actioncontract

package
v1.7.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 28, 2026 License: Apache-2.0 Imports: 26 Imported by: 0

Documentation

Overview

Package actioncontract is Gait's explicit boundary for consuming Wrkr report-only proposed Action Contract artifacts. A proposal is evidence, never an authorization. Activation is a separate, signed object that can be handed to an execution boundary by an operator or authority.

Index

Constants

View Source 
const (
	ProposedSchemaID         = "https://wrkr.dev/schemas/v1/proposed-action-contract-artifact.schema.json"
	ProposedContractSchemaID = "https://wrkr.dev/schemas/v1/proposed-action-contract-v3.schema.json"
	ProposedSchemaVersion    = "1"
	ProposedContractVersion  = "3"
	ProposedProducer         = "wrkr"

	ActivatedSchemaID        = "https://gait.dev/schemas/v1/activated-action-contract-artifact.schema.json"
	ActivatedSchemaVersion   = "1"
	ActivatedContractVersion = "1"
	ActivatedProducer        = "gait"
)
View Source 
const (
	ReasonMalformedArtifact            = "artifact_malformed"
	ReasonUnsupportedArtifactSchema    = "artifact_schema_unsupported"
	ReasonUnsupportedContractSchema    = "contract_schema_unsupported"
	ReasonUnsupportedProducer          = "producer_unsupported"
	ReasonReportOnlyRequired           = "report_only_required"
	ReasonMissingContractID            = "contract_id_missing"
	ReasonMissingFamilyID              = "contract_family_id_missing"
	ReasonMissingCompositionRef        = "composition_ref_missing"
	ReasonMissingSourceRefs            = "source_refs_missing"
	ReasonMissingEvidenceRefs          = "evidence_refs_missing"
	ReasonRevisionInvalid              = "revision_invalid"
	ReasonRevisionIdentityMismatch     = "revision_identity_mismatch"
	ReasonContractIdentityMismatch     = "contract_identity_mismatch"
	ReasonArtifactIdentityMismatch     = "artifact_identity_mismatch"
	ReasonDigestMismatch               = "canonical_digest_mismatch"
	ReasonContractDigestMismatch       = "contract_digest_mismatch"
	ReasonUnsupportedConstraint        = "constraint_unsupported"
	ReasonStaleProposal                = "proposal_stale"
	ReasonSupersededProposal           = "proposal_superseded"
	ReasonContradictoryProposal        = "proposal_contradictory"
	ReasonActivationModeUnsupported    = "activation_mode_unsupported"
	ReasonPolicyDigestMissing          = "policy_digest_missing"
	ReasonPrincipalMissing             = "activating_principal_missing"
	ReasonAuthorityRefsMissing         = "authority_refs_missing"
	ReasonTargetMissing                = "target_missing"
	ReasonEnvironmentMissing           = "environment_missing"
	ReasonValidityInvalid              = "validity_invalid"
	ReasonRevisionReactivationRequired = "revision_reactivation_required"
	ReasonSelectionRequired            = "explicit_selection_required"
	ReasonAmbiguousSelection           = "ambiguous_selection"
	ReasonAuthorizationRequired        = "authorization_required"
	ReasonSchemaValidationFailed       = "schema_validation_failed"
	ReasonSigningKeyRequired           = "signing_key_required"
	ReasonDevelopmentSigningForbidden  = "development_signing_forbidden"
	ReasonDevelopmentSigningUnverified = "development_signing_unverified"
	ReasonSelectionEvidenceRequired    = "selection_evidence_required"
	ReasonSelectionMismatch            = "selection_mismatch"
	ReasonSelectionNotCurrent          = "selection_not_current"
	ReasonSelectionAmbiguous           = "selection_ambiguous"
	ReasonBindingMismatch              = "proposal_binding_mismatch"
	ReasonEvaluationTimeInvalid        = "evaluation_time_invalid"
	ReasonActivationNotYetValid        = "activation_not_yet_valid"
	ReasonActivationExpired            = "activation_expired"
)
View Source 
const (
	ChainPolicySchemaID   = "https://gait.dev/schemas/v1/action-contract/chain-policy.schema.json"
	ChainStateSchemaID    = "https://gait.dev/schemas/v1/action-contract/chain-state.schema.json"
	ChainDecisionSchemaID = "https://gait.dev/schemas/v1/action-contract/chain-decision.schema.json"
)
View Source 
const (
	ExecutionEvidenceSchemaID            = "https://gait.dev/schemas/v1/action-contract/execution-evidence.schema.json"
	EffectEventSchemaID                  = "https://gait.dev/schemas/v1/action-contract/effect-event.schema.json"
	ContainmentEvidenceSchemaID          = "https://gait.dev/schemas/v1/action-contract/containment-evidence.schema.json"
	CompensationEvidenceSchemaID         = "https://gait.dev/schemas/v1/action-contract/compensation-evidence.schema.json"
	ExecutionEvidenceSchemaVersion       = "1"
	EvidenceProducer                     = "gait"
	MaxEvidenceBytes               int64 = 4 << 20
)
View Source 
const (
	ReasonConformanceInputMissing      = "conformance_input_missing"
	ReasonConformanceProposalInvalid   = "conformance_proposal_invalid"
	ReasonConformanceActivationInvalid = "conformance_activation_invalid"
	ReasonConformanceRuntimeInvalid    = "conformance_runtime_invalid"
	ReasonConformanceReadinessInvalid  = "conformance_readiness_invalid"
	ReasonConformanceLineageMissing    = "conformance_lineage_missing"
	ReasonConformanceLineageMismatch   = "conformance_lineage_mismatch"
	ReasonConformanceIdentifierOnly    = "conformance_identifier_only"
	ReasonConformanceEvidenceMissing   = "conformance_evidence_missing"
	ReasonConformanceReplay            = "conformance_replay"
	ReasonConformanceReordered         = "conformance_reordered"
	ReasonConformanceVerification      = "conformance_verification_failed"
)
View Source 
const (
	RuntimeActionSchemaID              = "https://gait.dev/schemas/v1/runtime-action.schema.json"
	RuntimeActionSchemaVersion         = "1"
	RuntimeClassificationInputSchemaID = "https://gait.dev/schemas/v1/runtime-classification-input.schema.json"
	RuntimeClassificationInputVersion  = "1"
	RuntimeReadinessSchemaID           = "https://gait.dev/schemas/v1/runtime-readiness.schema.json"
	RuntimeLifecycleSchemaID           = "https://gait.dev/schemas/v1/runtime-lifecycle-record.schema.json"
	RuntimeLifecycleVersion            = "1"
	ProofCompatibilityVersion          = "0.6.1"
	CorrelationProfileVersion          = "1.0"
)
View Source 
const (
	ActionClassRead             = "read"
	ActionClassWrite            = "write"
	ActionClassDeploy           = "deploy"
	ActionClassDelete           = "delete"
	ActionClassExecute          = "execute"
	ActionClassEgress           = "egress"
	ActionClassCredentialAccess = "credential_access" // #nosec G101 -- fixed classification vocabulary, not a credential.
	ActionClassRelease          = "release"
	ActionClassResource         = "resource"
)

These values intentionally include the classes emitted by Wrkr's released action-contract fixtures. The additional values are runtime-only classifications and do not change Wrkr's report semantics.

View Source 
const AdvisoryReportSchemaID = "https://gait.dev/schemas/v1/action-contract/advisory-evaluator-report.schema.json"
View Source 
const CircuitDecisionSchemaID = "https://gait.dev/schemas/v1/action-contract/circuit-breaker-decision.schema.json"
View Source 
const CircuitInputSchemaID = "https://gait.dev/schemas/v1/action-contract/circuit-breaker-input.schema.json"
View Source 
const ControlEventEvidenceSchemaID = "https://gait.dev/schemas/v1/action-contract/control-event-evidence.schema.json"
View Source 
const LifecycleReceiptSchemaID = "https://gait.dev/schemas/v1/action-contract/lifecycle-receipt.schema.json"
View Source 
const MaxAdvisoryProviderBytes int64 = 1 << 20
View Source 
const MaxRuntimeInputBytes int64 = 4 << 20
View Source 
const MaxRuntimeStages = 5

Variables

This section is empty.

