pgc-runtime 5.0.0__tar.gz → 7.0.0__tar.gz

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/NOTICE

@@ -1,4 +1,4 @@
-PGS — Protocol-Governed Systems
+PGC — Protocol-Governed Computing
 Copyright 2026 Bhash Ganti aka Bachi
 
 This project introduces a protocol-first execution model in which:

{pgc_runtime-5.0.0/pgc_runtime.egg-info → pgc_runtime-7.0.0}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: pgc-runtime
-Version: 5.0.0
+Version: 7.0.0
 Summary: PGC protocol runtime — executes a sealed snapshot as governed DAG traversal and emits traces (import package: runtime)
 Author-email: Bhash Ganti <bachipeachy@gmail.com>
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://omnibachi.org/
 Project-URL: Repository, https://github.com/protocol-governed-computing/protocol_runtime
-Project-URL: Standard, https://doi.org/10.5281/zenodo.22150616
+Project-URL: Standard, https://doi.org/10.5281/zenodo.22150615
 Keywords: protocol-governed-computing,pgc,protocol,runtime,workflow,execution
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
@@ -22,8 +22,6 @@ License-File: LICENSE
 License-File: NOTICE
 Provides-Extra: reference
 Requires-Dist: pgc-governance>=2.0.0; extra == "reference"
-Provides-Extra: render
-Requires-Dist: pgc-inspector>=5.0.0; extra == "render"
 Dynamic: license-file
 
 # protocol_runtime
@@ -85,9 +83,7 @@ the data root:
 
 ```
 <data-root>/traces/<domain>/<WF>/<TRACE_ID>/
-    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V1 event per line
-    <TRACE_ID>.png      the path the run took, drawn only on request (`run --behavior-logic`,
-                        or `behavior-logic <trace>`)
+    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V0 event per line
 
 <data-root>/<domain>/<subdomain>/
     the stores the domain's runtime binding declares
@@ -113,7 +109,6 @@ the data root:
 | `coordinator` | serve as the coordinating node of a federated node group |
 | `worker` | serve as a worker node of a federated node group |
 | `examine` | read a completed trace: its path by node, contracts, results, events and errors |
-| `behavior-logic` | render a completed trace as a PNG: the path, each route's outcome, and why each node decided as far as the trace records it (drawn from the inspector's `si.execution.explain`; needs `pgc-runtime[render]`) |
 
 `PGC_SNAPSHOT_ROOT` overrides the snapshot location; `PGC_IMPL_ROOTS` is the colon-separated set of
 roots on `PYTHONPATH` for domain capability implementations.
@@ -172,7 +167,7 @@ Apache-2.0. See `LICENSE` and `NOTICE`.
 | `pgc-assembler` | `snapshot_assembler` | projections → sealed snapshot |
 | `pgc-runtime` | `protocol_runtime` | snapshot → governed execution |
 | `pgc-inspector` | `snapshot_inspector` | snapshot → read-only inspection |
-| `pgc-transformation` | `transformation` | change request → protocol artifacts |
+| `pgc-transformation` | `transformation_compilers` | change request → protocol artifacts |
 | `pgc-governance` | `software_governance` | the governance surface and its capability implementations |
 | `pgc-workloads` | `conformance_workloads` | the workloads that make conformance observable |
 | `pgc-domains` | `business_domains` | the business domain implementations the composed snapshot binds |
@@ -204,15 +199,16 @@ assembler and the runtime alike.
 The full sequence, with the repositories it needs, is in
 [`pgc_install`](https://github.com/protocol-governed-computing/pgc_install).
 
-**Versioning.** Two schemes, and the published version follows the second.
+**Versioning.** Two numbers name two different things.
 
-- **Internal** — each repository's `VERSION` file, a monotonic composition ordinal. PGC versions the
-  composition rather than each repo: they release together and the governance closure forces lockstep,
-  so the ordinal names which composition a repo belongs to. Development happens on `dev/<N>` and each
-  cycle is tagged `release-<N>`. This is not published.
-- **Public** — `PUBLIC_VERSION`, tagged on every component repository. The platform is at **`v3`**.
+- **Published** — this distribution's `version` in `pyproject.toml`. It moves on its own. A release
+  that changes this repository bumps it, and a release that leaves the repository unchanged keeps it.
+- **Composition** — the public identity (`v6`, …) names one composition of the whole family.
+  `pgc_release` records which version of each distribution that composition holds, and `pgc_install`
+  pins exactly those versions.
 
-**The published version is the public one: `v4` is `4.0.0`.** The standard the packages implement is a
-separate artifact on its own track and is not this number.
+Each repository's `VERSION` file holds the workspace's cycle ordinal, which names the `dev/<N>`
+branch. It is development accounting, and it is never published. The standard the packages
+implement is a separate artifact on its own track, and none of these numbers is its revision.
 
-The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150616
+The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150615

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/README.md

@@ -57,9 +57,7 @@ the data root:
 
