grimoire-kit 3.4.2__tar.gz → 3.4.4__tar.gz

{grimoire_kit-3.4.2 → grimoire_kit-3.4.4}/CHANGELOG.md

@@ -7,6 +7,27 @@ et ce projet adhère au [Semantic Versioning](https://semver.org/lang/fr/).
 
 ## [Unreleased]
 
+## [3.4.4] - 2026-05-29
+
+### Corrigé
+
+- **CI SDK multi-OS** — stabilisation complète de `Grimoire SDK CI` : assertions CLI robustes face aux rendus Typer/Rich, couverture agentic standard incluse, smoke Windows ciblé et workflow de tests portable.
+- **Runtime standard** — sorties JSON et tests du runtime agentique rendus portables entre Linux, macOS et Windows, notamment les chemins `context`/`knowledge`.
+- **Release readiness** — correction ShellCheck, test de backoff déterministe et durcissement des tests d’édition de configuration pour débloquer la publication PyPI.
+
+## [3.4.3] - 2026-05-28
+
+### Ajouté
+
+- **Agentic Standard Bridge** — profils `minimal`, `orchestrated` et `governed`, génération des artefacts ISO/design-pattern, vérification/audit CLI et baseline de preuves.
+- **Provider onboarding** — détection non-secrète des providers, activation explicite via `standard init --provider/--providers`, politiques `hosted-safe`, `local-first` et `mixed`.
+- **Package npm préparé** — launcher `grimoire-kit` ajouté, publication npm différée en attendant l’authentification npm dédiée.
+
+### Corrigé
+
+- **Sécurité standard** — durcissement des chemins générés, rejet des `task_id` traversants, confinement des locators knowledge locaux et échappement des valeurs projet injectées dans les templates.
+- **CI/Docs** — workflow ciblé agentic standard, documentation d’extension des profils et pin explicite du bridge consommé par Forge.
+
 ## [3.4.2] - 2026-03-30
 
 ### Corrigé

{grimoire_kit-3.4.2 → grimoire_kit-3.4.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: grimoire-kit
-Version: 3.4.2
+Version: 3.4.4
 Summary: Composable AI agent platform — personas, memory, workflows, and quality automation for any project.
 Project-URL: Homepage, https://github.com/Guilhem-Bonnet/Grimoire-kit
 Project-URL: Repository, https://github.com/Guilhem-Bonnet/Grimoire-kit
@@ -88,6 +88,7 @@ Description-Content-Type: text/markdown
   <a href="#-architecture">Architecture</a> •
   <a href="#-features">Features</a> •
   <a href="#-outils-cli">Outils CLI</a> •
+  <a href="docs/agentic-standard-integration.md">Standard agentique</a> •
   <a href="docs/concepts.md">Concepts</a> •
   <a href="docs/getting-started.md">Guide complet</a> •
   <a href="CHANGELOG.md">Changelog</a>
@@ -151,6 +152,9 @@ Grimoire Kit déploie des **équipes d'agents IA** qui fonctionnent comme une vr
 # Installation via pipx (recommandé)
 pipx install grimoire-kit
 
+# Installation recommandée pour le moment
+pipx install grimoire-kit
+
 # Ou via pip dans un venv
 python3 -m venv .venv && source .venv/bin/activate
 pip install grimoire-kit
@@ -942,4 +946,3 @@ Les contributions sont les bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md)
     <img src="https://img.shields.io/github/stars/Guilhem-Bonnet/Grimoire-kit?style=social" alt="Stars">
   </a>
 </p>
-

{grimoire_kit-3.4.2 → grimoire_kit-3.4.4}/README.md

@@ -33,6 +33,7 @@
   <a href="#-architecture">Architecture</a> •
   <a href="#-features">Features</a> •
   <a href="#-outils-cli">Outils CLI</a> •
+  <a href="docs/agentic-standard-integration.md">Standard agentique</a> •
   <a href="docs/concepts.md">Concepts</a> •
   <a href="docs/getting-started.md">Guide complet</a> •
   <a href="CHANGELOG.md">Changelog</a>
@@ -96,6 +97,9 @@ Grimoire Kit déploie des **équipes d'agents IA** qui fonctionnent comme une vr
 # Installation via pipx (recommandé)
 pipx install grimoire-kit
 