Functions

func Activate 

func Activate(artifact Artifact, options ActivationOptions) (ActivatedArtifact, ValidationResult, error)

Activate validates one proposal and emits a deterministic signed activation object. No approval, authority, execution, or effect state is generated.

func AppendLifecycleRecord added in v1.7.0 

func AppendLifecycleRecord(path string, record LifecycleRecord) error

AppendLifecycleRecord appends one signed lifecycle transition to an existing JSONL journal. It intentionally does not create a parallel store; callers may point it at the runpack/session journal they already retain.

func CanonicalReadinessClaimDigest added in v1.5.0 

func CanonicalReadinessClaimDigest(input ReadinessInput, item ReadinessPrecondition) (string, error)

CanonicalReadinessClaimDigest binds a precondition to the contract and policy identity under which it was evaluated. This prevents a valid validator claim from being replayed for another contract or policy. The digest and signature fields, along with derived status/reason fields, are excluded so the signature binds the semantic claim rather than caller- supplied verification metadata or evaluator output.

func CircuitBindingDigest added in v1.7.0 

func CircuitBindingDigest(input CircuitBreakerInput) (string, error)

func DecodeStrictRuntimeJSON added in v1.5.0 

func DecodeStrictRuntimeJSON(raw []byte, target any) error

DecodeStrictRuntimeJSON rejects duplicate keys, trailing values, unknown fields, and oversized payloads before any runtime decision is made.

func DevelopmentPrivateKey added in v1.7.0 

func DevelopmentPrivateKey() ed25519.PrivateKey

DevelopmentPrivateKey is provided solely for local fixture/demo lifecycle signing. Production callers must supply an explicit key to Activate.

func DevelopmentPublicKey 

func DevelopmentPublicKey() ed25519.PublicKey

DevelopmentPublicKey exposes the deterministic dev key's public half for local verification tests; production callers should use their configured key.

func DigestCanonicalJSON added in v1.7.0 

func DigestCanonicalJSON(raw []byte) (string, error)

DigestCanonicalJSON validates and hashes a structured JSON result using the same JCS implementation as all Gait evidence digests.

func DigestChainState added in v1.7.0 

func DigestChainState(state ChainState) (string, error)

func DigestReadinessResult added in v1.7.0 

func DigestReadinessResult(readiness ReadinessResult) (string, error)

DigestReadinessResult returns the canonical JCS digest of the exact readiness decision used by a Gate evaluation.

func EncodePrivateKey 

func EncodePrivateKey(privateKey ed25519.PrivateKey) string

EncodePrivateKey is a small helper for test/CLI fixtures and uses Proof's base64-compatible representation without making key material part of an artifact.

func ExportLifecycleOTel added in v1.6.0 

func ExportLifecycleOTel(path string, records []LifecycleRecord, sourceVersion string) error

func ExportLifecycleOTelWithOptions added in v1.6.0 

func ExportLifecycleOTelWithOptions(path string, records []LifecycleRecord, opts LifecycleOTelExportOptions) error

func RawDigest 

func RawDigest(raw []byte) string

RawDigest returns the byte SHA-256 used by conformance receipts.

func ReadEvidenceFile added in v1.5.0 

func ReadEvidenceFile(file *os.File) ([]byte, error)

func ReadRuntimeInput added in v1.5.0 

func ReadRuntimeInput(path string) ([]byte, error)

ReadRuntimeInput provides a descriptor-bound, bounded, no-follow read for explicit CLI JSON paths. It compares two descriptor reads and the final pathname identity so replacement/mutation races fail closed.

func RuntimeActionClassVocabulary added in v1.5.0 

func RuntimeActionClassVocabulary() []string

RuntimeVocabularies exposes the fixed compatibility vocabularies in sorted order for schema/fixture generators. Callers receive fresh slices.

func RuntimeCompositionRoleVocabulary added in v1.5.0 

func RuntimeCompositionRoleVocabulary() []string

func RuntimeDataClassVocabulary added in v1.5.0 

func RuntimeDataClassVocabulary() []string

func RuntimeOutcomeClassVocabulary added in v1.5.0 

func RuntimeOutcomeClassVocabulary() []string

func RuntimeResourceActionVocabulary added in v1.5.0 

func RuntimeResourceActionVocabulary() []string

func RuntimeTargetTrustClassVocabulary added in v1.5.0 

func RuntimeTargetTrustClassVocabulary() []string

func RuntimeTransitionClassVocabulary added in v1.5.0 

func RuntimeTransitionClassVocabulary() []string

func ValidateActivatedArtifactOutput added in v1.7.0 

func ValidateActivatedArtifactOutput(path string, overwrite bool) error

ValidateActivatedArtifactOutput checks that an activation output can be installed without mutating the filesystem. Callers can use this before appending lifecycle evidence so a failed output never claims publication.

func ValidateArtifactBytes 

func ValidateArtifactBytes(raw []byte, options ValidationOptions) (Artifact, ValidationResult)

func ValidateChainCandidate added in v1.6.0 

func ValidateChainCandidate(c ChainStep) []string

func ValidateChainPolicy added in v1.6.0 

func ValidateChainPolicy(p ChainPolicy) []string

func ValidateChainState added in v1.6.0 

func ValidateChainState(s ChainState) []string

func ValidateCircuitDecision added in v1.6.0 

func ValidateCircuitDecision(d CircuitBreakerDecision) []string

func ValidateCircuitInput added in v1.6.0 

func ValidateCircuitInput(i CircuitBreakerInput) []string

func ValidateCircuitJSON added in v1.6.0 

func ValidateCircuitJSON(raw []byte, value any) error

func ValidateRuntimeAction added in v1.5.0 

func ValidateRuntimeAction(action RuntimeAction) []string

func VerifyActivation 

func VerifyActivation(artifact ActivatedArtifact, publicKey ed25519.PublicKey, proposal Artifact) (bool, error)

VerifyActivation checks the signed object against a supplied public key and the actual bound proposal. A signature alone is not a full activation verification result.

func VerifyActivationWithOptions 

func VerifyActivationWithOptions(artifact ActivatedArtifact, publicKey ed25519.PublicKey, options VerificationOptions) (bool, error)

func VerifyAdvisoryReport added in v1.6.0 

func VerifyAdvisoryReport(r AdvisoryReport, trusted ed25519.PublicKey, expectedContract, expectedCorrelation string) error

func VerifyCompensationEvidence added in v1.5.0 

func VerifyCompensationEvidence(item CompensationEvidence, public ed25519.PublicKey) (bool, error)

func VerifyContainmentEvidence added in v1.5.0 

func VerifyContainmentEvidence(item ContainmentEvidence, public ed25519.PublicKey) (bool, error)

func VerifyControlEventEvidence added in v1.6.0 

func VerifyControlEventEvidence(item ControlEventEvidence, key ed25519.PublicKey) (bool, error)

func VerifyControlEventEvidenceAt added in v1.6.0 

func VerifyControlEventEvidenceAt(item ControlEventEvidence, key ed25519.PublicKey, at time.Time) (bool, error)

func VerifyEffectEvent added in v1.5.0 

func VerifyEffectEvent(item EffectEvent, public ed25519.PublicKey) (bool, error)

func VerifyExecutionEvidence added in v1.5.0 

func VerifyExecutionEvidence(item ExecutionEvidence, public ed25519.PublicKey) (bool, error)

func VerifyLifecycleJournal added in v1.7.0 

func VerifyLifecycleJournal(path string, publicKey ed25519.PublicKey) error

func VerifyLifecycleReceipt added in v1.6.0 

func VerifyLifecycleReceipt(r LifecycleReceipt, key ed25519.PublicKey) error

func VerifyLifecycleReceiptAt added in v1.6.0 

func VerifyLifecycleReceiptAt(r LifecycleReceipt, key ed25519.PublicKey, at time.Time) error

func VerifyLifecycleRecord added in v1.5.0 

func VerifyLifecycleRecord(record LifecycleRecord, publicKey ed25519.PublicKey) (bool, error)

func VerifyLifecycleRecords added in v1.7.0 

func VerifyLifecycleRecords(records []LifecycleRecord, publicKey ed25519.PublicKey) error

VerifyLifecycleRecords authenticates and structurally reduces an already loaded lifecycle prefix. Callers that append records under a different boundary signer can verify each homogeneous prefix with its own key.

func WriteActivatedArtifact 

func WriteActivatedArtifact(path string, artifact ActivatedArtifact, overwrite bool) error

WriteActivatedArtifact writes deterministic bytes through a same-directory temporary file. Existing targets are refused unless overwrite is explicit; symlink targets and symlinked parent directories are always rejected.

func WriteEvidenceExclusive added in v1.5.0 

func WriteEvidenceExclusive(path string, value any) error

WriteEvidenceExclusive and ReadEvidenceFile are bounded, no-follow helpers for evidence handoff. The writer anchors all path operations to a verified directory descriptor and creates the destination exactly once. The reader accepts an already-open descriptor and never resolves a path itself.