 ```
 <data-root>/traces/<domain>/<WF>/<TRACE_ID>/
-    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V1 event per line
-    <TRACE_ID>.png      the path the run took, drawn only on request (`run --behavior-logic`,
-                        or `behavior-logic <trace>`)
+    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V0 event per line
 
 <data-root>/<domain>/<subdomain>/
     the stores the domain's runtime binding declares
@@ -85,7 +83,6 @@ the data root:
 | `coordinator` | serve as the coordinating node of a federated node group |
 | `worker` | serve as a worker node of a federated node group |
 | `examine` | read a completed trace: its path by node, contracts, results, events and errors |
-| `behavior-logic` | render a completed trace as a PNG: the path, each route's outcome, and why each node decided as far as the trace records it (drawn from the inspector's `si.execution.explain`; needs `pgc-runtime[render]`) |
 
 `PGC_SNAPSHOT_ROOT` overrides the snapshot location; `PGC_IMPL_ROOTS` is the colon-separated set of
 roots on `PYTHONPATH` for domain capability implementations.
@@ -144,7 +141,7 @@ Apache-2.0. See `LICENSE` and `NOTICE`.
 | `pgc-assembler` | `snapshot_assembler` | projections → sealed snapshot |
 | `pgc-runtime` | `protocol_runtime` | snapshot → governed execution |
 | `pgc-inspector` | `snapshot_inspector` | snapshot → read-only inspection |
-| `pgc-transformation` | `transformation` | change request → protocol artifacts |
+| `pgc-transformation` | `transformation_compilers` | change request → protocol artifacts |
 | `pgc-governance` | `software_governance` | the governance surface and its capability implementations |
 | `pgc-workloads` | `conformance_workloads` | the workloads that make conformance observable |
 | `pgc-domains` | `business_domains` | the business domain implementations the composed snapshot binds |
@@ -176,15 +173,16 @@ assembler and the runtime alike.
 The full sequence, with the repositories it needs, is in
 [`pgc_install`](https://github.com/protocol-governed-computing/pgc_install).
 
-**Versioning.** Two schemes, and the published version follows the second.
+**Versioning.** Two numbers name two different things.
 
-- **Internal** — each repository's `VERSION` file, a monotonic composition ordinal. PGC versions the
-  composition rather than each repo: they release together and the governance closure forces lockstep,
-  so the ordinal names which composition a repo belongs to. Development happens on `dev/<N>` and each
-  cycle is tagged `release-<N>`. This is not published.
-- **Public** — `PUBLIC_VERSION`, tagged on every component repository. The platform is at **`v3`**.
+- **Published** — this distribution's `version` in `pyproject.toml`. It moves on its own. A release
+  that changes this repository bumps it, and a release that leaves the repository unchanged keeps it.
+- **Composition** — the public identity (`v6`, …) names one composition of the whole family.
+  `pgc_release` records which version of each distribution that composition holds, and `pgc_install`
+  pins exactly those versions.
 
-**The published version is the public one: `v4` is `4.0.0`.** The standard the packages implement is a
-separate artifact on its own track and is not this number.
+Each repository's `VERSION` file holds the workspace's cycle ordinal, which names the `dev/<N>`
+branch. It is development accounting, and it is never published. The standard the packages
+implement is a separate artifact on its own track, and none of these numbers is its revision.
 
