Versions in this module Expand all Collapse all v1 v1.10.4 Nov 4, 2026 v1.10.3 Oct 30, 2026 v1.10.2 Oct 30, 2026 v1.10.1 Oct 30, 2026 v1.10.0 Oct 30, 2026 v1.9.0 Oct 27, 2026 Changes in this version + const MaxArtifactExportDuration + const MaxJobLease + const MaxResultReadDuration + const PrefixCall + const PrefixCaptureIntent + const PrefixCommitEvent + const PrefixContract + const PrefixExport + const PrefixJob + const PrefixJobClaim + const PrefixReport + const PrefixResult + var ErrCallUncertain = cortex.ErrVerificationCallUncertain + var ErrCommitUnavailable = cortex.ErrResultCommitUnavailable + var ErrConflict = cortex.ErrVerificationConflict + var ErrExportUncertain = errors.New("cortex: artifact export outcome uncertain") + var ErrInvalid = cortex.ErrInvalidVerification + var ErrJobBudgetExceeded = cortex.ErrVerificationJobBudget + var ErrJobConflict = cortex.ErrVerificationJobConflict + var ErrJobExpired = cortex.ErrVerificationJobExpired + var ErrJobNotFound = cortex.ErrVerificationJobNotFound + var ErrNotFound = cortex.ErrVerificationNotFound + var ErrResultAccessDenied = cortex.ErrResultAccessDenied + func ReportObservationRefs(r Report) ([]evidence.Ref, error) + func ValidateReportForContract(c Contract, r Report) error + func ValidateSandboxTestPlan(plan SandboxTestPlan, m EvaluationManifest) error + func ValidateSources(sources []Source) error + type ArtifactExportAuthorizer interface + AuthorizeArtifactExport func(context.Context, ArtifactExportRequest) error + type ArtifactExportFence interface + WithArtifactExportFence func(context.Context, ArtifactExportRequest, Binding, func(Binding) error) error + type ArtifactExportReceipt struct + Bytes int64 + ID id.ID + RequestDigest string + SHA256 string + SchemaVersion int + func (r ArtifactExportReceipt) Validate(request ArtifactExportRequest) error + type ArtifactExportRequest struct + Actor string + ApprovalRef string + Artifact evidence.Ref + Destination string + DestinationRevision string + ID id.ID + Result ResultContentRequest + SchemaVersion int + func (r ArtifactExportRequest) Freeze() (ArtifactExportRequest, string, error) + type ArtifactExportScreenRequest struct + Binding Binding + Data []byte + Request ArtifactExportRequest + type ArtifactExportScreenResult struct + Approved bool + SHA256 string + type ArtifactExportScreener interface + ScreenArtifactExport func(context.Context, ArtifactExportScreenRequest) (ArtifactExportScreenResult, error) + type ArtifactExportSink interface + ExportArtifact func(context.Context, ArtifactExportRequest, []byte) (ArtifactExportReceipt, error) + type ArtifactExporter struct + func NewArtifactExporter(c ArtifactExporterConfig) (*ArtifactExporter, error) + func (e *ArtifactExporter) Export(ctx context.Context, request ArtifactExportRequest) (ArtifactExportReceipt, error) + type ArtifactExporterConfig struct + Authorizer ArtifactExportAuthorizer + Clock Clock + Fence ArtifactExportFence + MaxConcurrent int + Repository evidence.Repository + Screener ArtifactExportScreener + Sink ArtifactExportSink + Store ResultContentStore + type Binding struct + Candidate evidence.Ref + Context ContextSnapshot + ContractDigest string + Evidence []evidence.Ref + RunID id.AgentRunID + Scope cortex.Scope + func (b Binding) Digest() (string, error) + func (b Binding) Validate() error + type BindingAuthorizer interface + AuthorizeVerification func(context.Context, Binding) error + type CallCompletion struct + CallID id.ID + Failure string + ReportDigest string + ReportID id.ID + Usage EvaluationUsage + type CallRequest struct + ID id.ID + MaxTokens int64 + MaxUSDMicros int64 + Verifier string + VerifierRevision string + func (r CallRequest) Validate() error + type CallResult struct + CallID id.ID + Failure string + Report *Report + Usage EvaluationUsage + func (r CallResult) Freeze() (CallResult, CallCompletion, error) + type CallStore interface + BeginVerificationCall func(context.Context, JobLease, CallRequest) (Job, error) + CompleteVerificationCall func(context.Context, JobLease, CallResult) (Job, error) + type CaptureIntent struct + Digest string + ID id.ID + MaxCandidateBytes int64 + MaxTranscriptBytes int64 + ResultID id.ID + SchemaVersion int + Template JobRequest + Transcript *evidence.Ref + func SealCaptureIntent(intent CaptureIntent) (CaptureIntent, error) + func (i CaptureIntent) JobFor(revision int64, output string, transcript ...