narna 0.1.0__tar.gz

narna-0.1.0/.gitignore

@@ -0,0 +1,62 @@
+# Dependencies & build
+.venv/
+venv/
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.eggs/
+node_modules/
+web/frontend/dist/
+web/frontend/node_modules/
+
+# Local UAP / agent runtime state
+.uap/
+agent.yaml
+
+# Secrets & local env (never commit)
+.env
+.env.*
+!.env.example
+!**/.env.example
+!**/.env.production.example
+web/deploy/selfhost/.env
+*.pem
+*.key
+secrets/
+credentials.json
+
+# Databases & local data
+*.db
+*.sqlite
+*.sqlite3
+uap_data/
+postgres_data/
+redis_data/
+
+# IDE / OS
+.idea/
+.vscode/
+*.swp
+.DS_Store
+Thumbs.db
+
+# Test / coverage
+.coverage
+htmlcov/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+
+# Logs
+*.log
+
+.deploy-secrets/
+
+narna-deploy.tar
+dist/
+*.egg-info/
+
+examples/_demo_*/
+examples/**/.uap/

narna-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 NARNA
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

narna-0.1.0/PKG-INFO

@@ -0,0 +1,115 @@
+Metadata-Version: 2.4
+Name: narna
+Version: 0.1.0
+Summary: NARNA — Governance Infrastructure for Agentic AI (UGS reference runtime)
+Project-URL: Homepage, https://narna.org
+Project-URL: Documentation, https://narna.org/docs
+Project-URL: Repository, https://github.com/hanyangkai/narna
+Author: NARNA Contributors
+License: MIT
+License-File: LICENSE
+Keywords: agentic-ai,ai-agents,governance,narna,runtime,trust,uap,ugs
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.11
+Requires-Dist: cryptography>=42.0.0
+Requires-Dist: jsonschema>=4.23.0
+Requires-Dist: pyyaml>=6.0.1
+Provides-Extra: cloud
+Requires-Dist: fastapi>=0.115.0; extra == 'cloud'
+Requires-Dist: pydantic>=2.10.0; extra == 'cloud'
+Requires-Dist: python-multipart>=0.0.12; extra == 'cloud'
+Requires-Dist: pyyaml>=6.0.1; extra == 'cloud'
+Requires-Dist: sqlalchemy>=2.0.36; extra == 'cloud'
+Requires-Dist: uvicorn[standard]>=0.32.0; extra == 'cloud'
+Provides-Extra: dev
+Requires-Dist: build>=1.0.0; extra == 'dev'
+Requires-Dist: jsonschema>=4.23.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# NARNA
+
+**Governance Infrastructure for Agentic AI**
+
+> **Govern Once. Run Anywhere.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
+[![Website](https://img.shields.io/badge/narna.org-live-0a7ea4)](https://narna.org)
+[![Spec](https://img.shields.io/badge/UGS-open%20standard-111)](./specs/README.md)
+