Types

type ActionClassification added in v1.5.0 

type ActionClassification = RuntimeAction

Compatibility aliases keep the public vocabulary explicit for callers that refer to the three projections independently.

type ActivatedArtifact 

type ActivatedArtifact struct {
	SchemaID            string                `json:"schema_id"`
	SchemaVersion       string                `json:"schema_version"`
	ArtifactID          string                `json:"artifact_id"`
	ContractID          string                `json:"contract_id"`
	ContractFamilyID    string                `json:"contract_family_id"`
	Revision            int                   `json:"revision"`
	Producer            ProducerMetadata      `json:"producer"`
	Proposal            ActivationProposalRef `json:"proposal"`
	PolicyDigest        string                `json:"policy_digest"`
	ActivatingPrincipal string                `json:"activating_principal"`
	AuthorityRefs       []string              `json:"authority_refs"`
	Target              string                `json:"target"`
	Environment         string                `json:"environment"`
	ActivationMode      ActivationMode        `json:"activation_mode"`
	Validity            Validity              `json:"validity"`
	ExplicitExceptions  []string              `json:"explicit_exceptions"`
	ReportOnly          bool                  `json:"report_only"`
	DevelopmentSigning  bool                  `json:"development_signing"`
	Signature           proofsign.Signature   `json:"signature"`
}

func ParseActivatedArtifact 

func ParseActivatedArtifact(raw []byte) (ActivatedArtifact, error)

func ReadActivatedArtifact 

func ReadActivatedArtifact(path string) (ActivatedArtifact, []byte, error)

type ActivationMode 

type ActivationMode string
const (
	ActivationContextOnly  ActivationMode = "context_only"
	ActivationEnforceFloor ActivationMode = "enforce_floor"
	ActivationRequired     ActivationMode = "required"
)

type ActivationOptions 

type ActivationOptions struct {
	PolicyDigest            string
	ActivatingPrincipal     string
	AuthorityRefs           []string
	Target                  string
	Environment             string
	Mode                    ActivationMode
	ValidFrom               string
	ValidUntil              string
	ExplicitExceptions      []string
	SigningPrivateKey       ed25519.PrivateKey
	AllowDevelopmentSigning bool
	Selection               *SelectionEvidence
	EvaluationTime          time.Time
}

type ActivationProposalRef 

type ActivationProposalRef struct {
	ArtifactID             string `json:"artifact_id"`
	CanonicalContentDigest string `json:"canonical_content_digest"`
	ContractID             string `json:"contract_id"`
	ContractFamilyID       string `json:"contract_family_id"`
	Revision               int    `json:"revision"`
	SchemaID               string `json:"schema_id"`
	SchemaVersion          string `json:"schema_version"`
	ContractSchemaVersion  string `json:"contract_schema_version"`
}

type ActivationResult 

type ActivationResult struct {
	Activated  ActivatedArtifact `json:"activated"`
	Validation ValidationResult  `json:"validation"`
}

type AdvisoryEvaluator added in v1.6.0 

type AdvisoryEvaluator interface {
	Evaluate(AdvisoryInput) (AdvisoryReport, error)
}

type AdvisoryInput added in v1.6.0 

type AdvisoryInput struct {
	ActionID          string                  `json:"action_id"`
	Claims            []string                `json:"claims,omitempty"`
	EvidenceRefs      []proof.RelationshipRef `json:"evidence_refs,omitempty"`
	ContractDigest    string                  `json:"contract_digest,omitempty"`
	CorrelationDigest string                  `json:"correlation_digest,omitempty"`
}

type AdvisoryMode added in v1.7.0 

type AdvisoryMode string
const (
	AdvisoryModeOff      AdvisoryMode = "off"
	AdvisoryModeAdvisory AdvisoryMode = "advisory"
	AdvisoryModeRequired AdvisoryMode = "required"
)

type AdvisoryProvenance added in v1.6.0 

type AdvisoryProvenance struct {
	SourceProduct string              `json:"source_product"`
	Mode          string              `json:"mode"`
	Provider      string              `json:"provider"`
	PublicKey     string              `json:"public_key"`
	Signature     proofsign.Signature `json:"signature"`
}

type AdvisoryReport added in v1.6.0 

type AdvisoryReport struct {
	SchemaID               string                  `json:"schema_id"`
	SchemaVersion          string                  `json:"schema_version"`
	ProviderName           string                  `json:"provider_name"`
	ProviderVersion        string                  `json:"provider_version"`
	Status                 string                  `json:"status"`
	ReasonCodes            []string                `json:"reason_codes,omitempty"`
	AdvisoryOnly           bool                    `json:"advisory_only"`
	ActionID               string                  `json:"action_id"`
	ContractDigest         string                  `json:"contract_digest,omitempty"`
	CorrelationDigest      string                  `json:"correlation_digest,omitempty"`
	EvidenceRefs           []proof.RelationshipRef `json:"evidence_refs,omitempty"`
	Findings               []string                `json:"findings,omitempty"`
	Provenance             AdvisoryProvenance      `json:"provenance"`
	CanonicalContentDigest string                  `json:"canonical_content_digest"`
}

func EvaluateAdvisory added in v1.7.0 

func EvaluateAdvisory(mode AdvisoryMode, evaluator AdvisoryEvaluator, input AdvisoryInput) (AdvisoryReport, error)

func (AdvisoryReport) MarshalDeterministic added in v1.6.0 

func (r AdvisoryReport) MarshalDeterministic() ([]byte, error)

func (AdvisoryReport) Sign added in v1.6.0 

func (r AdvisoryReport) Sign(key ed25519.PrivateKey) (AdvisoryReport, error)

func (AdvisoryReport) VerifyEvidenceRefs added in v1.6.0 

func (r AdvisoryReport) VerifyEvidenceRefs() error

type Artifact 

type Artifact struct {
	SchemaID               string           `json:"schema_id"`
	SchemaVersion          string           `json:"schema_version"`
	ArtifactID             string           `json:"artifact_id"`
	ContractID             string           `json:"contract_id"`
	ContractFamilyID       string           `json:"contract_family_id"`
	Revision               int              `json:"revision"`
	Producer               ProducerMetadata `json:"producer"`
	SourceScanRefs         []string         `json:"source_scan_refs"`
	CompositionRefs        []string         `json:"composition_refs"`
	ResolutionKey          string           `json:"resolution_key,omitempty"`
	CreationEvidence       []string         `json:"creation_evidence"`
	CanonicalContentDigest string           `json:"canonical_content_digest"`
	Variant                VariantMetadata  `json:"variant"`
	ReportOnly             bool             `json:"report_only"`
	Contract               map[string]any   `json:"contract"`
}

Artifact is intentionally map-backed for the embedded contract. This lets Gait preserve Wrkr's immutable v3 contract without reimplementing Wrkr's risk model or dropping future additive fields.

func ParseArtifact 

func ParseArtifact(raw []byte) (Artifact, error)

ParseArtifact parses one standalone artifact, rejects duplicate keys and trailing JSON, and preserves JSON numbers for JCS digest verification.

func ReadArtifact 

func ReadArtifact(path string) (Artifact, []byte, error)

ReadArtifact reads exactly one artifact from path. The path is a caller selection; no directory scanning or recommendation discovery is performed.

type BoundaryClassification added in v1.5.0 

type BoundaryClassification = RuntimeBoundary

type ChainDecision added in v1.6.0 

type ChainDecision struct {
	SchemaID      string     `json:"schema_id"`
	SchemaVersion string     `json:"schema_version"`
	Allowed       bool       `json:"allowed"`
	ReasonCodes   []string   `json:"reason_codes,omitempty"`
	State         ChainState `json:"state"`
}

func EvaluateActionChain added in v1.6.0 

func EvaluateActionChain(steps []ChainStep, policy ChainPolicy) ChainDecision

func EvaluateCandidate added in v1.6.0 

func EvaluateCandidate(prior ChainState, candidate ChainStep, policy ChainPolicy) ChainDecision

EvaluateCandidate applies one candidate to an immutable prior state.