+# Installation recommandée pour le moment
+pipx install grimoire-kit
+
 # Ou via pip dans un venv
 python3 -m venv .venv && source .venv/bin/activate
 pip install grimoire-kit
@@ -887,4 +891,3 @@ Les contributions sont les bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md)
     <img src="https://img.shields.io/github/stars/Guilhem-Bonnet/Grimoire-kit?style=social" alt="Stars">
   </a>
 </p>
-

grimoire_kit-3.4.4/archetypes/agentic-standard/archetype.dna.yaml

@@ -0,0 +1,135 @@
+$schema: "grimoire-archetype-dna/v1"
+
+id: agentic-standard
+name: "Agentic Standard"
+version: "0.1.0"
+description: "Pont installable entre un corpus normatif agentique externe et les artefacts consommables Grimoire Kit."
+icon: "⚖️"
+author: "grimoire-kit"
+tags: [standard, governance, compliance, context, knowledge, llm-provider, evidence]
+
+inherits: minimal
+
+traits:
+  - name: normative-traceability
+    description: "Chaque artefact standard-aware garde une trace vers l'exigence, le contrôle ou le pattern amont."
+    rule: "Ne pas reformuler une obligation comme source de vérité locale sans référence au corpus normatif amont. Toute conformité déclarée pointe vers mission-brief, compliance-declaration ou evidence-pack."
+    agents_affected: "*"
+  - name: evidence-gated-workflow
+    description: "Aucune livraison standard-aware sans preuve attachée."
+    rule: "Avant de déclarer une tâche terminée, produire ou mettre à jour un Evidence Pack et documenter les contrôles non applicables."
+    agents_affected: "*"
+  - name: context-orchestrated
+    description: "Le contexte n'est pas injecté en vrac : il est sélectionné, borné et justifié."
+    rule: "Pour toute tâche complexe, renseigner les sources de contexte, la raison de sélection, la fraîcheur et le budget dans le Task Envelope."
+    agents_affected: "*"
+  - name: knowledge-indexer-aware
+    description: "Les sources externes indexées sont séparées de la mémoire agentique."
+    rule: "Toute donnée externe greffée via dossier, dépôt, URL, API, MCP ou base de données doit être déclarée dans knowledge-source-registry.yaml avant usage récurrent."
+    agents_affected: "*"
+  - name: provider-neutral-routing
+    description: "Les appels LLM sont compatibles Copilot, Codex/OpenAI, Claude, Gemini et local via registre."
+    rule: "Aucun provider ou modèle non déclaré dans llm-provider-registry.yaml ne doit devenir une dépendance implicite du flow."
+    agents_affected: "*"
+
+constraints:
+  - id: no-local-norm-fork
+    description: "Ne pas forker silencieusement la norme dans un template Grimoire."
+    enforcement: hard
+    checked_by: agent-optimizer
+  - id: evidence-pack-required
+    description: "Un Evidence Pack est requis pour toute déclaration de conformité."
+    enforcement: hard
+    checked_by: agent-optimizer
+  - id: knowledge-not-memory
+    description: "La base de connaissance indexée ne doit pas être mélangée à la mémoire agentique."
+    enforcement: hard
+    checked_by: memory-keeper
+  - id: registered-provider-only
+    description: "Les providers LLM doivent être déclarés avant usage."
+    enforcement: hard
+    checked_by: agent-optimizer
+
+values:
+  - name: normative-clarity
+    description: "Séparer ce qui est obligatoire, informatif, généré et spécifique au projet."
+    priority: 1
+  - name: provider-portability