+NARNA makes Agentic AI **governable** — portable identity, policy, evidence, and trust across LangGraph, CrewAI, OpenAI, Anthropic, MCP, and OTel.
+
+It does **not** replace those runtimes. It does **not** train models. It sits in the infrastructure layer and **enforces / audits / proves** what fleets may do.
+
+| Name | Role |
+|------|------|
+| **NARNA** | Brand + reference runtime |
+| **UGS** | Universal Governance Specification (open standard) |
+| **VAP** | Verify · Audit · Prove |
+| **GU** | Governance Unit (Cloud metering) |
+| **Governance Package** | Portable compliance rules (EU AI Act, HIPAA, GDPR…) |
+
+> **NARNA governs AI. Others execute it.**
+
+**Not another “agent passport” clone.** See [`docs/DIFFERENTIATION.md`](./docs/DIFFERENTIATION.md) — wedge = **UGS + Packages + GU**, not identity-only protocols.
+
+## Install
+
+```bash
+pip install -e .   # or: pip install narna  (when published)
+```
+
+```python
+from narna import wrap
+
+# Enforce before host side-effects (default). Use mode="observe" to migrate.
+agent = wrap(my_langgraph_app, vap=True, mode="enforce")
+agent.run("quarterly summary")
+```
+
+## 30 seconds — package + runtime
+
+```python
+from narna import Agent, ConstitutionRuntime
+
+rt = ConstitutionRuntime()
+rt.load(provider="eu-ai-act")  # Governance Package
+
+agent = Agent(vap=True)
+agent.run()
+```
+
+## Why teams integrate NARNA
+
+1. **Compliance packages** — load once, enforce across frameworks  
+2. **Enforce-before adapters** — deny tool/LLM calls before side effects  
+3. **UGS Passport + Registry** — public verify at [narna.org](https://narna.org)  
+4. **Cloud GU** — Runtime free; Trust (Registry / Passport / Packages) is the product  
+
+## Links
+
+| | |
+|--|--|
+| Site | https://narna.org |
+| API | https://api.narna.org/v1/health |
+| **Ship log (daily)** | [`docs/SHIP-LOG.md`](./docs/SHIP-LOG.md) |
+| MVP status | [`docs/MVP-CHECKLIST.md`](./docs/MVP-CHECKLIST.md) |
+| Adapter e2e | [`docs/ADAPTERS-E2E.md`](./docs/ADAPTERS-E2E.md) |
+| UGS v0.1 | [`specs/RELEASE-v0.1.md`](./specs/RELEASE-v0.1.md) |
+| Strategy | [`docs/STRATEGY.md`](./docs/STRATEGY.md) |
+| Business | [`docs/BUSINESS-MODEL.md`](./docs/BUSINESS-MODEL.md) |
+| Differentiation | [`docs/DIFFERENTIATION.md`](./docs/DIFFERENTIATION.md) |
+| NGS RFCs | [`rfcs/ngs/`](./rfcs/ngs/) |
+| Install | [`docs/INSTALL.md`](./docs/INSTALL.md) |
+
+## Compatibility
+
+OpenAI · Anthropic · Google · MCP · OpenTelemetry · LangGraph · CrewAI · Docker · Kubernetes
+
+## License
+
+MIT

