capsule-engine 0.1.0__py3-none-any.whl

capsule_engine/guards/wickets/catalog_defs/counterparty_seen_before.v3.yaml

@@ -0,0 +1,23 @@
+# counterparty_seen_before wicket, version 3: counterparty_seen_before/2.0.0
+# read against counterparty.seen_before/3.0.0, which also counts an act that
+# asked first and was then approved and executed. Under version 2 a replay
+# never counted one, so a merchant whose first purchase asked stayed
+# first-time on every later purchase. Version 2
+# (counterparty_seen_before.v2.yaml) stays as it was for the packs that pin it.
+#
+# `fold_digest` is the real `definition_digest()` of
+# folds/catalog_defs/counterparty.seen_before.v3.yaml (folds/definition.py);
+# the check refuses to run when the catalog fold does not match it.
+wicket_id: counterparty_seen_before/3.0.0
+check: counterparty_seen_before
+semantics: >-
+  For an action in action_classes, the operator's prior acts addressed to the
+  action's target are counted, leaving dry runs out: an accepted decision, or
+  an act whose check was approved to proceed and then executed. One or more
+  passes; none fails. An act that was declined, or approved and never
+  executed, is not counted. It is not applicable, naming the field, when the
+  action names no target. Any other action class is out of scope.
+config:
+  fold_id: counterparty.seen_before/3.0.0
+  fold_digest: 73dbf8cd8a36fadca0ac823d2b17592fdc457c24081bc44667f032601e914033
+  action_classes: [money.purchase]

capsule_engine/guards/wickets/catalog_defs/counterparty_seen_before.v4.yaml

@@ -0,0 +1,26 @@
+# counterparty_seen_before wicket, version 4: version 3 with one change. A
+# purchase that names no payee fails as a first-time counterparty, with the
+# reason "no payee named", where version 3 recorded it as not applicable.
+# Not applicable never asks, so under version 3 a purchase sealing no
+# counterparty went ahead while the same purchase naming a new payee asked.
+# The fold is unchanged: counterparty.seen_before/3.0.0. Version 3
+# (counterparty_seen_before.v3.yaml) stays as it was for the packs that pin it.
+#
+# `fold_digest` is the real `definition_digest()` of
+# folds/catalog_defs/counterparty.seen_before.v3.yaml (folds/definition.py);
+# the check refuses to run when the catalog fold does not match it.
+wicket_id: counterparty_seen_before/4.0.0
+check: counterparty_seen_before
+semantics: >-
+  For an action in action_classes, the operator's prior acts addressed to the
+  action's target are counted, leaving dry runs out: an accepted decision, or
+  an act whose check was approved to proceed and then executed. One or more
+  passes; none fails. An act that was declined, or approved and never
+  executed, is not counted. An action that names no target, or a target
+  that is empty or only whitespace, fails as a first-time counterparty, with
+  the reason no payee named. Any other action class is out of scope.
+config:
+  fold_id: counterparty.seen_before/3.0.0
+  fold_digest: 73dbf8cd8a36fadca0ac823d2b17592fdc457c24081bc44667f032601e914033
+  action_classes: [money.purchase]
+  missing_target: unseen

capsule_engine/guards/wickets/catalog_defs/counterparty_seen_before.yaml

@@ -0,0 +1,14 @@
+# counterparty_seen_before wicket: fail a first-time counterparty, pass a
+# repeat one (guards/checks/counterparty_seen_before.py), for actions in
+# `action_classes`. The count is the cited fold's result over the
+# operator's accepted actions addressed to the same target.
+#
+# `fold_digest` is the real `definition_digest()` of
+# folds/catalog_defs/counterparty.seen_before.yaml (folds/definition.py);
+# the check refuses to run when the catalog fold does not match it.
+wicket_id: counterparty_seen_before/1.0.0
+check: counterparty_seen_before
+config:
+  fold_id: counterparty.seen_before/1.0.0
+  fold_digest: c43b2011b4d49cf54a0306e9637ecfd3a945ff7febc13283507dd77513ae9b28
+  action_classes: [money.purchase]

capsule_engine/guards/wickets/catalog_defs/credential_pattern.yaml

@@ -0,0 +1,14 @@
+# credential_pattern wicket: regular expressions matched against
+# Action.outgoing_content (guards/checks/credential_pattern.py). Each pattern
+# has a stable id that appears in the evidence when it matches. A change to
+# any pattern moves this definition's digest.
+wicket_id: credential_pattern/1.0.0
+check: credential_pattern
+config:
+  patterns:
+    - id: one_time_code
+      regex: '(?i)\b(?:one[- ]time|verification|security|login|authentication)\s+(?:code|passcode|pin)\b\D{0,20}\d{4,8}\b'
+    - id: password_value
+      regex: '(?i)\bpass(?:word|code)\s*(?:is|:|=)\s*\S+'
+    - id: card_security_code
+      regex: '(?i)\b(?:cvv|cvc|cvv2)\b\D{0,10}\d{3,4}\b'