type ChainPolicy added in v1.6.0 

type ChainPolicy struct {
	SchemaID           string   `json:"schema_id"`
	SchemaVersion      string   `json:"schema_version"`
	MaxSteps           int      `json:"max_steps"`
	ForbiddenClasses   []string `json:"forbidden_classes,omitempty"`
	RequiredClasses    []string `json:"required_classes,omitempty"`
	MaxDistinctTargets int      `json:"max_distinct_targets,omitempty"`
}

type ChainState added in v1.6.0 

type ChainState struct {
	SchemaID      string   `json:"schema_id"`
	SchemaVersion string   `json:"schema_version"`
	StepCount     int      `json:"step_count"`
	StepIDs       []string `json:"step_ids"`
	Classes       []string `json:"classes"`
	Targets       []string `json:"targets"`
}

type ChainStep added in v1.6.0 

type ChainStep struct {
	ID      string   `json:"id"`
	Classes []string `json:"classes,omitempty"`
	Target  string   `json:"target,omitempty"`
}

ChainStep is a bounded, already-classified action. Evaluation is pure and happens before execution; State is accumulated in input order.

type CircuitBreakerDecision added in v1.6.0 

type CircuitBreakerDecision struct {
	SchemaID           string   `json:"schema_id"`
	SchemaVersion      string   `json:"schema_version"`
	Allow              bool     `json:"allow"`
	Tripped            bool     `json:"tripped"`
	ReasonCodes        []string `json:"reason_codes"`
	AffectedScope      []string `json:"affected_scope,omitempty"`
	InvalidationStatus string   `json:"invalidation_status,omitempty"`
	OutOfScope         bool     `json:"out_of_scope"`
	EnforcementClaimed bool     `json:"enforcement_claimed"`
}

func EvaluateCircuit added in v1.6.0 

func EvaluateCircuit(i CircuitBreakerInput) CircuitBreakerDecision

type CircuitBreakerInput added in v1.6.0 

type CircuitBreakerInput struct {
	SchemaID            string        `json:"schema_id"`
	SchemaVersion       string        `json:"schema_version"`
	Chain               ChainDecision `json:"chain"`
	EffectStatus        string        `json:"effect_status"`
	EffectAuthoritative bool          `json:"effect_authoritative"`
	ContainmentStatus   string        `json:"containment_status"`
	StopStatus          string        `json:"stop_status"`
	RevocationStatus    string        `json:"revocation_status"`
	AffectedScope       []string      `json:"affected_scope,omitempty"`
	InvalidationStatus  string        `json:"invalidation_status,omitempty"`
	OutOfScope          bool          `json:"out_of_scope,omitempty"`
	IntentDigest        string        `json:"intent_digest,omitempty"`
	ChainStateDigest    string        `json:"chain_state_digest,omitempty"`
	BindingDigest       string        `json:"binding_digest,omitempty"`
}

type ClassificationInput added in v1.5.0 

type ClassificationInput struct {
	SchemaID                 string               `json:"schema_id"`
	SchemaVersion            string               `json:"schema_version"`
	ActionID                 string               `json:"action_id"`
	ActionClass              string               `json:"action_class"`
	ActionClasses            []string             `json:"action_classes"`
	CompositionRole          string               `json:"composition_role"`
	DataClasses              []string             `json:"data_classes"`
	TargetTrustClass         string               `json:"target_trust_class"`
	TransitionClass          string               `json:"transition_class"`
	ExpectedOutcomeClass     string               `json:"expected_outcome_class"`
	IntendedOutcomeClass     string               `json:"intended_outcome_class"`
	ResourceLifecycleActions []string             `json:"resource_lifecycle_actions"`
	ResourceActions          []string             `json:"resource_actions"`
	RiskClass                string               `json:"risk_class"`
	TargetRef                string               `json:"target_ref"`
	SourceTrustClass         string               `json:"source_trust_class"`
	BoundaryRefs             []string             `json:"boundary_refs"`
	ProofRefs                []string             `json:"proof_refs"`
	Stages                   []RuntimeActionStage `json:"stages"`
	Hints                    []string             `json:"hints"`
}

ClassificationInput is intentionally small. Supplied values are never lowered by inference; inference may only preserve or raise the effective action class/control posture.

func ParseClassificationInput added in v1.5.0 

func ParseClassificationInput(raw []byte) (ClassificationInput, error)

type ClassificationResult added in v1.5.0 

type ClassificationResult struct {
	Action      RuntimeAction `json:"action"`
	Valid       bool          `json:"valid"`
	ReasonCodes []string      `json:"reason_codes,omitempty"`
}

func ClassifyAction added in v1.5.0 

func ClassifyAction(input ClassificationInput) ClassificationResult

ClassifyAction is the concise library entry point used by adapters.

func ClassifyArtifact added in v1.5.0 

func ClassifyArtifact(artifact Artifact) ClassificationResult

ClassifyArtifact projects the immutable Wrkr proposal without mutating it.

func ClassifyRuntimeAction added in v1.5.0 

func ClassifyRuntimeAction(input ClassificationInput) ClassificationResult

ClassifyRuntimeAction deterministically normalizes a runtime action. It does not inspect the network, run validators, or infer observed effects.

type CommandAdvisoryEvaluator added in v1.7.0 

type CommandAdvisoryEvaluator struct {
	Command string
	Args    []string
	Env     []string
	Timeout time.Duration
}

func (CommandAdvisoryEvaluator) Evaluate added in v1.7.0 

func (e CommandAdvisoryEvaluator) Evaluate(in AdvisoryInput) (AdvisoryReport, error)

type CompensationEvidence added in v1.5.0 

type CompensationEvidence struct {
	SchemaID               string                `json:"schema_id"`
	SchemaVersion          string                `json:"schema_version"`
	EvidenceID             string                `json:"evidence_id"`
	Binding                EvidenceBinding       `json:"binding"`
	EventRef               proof.RelationshipRef `json:"event_ref"`
	RequirementRef         proof.RelationshipRef `json:"requirement_ref"`
	ExecutionRef           proof.RelationshipRef `json:"execution_ref"`
	OccurredAt             string                `json:"occurred_at"`
	FreshUntil             string                `json:"fresh_until"`
	Outcome                string                `json:"outcome"`
	ReasonCode             string                `json:"reason_code"`
	Provenance             EvidenceProvenance    `json:"provenance"`
	CanonicalContentDigest string                `json:"canonical_content_digest"`
}

func NewCompensationEvidence added in v1.5.0 

func NewCompensationEvidence(item CompensationEvidence, private ed25519.PrivateKey) (CompensationEvidence, error)

func ParseCompensationEvidence added in v1.5.0 

func ParseCompensationEvidence(raw []byte) (CompensationEvidence, error)

type ContainmentEvidence added in v1.5.0 

type ContainmentEvidence struct {
	SchemaID               string                `json:"schema_id"`
	SchemaVersion          string                `json:"schema_version"`
	EvidenceID             string                `json:"evidence_id"`
	Binding                EvidenceBinding       `json:"binding"`
	EventRef               proof.RelationshipRef `json:"event_ref"`
	ExecutionRef           proof.RelationshipRef `json:"execution_ref"`
	EffectRef              proof.RelationshipRef `json:"effect_ref"`
	ContainmentRef         proof.RelationshipRef `json:"containment_ref"`
	OccurredAt             string                `json:"occurred_at"`
	FreshUntil             string                `json:"fresh_until"`
	Outcome                string                `json:"outcome"`
	ReasonCode             string                `json:"reason_code"`
	Provenance             EvidenceProvenance    `json:"provenance"`
	CanonicalContentDigest string                `json:"canonical_content_digest"`
}

func NewContainmentEvidence added in v1.5.0 

func NewContainmentEvidence(item ContainmentEvidence, private ed25519.PrivateKey) (ContainmentEvidence, error)

func ParseContainmentEvidence added in v1.5.0 

func ParseContainmentEvidence(raw []byte) (ContainmentEvidence, error)