[]byte) (JobRequest, error) + func (i CaptureIntent) Validate() error + type CaptureIntentStore interface + CaptureFromIntent func(context.Context, id.ID) (Job, error) + CreateCaptureIntent func(context.Context, CaptureIntent) error + GetCaptureIntent func(context.Context, id.ID) (CaptureIntent, error) + GetRunCaptureIntent func(context.Context, id.AgentRunID) (CaptureIntent, error) + type CaptureStore interface + CaptureVerificationJob func(context.Context, JobRequest) (Job, error) + type CheckRequest struct + Binding Binding + Criterion Criterion + Deadline time.Time + type CheckResult struct + EvidenceIDs []id.ID + Human *HumanVerdict + ObservationRefs []evidence.Ref + Reason string + Score *float64 + StateObservations []StateObservation + Status Status + type Clock interface + Now func() time.Time + type CommitFence interface + WithCommitFence func(context.Context, Binding, func(Binding) error) error + type CommitOutbox struct + BindingDigest string + EventID id.ID + ResultID id.ID + RunID id.AgentRunID + Type string + type CommitReceipt struct + Digest string + ObservedAt time.Time + Outbox CommitOutbox + ReportDigests []string + Request CommitRequest + RequestDigest string + RunRevision int64 + SchemaVersion int + func SealCommitReceipt(r CommitReceipt) (CommitReceipt, error) + func (r CommitReceipt) Validate() error + type CommitRequest struct + ContractID id.ID + Current Binding + ExpectedRunRevision int64 + JobLease *JobLease + ReportIDs []id.ID + ResultID id.ID + SchemaVersion int + func (r CommitRequest) Freeze() (CommitRequest, string, error) + type CommitStore interface + CommitVerifiedResult func(context.Context, CommitRequest) (CommitReceipt, error) + GetCommittedResult func(context.Context, id.ID) (CommitReceipt, error) + type Committer interface + Commit func(context.Context, CommitRequest) (CommitReceipt, error) + func NewCommitter(storage CommitStore, fence CommitFence, authorizer BindingAuthorizer) (Committer, error) + type ContextSnapshot struct + AuthorityRevision string + DatasetRevision string + EnvironmentRevision string + ExecutionInputs *evidence.Ref + ExecutionTranscript *evidence.Ref + PolicyRevision string + PreparedDigest string + PrincipalRef string + Sources []Source + Tools []ToolRevision + type Contract struct + Constraints []string + Criteria []Criterion + Digest string + ID id.ID + Objective string + Revision string + SchemaVersion int + Scope cortex.Scope + func SealContract(c Contract) (Contract, error) + func (c Contract) Validate() error + type Criterion struct + ID string + Kind Kind + MaxAge time.Duration + MaxSourceAge time.Duration + MinEvidence int + Parameters Parameters + Required bool + Verifier string + VerifierRevision string + type CriterionDecision struct + CriterionID string + Required bool + Status Status + type Decision struct + Criteria []CriterionDecision + Status Status + func Aggregate(contract Contract, reports []Report, at time.Time) Decision + type EvaluationAdapter interface + Estimate func(context.Context, EvaluationInput) (EvaluationAllowance, error) + Evaluate func(context.Context, EvaluationDispatch) (CallResult, error) + Reconcile func(context.Context, EvaluationDispatch) (CallResult, error) + type EvaluationAllowance struct + MaxTokens int64 + MaxUSDMicros int64 + PricingRevision string + type EvaluationBudget struct + MaxCalls int + MaxTokens int64 + MaxUSDMicros int64 + PricingRevision string + TokenOnly bool + func (b EvaluationBudget) Admit(used EvaluationDebit, req CallRequest) error + func (b EvaluationBudget) Validate() error + type EvaluationCall struct + CompletedAt time.Time + Completion *CallCompletion + CriterionIDs []string + Generation int64 + Request CallRequest + StartedAt time.Time + type EvaluationDebit struct + Calls int + Tokens int64 + USDMicros int64 + func DebitCalls(calls []EvaluationCall) EvaluationDebit + type EvaluationDispatch struct + Call EvaluationCall + Input EvaluationInput + type EvaluationInput struct + Budget EvaluationBudget + JobID id.ID + Request Request + type EvaluationManifest struct + Binding Binding + Criterion Criterion + Digest string + FixtureDataset evidence.Ref + RequiredChecks []string + ResultSchema evidence.Ref + Revision string + SchemaVersion int + StateProbes []Source + SupervisorRevision string + TestBundle evidence.Ref + func SealEvaluationManifest(m EvaluationManifest) (EvaluationManifest, error) + func (m EvaluationManifest) Validate() error + func (m