capsule_engine/guards/wickets/catalog_defs/dedupe.yaml

@@ -0,0 +1,19 @@
+# Dedupe wicket: exact-match equivalence lookup over a rolling window
+# (guards/checks/dedupe.py). The check LOGIC (the equivalence-key formula,
+# the lookup itself) stays Python code -- this digest identifies "this
+# configuration of this check" (method + window), never the source file.
+#
+# `method` mirrors cli/constraints_cmd.py's CHECKS catalog entry for dedupe
+# ("exact_match_index_v0") -- pinned here as data so a manifest can declare
+# which equivalence formula version governed a decision, not just that
+# *some* dedupe check ran.
+#
+# `window_days` mirrors guards/engine.py's `_DEDUPE_WINDOW_DAYS` constant.
+# This wicket file does not drive that constant at runtime; the digest exists so the
+# *declared* window is checkable even before every deployment path
+# consumes it.
+wicket_id: dedupe/1.0.0
+check: dedupe
+config:
+  method: exact_match_index_v0
+  window_days: 30

capsule_engine/guards/wickets/catalog_defs/destination_rail.seller.v1.1.yaml

@@ -0,0 +1,32 @@
+# seller.destination_rail/1.1.0: seller.destination_rail/1.0.0
+# (destination_rail.seller.yaml) run at the seller's commit too
+# (agreement.accept, the class a seller's commit carries; no deal record
+# carries marketplace.sale), with cash allowed when the item is handed over
+# in person, the common payment apps counted as p2p, and a commit that
+# states no rail failing (capsule-engine#192). The aliases are here, under
+# this digest, so a sealed rail token keeps the token the producer wrote and
+# this definition says what it counts as. 1.0.0 stays as it was for the
+# records and packs that pin it.
+wicket_id: seller.destination_rail/1.1.0
+check: destination_rail
+semantics: >-
+  For an action in action_classes, the rail is first counted as its entry in
+  rail_aliases, if it has one. A rail counted as one of allowed_rails passes.
+  A rail counted as one of in_person_rails passes only when the action's
+  handover is in_person, and fails with any other handover or none. Any other
+  rail fails. An action that carries no rail fails when missing_rail maps its
+  action class to fail, with the reason "payment method not stated", and is
+  otherwise not applicable, in scope. Any other action class is not
+  applicable. The evidence records the rail read, what it was counted as,
+  the allowed and in-person rails and the handover, never who pays or where.
+config:
+  action_classes: [agreement.accept, marketplace.sale]
+  allowed_rails: [card, p2p]
+  in_person_rails: [cash]
+  rail_aliases:
+    venmo: p2p
+    zelle: p2p
+    cash_app: p2p
+    paypal: p2p
+  missing_rail:
+    agreement.accept: fail

capsule_engine/guards/wickets/catalog_defs/destination_rail.seller.yaml

@@ -0,0 +1,10 @@
+# destination_rail, configured for a seller (guards/checks/
+# destination_rail.py): the rails a buyer may pay on, as an allow-list. The
+# check fails when Action.rail is not one of `allowed_rails`.
+# destination_rail/1.0.0 (destination_rail.yaml) watches rails instead and
+# stays as it was.
+wicket_id: seller.destination_rail/1.0.0
+check: destination_rail
+config:
+  action_classes: [marketplace.sale]
+  allowed_rails: [card, p2p]

capsule_engine/guards/wickets/catalog_defs/destination_rail.yaml

@@ -0,0 +1,9 @@
+# destination_rail wicket: set membership of the action's payment rail
+# (guards/checks/destination_rail.py). The check fails when Action.rail is one
+# of `watched_rails`, for actions in `action_classes`. Both lists are policy
+# data, so a change to either moves this definition's digest.
+wicket_id: destination_rail/1.0.0
+check: destination_rail
+config:
+  action_classes: [money.transfer]
+  watched_rails: [crypto, gift_card, p2p]

capsule_engine/guards/wickets/catalog_defs/hold_reconcile.yaml

@@ -0,0 +1,14 @@
+# hold_reconcile wicket (capsule-emit #53 point 2): "tolerance is policy, not
+# code -- declared in a digest-pinned definition (rides the policy
+# manifest), so 'which tolerance governed' is checkable per decision."
+#
+# `tolerance_minor` is the maximum permitted overage (executed_amount_minor -
+# reserved_amount_minor) per action_class before a conversion is treated as
+# an over-tolerance breach (holds/engine.py routes it through the existing
+# ALLOW/DENY/ESCALATE vocabulary instead of building a hold.reconcile
+# record). No entry for a class means zero tolerance -- any overage breaches.
+wicket_id: hold_reconcile/1.0.0
+check: hold_reconcile
+config:
+  tolerance_minor:
+    money.transfer: 50000

