validibot-shared 0.5.1__tar.gz → 0.7.0__tar.gz

{validibot_shared-0.5.1 → validibot_shared-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: validibot-shared
-Version: 0.5.1
+Version: 0.7.0
 Summary: Shared library for data interchange between Validibot and validator containers
 Project-URL: Homepage, https://validibot.com
 Project-URL: Documentation, https://docs.validibot.com

{validibot_shared-0.5.1 → validibot_shared-0.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "validibot-shared"
-version = "0.5.1"
+version = "0.7.0"
 description = "Shared library for data interchange between Validibot and validator containers"
 readme = "README.md"
 license = { text = "MIT" }

{validibot_shared-0.5.1 → validibot_shared-0.7.0}/validibot_shared/evidence/manifest.py

@@ -89,6 +89,25 @@ class StepValidatorRecord(BaseModel):
             "verifiers know to expect a legacy-versioning gap there."
         ),
     )
+    # Trust ADR Phase 5 Session A — the *runtime* identity of the
+    # validator backend container that actually executed this step.
+    # ``validator_semantic_digest`` describes the validator's
+    # *configuration* (slug, version, config bytes); this field
+    # describes the *image bytes* that ran. The two are
+    # complementary: one proves "the validator was configured this
+    # way", the other proves "this exact container ran". Optional
+    # because (a) simple-validator steps run inline without a
+    # backend, and (b) historical step runs predate the field.
+    validator_backend_image_digest: str | None = Field(
+        default=None,
+        description=(
+            "Resolved sha256 digest of the validator backend image "
+            "that executed this step (e.g. 'sha256:abc...' or "
+            "'registry/...@sha256:abc...'). None for simple-validator "
+            "steps that run inline without a container, or for runs "
+            "captured before digest capture shipped."
+        ),
+    )
 
 
 class WorkflowContractSnapshot(BaseModel):
@@ -105,7 +124,14 @@ class WorkflowContractSnapshot(BaseModel):
     model_config = ConfigDict(frozen=True)
 
     allowed_file_types: list[str] = Field(default_factory=list)
-    data_retention: str = ""
+    # ``input_retention`` was named ``data_retention`` in shared
+    # 0.5.x. The rename (shared 0.6.0+) makes the parallel with
+    # ``output_retention`` obvious — both fields carry the workflow
+    # author's retention choices, one for the user's input bytes and
+    # one for the validator's output bytes. The schema-version
+    # string stays ``validibot.evidence.v1`` because the field's
+    # semantics are unchanged; only the name is clearer.
+    input_retention: str = ""
     output_retention: str = ""
     agent_billing_mode: str = ""
     agent_price_cents: int | None = None