type ControlEventEvidence added in v1.6.0 

type ControlEventEvidence struct {
	SchemaID               string                `json:"schema_id"`
	SchemaVersion          string                `json:"schema_version"`
	EvidenceID             string                `json:"evidence_id"`
	Binding                EvidenceBinding       `json:"binding"`
	EventRef               proof.RelationshipRef `json:"event_ref"`
	CausalRef              proof.RelationshipRef `json:"causal_ref"`
	ControlRef             proof.RelationshipRef `json:"control_ref"`
	Command                string                `json:"command"`
	Phase                  string                `json:"phase"`
	BoundaryID             string                `json:"boundary_id,omitempty"`
	ResourceID             string                `json:"resource_id,omitempty"`
	AffectedScope          []string              `json:"affected_scope,omitempty"`
	AdapterIdentity        string                `json:"adapter_identity,omitempty"`
	AdapterAcknowledged    bool                  `json:"adapter_acknowledged"`
	OccurredAt             string                `json:"occurred_at"`
	FreshUntil             string                `json:"fresh_until"`
	ReasonCode             string                `json:"reason_code"`
	Provenance             EvidenceProvenance    `json:"provenance"`
	CanonicalContentDigest string                `json:"canonical_content_digest"`
}

func NewControlEventEvidence added in v1.6.0 

func NewControlEventEvidence(item ControlEventEvidence, key ed25519.PrivateKey) (ControlEventEvidence, error)

func ParseControlEventEvidence added in v1.6.0 

func ParseControlEventEvidence(raw []byte) (ControlEventEvidence, error)

type ControlMode added in v1.5.0 

type ControlMode string
const (
	ControlModeEnforced     ControlMode = "enforced"
	ControlModeObserved     ControlMode = "observed"
	ControlModeSelfAttested ControlMode = "self_attested"
	ControlModeUnknown      ControlMode = "unknown"
)

type EffectEvent added in v1.5.0 

type EffectEvent struct {
	SchemaID               string                `json:"schema_id"`
	SchemaVersion          string                `json:"schema_version"`
	EvidenceID             string                `json:"evidence_id"`
	Binding                EvidenceBinding       `json:"binding"`
	EventRef               proof.RelationshipRef `json:"event_ref"`
	ExecutionRef           proof.RelationshipRef `json:"execution_ref"`
	EffectRef              proof.RelationshipRef `json:"effect_ref"`
	OccurredAt             string                `json:"occurred_at"`
	FreshUntil             string                `json:"fresh_until"`
	Outcome                string                `json:"outcome"`
	ReasonCode             string                `json:"reason_code"`
	Provenance             EvidenceProvenance    `json:"provenance"`
	CanonicalContentDigest string                `json:"canonical_content_digest"`
}

func NewEffectEvent added in v1.5.0 

func NewEffectEvent(item EffectEvent, private ed25519.PrivateKey) (EffectEvent, error)

func ParseEffectEvent added in v1.5.0 

func ParseEffectEvent(raw []byte) (EffectEvent, error)

type EvidenceBinding added in v1.5.0 

type EvidenceBinding struct {
	ContractFamilyID string                                   `json:"contract_family_id"`
	Revision         int                                      `json:"revision"`
	ContractRef      proof.RelationshipRef                    `json:"contract_ref"`
	ActivationRef    proof.RelationshipRef                    `json:"activation_ref"`
	RuntimeActionRef proof.RelationshipRef                    `json:"runtime_action_ref"`
	ReadinessRef     proof.RelationshipRef                    `json:"readiness_ref"`
	DecisionRef      proof.RelationshipRef                    `json:"decision_ref"`
	PolicyRef        proof.RelationshipRef                    `json:"policy_ref"`
	TargetRef        proof.RelationshipRef                    `json:"target_ref"`
	EnvironmentRef   proof.RelationshipRef                    `json:"environment_ref"`
	ProofRefs        []proof.RelationshipRef                  `json:"proof_refs"`
	CausalRefs       []proof.RelationshipRef                  `json:"causal_refs"`
	Correlation      proof.ControlContainmentTelemetryProfile `json:"correlation"`
}

func BuildContractEvidenceBinding added in v1.7.0 

func BuildContractEvidenceBinding(proposal Artifact, activation ActivatedArtifact, action RuntimeAction, readiness ReadinessResult, traceID, traceDigest, resultDigest, activationRawDigest string) (EvidenceBinding, error)

BuildContractEvidenceBinding creates the common digest-bound lineage used by execution and containment evidence producers.

func (EvidenceBinding) RelationshipRefs added in v1.5.0 

func (b EvidenceBinding) RelationshipRefs() []proof.RelationshipRef

func (EvidenceBinding) Validate added in v1.5.0 

func (b EvidenceBinding) Validate() error

type EvidenceProvenance added in v1.5.0 

type EvidenceProvenance struct {
	Producer  string              `json:"producer"`
	Writer    string              `json:"writer"`
	Verifier  string              `json:"verifier"`
	PublicKey string              `json:"public_key"`
	Signature proofsign.Signature `json:"signature"`
}

type ExecutionEvidence added in v1.5.0 

type ExecutionEvidence struct {
	SchemaID               string                `json:"schema_id"`
	SchemaVersion          string                `json:"schema_version"`
	EvidenceID             string                `json:"evidence_id"`
	Binding                EvidenceBinding       `json:"binding"`
	EventRef               proof.RelationshipRef `json:"event_ref"`
	OccurredAt             string                `json:"occurred_at"`
	FreshUntil             string                `json:"fresh_until"`
	Outcome                string                `json:"outcome"`
	ReasonCode             string                `json:"reason_code"`
	CompensationRequired   bool                  `json:"compensation_required"`
	Provenance             EvidenceProvenance    `json:"provenance"`
	CanonicalContentDigest string                `json:"canonical_content_digest"`
}

func NewExecutionEvidence added in v1.5.0 

func NewExecutionEvidence(item ExecutionEvidence, private ed25519.PrivateKey) (ExecutionEvidence, error)

func ParseExecutionEvidence added in v1.5.0 

func ParseExecutionEvidence(raw []byte) (ExecutionEvidence, error)

type LifecycleConformanceExpectation added in v1.5.0 

type LifecycleConformanceExpectation struct {
	ExecutionOutcome    string `json:"execution_outcome,omitempty"`
	EffectOutcome       string `json:"effect_outcome,omitempty"`
	ContainmentOutcome  string `json:"containment_outcome,omitempty"`
	StopOutcome         string `json:"stop_outcome,omitempty"`
	RevocationOutcome   string `json:"revocation_outcome,omitempty"`
	InvalidationOutcome string `json:"invalidation_outcome,omitempty"`
	CompensationOutcome string `json:"compensation_outcome,omitempty"`
	RequireComplete     bool   `json:"require_complete,omitempty"`
}

LifecycleConformanceExpectation describes the terminal path that a fixture or caller expects. Empty values mean that the corresponding stage is not required (for example a blocked-before-execution path).

type LifecycleConformanceInput added in v1.5.0 

type LifecycleConformanceInput struct {
	Proposal                      Artifact
	Activation                    ActivatedArtifact
	ActivationPublicKey           ed25519.PublicKey
	RuntimeAction                 RuntimeAction
	Readiness                     ReadinessResult
	ReadinessTrustedValidatorRefs []string
	ReadinessTrustedValidatorKeys map[string]ed25519.PublicKey
	LifecycleRecords              []LifecycleRecord
	LifecyclePublicKey            ed25519.PublicKey
	EvaluationTime                time.Time
	AllowDevelopmentSign          bool
	Expectation                   LifecycleConformanceExpectation
}

LifecycleConformanceInput is deliberately composed of already parsed artifacts. File loading and execution are outside this API.

type LifecycleConformanceResult added in v1.5.0 

type LifecycleConformanceResult struct {
	Valid                bool               `json:"valid"`
	AuthoritativeSuccess bool               `json:"authoritative_success"`
	ReasonCodes          []string           `json:"reason_codes,omitempty"`
	Snapshot             *LifecycleSnapshot `json:"snapshot,omitempty"`
}

func GradeLifecycleConformance added in v1.5.0 

func GradeLifecycleConformance(input LifecycleConformanceInput) LifecycleConformanceResult

GradeLifecycleConformance is the verb-oriented alias used by regression adapters. It is intentionally pure and has no filesystem or tool access.

func VerifyLifecycleConformance added in v1.5.0 

func VerifyLifecycleConformance(input LifecycleConformanceInput) LifecycleConformanceResult

VerifyLifecycleConformance verifies the complete proposal -> activation -> readiness -> execution -> effect -> containment/compensation chain. It returns a stable reason code instead of treating an incomplete or identifier-only correlation as a successful partial result.

type LifecycleEventKind added in v1.5.0 

type LifecycleEventKind string

Lifecycle records are signed, digest-bound state transitions. ReduceLifecycle is a pure reducer over records; it does not persist or append to an event store and it preserves the immutable proposal/activation references. 