capsule_engine/guards/wickets/catalog_defs/material_fields_changed.v1.1.yaml

@@ -0,0 +1,22 @@
+# material_fields_changed wicket, version 1.1: material_fields_changed/1.0.0's
+# config with marketplace.sale added to action_classes
+# (guards/checks/field_change_count.py). The rule itself is the `semantics`
+# field below: it is inside the digested body, so rewording it moves the
+# digest. material_fields_changed/1.0.0 (material_fields_changed.yaml) stays
+# as it was for the packs that pin it.
+wicket_id: material_fields_changed/1.1.0
+check: material_fields_changed
+semantics: >-
+  For an action in action_classes, Action.material_fields_changed is the
+  producer's count of the fields in counted_fields that differ from what the
+  user approved, and Action.material_fields_basis the SHA-256 over the JCS
+  bytes of the list it counted over. The count is read only when that basis
+  equals the digest of counted_fields as pinned here. A count at or below
+  max_changed passes; above it fails. It is not applicable, naming the field,
+  when the action carries no count, or no basis or one for another list. The
+  fields and their values are never read. marketplace.sale is in scope. Any
+  other action class is out of scope.
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other, marketplace.sale]
+  counted_fields: [terms.item, terms.quantity, terms.price_minor, terms.deposit_minor, terms.currency, terms.when, terms.place, terms.conditions, recourse.rail, recourse.refundable, who.payee]
+  max_changed: 0

capsule_engine/guards/wickets/catalog_defs/material_fields_changed.yaml

@@ -0,0 +1,14 @@
+# material_fields_changed wicket: a count, from the producer, of the fields
+# in `counted_fields` that differ from what the user approved
+# (guards/checks/field_change_count.py). The producer also sends the digest
+# of the list it counted over, and the count is read only when that digest is
+# this list's. The list is policy data, so a change to it moves this
+# definition's digest. A key counts as changed when it is on one side only,
+# or on both with unequal values; terms.conditions counts as one key. Fails
+# when the count is above `max_changed`.
+wicket_id: material_fields_changed/1.0.0
+check: material_fields_changed
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other]
+  counted_fields: [terms.item, terms.quantity, terms.price_minor, terms.deposit_minor, terms.currency, terms.when, terms.place, terms.conditions, recourse.rail, recourse.refundable, who.payee]
+  max_changed: 0

capsule_engine/guards/wickets/catalog_defs/offer_expiry.v1.1.yaml

@@ -0,0 +1,31 @@
+# offer_expiry/1.1.0: offer_expiry/1.0.1 (offer_expiry.yaml) with an offer
+# that answers no proposal not applicable (capsule-engine#193). The producer
+# seals the rule input no_proposal on an offer when no message from the
+# counterparty was on record before it (capsule-cli#364), so there is no
+# proposal to go stale. A missing proposal_at alone never reads as not
+# applicable: it still fails, and so does no_proposal beside a proposal_at. The
+# bridge reads no_proposal only from a check that names no source ref (the
+# message an offer answers), so a check naming both is decided on that
+# message's age, or fails as missing one.
+# 1.0.1 stays as it was for the records and packs that pin it.
+#
+# Declared disposition: ask. The unverified case is meant to be
+# ASK_UNVERIFIED, which the pack schema's disposition set does not have yet;
+# until it does, the evidence marker tells the two apart.
+wicket_id: offer_expiry/1.1.0
+check: offer_expiry
+semantics: >-
+  For an action in action_classes, the age is the action's timestamp minus
+  its proposal_at, both RFC 3339 UTC, in whole seconds. An age within
+  max_age_seconds passes. An older proposal fails as expired: acting needs a
+  new proposed action. An action in no_proposal_classes that carries
+  no_proposal true and no proposal_at answers no proposal and is not
+  applicable, in scope. An action carrying no_proposal true beside a
+  proposal_at fails with expiry_unverified. If
+  the age cannot be established otherwise (proposal_at or timestamp missing
+  or unreadable, or a proposal later than the action) the rule fails with
+  expiry_unverified. Any other action class is out of scope.
+config:
+  action_classes: [marketplace.offer, marketplace.sale, agreement.accept]
+  max_age_seconds: 86400
+  no_proposal_classes: [marketplace.offer]