-The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150616
+The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150615

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0/pgc_runtime.egg-info}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: pgc-runtime
-Version: 5.0.0
+Version: 7.0.0
 Summary: PGC protocol runtime — executes a sealed snapshot as governed DAG traversal and emits traces (import package: runtime)
 Author-email: Bhash Ganti <bachipeachy@gmail.com>
 License-Expression: Apache-2.0
 Project-URL: Homepage, https://omnibachi.org/
 Project-URL: Repository, https://github.com/protocol-governed-computing/protocol_runtime
-Project-URL: Standard, https://doi.org/10.5281/zenodo.22150616
+Project-URL: Standard, https://doi.org/10.5281/zenodo.22150615
 Keywords: protocol-governed-computing,pgc,protocol,runtime,workflow,execution
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
@@ -22,8 +22,6 @@ License-File: LICENSE
 License-File: NOTICE
 Provides-Extra: reference
 Requires-Dist: pgc-governance>=2.0.0; extra == "reference"
-Provides-Extra: render
-Requires-Dist: pgc-inspector>=5.0.0; extra == "render"
 Dynamic: license-file
 
 # protocol_runtime
@@ -85,9 +83,7 @@ the data root:
 
 ```
 <data-root>/traces/<domain>/<WF>/<TRACE_ID>/
-    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V1 event per line
-    <TRACE_ID>.png      the path the run took, drawn only on request (`run --behavior-logic`,
-                        or `behavior-logic <trace>`)
+    <TRACE_ID>.jsonl    append-only execution log, one SCHEMA_TRACE_EVENT_V0 event per line
 
 <data-root>/<domain>/<subdomain>/
     the stores the domain's runtime binding declares
@@ -113,7 +109,6 @@ the data root:
 | `coordinator` | serve as the coordinating node of a federated node group |
 | `worker` | serve as a worker node of a federated node group |
 | `examine` | read a completed trace: its path by node, contracts, results, events and errors |
-| `behavior-logic` | render a completed trace as a PNG: the path, each route's outcome, and why each node decided as far as the trace records it (drawn from the inspector's `si.execution.explain`; needs `pgc-runtime[render]`) |
 
 `PGC_SNAPSHOT_ROOT` overrides the snapshot location; `PGC_IMPL_ROOTS` is the colon-separated set of
 roots on `PYTHONPATH` for domain capability implementations.
@@ -172,7 +167,7 @@ Apache-2.0. See `LICENSE` and `NOTICE`.
 | `pgc-assembler` | `snapshot_assembler` | projections → sealed snapshot |
 | `pgc-runtime` | `protocol_runtime` | snapshot → governed execution |
 | `pgc-inspector` | `snapshot_inspector` | snapshot → read-only inspection |
-| `pgc-transformation` | `transformation` | change request → protocol artifacts |
+| `pgc-transformation` | `transformation_compilers` | change request → protocol artifacts |
 | `pgc-governance` | `software_governance` | the governance surface and its capability implementations |
 | `pgc-workloads` | `conformance_workloads` | the workloads that make conformance observable |
 | `pgc-domains` | `business_domains` | the business domain implementations the composed snapshot binds |
@@ -204,15 +199,16 @@ assembler and the runtime alike.
 The full sequence, with the repositories it needs, is in
 [`pgc_install`](https://github.com/protocol-governed-computing/pgc_install).
 
-**Versioning.** Two schemes, and the published version follows the second.
+**Versioning.** Two numbers name two different things.
 
-- **Internal** — each repository's `VERSION` file, a monotonic composition ordinal. PGC versions the
-  composition rather than each repo: they release together and the governance closure forces lockstep,
-  so the ordinal names which composition a repo belongs to. Development happens on `dev/<N>` and each
-  cycle is tagged `release-<N>`. This is not published.
-- **Public** — `PUBLIC_VERSION`, tagged on every component repository. The platform is at **`v3`**.
+- **Published** — this distribution's `version` in `pyproject.toml`. It moves on its own. A release
+  that changes this repository bumps it, and a release that leaves the repository unchanged keeps it.