EvaluationManifest) ValidateRequest(req TestRequest, now time.Time) error + type EvaluationRegistry struct + func NewEvaluationRegistry(manifests []EvaluationManifest) (*EvaluationRegistry, error) + func (r *EvaluationRegistry) Resolve(ctx context.Context, req TestRequest, now time.Time) (EvaluationManifest, error) + type EvaluationUsage struct + MoneyKnown bool + Receipt string + Tokens int64 + TokensKnown bool + USDMicros int64 + type ExecutionInputs struct + AgentID id.AgentID + ContextSelection *cognitive.ContextRecord + History []llm.Message + Input string + Model string + ModelRevision string + OriginalHistory []llm.Message + PreparedDigest string + RunID id.AgentRunID + SchemaVersion int + SessionID id.SessionID + Tools []ToolRevision + func DecodeExecutionInputs(data []byte) (ExecutionInputs, error) + func (v ExecutionInputs) Encode() ([]byte, error) + type ExecutionTranscript struct + InputsDigest string + Messages []llm.Message + RunID id.AgentRunID + SchemaVersion int + Tools []ToolResult + Usage execution.Usage + func DecodeExecutionTranscript(data []byte) (ExecutionTranscript, error) + func (v ExecutionTranscript) Encode() ([]byte, error) + func (v ExecutionTranscript) ValidateFor(inputs ExecutionInputs, output string, usage execution.Usage) error + type Executor struct + func NewExecutor(config ExecutorConfig) (*Executor, error) + func (e *Executor) Execute(ctx context.Context, request ExecutorRequest) (Job, error) + type ExecutorConfig struct + Adapter EvaluationAdapter + Authorizer BindingAuthorizer + Clock Clock + LeaseRenewal *LeaseRenewalPolicy + Store ExecutorStore + type ExecutorRequest struct + Lease JobLease + Verifier string + VerifierRevision string + type ExecutorStore interface + BeginVerificationCall func(context.Context, JobLease, CallRequest) (Job, error) + CompleteVerificationCall func(context.Context, JobLease, CallResult) (Job, error) + GetContract func(context.Context, id.ID) (Contract, error) + GetVerificationJob func(context.Context, id.ID) (Job, error) + type HumanRequest struct + type HumanReviewer interface + Review func(context.Context, HumanRequest) (CheckResult, error) + type HumanVerdict struct + Actor string + DecisionRevision string + EvidenceDigest string + ExpiresAt time.Time + type Job struct + Attempts int + Calls []EvaluationCall + ClaimIDs []id.ID + CreatedAt time.Time + Digest string + Generation int64 + Lease *JobLease + ReportIDs []id.ID + Request JobRequest + RequestDigest string + ResultID id.ID + Revision int64 + RunRevision int64 + SchemaVersion int + State JobState + UpdatedAt time.Time + func SealJob(j Job) (Job, error) + func (j Job) CheckLease(lease JobLease, now time.Time) error + func (j Job) Validate() error + type JobClaim struct + ClaimID id.ID + Duration time.Duration + JobID id.ID + Owner string + type JobLease struct + ClaimID id.ID + ExpiresAt time.Time + Generation int64 + JobID id.ID + Owner string + func (l JobLease) Validate() error + type JobListRequest struct + After id.ID + Limit int + RunID id.AgentRunID + type JobRequest struct + Binding Binding + ContractID id.ID + Deadline time.Time + EvaluationBudget *EvaluationBudget + ExpectedRunRevision int64 + ID id.ID + MaxAttempts int + SchemaVersion int + func (r JobRequest) Freeze() (JobRequest, string, error) + type JobState string + const JobCancelled + const JobCommitted + const JobFailed + const JobInconclusive + const JobQueued + const JobReady + const JobRunning + type JobStore interface + CancelVerificationJob func(context.Context, id.ID) (Job, error) + ClaimVerificationJob func(context.Context, JobClaim) (Job, error) + EnqueueVerificationJob func(context.Context, JobRequest) (Job, error) + ExpireVerificationJob func(context.Context, id.ID) (Job, error) + GetVerificationJob func(context.Context, id.ID) (Job, error) + ListVerificationJobs func(context.Context, JobListRequest) ([]Job, error) + RenewVerificationJob func(context.Context, JobLease, time.Duration) (Job, error) + SaveVerificationJobReport func(context.Context, JobLease, Report) (Job, error) + type Kind string + const KindHuman + const KindPolicy + const KindSchema + const KindSemantic + const KindState + const KindTest + type LeaseRenewalPolicy struct + Duration time.Duration + Interval time.Duration + type LeaseRenewer interface + RenewVerificationJob func(context.Context, JobLease, time.Duration) (Job, error) + type ListRequest struct + After id.ID + Limit int + RunID