capsule_engine/guards/wickets/catalog_defs/offer_expiry.yaml

@@ -0,0 +1,24 @@
+# offer_expiry wicket: how old the proposal an action acts on may be
+# (guards/checks/offer_expiry.py). The rule itself is the `semantics`
+# field below: it is inside the digested body, so rewording it moves the
+# digest. Default limit: 24 hours.
+#
+# Declared disposition: ask. The unverified case is meant to be
+# ASK_UNVERIFIED, which the pack schema's disposition set does not have
+# yet; until it does, the evidence marker tells the two apart.
+#
+# Replaces offer_expiry/1.0.0, which is retired at its digest
+# (guards/wickets/retired.py): its check changed meaning under that digest.
+wicket_id: offer_expiry/1.0.1
+check: offer_expiry
+semantics: >-
+  For an action in action_classes, the age is the action's timestamp minus
+  its proposal_at, both RFC 3339 UTC, in whole seconds. An age within
+  max_age_seconds passes. An older proposal fails as expired: acting needs a
+  new proposed action. If the age cannot be established (proposal_at or
+  timestamp missing or unreadable, or a proposal later than the action) the
+  rule fails with expiry_unverified. It is never not applicable for an
+  action in action_classes; any other action class is out of scope.
+config:
+  action_classes: [marketplace.offer, marketplace.sale, agreement.accept]
+  max_age_seconds: 86400

capsule_engine/guards/wickets/catalog_defs/offer_fields_changed.v1.1.yaml

@@ -0,0 +1,22 @@
+# offer_fields_changed wicket, version 1.1: offer_fields_changed/1.0.0's
+# config with marketplace.sale added to action_classes
+# (guards/checks/field_change_count.py). The rule itself is the `semantics`
+# field below: it is inside the digested body, so rewording it moves the
+# digest. offer_fields_changed/1.0.0 (offer_fields_changed.yaml) stays as it
+# was for the packs that pin it.
+wicket_id: offer_fields_changed/1.1.0
+check: offer_fields_changed
+semantics: >-
+  For an action in action_classes, Action.offer_fields_changed is the
+  producer's count of the fields in counted_fields on which the offer being
+  accepted differs from what the user stated, and Action.offer_fields_basis
+  the SHA-256 over the JCS bytes of the list it counted over. The count is
+  read only when that basis equals the digest of counted_fields as pinned
+  here. A count at or below max_changed passes; above it fails. It is not
+  applicable, naming the field, when the action carries no count, or no basis
+  or one for another list. The fields and their values are never read.
+  marketplace.sale is in scope. Any other action class is out of scope.
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other, marketplace.sale]
+  counted_fields: [terms.item, terms.quantity, terms.price_minor, terms.deposit_minor, terms.conditions, recourse.refundable]
+  max_changed: 0

capsule_engine/guards/wickets/catalog_defs/offer_fields_changed.yaml

@@ -0,0 +1,10 @@
+# offer_fields_changed wicket: a count, from the producer, of the fields in
+# `counted_fields` on which the offer being accepted differs from what the
+# user stated (guards/checks/field_change_count.py). Read the same way as
+# material_fields_changed/1.0.0, over its own list.
+wicket_id: offer_fields_changed/1.0.0
+check: offer_fields_changed
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other]
+  counted_fields: [terms.item, terms.quantity, terms.price_minor, terms.deposit_minor, terms.conditions, recourse.refundable]
+  max_changed: 0

capsule_engine/guards/wickets/catalog_defs/price_floor.yaml

@@ -0,0 +1,32 @@
+# price_floor wicket: the lowest total the user will take
+# (guards/checks/price_floor.py). The rule itself is the `semantics` field
+# below: it is inside the digested body, so rewording it moves the digest.
+# The floor is private: the task authority seals only a salted commitment to
+# it, and the checker on the user's own device opens it.
+#
+# Declared disposition: ask.
+#
+# Replaces price_floor/2.0.0, which is retired at its digest
+# (guards/wickets/retired.py): under it a record sealing no bounds_commitment
+# was in scope and not evaluable; now no floor is in force, so it is out of
+# scope. price_floor/1.0.0 is retired too.
+wicket_id: price_floor/2.0.1
+check: price_floor
+semantics: >-
+  For an action in action_classes, the floor is min_total_minor in a
+  commercial-bounds/v0 document. The task-authority record the action cites
+  (task_authority_ref, the SHA-256 digest of the whole record) seals only
+  body.bounds_commitment, commit_alg sha256-jcs-nonce256: SHA-256 over the
+  JCS bytes of {"nonce", "text"}, with text the document's JCS bytes. The
+  document, its nonce and that commitment are the checker input's
+  commercial_bounds_opening. An amount_minor at or above the opened floor
+  passes; below it fails. An opening that does not open the sealed
+  commitment fails naming bounds_commitment, and so does a sealed
+  bounds_commitment that is not 64 lowercase hex. It is not applicable, naming
+  the field, when the action carries no amount_minor or task_authority_ref,
+  when the record is missing or is not the one the reference names, or when
+  no opening is supplied. A record that seals no bounds_commitment puts no
+  floor in force, so the action is out of scope. A floor is never read from
+  the task-authority record itself. Any other action class is out of scope.
+config:
+  action_classes: [marketplace.offer, marketplace.sale, agreement.accept]