+- **Composition** — the public identity (`v6`, …) names one composition of the whole family.
+  `pgc_release` records which version of each distribution that composition holds, and `pgc_install`
+  pins exactly those versions.
 
-**The published version is the public one: `v4` is `4.0.0`.** The standard the packages implement is a
-separate artifact on its own track and is not this number.
+Each repository's `VERSION` file holds the workspace's cycle ordinal, which names the `dev/<N>`
+branch. It is development accounting, and it is never published. The standard the packages
+implement is a separate artifact on its own track, and none of these numbers is its revision.
 
-The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150616
+The standard these packages implement is published separately: https://doi.org/10.5281/zenodo.22150615

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/pgc_runtime.egg-info/SOURCES.txt

@@ -24,7 +24,6 @@ runtime/loader.py
 runtime/memory.py
 runtime/replay.py
 runtime/scheduler.py
-runtime/trace_viz.py
 runtime/examine/__init__.py
 runtime/examine/cli.py
 runtime/examine/parser.py

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/pgc_runtime.egg-info/requires.txt

@@ -1,6 +1,3 @@
 
 [reference]
 pgc-governance>=2.0.0
-
-[render]
-pgc-inspector>=5.0.0

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "pgc-runtime"
-version = "5.0.0"
+version = "7.0.0"
 description = "PGC protocol runtime — executes a sealed snapshot as governed DAG traversal and emits traces (import package: runtime)"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -32,9 +32,6 @@ dependencies = []
 
 [project.optional-dependencies]
 reference = ["pgc-governance>=2.0.0"]
-# The PNG projection (`--behavior-logic`, `behavior-logic`) draws the inspector's explanation of a
-# run. Execution never imports the inspector; only `runtime.trace_viz` does.
-render = ["pgc-inspector>=5.0.0"]
 
 [project.scripts]
 protocol_runtime = "runtime.cli:main"
@@ -42,7 +39,7 @@ protocol_runtime = "runtime.cli:main"
 [project.urls]
 Homepage = "https://omnibachi.org/"
 Repository = "https://github.com/protocol-governed-computing/protocol_runtime"
-Standard = "https://doi.org/10.5281/zenodo.22150616"
+Standard = "https://doi.org/10.5281/zenodo.22150615"
 
 [tool.setuptools]
 include-package-data = false

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/api.py

@@ -16,7 +16,7 @@ from pathlib import Path
 from typing import Any
 
 from runtime.boot import BootedSnapshot, boot, default_snapshot_root
-from runtime.evidence import TraceWriter, make_trace_id
+from runtime.evidence import RecordedRefusal, TraceWriter, make_trace_id
 from runtime.scheduler import run_wf
 
 
@@ -71,12 +71,15 @@ def run_workflow(
     try:
         status, surface = run_wf(wf_fqdn=wf_fqdn, payload=payload, pkg=pkg,
                                  writer=writer, data_root=str(data_root))
+    except RecordedRefusal:
+        # Recorded where it was determined; recording it again here would count it twice.
+        raise
     except Exception as exc:
         writer.error(str(exc))
         raise
     finally:
-        # The JSONL is the evidence. A picture of the path is a view of it, drawn on request
-        # (`run --behavior-logic`, or `behavior-logic <trace>`), never as a cost of every run.
+        # The JSONL is the evidence. A drawing of the path is a view of it, made by the inspector
+        # on request, never by the runtime and never as a cost of every run.
         writer.close()
 
     return RunResult(status=status, surface=surface or {}, trace_id=trace_id, trace_dir=trace_dir)

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/boot.py

@@ -91,9 +91,9 @@ def boot(snapshot_root: str | Path | None = None) -> BootedSnapshot:
 
     # 2. ACCEPTANCE — all four conditions of `3b` §7, established from content.
     #
-    # The runtime does not carry its own weaker copy of this. It previously recomputed the composite
-    # over the manifest's RECORDED per-domain hashes, which detects a tampered manifest and not a
-    # tampered constituent — and a snapshot with an edited projection booted and reported healthy.