const (
	LifecycleProposalIngested       LifecycleEventKind = "proposal_ingested"
	LifecycleActivationRequested    LifecycleEventKind = "activation_requested"
	LifecycleActivated              LifecycleEventKind = "activated"
	LifecycleRejected               LifecycleEventKind = "rejected"
	LifecycleRevoked                LifecycleEventKind = "revoked"
	LifecycleSuperseded             LifecycleEventKind = "superseded"
	LifecyclePreconditionEvaluated  LifecycleEventKind = "precondition_evaluated"
	LifecycleDecisionReady          LifecycleEventKind = "decision_ready"
	LifecycleExecutionStarted       LifecycleEventKind = "execution_started"
	LifecycleExecutionSucceeded     LifecycleEventKind = "execution_succeeded"
	LifecycleExecutionFailed        LifecycleEventKind = "execution_failed"
	LifecycleExecutionBlocked       LifecycleEventKind = "execution_blocked"
	LifecycleEffectRecorded         LifecycleEventKind = "effect_recorded"
	LifecycleEffectValidated        LifecycleEventKind = "effect_validated"
	LifecycleContainmentRequested   LifecycleEventKind = "containment_requested"
	LifecycleContainmentCompleted   LifecycleEventKind = "containment_completed"
	LifecycleContainmentPartial     LifecycleEventKind = "containment_partial"
	LifecycleContainmentUnresolved  LifecycleEventKind = "containment_unresolved"
	LifecycleContainmentOutOfScope  LifecycleEventKind = "containment_out_of_scope"
	LifecycleStopRequested          LifecycleEventKind = "stop_requested"
	LifecycleStopAcknowledged       LifecycleEventKind = "stop_acknowledged"
	LifecycleStopDenied             LifecycleEventKind = "stop_denied"
	LifecycleStopFailed             LifecycleEventKind = "stop_failed"
	LifecycleRevocationAttempted    LifecycleEventKind = "external_revocation_attempted"
	LifecycleRevocationAcknowledged LifecycleEventKind = "external_revocation_acknowledged"
	LifecycleRevocationFailed       LifecycleEventKind = "external_revocation_failed"
	LifecycleCapabilityInvalidated  LifecycleEventKind = "capability_invalidated"
	LifecycleDescendantInvalidated  LifecycleEventKind = "descendant_invalidated"
	LifecycleCompensationRequired   LifecycleEventKind = "compensation_required"
	LifecycleCompensationStarted    LifecycleEventKind = "compensation_started"
	LifecycleCompensationCompleted  LifecycleEventKind = "compensation_completed"
)

type LifecycleOTelEvent added in v1.6.0 

type LifecycleOTelEvent struct {
	Name             string             `json:"name"`
	Time             string             `json:"time"`
	TraceID          string             `json:"trace_id"`
	SpanID           string             `json:"span_id"`
	Kind             LifecycleEventKind `json:"kind"`
	ContractFamilyID string             `json:"contract_family_id,omitempty"`
	ContractID       string             `json:"contract_id,omitempty"`
	Revision         int                `json:"revision,omitempty"`
	Outcome          string             `json:"outcome,omitempty"`
	ReasonCodes      []string           `json:"reason_codes,omitempty"`
	BoundaryID       string             `json:"boundary_id,omitempty"`
	ResourceID       string             `json:"resource_id,omitempty"`
	AffectedScope    []string           `json:"affected_scope,omitempty"`
	BindingMode      string             `json:"binding_mode"`
	Authority        bool               `json:"authority"`
	Quarantine       bool               `json:"quarantine"`
	SourceProduct    string             `json:"source_product"`
	SourceVersion    string             `json:"source_version"`
	RecordID         string             `json:"record_id"`
	ContractDigest   string             `json:"contract_digest,omitempty"`
	ActivationDigest string             `json:"activation_digest,omitempty"`
	PolicyDigest     string             `json:"policy_digest,omitempty"`
	EvidenceDigests  []string           `json:"evidence_digests,omitempty"`
	ControlDigest    string             `json:"control_digest,omitempty"`
}

type LifecycleOTelExportOptions added in v1.6.0 

type LifecycleOTelExportOptions struct {
	SourceVersion string
	Authority     bool
	Quarantine    bool
	MaxBytes      int
}

type LifecycleReceipt added in v1.6.0 

type LifecycleReceipt struct {
	SchemaID               string                                   `json:"schema_id"`
	SchemaVersion          string                                   `json:"schema_version"`
	ReceiptID              string                                   `json:"receipt_id"`
	ContractFamilyID       string                                   `json:"contract_family_id"`
	ContractID             string                                   `json:"contract_id"`
	Revision               int                                      `json:"revision"`
	ArtifactDigests        []string                                 `json:"artifact_digests"`
	ArtifactRefs           []proof.RelationshipRef                  `json:"artifact_refs,omitempty"`
	ObservedAt             string                                   `json:"observed_at,omitempty"`
	FreshUntil             string                                   `json:"fresh_until,omitempty"`
	Correlation            proof.ControlContainmentTelemetryProfile `json:"correlation"`
	Authority              string                                   `json:"authority"`
	Quarantine             bool                                     `json:"quarantine"`
	Redaction              string                                   `json:"redaction"`
	Outcome                string                                   `json:"outcome"`
	ReasonCodes            []string                                 `json:"reason_codes,omitempty"`
	Provenance             LifecycleReceiptProvenance               `json:"provenance"`
	CanonicalContentDigest string                                   `json:"canonical_content_digest"`
}

func (LifecycleReceipt) Sign added in v1.6.0 

func (r LifecycleReceipt) Sign(key ed25519.PrivateKey) (LifecycleReceipt, error)

type LifecycleReceiptProvenance added in v1.6.0 

type LifecycleReceiptProvenance struct {
	SourceProduct string              `json:"source_product"`
	Mode          string              `json:"mode"`
	PublicKey     string              `json:"public_key"`
	Signature     proofsign.Signature `json:"signature"`
}

type LifecycleRecord added in v1.5.0 

type LifecycleRecord struct {
	SchemaID            string                                   `json:"schema_id"`
	SchemaVersion       string                                   `json:"schema_version"`
	RecordID            string                                   `json:"record_id"`
	Kind                LifecycleEventKind                       `json:"kind"`
	OccurredAt          string                                   `json:"occurred_at"`
	ContractRef         proof.RelationshipRef                    `json:"contract_ref"`
	ContractFamilyID    string                                   `json:"contract_family_id,omitempty"`
	Revision            int                                      `json:"revision"`
	ProposalRef         *proof.RelationshipRef                   `json:"proposal_ref,omitempty"`
	ActivationRef       *proof.RelationshipRef                   `json:"activation_ref,omitempty"`
	PreconditionRefs    []proof.RelationshipRef                  `json:"precondition_refs,omitempty"`
	Decision            *ReadinessResult                         `json:"decision,omitempty"`
	EvidenceRefs        []proof.RelationshipRef                  `json:"evidence_refs,omitempty"`
	Execution           *ExecutionEvidence                       `json:"execution,omitempty"`
	Effect              *EffectEvent                             `json:"effect,omitempty"`
	Containment         *ContainmentEvidence                     `json:"containment,omitempty"`
	BoundaryID          string                                   `json:"boundary_id,omitempty"`
	ResourceID          string                                   `json:"resource_id,omitempty"`
	AffectedScope       []string                                 `json:"affected_scope,omitempty"`
	AdapterAcknowledged bool                                     `json:"adapter_acknowledged,omitempty"`
	Compensation        *CompensationEvidence                    `json:"compensation,omitempty"`
	Control             *ControlEventEvidence                    `json:"control,omitempty"`
	ReasonCodes         []string                                 `json:"reason_codes,omitempty"`
	Correlation         proof.ControlContainmentTelemetryProfile `json:"correlation"`
	ImmutableObject     json.RawMessage                          `json:"immutable_object,omitempty"`
	Signature           proofsign.Signature                      `json:"signature"`
}

func AppendLifecycleResult added in v1.7.0 

func AppendLifecycleResult(options LifecycleResultOptions) ([]LifecycleRecord, error)

func NewLifecycleRecord added in v1.5.0 

func NewLifecycleRecord(options LifecycleRecordOptions) (LifecycleRecord, error)

func ParseLifecycleJSONL added in v1.7.0 

func ParseLifecycleJSONL(raw []byte) ([]LifecycleRecord, error)

func ParseLifecycleRecord added in v1.5.0 

func ParseLifecycleRecord(raw []byte) (LifecycleRecord, error)