capsule_engine/guards/wickets/catalog_defs/promise_never.v1.1.yaml

@@ -0,0 +1,64 @@
+# promise_never/1.1.0: promise_never/1.0.0 (promise_never.yaml) with one
+# exception, ruled by Steven (A7, capsule-engine#189): the user's own claim
+# of a class in attributed_never may pass, said as theirs and marked
+# unverified, never the agent's own. Its words, passed beside the check
+# (representing_opening), must open the sealed commitment and read as one
+# sentence in attributed_template; without them it fails. 1.0.0 stays as
+# it was for the records and packs that pin it.
+wicket_id: promise_never/1.1.0
+check: promise_never
+semantics: >-
+  An action in action_classes whose representation_class is outside
+  representation_classes fails as not recognised; one outside never passes.
+  One inside never fails, whatever it cites, unless its class is in
+  attributed_never, its statement_attributed_to is user, and the words
+  passed beside the check open the commitment its check seals to them,
+  start with attributed_template.prefix, end with
+  attributed_template.suffix, and hold between them a claim that is not
+  blank and has none of attributed_template.sentence_marks: then it passes.
+  An attributed statement whose words are not passed fails, except on a
+  replay whose bundle does not carry them: there it is not applicable, in
+  scope, naming representing_opening, and fails closed. An action that carries no
+  representation_class is not applicable, in scope; any other action class
+  is not applicable. The evidence records the class, the attribution and
+  whether the words opened and fit, never the words.
+config:
+  action_classes: [communication.send, disclosure.personal, marketplace.offer, marketplace.sale, agreement.accept]
+  representation_classes: [price, condition, features, authenticity, availability, delivery_date, service_scope, warranty, refund_terms, payment_methods, pickup, deadline, address, other]
+  never: [authenticity]
+  attributed_never: [authenticity]
+  attributed_template:
+    prefix: "The seller says "
+    suffix: " (unverified)"
+    # A sentence end or a line break, in any script: every Unicode 17.0
+    # Sentence_Terminal code point, every line terminator Python's
+    # str.splitlines uses, and U+2026, as explicit code points so the set is
+    # frozen here. capsulectl refuses the same list (attributedSentenceMarks);
+    # tests/fixtures/sentence-marks.txt holds it in both repositories.
+    sentence_marks: [
+      "\u000A", "\u000B", "\u000C", "\u000D", "\u001C", "\u001D", "\u001E", "\u0021", "\u002E",
+      "\u003F", "\u0085", "\u0589", "\u061D", "\u061E", "\u061F", "\u06D4", "\u0700", "\u0701",
+      "\u0702", "\u07F9", "\u0837", "\u0839", "\u083D", "\u083E", "\u0964", "\u0965", "\u104A",
+      "\u104B", "\u1362", "\u1367", "\u1368", "\u166E", "\u1735", "\u1736", "\u17D4", "\u17D5",
+      "\u1803", "\u1809", "\u1944", "\u1945", "\u1AA8", "\u1AA9", "\u1AAA", "\u1AAB", "\u1B4E",
+      "\u1B4F", "\u1B5A", "\u1B5B", "\u1B5E", "\u1B5F", "\u1B7D", "\u1B7E", "\u1B7F", "\u1C3B",
+      "\u1C3C", "\u1C7E", "\u1C7F", "\u2024", "\u2026", "\u2028", "\u2029", "\u203C", "\u203D",
+      "\u2047", "\u2048", "\u2049", "\u2CF9", "\u2CFA", "\u2CFB", "\u2E2E", "\u2E3C", "\u2E53",
+      "\u2E54", "\u3002", "\uA4FF", "\uA60E", "\uA60F", "\uA6F3", "\uA6F7", "\uA876", "\uA877",
+      "\uA8CE", "\uA8CF", "\uA92F", "\uA9C8", "\uA9C9", "\uAA5D", "\uAA5E", "\uAA5F", "\uAAF0",
+      "\uAAF1", "\uABEB", "\uFE12", "\uFE15", "\uFE16", "\uFE52", "\uFE56", "\uFE57", "\uFF01",
+      "\uFF0E", "\uFF1F", "\uFF61", "\U00010A56", "\U00010A57", "\U00010F55", "\U00010F56",
+      "\U00010F57", "\U00010F58", "\U00010F59", "\U00010F86", "\U00010F87", "\U00010F88",
+      "\U00010F89", "\U00011047", "\U00011048", "\U000110BE", "\U000110BF", "\U000110C0",
+      "\U000110C1", "\U00011141", "\U00011142", "\U00011143", "\U000111C5", "\U000111C6",
+      "\U000111CD", "\U000111DE", "\U000111DF", "\U00011238", "\U00011239", "\U0001123B",
+      "\U0001123C", "\U000112A9", "\U000113D4", "\U000113D5", "\U0001144B", "\U0001144C",
+      "\U000115C2", "\U000115C3", "\U000115C9", "\U000115CA", "\U000115CB", "\U000115CC",
+      "\U000115CD", "\U000115CE", "\U000115CF", "\U000115D0", "\U000115D1", "\U000115D2",
+      "\U000115D3", "\U000115D4", "\U000115D5", "\U000115D6", "\U000115D7", "\U00011641",
+      "\U00011642", "\U0001173C", "\U0001173D", "\U0001173E", "\U00011944", "\U00011946",
+      "\U00011A42", "\U00011A43", "\U00011A9B", "\U00011A9C", "\U00011C41", "\U00011C42",
+      "\U00011EF7", "\U00011EF8", "\U00011F43", "\U00011F44", "\U00016A6E", "\U00016A6F",
+      "\U00016AF5", "\U00016B37", "\U00016B38", "\U00016B44", "\U00016D6E", "\U00016D6F",
+      "\U00016E98", "\U0001BC9F", "\U0001DA88"
+    ]