+    description: "Un flow Grimoire ne dépend pas d'un fournisseur LLM unique par accident."
+    priority: 1
+  - name: evidence-first-delivery
+    description: "La preuve de livraison fait partie du produit livré."
+    priority: 1
+
+tools_required:
+  - name: git
+    description: "Traçabilité des changements et références vers la norme amont."
+    required: true
+    check_command: "which git"
+  - name: python3
+    description: "Validation et scripts Grimoire."
+    required: false
+    check_command: "which python3"
+
+acceptance_criteria:
+  - id: mission-brief-present
+    description: "Le projet déclare son profil et son périmètre standard-aware."
+    enforcement: hard
+    context: "Template framework/agentic-standard/templates/mission-brief.md"
+    triggers_on: ["_grimoire/standard/mission-brief.md"]
+    checked_by: agent-optimizer
+  - id: task-envelope-used
+    description: "Les tâches complexes ont un état, un contexte borné et des limites d'outils."
+    enforcement: soft
+    context: "Template framework/agentic-standard/templates/task-envelope.md"
+    triggers_on: ["_grimoire-output/evidence/**/task-envelope.md"]
+    checked_by: agent-optimizer
+  - id: evidence-pack-used
+    description: "Les validations et écarts sont attachés à un Evidence Pack."
+    enforcement: hard
+    context: "Template framework/agentic-standard/templates/evidence-pack.md"
+    triggers_on: ["_grimoire-output/evidence/**/evidence-pack.md"]
+    checked_by: agent-optimizer
+  - id: knowledge-sources-declared
+    description: "Les sources documentaires externes indexées sont déclarées avec trust boundary."
+    enforcement: hard
+    context: "Knowledge Base Indexer — pas une mémoire."
+    triggers_on: ["_grimoire/standard/knowledge-source-registry.yaml"]
+    checked_by: memory-keeper
+  - id: providers-declared
+    description: "Les providers LLM utilisables sont explicitement déclarés."
+    enforcement: hard
+    context: "Provider-first routing."
+    triggers_on: ["_grimoire/standard/llm-provider-registry.yaml"]
+    checked_by: agent-optimizer
+
+agents:
+  - path: "../../archetypes/meta/agents/project-navigator.md"
+    required: true
+    description: "Atlas — cartographie du projet et des artefacts standard-aware"
+  - path: "../../archetypes/meta/agents/agent-optimizer.md"
+    required: true
+    description: "Sentinel — vérification des evidence gates et guardrails"
+  - path: "../../archetypes/meta/agents/memory-keeper.md"
+    required: true
+    description: "Mnemo — séparation mémoire / connaissance indexée"
+
+workflows: []
+shared_context_template: "../../archetypes/agentic-standard/shared-context.tpl.md"
+prompts_directory: null
+
+compatible_with: [minimal, infra-ops, web-app, fix-loop, platform-engineering, features/vector-memory, stack/go, stack/typescript, stack/python, stack/terraform, stack/k8s]
+incompatible_with: []
+requires: [minimal]
+
+auto_detect:
+  files: ["_grimoire/standard/mission-brief.md", "_grimoire/standard/compliance-declaration.md"]
+  directories: ["_grimoire/standard/", "_grimoire-output/evidence/"]
+  confidence_boost: 80
+  exclusive: false
+
+changelog:
+  - version: "0.1.0"
+    date: "2026-05-10"
+    changes:
+      - "Création du pont agentic-standard : traçabilité normative, evidence gates, Knowledge Base Indexer, registre LLM provider-neutral."