ParseLifecycleRecord is the strict JSON boundary for persisted lifecycle records; callers must verify the returned record before reducing it.

func ReadLifecycleJournal added in v1.7.0 

func ReadLifecycleJournal(path string) ([]LifecycleRecord, error)

type LifecycleRecordOptions added in v1.5.0 

type LifecycleRecordOptions struct {
	Kind              LifecycleEventKind
	OccurredAt        time.Time
	ContractRef       proof.RelationshipRef
	ContractFamilyID  string
	Revision          int
	ProposalRef       *proof.RelationshipRef
	ActivationRef     *proof.RelationshipRef
	PreconditionRefs  []proof.RelationshipRef
	Decision          *ReadinessResult
	EvidenceRefs      []proof.RelationshipRef
	Execution         *ExecutionEvidence
	Effect            *EffectEvent
	Containment       *ContainmentEvidence
	Compensation      *CompensationEvidence
	Control           *ControlEventEvidence
	ReasonCodes       []string
	Correlation       proof.ControlContainmentTelemetryProfile
	ImmutableObject   json.RawMessage
	SigningPrivateKey ed25519.PrivateKey
}

type LifecycleResultOptions added in v1.7.0 

type LifecycleResultOptions struct {
	JournalPath         string
	Proposal            Artifact
	Activation          ActivatedArtifact
	RuntimeAction       RuntimeAction
	Readiness           ReadinessResult
	PrivateKey          ed25519.PrivateKey
	Outcome             string
	EffectOutcome       string
	CompensationOutcome string
	TraceDigest         string
	TraceID             string
	ResultDigest        string
	ActivationRawDigest string
	Now                 time.Time
}

type LifecycleSnapshot added in v1.5.0 

type LifecycleSnapshot struct {
	ProposalIngested       bool              `json:"proposal_ingested"`
	ActivationRequested    bool              `json:"activation_requested"`
	Activated              bool              `json:"activated"`
	Rejected               bool              `json:"rejected"`
	Revoked                bool              `json:"revoked"`
	Superseded             bool              `json:"superseded"`
	DecisionReady          bool              `json:"decision_ready"`
	PreconditionsEvaluated int               `json:"preconditions_evaluated"`
	ExecutionStatus        string            `json:"execution_status,omitempty"`
	EffectStatus           string            `json:"effect_status,omitempty"`
	ContainmentStatus      string            `json:"containment_status,omitempty"`
	StopStatus             string            `json:"stop_status,omitempty"`
	RevocationStatus       string            `json:"revocation_status,omitempty"`
	InvalidationStatus     string            `json:"invalidation_status,omitempty"`
	CompensationStatus     string            `json:"compensation_status,omitempty"`
	CurrentStatus          string            `json:"current_status"`
	ReasonCodes            []string          `json:"reason_codes,omitempty"`
	Records                []LifecycleRecord `json:"records"`
}

func ReduceLifecycle added in v1.5.0 

func ReduceLifecycle(records []LifecycleRecord) LifecycleSnapshot

func ReduceLifecycleChecked added in v1.5.0 

func ReduceLifecycleChecked(records []LifecycleRecord) (LifecycleSnapshot, error)

ReduceLifecycleChecked validates structural identity, timestamps, contract isolation, duplicate IDs, and terminal ordering before applying the pure reduction. It does not verify signatures; use ReduceVerifiedLifecycle when the result is used as authoritative lifecycle state.

func ReduceLifecycleEvents added in v1.5.0 

func ReduceLifecycleEvents(records []LifecycleRecord) LifecycleSnapshot

ReduceLifecycleEvents is a compatibility alias with the event-oriented wording used by integrations; both names remain pure reducers.

func ReduceVerifiedLifecycle added in v1.5.0 

func ReduceVerifiedLifecycle(records []LifecycleRecord, publicKey ed25519.PublicKey) (LifecycleSnapshot, error)

ReduceVerifiedLifecycle verifies every record with the trusted public key before applying the structural pure reducer. A failed verification is authoritative failure and never falls back to structural reduction.

type OTLPExportResult added in v1.7.0 

type OTLPExportResult struct {
	Attempted bool   `json:"attempted"`
	Sent      bool   `json:"sent"`
	Deduped   bool   `json:"deduped"`
	Error     string `json:"error,omitempty"`
}

func ExportLifecycleOTLP added in v1.7.0 

func ExportLifecycleOTLP(exporter OTLPExporter, records []LifecycleRecord) OTLPExportResult

func ExportOTLP added in v1.7.0 

func ExportOTLP(exporter OTLPExporter, evidence any) OTLPExportResult

ExportOTLP emits one already-created local evidence object. It is useful for trace/runpack producers that do not use LifecycleRecord directly.

type OTLPExporter added in v1.7.0 

type OTLPExporter struct {
	Endpoint string
	Timeout  time.Duration
	MaxBytes int64
	Redact   bool
	AllowRaw bool
	Client   *http.Client
}

OTLPExporter is opt-in. Local signed lifecycle evidence is always produced first; transport failure is returned as telemetry status and is never a verdict or authorization failure.

type ObservedEffect added in v1.5.0 

type ObservedEffect struct {
	Status      string   `json:"status"` // not_observed|observed|contradictory
	EffectClass string   `json:"effect_class,omitempty"`
	EffectRefs  []string `json:"effect_refs,omitempty"`
	ObservedAt  string   `json:"observed_at,omitempty"`
}

type OfflineAdvisoryEvaluator added in v1.6.0 

type OfflineAdvisoryEvaluator struct{}

func (OfflineAdvisoryEvaluator) Evaluate added in v1.6.0 

func (OfflineAdvisoryEvaluator) Evaluate(in AdvisoryInput) (AdvisoryReport, error)

type OllamaAdvisoryEvaluator added in v1.7.0 

type OllamaAdvisoryEvaluator struct {
	Endpoint string
	Model    string
	Timeout  time.Duration
	Client   *http.Client
}

func (OllamaAdvisoryEvaluator) Evaluate added in v1.7.0 

func (e OllamaAdvisoryEvaluator) Evaluate(in AdvisoryInput) (AdvisoryReport, error)

type OutcomeClassification added in v1.5.0 

type OutcomeClassification = ObservedEffect

type ProducerMetadata 

type ProducerMetadata struct {
	Name                  string `json:"name"`
	ArtifactSchemaVersion string `json:"artifact_schema_version"`
	ContractSchemaVersion string `json:"contract_schema_version"`
}

ProducerMetadata is the producer declaration carried by a proposal.

type ReadinessInput added in v1.5.0 

type ReadinessInput struct {
	ContractID           string                       `json:"contract_id,omitempty"`
	Preconditions        []ReadinessPrecondition      `json:"preconditions"`
	TrustedValidatorRefs []string                     `json:"trusted_validator_refs,omitempty"`
	PolicyDigest         string                       `json:"policy_digest,omitempty"`
	Now                  time.Time                    `json:"-"`
	TrustedValidatorKeys map[string]ed25519.PublicKey `json:"-"`
}

func ParseReadinessInput added in v1.5.0 

func ParseReadinessInput(raw []byte) (ReadinessInput, error)

type ReadinessPrecondition added in v1.5.0 

type ReadinessPrecondition struct {
	RequirementID       string          `json:"requirement_id"`
	Kind                string          `json:"kind"`
	Required            bool            `json:"required"`
	RequiredConstraint  string          `json:"required_constraint,omitempty"`
	ContractRef         string          `json:"contract_ref,omitempty"`
	ObservedValue       string          `json:"observed_value,omitempty"`
	ObservedResult      string          `json:"observed_result,omitempty"`
	ObservedAt          string          `json:"observed_at,omitempty"`
	MaxAgeSeconds       int64           `json:"max_age_seconds,omitempty"`
	TTLSeconds          int64           `json:"ttl_seconds,omitempty"`
	Environment         string          `json:"environment,omitempty"`
	Target              string          `json:"target,omitempty"`
	SandboxStatus       string          `json:"sandbox_status,omitempty"`
	CredentialMode      string          `json:"credential_mode,omitempty"`
	ResourceStatus      string          `json:"resource_status,omitempty"`
	CompensationStatus  string          `json:"compensation_status,omitempty"`
	EvidenceDigest      string          `json:"evidence_digest,omitempty"`
	ValidatorSignature  string          `json:"validator_signature,omitempty"`
	Producer            string          `json:"producer,omitempty"`
	AcceptableProducers []string        `json:"acceptable_producers,omitempty"`
	EvidenceState       string          `json:"evidence_state,omitempty"`
	FreshnessState      string          `json:"freshness_state,omitempty"`
	EvidenceRefs        []string        `json:"evidence_refs,omitempty"`
	BoundaryRefs        []string        `json:"boundary_refs,omitempty"`
	ControlMode         ControlMode     `json:"control_mode"`
	Status              ReadinessStatus `json:"status"`
	ReasonCodes         []string        `json:"reason_codes,omitempty"`
}