capsule_engine/guards/wickets/catalog_defs/promise_never.yaml

@@ -0,0 +1,16 @@
+# promise_never wicket: classes of statement the agent never makes
+# (guards/checks/promise_never.py). An action whose
+# Action.representation_class is in `never` fails, whatever it cites:
+# neither a bound approval nor the task authority clears it. Only a change
+# to the rule set that removes the class from `never` lifts it.
+#
+# `representation_classes` is the closed set; a class outside it fails
+# closed.
+#
+# Declared disposition: never.
+wicket_id: promise_never/1.0.0
+check: promise_never
+config:
+  action_classes: [communication.send, disclosure.personal, marketplace.offer, marketplace.sale, agreement.accept]
+  representation_classes: [price, condition, features, authenticity, availability, delivery_date, service_scope, warranty, refund_terms, payment_methods, pickup, deadline, address, other]
+  never: [authenticity]

capsule_engine/guards/wickets/catalog_defs/promise_requires_approval.v1.1.yaml

@@ -0,0 +1,26 @@
+# promise_requires_approval/1.1.0: promise_requires_approval/1.0.0
+# (promise_requires_approval.yaml) reading the classes the task authority
+# allows at the path its config names, authorized_path: capsulectl's
+# task-authority/v0 seals the classes the user ordered at
+# body.ordered_representations (capsule-engine#180). 1.0.0 stays as it was
+# for the records and packs that pin it, reading
+# body.authorized_representation_classes.
+wicket_id: promise_requires_approval/1.1.0
+check: promise_requires_approval
+semantics: >-
+  An action in action_classes whose representation_class is outside
+  representation_classes fails as not recognised; one outside
+  requires_approval passes. One inside it passes when the task-authority
+  record bound by digest to its task_authority_ref lists the class at
+  authorized_path, or when its authorized_by is the digest of the approval
+  record supplied with the decision and that record's
+  body.representation_class is the class. Anything else fails; a failure on
+  an action that cites no task authority reads "no order or approval of
+  yours covers this promise". An action that carries no representation_class is not
+  applicable, in scope; any other action class is not applicable. The
+  evidence records the class and what was cited, never the statement.
+config:
+  action_classes: [communication.send, disclosure.personal, marketplace.offer, marketplace.sale, agreement.accept]
+  representation_classes: [price, condition, features, authenticity, availability, delivery_date, service_scope, warranty, refund_terms, payment_methods, pickup, deadline, address, other]
+  requires_approval: [warranty, delivery_date]
+  authorized_path: [body, ordered_representations]