grimoire_kit-3.4.4/archetypes/agentic-standard/shared-context.tpl.md

@@ -0,0 +1,24 @@
+# Agentic Standard Shared Context
+
+This project uses the `agentic-standard` Grimoire archetype.
+
+## Source of truth
+
+- The external normative corpus defines obligations and requirement language.
+- Grimoire Kit provides generated or copied implementation artifacts.
+- Project-specific files may declare conformity, gaps, and decisions, but they do not redefine the standard.
+
+## Required distinctions
+
+- Agent memory: persistent learning about this project or agent behavior.
+- Session context: bounded information selected for the current task.
+- Knowledge base: indexed external documentation declared in `knowledge-source-registry.yaml`.
+- Source of truth: only a source explicitly marked authoritative for the current scope.
+
+## Execution rule
+
+For non-trivial tasks, use a Task Envelope before execution and an Evidence Pack before completion. If a requirement is not applicable, state why instead of silently skipping it.
+
+## LLM provider rule
+
+Use provider-first routing. The selected provider, model or capability, fallback, and data policy must be declared before becoming part of the repeatable flow.

grimoire_kit-3.4.4/framework/agentic-standard/README.md

@@ -0,0 +1,27 @@
+# Agentic Standard Bridge
+
+This directory is the Grimoire Kit bridge between an external agentic standard and concrete project artifacts.
+
+It does not define the standard itself. The normative source remains the external corpus (`processus-developpement-agentique`). Grimoire Kit only turns that corpus into installable profiles, templates, prompts, controls, and evidence structures.
+
+## Responsibilities
+
+| Layer | Role | Output in Grimoire Kit |
+|---|---|---|
+| Normative corpus | Defines obligations, controls, pattern families, profiles, and evidence expectations | Referenced as an upstream source |
+| Grimoire Forge | Selects a target profile and assembles project artifacts | Profile map, generator logic, validation flow |
+| Grimoire Kit | Provides consumable flow assets for project teams | Archetypes, templates, manifests, checks |
+
+## Files
+
+- `profile-map.yaml` maps standard capabilities to Grimoire profiles and concrete kit artifacts.
+- `templates/` contains project-facing documents generated or copied into a target project.
+- `../../archetypes/agentic-standard/` is the installable archetype for teams that want the standard-aware flow.
+
+## Design rules
+
+1. The bridge must not copy normative obligations as if Grimoire Kit were the source of truth.
+2. Every generated artifact must keep a trace to the upstream requirement, control, or pattern family it implements.
+3. External knowledge indexing is declared as a knowledge base layer, not as memory and not as session context.
+4. LLM compatibility is provider-first: provider, model, capability, data policy, and fallback must be explicit.
+5. Evidence is part of the flow, not a post-hoc report.