narna-0.1.0/README.md

@@ -0,0 +1,82 @@
+# NARNA
+
+**Governance Infrastructure for Agentic AI**
+
+> **Govern Once. Run Anywhere.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
+[![Website](https://img.shields.io/badge/narna.org-live-0a7ea4)](https://narna.org)
+[![Spec](https://img.shields.io/badge/UGS-open%20standard-111)](./specs/README.md)
+
+NARNA makes Agentic AI **governable** — portable identity, policy, evidence, and trust across LangGraph, CrewAI, OpenAI, Anthropic, MCP, and OTel.
+
+It does **not** replace those runtimes. It does **not** train models. It sits in the infrastructure layer and **enforces / audits / proves** what fleets may do.
+
+| Name | Role |
+|------|------|
+| **NARNA** | Brand + reference runtime |
+| **UGS** | Universal Governance Specification (open standard) |
+| **VAP** | Verify · Audit · Prove |
+| **GU** | Governance Unit (Cloud metering) |
+| **Governance Package** | Portable compliance rules (EU AI Act, HIPAA, GDPR…) |
+
+> **NARNA governs AI. Others execute it.**
+
+**Not another “agent passport” clone.** See [`docs/DIFFERENTIATION.md`](./docs/DIFFERENTIATION.md) — wedge = **UGS + Packages + GU**, not identity-only protocols.
+
+## Install
+
+```bash
+pip install -e .   # or: pip install narna  (when published)
+```
+
+```python
+from narna import wrap
+
+# Enforce before host side-effects (default). Use mode="observe" to migrate.
+agent = wrap(my_langgraph_app, vap=True, mode="enforce")
+agent.run("quarterly summary")
+```
+
+## 30 seconds — package + runtime
+
+```python
+from narna import Agent, ConstitutionRuntime
+
+rt = ConstitutionRuntime()
+rt.load(provider="eu-ai-act")  # Governance Package
+
+agent = Agent(vap=True)
+agent.run()
+```
+
+## Why teams integrate NARNA
+
+1. **Compliance packages** — load once, enforce across frameworks  
+2. **Enforce-before adapters** — deny tool/LLM calls before side effects  
+3. **UGS Passport + Registry** — public verify at [narna.org](https://narna.org)  
+4. **Cloud GU** — Runtime free; Trust (Registry / Passport / Packages) is the product  
+
+## Links
+
+| | |
+|--|--|
+| Site | https://narna.org |
+| API | https://api.narna.org/v1/health |
+| **Ship log (daily)** | [`docs/SHIP-LOG.md`](./docs/SHIP-LOG.md) |
+| MVP status | [`docs/MVP-CHECKLIST.md`](./docs/MVP-CHECKLIST.md) |
+| Adapter e2e | [`docs/ADAPTERS-E2E.md`](./docs/ADAPTERS-E2E.md) |
+| UGS v0.1 | [`specs/RELEASE-v0.1.md`](./specs/RELEASE-v0.1.md) |
+| Strategy | [`docs/STRATEGY.md`](./docs/STRATEGY.md) |
+| Business | [`docs/BUSINESS-MODEL.md`](./docs/BUSINESS-MODEL.md) |
+| Differentiation | [`docs/DIFFERENTIATION.md`](./docs/DIFFERENTIATION.md) |
+| NGS RFCs | [`rfcs/ngs/`](./rfcs/ngs/) |
+| Install | [`docs/INSTALL.md`](./docs/INSTALL.md) |
+
+## Compatibility
+
+OpenAI · Anthropic · Google · MCP · OpenTelemetry · LangGraph · CrewAI · Docker · Kubernetes
+
+## License
+
+MIT

narna-0.1.0/policies/local-default.yaml

@@ -0,0 +1,14 @@
+apiVersion: uap.dev/v1alpha1
+kind: PolicyPack
+metadata:
+  name: local-default
+  version: 0.0.0
+rules:
+  - permission: market.read
+    decision: allow
+  - permission: memory.read
+    decision: allow
+  - permission: memory.write
+    decision: allow
+  - permission: external.invoke
+    decision: allow

narna-0.1.0/policies/trading-default.yaml

@@ -0,0 +1,24 @@
+apiVersion: uap.dev/v1alpha1
+kind: PolicyPack
+metadata:
+  name: trading-default
+  version: 1.0.0
+rules:
+  - permission: market.read
+    decision: allow
+  - permission: browser.open
+    decision: allow
+    constraints:
+      domainsAllowlist:
+        - "*.exchange.com"
+        - "api.coinbase.com"
+        - "api.binance.com"
+  - permission: wallet.transfer
+    decision: ask
+    constraints:
+      maxAmount: "100"
+      currency: USDT
+  - permission: memory.read
+    decision: allow
+  - permission: memory.write
+    decision: allow