capsule_engine/guards/wickets/catalog_defs/promise_requires_approval.yaml

@@ -0,0 +1,21 @@
+# promise_requires_approval wicket: classes of statement the agent may make
+# only inside its task authority or with a one-shot approval
+# (guards/checks/promise_requires_approval.py). An action whose
+# Action.representation_class is in `requires_approval` passes when the
+# digest-bound task-authority record's body.authorized_representation_classes
+# lists the class (no approval event needed), or when Action.authorized_by is
+# the SHA-256 digest of the sealed approval record supplied with the
+# decision, the engine's own digest of that record equals it, and the
+# record's body.representation_class is the action's class. Otherwise it
+# fails. Classes no approval may clear are in promise_never/1.0.0.
+#
+# `representation_classes` is the closed set; a class outside it fails
+# closed.
+#
+# Declared disposition: ask.
+wicket_id: promise_requires_approval/1.0.0
+check: promise_requires_approval
+config:
+  action_classes: [communication.send, disclosure.personal, marketplace.offer, marketplace.sale, agreement.accept]
+  representation_classes: [price, condition, features, authenticity, availability, delivery_date, service_scope, warranty, refund_terms, payment_methods, pickup, deadline, address, other]
+  requires_approval: [warranty, delivery_date]

capsule_engine/guards/wickets/catalog_defs/recipient_role.seller.v1.1.yaml

@@ -0,0 +1,23 @@
+# seller.recipient_role/1.1.0: seller.recipient_role/1.0.0
+# (recipient_role.seller.yaml) with the platform role recipient_role/1.1.0
+# adds (recipient_role.v1.1.yaml): the marketplace or mail relay a sale is
+# listed on may be given the user's email and nothing else. 1.0.0 stays as it
+# was for the records and packs that pin it.
+wicket_id: seller.recipient_role/1.1.0
+check: recipient_role
+semantics: >-
+  A disclosure in action_classes whose recipient_role is in allowed_roles
+  passes. One whose recipient_role is a key of role_classes passes only when
+  it names at least one class of data (disclosed_classes) and every class it
+  names is listed for that role; one naming no class, or any class not
+  listed, fails. Any other recipient_role in roles fails, and one outside
+  roles fails as not recognised. An action that carries no recipient_role is
+  not applicable, in scope; any other action class is not applicable. The
+  evidence records the role and the class names read, never who the
+  recipient is or the data.
+config:
+  action_classes: [disclosure.personal]
+  roles: [buyer, platform, third_party, self]
+  allowed_roles: [buyer, self]
+  role_classes:
+    platform: [email]

capsule_engine/guards/wickets/catalog_defs/recipient_role.seller.v1.2.yaml

@@ -0,0 +1,24 @@
+# seller.recipient_role/1.2.0: seller.recipient_role/1.1.0
+# (recipient_role.seller.v1.1.yaml) with the listing's public pickup area
+# (pickup_area: the ZIP or region a listing shows, never the exact spot) also
+# allowed to the platform a sale is listed on, as a listing needs it
+# (capsule-engine#181). 1.1.0 stays as it was for the records and packs that
+# pin it.
+wicket_id: seller.recipient_role/1.2.0
+check: recipient_role
+semantics: >-
+  A disclosure in action_classes whose recipient_role is in allowed_roles
+  passes. One whose recipient_role is a key of role_classes passes only when
+  it names at least one class of data (disclosed_classes) and every class it
+  names is listed for that role; one naming no class, or any class not
+  listed, fails. Any other recipient_role in roles fails, and one outside
+  roles fails as not recognised. An action that carries no recipient_role is
+  not applicable, in scope; any other action class is not applicable. The
+  evidence records the role and the class names read, never who the
+  recipient is or the data.
+config:
+  action_classes: [disclosure.personal]
+  roles: [buyer, platform, third_party, self]
+  allowed_roles: [buyer, self]
+  role_classes:
+    platform: [email, pickup_area]

capsule_engine/guards/wickets/catalog_defs/recipient_role.seller.yaml

@@ -0,0 +1,10 @@
+# recipient_role, configured for a seller (guards/checks/recipient_role.py).
+# The same check as recipient_role/1.0.0 with the seller's closed role set:
+# the counterparty is the buyer. recipient_role/1.0.0 (recipient_role.yaml)
+# stays as it was for the records and packs that pin it.
+wicket_id: seller.recipient_role/1.0.0
+check: recipient_role
+config:
+  action_classes: [disclosure.personal]
+  roles: [buyer, third_party, self]
+  allowed_roles: [buyer, self]