grimoire_kit-3.4.4/framework/agentic-standard/profile-map.yaml

@@ -0,0 +1,289 @@
+$schema: "grimoire-agentic-standard-profile-map/v1"
+
+metadata:
+  id: agentic-standard-profile-map
+  version: "0.1.0"
+  owner: grimoire-kit
+  upstream_standard:
+    name: "Standard de structure agentique"
+    repository: "processus-developpement-agentique"
+    canonical_entrypoint: "docs/norme-structure-agentique.md"
+    normative_matrix: "docs/matrice-normative-maitresse.md"
+  intent: >
+    Map an external normative corpus to concrete Grimoire Kit profiles,
+    templates, checks, and evidence packs.
+
+principles:
+  - id: standard-is-upstream
+    rule: "Grimoire Kit consumes and traces the standard; it does not redefine it."
+  - id: evidence-gated-flow
+    rule: "A task is not complete until required evidence for the selected profile exists."
+  - id: provider-neutral-llm
+    rule: "Provider/model usage is declared through a registry before execution."
+  - id: knowledge-is-not-memory
+    rule: "Indexed external documentation is a knowledge base source, not agent memory."
+  - id: context-is-orchestrated
+    rule: "Context is selected, ranked, bounded, and justified before reaching an agent."
+
+artifact_types:
+  mission_brief:
+    template: "framework/agentic-standard/templates/mission-brief.md"
+    purpose: "Declare project scope, profile, risk level, and upstream standard references."
+  task_envelope:
+    template: "framework/agentic-standard/templates/task-envelope.md"
+    purpose: "Wrap an agentic task with state, context inputs, tools, checks, and evidence gates."
+  evidence_pack:
+    template: "framework/agentic-standard/templates/evidence-pack.md"
+    purpose: "Collect proof that a task, workflow, or release satisfied its declared controls."
+  compliance_declaration:
+    template: "framework/agentic-standard/templates/compliance-declaration.md"
+    purpose: "Declare profile-level conformance with explicit gaps and accepted deviations."
+  knowledge_source_registry:
+    template: "framework/agentic-standard/templates/knowledge-source-registry.yaml"
+    purpose: "Declare external documentation sources to index and their trust boundaries."
+  llm_provider_registry:
+    template: "framework/agentic-standard/templates/llm-provider-registry.yaml"
+    purpose: "Declare LLM providers, capabilities, data policy, routing, and fallback."
+  task_board:
+    template: "framework/agentic-standard/templates/task-board.yaml"
+    purpose: "Govern agentic work with states, owners, blockers, evidence, decisions, and remediation links."
+  memory_policy:
+    template: "framework/agentic-standard/templates/memory-policy.yaml"
+    purpose: "Declare memory types, scopes, retention, freshness, trust, redaction, and provider compatibility."
+  context_contract:
+    template: "framework/agentic-standard/templates/context-contract.yaml"
+    purpose: "Define deterministic context bundle assembly and validation rules."
+  decision_graph:
+    template: "framework/agentic-standard/templates/decision-graph.yaml"
+    purpose: "Declare explainable agentic decisions and decision record requirements."
+  rule_packs:
+    template: "framework/agentic-standard/templates/rule-packs.yaml"
+    purpose: "Declare executable normative rules mapped to checks, hooks, events, and remediation."
+  hook_registry:
+    template: "framework/agentic-standard/templates/hook-registry.yaml"
+    purpose: "Declare runtime hook phases, actions, and safety policies."
+  orchestration_policy:
+    template: "framework/agentic-standard/templates/orchestration-policy.yaml"
+    purpose: "Declare agents, personas, roles, autonomy limits, handoffs, escalation, and rollback."
+  evidence_gates:
+    template: "framework/agentic-standard/templates/evidence-gates.yaml"
+    purpose: "Declare evidence-gated task lifecycle transitions."
+  pattern_catalog:
+    template: "framework/agentic-standard/templates/pattern-catalog.yaml"
+    purpose: "Classify executable agentic patterns and map them to artifacts, rules, and checks."
+  compliance_score:
+    template: "framework/agentic-standard/templates/compliance-score.yaml"
+    purpose: "Declare multidimensional compliance scoring and profile thresholds."
+  remediation_plan:
+    template: "framework/agentic-standard/templates/remediation-plan.yaml"
+    purpose: "Declare remediation action semantics for audit findings."
+  accepted_risks:
+    template: "framework/agentic-standard/templates/accepted-risks.yaml"
+    purpose: "Declare governed risk acceptances and expiry policy."
+  waivers:
+    template: "framework/agentic-standard/templates/waivers.yaml"
+    purpose: "Declare temporary governance waivers and approval evidence."
+
+profiles:
+  - id: starter
+    display_name: "Starter"
+    target: "Individual or small project adopting a minimal standard-aware flow."
+    maturity: 1
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+    mapped_capabilities:
+      - workflow-state-engine
+      - evidence-gated-workflow
+      - tool-blast-radius-limiter
+    minimum_evidence:
+      - "Selected profile and task state are declared."
+      - "Tools and writable paths are bounded."
+      - "Completion includes validation evidence or an explicit non-applicability note."
+
+  - id: controlled
+    display_name: "Controlled"
+    target: "Team project requiring repeatable governance and provider-neutral LLM routing."
+    maturity: 2
+    required_artifacts:
+      - mission_brief
+      - task_envelope
+      - evidence_pack
+      - llm_provider_registry
+      - compliance_declaration
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - fix-loop