narna-0.1.0/pyproject.toml

@@ -0,0 +1,58 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "narna"
+version = "0.1.0"
+description = "NARNA — Governance Infrastructure for Agentic AI (UGS reference runtime)"
+readme = "README.md"
+requires-python = ">=3.11"
+license = { text = "MIT" }
+authors = [{ name = "NARNA Contributors" }]
+keywords = ["ai-agents", "agentic-ai", "governance", "runtime", "trust", "uap", "ugs", "narna"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Topic :: Software Development :: Libraries",
+]
+dependencies = [
+  "PyYAML>=6.0.1",
+  "jsonschema>=4.23.0",
+  "cryptography>=42.0.0",
+]
+
+[project.optional-dependencies]
+dev = ["jsonschema>=4.23.0", "build>=1.0.0"]
+cloud = [
+  "fastapi>=0.115.0",
+  "uvicorn[standard]>=0.32.0",
+  "sqlalchemy>=2.0.36",
+  "pydantic>=2.10.0",
+  "python-multipart>=0.0.12",
+  "PyYAML>=6.0.1",
+]
+
+[project.urls]
+Homepage = "https://narna.org"
+Documentation = "https://narna.org/docs"
+Repository = "https://github.com/hanyangkai/narna"
+
+[project.scripts]
+narna = "narna.cli:main"
+uap = "uap.cli:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/narna", "src/uap", "src/uap_cloud"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "/src",
+  "/policies",
+  "/specs",
+  "/README.md",
+  "/pyproject.toml",
+]

narna-0.1.0/specs/ARCHITECTURE.md

@@ -0,0 +1,89 @@
+# Architecture (normative orientation)
+
+**Status:** Draft — infrastructure-layer lock  
+**Strategy:** [`../docs/STRATEGY.md`](../docs/STRATEGY.md) · **Positioning:** [`../docs/POSITIONING.md`](../docs/POSITIONING.md)
+
+---
+
+## Stack (locked)
+
+```text
+                    Applications
+────────────────────────────────────────────
+            AI Products & AI Companies
+────────────────────────────────────────────
+        OpenAI · Claude · Gemini · Llama
+────────────────────────────────────────────
+ OpenAI SDK · LangGraph · CrewAI · AutoGen
+────────────────────────────────────────────
+     OpenTelemetry · MCP · OpenShell
+────────────────────────────────────────────
+              ★ NARNA Runtime ★
+     Identity · Governance · Policy
+     Permission · Evidence · Trust · Certification
+────────────────────────────────────────────
+     Docker · Kubernetes · Linux · Cloud
+```
+
+NARNA does **not** replace frameworks or models. It is the **governance infrastructure** they attach to.
+
+---
+
+## Open standard vs brand
+
+| Name | Role |
+|------|------|
+| **UGS** | Universal Governance Specification — open contracts |
+| **NARNA** | Brand + reference runtime implementing UGS |
+| **VAP** | Trust engine (Verify → Audit → Prove) |
+
+---
+
+## Control plane vs data plane
+
+| Plane | Owns | Examples |
+|-------|------|----------|
+| **Governance Runtime (NARNA)** | Load / Validate / Enforce / Audit / Verify / Certify | `governance_runtime`, active binding |
+| **Governance Packages** | Who / may / must / risk / human gates | Constitution, Compliance packs |
+| **Execution (others)** | How tokens/tools run | LangGraph, OpenAI Agents, CrewAI, MCP |
+| **Observability (others)** | What happened | OpenTelemetry |
+| **Proof (VAP)** | Whether it can be believed | Evidence, ProofBundle, Trust Score |
+
+---
+
+## Artifact flow
+
+```text
+Governance Package
+        ↓
+NARNA Runtime: Load → Validate → bind active package
+        ↓
+Enforce (authorize) → host side effects
+        ↓
+Evidence → Verify / Audit (VAP)
+        ↓
+Passport → Certification → Registry / Marketplace
+```
+
+**Portable Governance:** changing model vendor **MUST NOT** alone invalidate identity or reset trust without package change.
+
+---
+
+## Package boundaries
+
+| Package | Owns |
+|---------|------|
+| Specs (`specs/`) | UGS contracts — source of truth |
+| `narna` / `uap` SDK | Reference runtime + adapters (`uap` = legacy path) |
+| Cloud | Marketplace, Registry, Certification stamp — optional |
+
+---
+
+## Conformance layers
+
+1. **UGS-conformant** — Identity / Package / Evidence / Trust contracts  
+2. **Constitution-Runtime-conformant** — Load → Enforce → Verify → Audit → Switch  
+3. **VAP-conformant** — ProofBundle + TrustScore + offline verify  
+4. **Certified** — NARNA Certification levels  
+
+Aim reference code at (2); treat host frameworks as execution adapters.