capsule_engine/guards/wickets/catalog_defs/recipient_role.v1.1.yaml

@@ -0,0 +1,26 @@
+# recipient_role/1.1.0: recipient_role/1.0.0 (recipient_role.yaml) with a
+# platform role: a marketplace, booking site or mail relay acting between the
+# user and the counterparty. A platform passes only a disclosure
+# whose every class is email, as a listing's confirmation or a relay needs;
+# a phone, an address or any other class to a platform fails, and so does a
+# disclosure to one that names no class. A first email to a platform is a
+# pause in the producer (capsulectl's first telling to a recipient), not here.
+# recipient_role/1.0.0 stays as it was for the records and packs that pin it.
+wicket_id: recipient_role/1.1.0
+check: recipient_role
+semantics: >-
+  A disclosure in action_classes whose recipient_role is in allowed_roles
+  passes. One whose recipient_role is a key of role_classes passes only when
+  it names at least one class of data (disclosed_classes) and every class it
+  names is listed for that role; one naming no class, or any class not
+  listed, fails. Any other recipient_role in roles fails, and one outside
+  roles fails as not recognised. An action that carries no recipient_role is
+  not applicable, in scope; any other action class is not applicable. The
+  evidence records the role and the class names read, never who the
+  recipient is or the data.
+config:
+  action_classes: [disclosure.personal]
+  roles: [fulfilling_merchant, platform, third_party, self]
+  allowed_roles: [fulfilling_merchant, self]
+  role_classes:
+    platform: [email]

capsule_engine/guards/wickets/catalog_defs/recipient_role.yaml

@@ -0,0 +1,11 @@
+# recipient_role wicket: membership of the role of whoever receives a
+# disclosure (guards/checks/recipient_role.py). `roles` is the closed set a
+# role must come from; one outside it fails closed. The check passes when the
+# role is in `allowed_roles`. Both lists are policy data, so a change to
+# either moves this definition's digest.
+wicket_id: recipient_role/1.0.0
+check: recipient_role
+config:
+  action_classes: [disclosure.personal]
+  roles: [fulfilling_merchant, third_party, self]
+  allowed_roles: [fulfilling_merchant, self]

capsule_engine/guards/wickets/catalog_defs/recipient_seen_before.yaml

@@ -0,0 +1,16 @@
+# recipient_seen_before wicket: counterparty_seen_before's check and fold,
+# counterparty.seen_before/2.0.0, applied to messages
+# (guards/checks/counterparty_seen_before.py). The fold counts the
+# operator's accepted, not-dry-run actions keyed by asg_payload.target, the
+# recipient of a message. Zero fails: nothing accepted has been addressed to
+# this recipient before.
+#
+# `fold_digest` is the real `definition_digest()` of
+# folds/catalog_defs/counterparty.seen_before.v2.yaml; the check refuses to
+# run when the catalog fold does not match it.
+wicket_id: recipient_seen_before/1.0.0
+check: recipient_seen_before
+config:
+  fold_id: counterparty.seen_before/2.0.0
+  fold_digest: 6a1a357e4a3b950b7397c2790fe46c03f7e645d04aad1a9bb41533df9b4a4033
+  action_classes: [communication.send, comms.external]

capsule_engine/guards/wickets/catalog_defs/recurring_charge.yaml

@@ -0,0 +1,9 @@
+# recurring_charge wicket: a read of Action.recurrence
+# (guards/checks/recurring_charge.py), for actions in `action_classes`. The
+# check fails when the recurrence is present and not one of
+# `one_time_values`. Both lists are policy data.
+wicket_id: recurring_charge/1.0.0
+check: recurring_charge
+config:
+  action_classes: [money.transfer]
+  one_time_values: [one_time]

capsule_engine/guards/wickets/catalog_defs/refundability.v1.1.yaml

@@ -0,0 +1,15 @@
+# refundability wicket, version 1.1: refundability/1.0.0's config with
+# marketplace.sale added to action_classes (guards/checks/refundability.py).
+# The rule itself is the `semantics` field below: it is inside the digested
+# body, so rewording it moves the digest. refundability/1.0.0
+# (refundability.yaml) stays as it was for the packs that pin it.
+wicket_id: refundability/1.1.0
+check: refundability
+semantics: >-
+  For an action in action_classes, Action.refundable is read: true passes,
+  false fails, and the rail is recorded beside it. It is not applicable,
+  naming the field, when the action carries no refundable. The refund terms
+  themselves are never read. marketplace.sale is in scope. Any other action
+  class is out of scope.
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other, marketplace.sale]

capsule_engine/guards/wickets/catalog_defs/refundability.yaml

@@ -0,0 +1,7 @@
+# refundability wicket: fails a payment that declares it cannot be refunded
+# (guards/checks/refundability.py), for actions in `action_classes`: the
+# classes that commit money or a booking, the same list caps/5.0.0 limits.
+wicket_id: refundability/1.0.0
+check: refundability
+config:
+  action_classes: [money.purchase, money.transfer, money.subscription, booking.create, booking.modify, agreement.accept, marketplace.offer, external_commitment.other]