+    # The runtime does not carry its own weaker copy of this. A composite over the manifest's RECORDED
+    # per-domain hashes detects a tampered manifest and not a tampered constituent: a snapshot with an
+    # edited projection would boot and report healthy.
     # `assembler.core.verify_snapshot` recomputes every constituent from its bytes; there is one
     # acceptance determination and both the assembler and the runtime reach it.
     #

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/cli.py

@@ -4,7 +4,6 @@ cli.py — Token-native CLI entry point for the runtime.
 Commands:
     run           — Execute a workflow against the tokenized snapshot.
     examine       — Analyze a completed trace file and print a diagnostic report.
-    behavior-logic — Render a completed trace, explained, over its workflow graph (PNG).
 
 Execution path (run):
     1. Load tokenized snapshot for the domain via loader.load_domain()
@@ -13,7 +12,6 @@ Execution path (run):
     3. Open TraceWriter at traces/<domain>/<wf_code>/<trace_id>/
     4. Drive workflow topology via scheduler.run_wf()
     5. Print result summary; exit 1 on non-SUCCESS
-    6. If --behavior-logic: render the explained run as a PNG (trace_viz, a client of the inspector)
 
 All runtime behavior comes from the compiled tokenized_snapshot.
 The CLI does not implement any domain logic.
@@ -72,14 +70,6 @@ def _build_parser() -> argparse.ArgumentParser:
              "Default: sibling ../snapshot",
     )
 
-    # ── run: optional behavior-logic flag ────────────────────────
-    run_p.add_argument(
-        "--behavior-logic",
-        action="store_true",
-        dest="behavior_logic",
-        help="Render execution-path PNG after run (requires graphviz)",
-    )
-
     # ── replay ────────────────────────────────────────────────────
     rp_p = subs.add_parser(
         "replay",
@@ -136,23 +126,6 @@ def _build_parser() -> argparse.ArgumentParser:
         help="Path to a completed .jsonl trace file",
     )
 
-    # ── behavior-logic ────────────────────────────────────────────
-    bl_p = subs.add_parser(
-        "behavior-logic",
-        help="Render execution-path PNG from a completed trace file",
-    )
-    bl_p.add_argument(
-        "trace_file",
-        metavar="FILE",
-        help="Path to a completed .jsonl trace file",
-    )
-    bl_p.add_argument(
-        "--snapshot",
-        metavar="PATH",
-        help="Absolute path to the assembled snapshot the trace ran against "
-             "(or set PGC_SNAPSHOT_ROOT; default: the sibling ../snapshot)",
-    )
-
     return parser
 
 
@@ -208,12 +181,6 @@ def _handle_run(args: argparse.Namespace) -> None:
     print(f"[runtime] Trace dir: {trace_dir}")
     print()
 
-    # Evidence projection: render execution-path PNG if requested
-    trace_path = trace_dir / f"{trace_id}.jsonl"
-    png_path = None
-    if args.behavior_logic:
-        png_path = _render_behavior_logic(snapshot_root, trace_path, trace_root=data_root)
-
     print("=" * 60)
     print("[runtime] Workflow Complete")
     print("=" * 60)
@@ -224,10 +191,6 @@ def _handle_run(args: argparse.Namespace) -> None:
     if surface:
         print("Output:")
         print(_format_surface(surface))
-    if png_path:
-        print(f"Graph:      {png_path}")
-    elif args.behavior_logic:
-        print("Graph:      (graphviz not available — PNG skipped)")
     print("=" * 60)
 
     if result_status not in ("SUCCESS", "ALREADY_EXISTS"):
@@ -341,27 +304,6 @@ def _health_line(snapshot_root: Path, booted) -> str:
     return f"[runtime] ✓ Snapshot healthy — {n} domain(s) resident and hash-verified{gov}. No issues."
 
 
-def _handle_behavior_logic(args: argparse.Namespace) -> None:
-    trace_path = Path(args.trace_file)
-    if not trace_path.exists():
-        _fatal(f"Trace file not found: {args.trace_file}")
-
-    snapshot_str = args.snapshot or os.environ.get("PGC_SNAPSHOT_ROOT")
-    snapshot_root = Path(snapshot_str) if snapshot_str else default_snapshot_root()
-    if not snapshot_root.is_absolute():