narna-0.1.0/specs/README.md

@@ -0,0 +1,73 @@
+# NARNA / UGS Specification Set
+
+**NARNA** — *The Governance Infrastructure for Agentic AI.*  
+**UGS** — *Universal Governance Specification* (open standard)  
+**NGS** — *NARNA Governance Standards* (numbered RFCs — IETF-style)  
+**VAP** — *Verify · Audit · Prove* (trust engine)
+
+**Primary:** Govern Once. Run Anywhere.  
+**Strategy lock:** [`../docs/STRATEGY.md`](../docs/STRATEGY.md)  
+**NGS index:** [`../rfcs/ngs/README.md`](../rfcs/ngs/README.md)
+
+**Status:** Released v0.1.0  
+**Scope:** normative specs + JSON Schemas + OpenAPI  
+**Freeze tag:** `ugs-v0.1.0` (semver aligned with [`VERSION`](./VERSION))
+
+> UGS v0.1 locks the core six (Identity → Trust) + Manifest, Passport, Governance Package, Registry, and Governance API. Later minors may add telemetry/metering without breaking the core contracts.
+---
+
+## Core six (NGS-0001…0006)
+
+| NGS | Spec | Schema |
+|-----|------|--------|
+| Identity | [`identity/SPEC.md`](identity/SPEC.md) | `universal-identity.schema.json` |
+| Capability | [`capability/SPEC.md`](capability/SPEC.md) | `capability.schema.json` |
+| Permission | [`permission/SPEC.md`](permission/SPEC.md) | (AgentSpec / Manifest) |
+| Policy | [`policy/SPEC.md`](policy/SPEC.md) | `policy-pack.schema.json`, `policy-decision.schema.json` |
+| Evidence | [`uap-evidence/SPEC.md`](uap-evidence/SPEC.md) | `evidence.schema.json` |
+| Trust | [`vap/SPEC.md`](vap/SPEC.md) §6 | `trust-score.schema.json` |
+
+---
+
+## Derived standards
+
+| NGS | Spec |
+|-----|------|
+| Passport | [`passport/SPEC.md`](passport/SPEC.md) |
+| Governance Package | [`governance-package/SPEC.md`](governance-package/SPEC.md) |
+| Certification | [`certification/SPEC.md`](certification/SPEC.md) · `certification.schema.json` |
+| Audit Report | [`audit/SPEC.md`](audit/SPEC.md) · `audit.schema.json` |
+| Manifest | [`manifest/SPEC.md`](manifest/SPEC.md) |
+| Registry | [`registry/SPEC.md`](registry/SPEC.md) |
+| Governance API | [`governance-api/SPEC.md`](governance-api/SPEC.md) · [`openapi.yaml`](governance-api/openapi.yaml) |
+
+---
+
+## Runtime / metering (orthogonal)
+
+| Spec | Path |
+|------|------|
+| Constitution | [`constitution/SPEC.md`](constitution/SPEC.md) |
+| Constitution Runtime | [`constitution-runtime/SPEC.md`](constitution-runtime/SPEC.md) |
+| Governance Session | [`governance-session/SPEC.md`](governance-session/SPEC.md) |
+| Execution Graph / Unit | [`execution-graph/SPEC.md`](execution-graph/SPEC.md), [`execution-unit/SPEC.md`](execution-unit/SPEC.md) |
+| Governor / Metering | [`governor/SPEC.md`](governor/SPEC.md), [`metering/SPEC.md`](metering/SPEC.md) |
+| Governance Telemetry (privacy-preserving) | [`governance-telemetry/SPEC.md`](governance-telemetry/SPEC.md) · `governance-telemetry.schema.json` |
+| UGS Execution / Core | [`uap-execution/SPEC.md`](uap-execution/SPEC.md), [`uap-core/SPEC.md`](uap-core/SPEC.md) |
+| Export | [`uap-export/SPEC.md`](uap-export/SPEC.md) |
+
+---
+
+## Conformance
+
+- **NGS-0001…0006 conformant** — implements the six core contracts + schemas.  
+- **Governance-API conformant** — exposes OpenAPI paths or equivalent.  
+- **VAP-conformant** — ProofBundle + offline verify + Trust Score.
+
+Design axiom:
+
+```text
+Identity · Capability · Permission · Policy · Evidence · Trust
+        ↓
+Passport · Package · Certification · Manifest · Registry · API
+```