type ReadinessResult added in v1.5.0 

type ReadinessResult struct {
	SchemaID      string                  `json:"schema_id"`
	SchemaVersion string                  `json:"schema_version"`
	ContractID    string                  `json:"contract_id,omitempty"`
	PolicyDigest  string                  `json:"policy_digest,omitempty"`
	Ready         bool                    `json:"ready"`
	Status        ReadinessStatus         `json:"status"`
	Preconditions []ReadinessPrecondition `json:"preconditions"`
	ReasonCodes   []string                `json:"reason_codes,omitempty"`
}

func EvaluateContractReadiness added in v1.5.0 

func EvaluateContractReadiness(input ReadinessInput) ReadinessResult

EvaluateContractReadiness is the stable name for callers evaluating a typed contract projection.

func EvaluateReadiness added in v1.5.0 

func EvaluateReadiness(input ReadinessInput) ReadinessResult

EvaluateReadiness applies only policy-named trusted validator references. Wrkr declarations and judge/self-attestation labels are intentionally not trusted by default.

func ReadinessFromArtifact added in v1.5.0 

func ReadinessFromArtifact(artifact Artifact, options ReadinessInput) ReadinessResult

func ReadinessFromContract added in v1.5.0 

func ReadinessFromContract(contract map[string]any, options ReadinessInput) ReadinessResult

type ReadinessStatus added in v1.5.0 

type ReadinessStatus string

ReadinessStatus is per requirement. A required inconclusive result is never promoted to satisfied. 

const (
	ReadinessSatisfied    ReadinessStatus = "satisfied"
	ReadinessUnsatisfied  ReadinessStatus = "unsatisfied"
	ReadinessInconclusive ReadinessStatus = "inconclusive"
	ReadinessNotRequired  ReadinessStatus = "not_required"
)

type RuntimeAction added in v1.5.0 

type RuntimeAction struct {
	SchemaID                 string               `json:"schema_id"`
	SchemaVersion            string               `json:"schema_version"`
	ActionID                 string               `json:"action_id"`
	ActionClass              string               `json:"action_class"`
	ActionClasses            []string             `json:"action_classes,omitempty"`
	CompositionRole          string               `json:"composition_role"`
	DataClasses              []string             `json:"data_classes,omitempty"`
	TargetTrustClass         string               `json:"target_trust_class"`
	TransitionClass          string               `json:"transition_class"`
	ExpectedOutcomeClass     string               `json:"expected_outcome_class"`
	IntendedOutcomeClass     string               `json:"intended_outcome_class"`
	ResourceLifecycleActions []string             `json:"resource_lifecycle_actions,omitempty"`
	ResourceActions          []string             `json:"resource_actions,omitempty"`
	RiskClass                string               `json:"risk_class,omitempty"`
	TargetRef                string               `json:"target_ref,omitempty"`
	Boundary                 RuntimeBoundary      `json:"boundary"`
	Stages                   []RuntimeActionStage `json:"stages,omitempty"`
	ObservedEffect           *ObservedEffect      `json:"observed_effect,omitempty"`
	InferenceReasons         []string             `json:"inference_reasons,omitempty"`
	ClassificationReasons    []string             `json:"classification_reasons,omitempty"`
}

RuntimeAction is a versioned pre-execution classification. RiskClass is intentionally independent of ResourceLifecycleActions: an action can reserve/cleanup a resource without changing its risk classification.

func ParseRuntimeAction added in v1.5.0 

func ParseRuntimeAction(raw []byte) (RuntimeAction, error)

ParseRuntimeAction parses the documented runtime-action artifact emitted as the classification.action object. It is distinct from ClassificationInput, which is the heuristic/raw-input surface used with --input.

type RuntimeActionStage added in v1.5.0 

type RuntimeActionStage struct {
	StageID          string   `json:"stage_id"`
	Role             string   `json:"role"`
	ActionClasses    []string `json:"action_classes,omitempty"`
	DataClasses      []string `json:"data_classes,omitempty"`
	TargetTrustClass string   `json:"target_trust_class"`
	TransitionClass  string   `json:"transition_class"`
	ExpectedOutcome  string   `json:"expected_outcome_class"`
	TargetRef        string   `json:"target_ref,omitempty"`
	BoundaryRefs     []string `json:"boundary_refs,omitempty"`
}

RuntimeActionStage is bounded (at most MaxRuntimeStages) to keep the representation a hypothesis rather than an unbounded graph/event store.

type RuntimeBoundary added in v1.5.0 

type RuntimeBoundary struct {
	SourceTrustClass string   `json:"source_trust_class"`
	TargetTrustClass string   `json:"target_trust_class"`
	TransitionClass  string   `json:"transition_class"`
	BoundaryRefs     []string `json:"boundary_refs,omitempty"`
	ProofRefs        []string `json:"proof_refs,omitempty"`
}

RuntimeBoundary keeps boundary references separate from evidence refs. A boundary ref is a relationship to a trust boundary, not proof that the boundary enforced anything.

type SelectionEvidence 

type SelectionEvidence struct {
	ArtifactID             string `json:"artifact_id"`
	ArtifactSHA256         string `json:"artifact_sha256"`
	CanonicalContentDigest string `json:"canonical_content_digest"`
	ContractID             string `json:"contract_id"`
	ContractFamilyID       string `json:"contract_family_id"`
	Revision               int    `json:"revision"`
	Current                bool   `json:"current"`
}

SelectionEvidence is the Gait-owned current-selection record required before activation or consumer handoff. It binds one explicit artifact to the family/revision currently selected by the caller.

func LoadSelectionEvidence 

func LoadSelectionEvidence(path, artifactPath string, artifact Artifact, raw []byte) (SelectionEvidence, error)

type SupportedConstraintSummary 

type SupportedConstraintSummary struct {
	TargetConstraintKeys []string `json:"target_constraint_keys"`
	PreconditionKinds    []string `json:"precondition_kinds"`
	AuthorityKinds       []string `json:"authority_kinds"`
	Unsupported          []string `json:"unsupported,omitempty"`
}

type ValidationError 

type ValidationError struct{ Reasons []string }

ValidationError is stable and machine-readable. Error() is intentionally compact because CLI JSON exposes Reasons directly.

func (*ValidationError) Error 

func (e *ValidationError) Error() string

type ValidationOptions 

type ValidationOptions struct {
	Now                 time.Time
	RequireExplicitPath bool
	ExpectedContractID  string
	ExpectedFamilyID    string
	ExpectedRevision    int
	SchemaRoot          string
}

ValidationOptions controls time-sensitive checks. A zero Now uses the current UTC time; callers that need reproducibility should pass a fixed Now.

type ValidationResult 

type ValidationResult struct {
	Valid                  bool                       `json:"valid"`
	Reasons                []string                   `json:"reason_codes,omitempty"`
	Artifact               *Artifact                  `json:"artifact,omitempty"`
	CanonicalContentDigest string                     `json:"canonical_content_digest,omitempty"`
	SupportedConstraints   SupportedConstraintSummary `json:"supported_constraints"`
}

func ValidateArtifact 

func ValidateArtifact(artifact Artifact, options ValidationOptions) ValidationResult

ValidateArtifact validates an explicit Wrkr v3 proposal and its JCS envelope digest. It does not activate or infer authority.

type Validity 

type Validity struct {
	NotBefore string `json:"not_before"`
	NotAfter  string `json:"not_after,omitempty"`
}

type VariantMetadata 

type VariantMetadata struct {
	ShareProfile string `json:"share_profile"`
	Redacted     bool   `json:"redacted"`
}

type VerificationOptions 

type VerificationOptions struct {
	AllowDevelopmentSigning bool
	Proposal                *Artifact
	// EvaluationTime controls activation and proposal expiry checks. A zero
	// value preserves the library's historical current-time behavior; CLI and
	// deterministic callers should pass an explicit UTC time.
	EvaluationTime time.Time
}

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.