-        shared_parent = relative in {("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}
-        if not stat.S_ISDIR(info.st_mode) or (not shared_parent and stat.S_IMODE(info.st_mode) != 0o700):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private parent is not mode 0700")
-        current = current.parent
-    info = path.lstat()
-    if not stat.S_ISREG(info.st_mode) or stat.S_IMODE(info.st_mode) not in allowed_modes or info.st_size > max_bytes:
-        raise LifecycleError("codex-exact-private-path-unsafe", "private file has unsafe mode, type or size")
-    flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
-    fd = os.open(path, flags)
-    with os.fdopen(fd, "rb") as stream:
-        opened = os.fstat(stream.fileno())
-
-        def identity(item: os.stat_result) -> tuple[int, int, int, int, int]:
-            return (item.st_dev, item.st_ino, item.st_mode, item.st_size, item.st_mtime_ns)
-
-        if identity(opened) != identity(info):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed before reading")
-        raw = stream.read(max_bytes + 1)
-        if identity(os.fstat(stream.fileno())) != identity(opened):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed while reading")
-    if len(raw) > max_bytes:
-        raise LifecycleError("codex-exact-private-overflow", "private artifact exceeds byte limit")
-    return raw
+    return read_compat_private_bytes(
+        path,
+        root=root,
+        allowed_modes=allowed_modes,
+        max_bytes=max_bytes,
+        shared_parents=frozenset({("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}),
+        unsafe_code="codex-exact-private-path-unsafe",
+        overflow_code="codex-exact-private-overflow",
+    )
 
 
 def _require(value: bool, code: str, message: str) -> None:

{agent_lifecycle_kit-2.25.0 → agent_lifecycle_kit-2.27.0}/src/agent_lifecycle/contracts/agent_plugin_qualification_schemas.py

@@ -126,17 +126,7 @@ AGENT_PLUGIN_QUALIFICATION_SCHEMAS: dict[str, dict[str, Any]] = {
 }
 
 
-def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
-    """Validate a data-only client profile and its self-digest."""
-
-    blockers: list[dict[str, Any]] = []
-    if not isinstance(profile, dict):
-        return _validation([_issue("profile-not-object")])
-    _required_text(profile, "schemaVersion", PROFILE_SCHEMA, blockers)
-    for field in ("profileId", "adapterId", "client", "host"):
-        if not isinstance(profile.get(field), str) or not profile[field].strip():
-            blockers.append(_issue("profile-field-invalid", field=field))
-
+def _profile_package(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     package = profile.get("package")
     if not isinstance(package, dict):
         blockers.append(_issue("profile-package-invalid"))
@@ -149,6 +139,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if skills != list(CANONICAL_SKILLS):
             blockers.append(_issue("profile-required-skills", expected=list(CANONICAL_SKILLS), actual=skills))
 
+
+def _profile_discovery(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     discovery = profile.get("discovery")
     if not isinstance(discovery, dict):
         blockers.append(_issue("profile-discovery-invalid"))
@@ -165,6 +157,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if not isinstance(markers, list) or not all(isinstance(item, str) and item for item in markers):
             blockers.append(_issue("profile-discovery-markers"))
 
+
+def _profile_installation(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     installation = profile.get("installation")
     if not isinstance(installation, dict):
         blockers.append(_issue("profile-installation-invalid"))
@@ -176,6 +170,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         ):
             blockers.append(_issue("profile-installation-boundary"))
 
+
+def _profile_environment(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     environment = profile.get("environment")
     if not isinstance(environment, dict):
         blockers.append(_issue("profile-environment-invalid"))
@@ -187,6 +183,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if environment.get("allowPatterns"):
             blockers.append(_issue("profile-environment-wildcard"))
 
+
+def _profile_host_version(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     host_version_policy = profile.get("hostVersionPolicy")
     if not isinstance(host_version_policy, dict):
         blockers.append(_issue("profile-host-version-policy-invalid"))
@@ -205,6 +203,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
             except ValueError:
                 blockers.append(_issue("profile-host-version-policy-invalid", mode=mode))
 
+
+def _profile_qualification(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     qualification = profile.get("qualification")
     if not isinstance(qualification, dict):
         blockers.append(_issue("profile-qualification-invalid"))
@@ -222,6 +222,23 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if qualification.get("modelCalls") != 0 or qualification.get("hostLaunch") is not True:
             blockers.append(_issue("profile-qualification-safety"))
 
+
+def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
+    """Validate a data-only client profile and its self-digest."""
+
+    blockers: list[dict[str, Any]] = []
+    if not isinstance(profile, dict):
+        return _validation([_issue("profile-not-object")])
+    _required_text(profile, "schemaVersion", PROFILE_SCHEMA, blockers)
+    for field in ("profileId", "adapterId", "client", "host"):
+        if not isinstance(profile.get(field), str) or not profile[field].strip():
+            blockers.append(_issue("profile-field-invalid", field=field))
+    _profile_package(profile, blockers)
+    _profile_discovery(profile, blockers)
+    _profile_installation(profile, blockers)
+    _profile_environment(profile, blockers)
+    _profile_host_version(profile, blockers)
+    _profile_qualification(profile, blockers)
     boundary = profile.get("descriptorBoundary")
     if (
         not isinstance(boundary, dict)