-        _fatal(f"--snapshot must be an absolute path, got: {snapshot_str}")
-
-    png_path = _render_behavior_logic(snapshot_root, trace_path)
-    if png_path:
-        print(f"[runtime] Execution path PNG: {png_path}")
-    else:
-        print(
-            "[runtime] Behavior logic render skipped — graphviz (dot) not available.",
-            file=sys.stderr,
-        )
-        sys.exit(1)
-
-
 def _handle_examine(args: argparse.Namespace) -> None:
     trace_path = Path(args.trace_file)
     if not trace_path.exists():
@@ -391,21 +333,6 @@ def _handle_examine(args: argparse.Namespace) -> None:
 # Utilities
 # ---------------------------------------------------------------------------
 
-def _render_behavior_logic(snapshot_root: Path, trace_path: Path,
-                           trace_root: Path | None = None) -> "Path | None":
-    """Render the explained run as a PNG. Best-effort: a refusal is reported, never drawn around."""
-    from runtime.trace_viz import render_trace_png
-    try:
-        return render_trace_png(snapshot_root, trace_path, trace_root=trace_root)
-    except ModuleNotFoundError as exc:
-        print(f"[runtime] Behavior logic render needs the snapshot inspector "
-              f"(pgc-runtime[render]): {exc}", file=sys.stderr)
-        return None
-    except (FileNotFoundError, ValueError) as exc:
-        print(f"[runtime] Behavior logic render error: {exc}", file=sys.stderr)
-        return None
-
-
 def _load_payload(payload_path: str | None) -> dict:
     if not payload_path:
         return {}
@@ -500,8 +427,6 @@ def main() -> None:
         _handle_worker(args)
     elif args.command == "examine":
         _handle_examine(args)
-    elif args.command == "behavior-logic":
-        _handle_behavior_logic(args)
 
 
 if __name__ == "__main__":

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/conformance.py

@@ -6,7 +6,7 @@ the composition sealed it. This runs every case of one build and reports every t
 supplies as **proven** (every case ran and passed), **unproven** (no vector tests it) or **refused** (a
 case failed). It never reports success over nothing: a build with no vector is reported, by name, as
 unproven. The build is a domain's, or the platform's for the transforms the platform supplies.
-Governed by `conformance::CONSTITUTION_TEST_DATA_V2`.
+Governed by `conformance::CONSTITUTION_TEST_DATA_V0`.
 
 What a build supplies and what it only carries is read from the capabilities its attestation records
 as imported, never from a transform's name: a carried copy is byte-identical to its supplier's, and the
@@ -27,7 +27,7 @@ from dataclasses import dataclass, field
 from pathlib import Path
 from typing import Any
 
-from runtime.ct_executor import CTArtifactNotFound, CTExecutor, CTExecutionError
+from runtime.ct_executor import CTArtifactNotFound, CTExecutor, CTExecutionError, CTFault
 
 NONDETERMINISTIC_PURITY = "ct_impure"
 # Where a build's result is written, beside its compiled projections, so the assembler carries it into
@@ -201,6 +201,31 @@ def _resolve_outputs(ct_ir: dict[str, Any], vars_result: dict[str, Any]) -> dict
     return actual
 
 
+def _undeclared_result(ct_ir: dict[str, Any], vars_result: dict[str, Any]) -> str | None:
+    """Say how a completed run's result differs from the outputs the transform declares, if it does.
+
+    A result read field by field carries exactly the outputs read from it: a key no output names is an
+    answer nothing declared, and a declared output it lacks is one the case could only compare against
+    the whole result. A result read as one output's value is that value, whatever it holds.
+    """
+    groups: dict[str, set[str]] = {}
+    for output_key, output_spec in (ct_ir.get("outputs") or {}).items():
+        groups.setdefault(output_spec.get("from"), set()).add(output_key)
+    for from_var, keys in sorted(groups.items(), key=lambda g: str(g[0])):
+        if from_var not in vars_result:
+            return f"no step produced {from_var!r}, which outputs {sorted(keys)} are read from"
+        source = vars_result[from_var]