+    mapped_capabilities:
+      - llm-provider-abstraction
+      - guardrail-contract
+      - mcp-trust-gate
+      - prompt-version-observability
+    minimum_evidence:
+      - "Every provider/model call is declared in the provider registry."
+      - "Guardrails define allow, deny, and escalation behavior."
+      - "Prompt, instruction, and capability changes are traceable."
+
+  - id: orchestrated
+    display_name: "Orchestrated"
+    target: "Multi-agent flow with advanced context routing and external knowledge grafting."
+    maturity: 3
+    required_artifacts:
+      - mission_brief
+      - task_board
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+      - memory_policy
+      - context_contract
+      - decision_graph
+      - rule_packs
+      - hook_registry
+      - orchestration_policy
+      - evidence_gates
+      - pattern_catalog
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - features/vector-memory
+      - platform-engineering
+    mapped_capabilities:
+      - advanced-context-orchestrator
+      - knowledge-base-indexer
+      - memory-integrity-validator
+      - runtime-provider-contract
+      - trajectory-logging
+    minimum_evidence:
+      - "Context selections cite their source, freshness, and reason for inclusion."
+      - "Knowledge sources have indexing mode, trust level, and refresh policy."
+      - "Memory and knowledge base writes are separated."
+
+  - id: governed
+    display_name: "Governed"
+    target: "Organization-grade flow with policy, audit, and environment-aware controls."
+    maturity: 4
+    required_artifacts:
+      - mission_brief
+      - task_board
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+      - memory_policy
+      - context_contract
+      - decision_graph
+      - rule_packs
+      - hook_registry
+      - orchestration_policy
+      - evidence_gates
+      - pattern_catalog
+      - compliance_score
+      - remediation_plan
+      - accepted_risks
+      - waivers
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - infra-ops
+      - platform-engineering
+    mapped_capabilities:
+      - policy-by-environment
+      - workspace-isolation
+      - browser-tool-contract
+      - agent-telemetry-plane
+      - session-reliability-slo-reporter
+    minimum_evidence:
+      - "Environment policy states what changes between local, CI, staging, and production."
+      - "Workspace isolation and network/tool boundaries are declared."
+      - "Telemetry and audit trails cover workflow state transitions."
+
+  - id: production
+    display_name: "Production"
+    target: "Enterprise or public critical flow with SLOs, dry-runs, cost controls, and release gates."
+    maturity: 5
+    required_artifacts:
+      - mission_brief
+      - task_board
+      - task_envelope
+      - evidence_pack
+      - knowledge_source_registry
+      - llm_provider_registry
+      - compliance_declaration
+      - memory_policy
+      - context_contract
+      - decision_graph
+      - rule_packs
+      - hook_registry
+      - orchestration_policy
+      - evidence_gates
+      - pattern_catalog
+      - compliance_score
+      - remediation_plan
+      - accepted_risks
+      - waivers
+    recommended_archetypes:
+      - minimal
+      - agentic-standard
+      - infra-ops
+      - platform-engineering
+      - features/vector-memory
+    mapped_capabilities:
+      - kubernetes-agent-control-plane
+      - cluster-action-dry-run
+      - llm-cost-registry
+      - doc-to-graph-pipeline
+      - flow-dsl-minimal
+    minimum_evidence:
+      - "High-risk actions support dry-run and rollback proof."
+      - "Cost, latency, reliability, and quality signals are recorded for critical runs."
+      - "Release gates fail closed when mandatory evidence is missing."
+
+generation_targets:
+  project_root:
+    - path: "_grimoire/standard/mission-brief.md"
+      source_artifact: mission_brief
+    - path: "_grimoire/standard/compliance-declaration.md"
+      source_artifact: compliance_declaration
+    - path: "_grimoire/standard/knowledge-source-registry.yaml"
+      source_artifact: knowledge_source_registry
+    - path: "_grimoire/standard/llm-provider-registry.yaml"
+      source_artifact: llm_provider_registry
+    - path: "_grimoire/standard/task-board.yaml"
+      source_artifact: task_board
+    - path: "_grimoire/standard/memory-policy.yaml"
+      source_artifact: memory_policy
+    - path: "_grimoire/standard/context-contract.yaml"
+      source_artifact: context_contract
+    - path: "_grimoire/standard/decision-graph.yaml"
+      source_artifact: decision_graph
+    - path: "_grimoire/standard/rule-packs.yaml"
+      source_artifact: rule_packs
+    - path: "_grimoire/standard/hook-registry.yaml"
+      source_artifact: hook_registry
+    - path: "_grimoire/standard/orchestration-policy.yaml"
+      source_artifact: orchestration_policy
+    - path: "_grimoire/standard/evidence-gates.yaml"
+      source_artifact: evidence_gates
+    - path: "_grimoire/standard/pattern-catalog.yaml"
+      source_artifact: pattern_catalog
+    - path: "_grimoire/standard/compliance-score.yaml"
+      source_artifact: compliance_score
+    - path: "_grimoire/standard/remediation-plan.yaml"
+      source_artifact: remediation_plan
+    - path: "_grimoire/standard/accepted-risks.yaml"
+      source_artifact: accepted_risks
+    - path: "_grimoire/standard/waivers.yaml"
+      source_artifact: waivers
+  task_runtime:
+    - path: "_grimoire-output/evidence/{task-id}/task-envelope.md"
+      source_artifact: task_envelope
+    - path: "_grimoire-output/evidence/{task-id}/evidence-pack.md"
+      source_artifact: evidence_pack