narna-0.1.0/specs/RELEASE-v0.1.md

@@ -0,0 +1,30 @@
+# UGS v0.1 — Release notes
+
+**Status:** Released  
+**Version:** 0.1.0  
+**Date:** 2026-07-20
+
+## What is frozen
+
+- Core six: Identity, Capability, Permission, Policy, Evidence, Trust (NGS-0001…0006)
+- Manifest (`narna.yaml`), Passport, Governance Package, Certification, Audit, Registry, Governance API (NGS-0007…0013)
+- JSON Schemas under `specs/schemas/`
+- OpenAPI draft: `specs/governance-api/openapi.yaml`
+
+## Compatibility
+
+- Reference implementation: NARNA Python SDK / CLI (`narna` package)
+- Adapter SPI: enforce-before host framework calls (`NARNA_ADAPTER_MODE=enforce`)
+
+## Not frozen yet
+
+- Governance Telemetry (Draft G1)
+- Billing / marketplace take-rate commercial terms (product, not standard)
+
+## Conformance
+
+```bash
+narna conformance --workspace .
+```
+
+Badge: **UGS Conformant** when OpenAPI schemas + manifest + runtime probe pass.

narna-0.1.0/specs/VERSION

@@ -0,0 +1 @@
+0.1.0

narna-0.1.0/specs/audit/SPEC.md

@@ -0,0 +1,54 @@
+# Audit Report — UGS / NGS-0010
+
+**Status:** Normative (v0.1)  
+**RFC:** [NGS-0010](../../rfcs/ngs/NGS-0010-audit-report.md)  
+**Schema:** [`../schemas/audit.schema.json`](../schemas/audit.schema.json)
+
+---
+
+## 1. Purpose
+
+A portable **Audit Report** answers:
+
+| Question | Field |
+|----------|-------|
+| Who | `actor` (logicalAgentId / identityId) |
+| When | `occurredAt` |
+| Why | `reasons` + `policyRef` |
+| Evidence | `evidenceIds[]` |
+| Decision | `decision` (`allow` \| `deny` \| `ask`) |
+
+Independent of vendor log formats (CloudWatch, Datadog, etc.).
+
+---
+
+## 2. AuditRecord (minimum)
+
+| Field | Required |
+|-------|----------|
+| `auditId` | MUST |
+| `sessionId` | SHOULD |
+| `runId` | MUST |
+| `actor` | MUST |
+| `occurredAt` | MUST |
+| `decision` | MUST |
+| `permission` | SHOULD |
+| `reasons` | MUST (≥1) |
+| `policyRef` | SHOULD |
+| `evidenceIds` | SHOULD |
+| `eventRange` | SHOULD |
+| `trustScore` | MAY |
+
+---
+
+## 3. Normative rules
+
+1. AuditRecord MUST be derivable from Events + PolicyDecisions + Evidence (VAP Audit stage).  
+2. Implementations MUST NOT require proprietary log schemas for offline audit export.  
+3. `AuditRecorded` events SHOULD reference `auditId`.
+
+---
+
+## 4. Export
+
+`GET /v1/audit/{runId}` (Governance API) returns AuditReport JSON matching this schema.