+        if not isinstance(source, dict) or not keys & set(source):
+            if len(keys) == 1:
+                continue
+            return f"{from_var!r} carries none of the declared outputs {sorted(keys)}"
+        if set(source) != keys:
+            missing, extra = sorted(keys - set(source)), sorted(set(source) - keys)
+            return (f"{from_var!r} differs from the declared outputs"
+                    f"{f' — lacks {missing}' if missing else ''}{f' — undeclared {extra}' if extra else ''}")
+    return None
+
+
 def _canonical(compiled: Path, kind_dir: str) -> list[dict[str, Any]]:
     folder = compiled / "canonical" / kind_dir
     return [json.loads(p.read_text()) for p in sorted(folder.glob("*.json"))] if folder.is_dir() else []
@@ -251,6 +276,10 @@ def _run_case(executor: CTExecutor, case: dict[str, Any]) -> CaseResult:
         # VIOLATION case by accident. A transform whose implementation is absent is refused and named,
         # which is a result; escaping as a crash names nothing and stops the other cases.
         return CaseResult(fqdn, False, f"implementation not present: {e}")
+    except CTFault as e:
+        # A fault is not the transform's judgement: it fails the case whatever the case expected,
+        # so a VIOLATION case is never passed by a transform that broke rather than refused.
+        return CaseResult(fqdn, False, f"fault, not a refusal: {e}")
     except CTExecutionError as e:
         # A refusal the case expected passes — unless it was the runner refusing a missing record,
         # which is a defect in the case, not the transform's judgement.
@@ -268,6 +297,9 @@ def _run_case(executor: CTExecutor, case: dict[str, Any]) -> CaseResult:
         if unused:
             return CaseResult(fqdn, False, f"recorded results no step used: {unused}")
 
+    undeclared = _undeclared_result(ct_ir, vars_result)
+    if undeclared:
+        return CaseResult(fqdn, False, f"result differs from the declared outputs: {undeclared}")
     actual = _resolve_outputs(ct_ir, vars_result)
     assertion_error = _assert_structural(actual, assertions) if assertions else None
     if assertion_error:

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/coordinator.py

@@ -1,6 +1,6 @@
 """A coordinating party that runs several runtimes.
 
-`CONSTITUTION_EXECUTION_PLACEMENT_V1` authorizes `LOCAL_MULTI_WORKER`: more than one worker process
+`CONSTITUTION_EXECUTION_PLACEMENT_V0` authorizes `LOCAL_MULTI_WORKER`: more than one worker process
 on one host, each drawing work from a coordinating party and executing a governed topology in its
 own process. This is that party.
 

{pgc_runtime-5.0.0 → pgc_runtime-7.0.0}/runtime/ct_execute.py

@@ -6,8 +6,7 @@ Adapter between the dispatcher and CTExecutor.
 
 from typing import Any
 
-from runtime.ct_errors import StructuredError
-from runtime.ct_executor import CTExecutor
+from runtime.ct_executor import CTExecutor, CTFault
 
 # Module-level executor singleton — avoids re-creating per call,
 # preserves federated IR directory cache and atom loading.
@@ -48,11 +47,7 @@ def execute_ct(ct_ir: dict[str, Any], inputs: dict[str, Any], observer=None, rec
     # ---- Output adaptation ----
     outputs = ct_ir.get("outputs")
     if not outputs:
-        raise StructuredError(
-            error_code="CT_EXECUTION_FAILED",
-            node_category="CT",
-            message="CT must declare at least one output",
-        )
+        raise CTFault("CT must declare at least one output")
 
     # Build CT outputs by mapping from symbol table
     ct_outputs = {}
@@ -60,11 +55,7 @@ def execute_ct(ct_ir: dict[str, Any], inputs: dict[str, Any], observer=None, rec
         from_symbol = spec["from"]
 
         if from_symbol not in symbol_table:
-            raise StructuredError(
-                error_code="CT_EXECUTION_FAILED",
-                node_category="CT",
-                message=f"CT output symbol '{from_symbol}' was not produced by CT execution",
-            )
+            raise CTFault(f"CT output symbol '{from_symbol}' was not produced by CT execution")
 
         symbol_value = symbol_table[from_symbol]