id.AgentRunID + type Outcome struct + CriterionID string + EvidenceIDs []id.ID + Human *HumanVerdict + ObservationRefs []evidence.Ref + Reason string + Score *float64 + StateObservations []StateObservation + Status Status + Verifier string + VerifierRevision string + type Parameters struct + ManifestRevision string + type PublishedResult struct + CheckedAt time.Time + Content string + ContentChanged bool + PublicationStatus safety.PublicationStatus + ResultID id.ID + RunID id.AgentRunID + RunRevision int64 + SchemaVersion int + VerificationStatus Status + VerifiedAt time.Time + type Registration struct + func RegisterHuman(name, revision, manifest string, checker HumanReviewer) Registration + func RegisterSchema(name, revision, manifest string, checker SchemaChecker) Registration + func RegisterState(name, revision, manifest string, checker StateChecker) Registration + func RegisterTests(name, revision, manifest string, checker TestEvaluator) Registration + type Report struct + Binding Binding + CheckedAt time.Time + Digest string + ExpiresAt time.Time + ID id.ID + Outcomes []Outcome + SchemaVersion int + func SealReport(r Report) (Report, error) + func (r Report) Validate() error + type Request struct + Binding Binding + Contract Contract + Deadline time.Time + Verifier string + VerifierRevision string + type ResultContentAuthorizer interface + AuthorizeResultContent func(context.Context, ResultContentRequest) error + type ResultContentFailure struct + Code string + Message string + Retryable bool + func DescribeResultContentFailure(err error) ResultContentFailure + type ResultContentRequest struct + ResultID id.ID + RunID id.AgentRunID + SchemaVersion int + func ParseResultContentRequest(runID, resultID string) (ResultContentRequest, error) + func (r ResultContentRequest) Validate() error + type ResultContentResponse struct + RunRevision string + func NewResultContentResponse(result PublishedResult) ResultContentResponse + type ResultContentStore interface + GetCommittedResult func(context.Context, id.ID) (CommitReceipt, error) + type ResultPublicationRequest struct + Binding Binding + Content string + Request ResultContentRequest + RunRevision int64 + type ResultPublisher interface + PublishResult func(context.Context, ResultPublicationRequest) (safety.PublicationDecision, error) + type ResultReadRequest struct + ReceiptDigest string + ResultID id.ID + RunID id.AgentRunID + SchemaVersion int + func (r ResultReadRequest) Validate() error + type ResultReader struct + func NewResultReader(config ResultReaderConfig) (*ResultReader, error) + func (r *ResultReader) Read(ctx context.Context, request ResultContentRequest) (PublishedResult, error) + type ResultReaderConfig struct + Authorizer ResultContentAuthorizer + Clock Clock + Fence CommitFence + Publisher ResultPublisher + Store ResultContentStore + type ResultSnapshot struct + Contract Contract + ObservedAt time.Time + Output string + Receipt CommitReceipt + Reports []Report + SchemaVersion int + func (s ResultSnapshot) Validate(request ResultReadRequest, at time.Time) error + type ResultSnapshotStore interface + ReadResultSnapshot func(context.Context, ResultReadRequest) (ResultSnapshot, error) + type SandboxAssessment struct + CandidateDigest string + Checks []SupervisedCheck + GraderDigest string + ManifestDigest string + ObservationRefs []evidence.Ref + SupervisorRevision string + type SandboxAuthenticity interface + VerifyReceipt func(context.Context, sandbox.Receipt, sandbox.Job) error + VerifyResult func(context.Context, sandbox.Result, sandbox.Job) error + type SandboxObservation struct + Candidate sandbox.Job + CandidateArtifacts []evidence.Ref + Grader sandbox.Job + GraderArtifacts []evidence.Ref + Manifest EvaluationManifest + type SandboxSupervisor interface + Assess func(context.Context, SandboxObservation) (SandboxAssessment, error) + type SandboxTestConfig struct + Authenticity SandboxAuthenticity + Authorizer BindingAuthorizer + Clock Clock + MaxConcurrent int + Plans []SandboxTestPlan + PollInterval time.Duration + Registry *EvaluationRegistry + Repository evidence.Repository + Runner sandbox.Runner + Supervisor SandboxSupervisor + type SandboxTestPlan struct + Candidate sandbox.Job + Grader sandbox.Job + ManifestDigest string + type SandboxTestVerifier struct + func NewSandboxTestVerifier(config SandboxTestConfig) (*SandboxTestVerifier, error) + func (v *SandboxTestVerifier) EvaluateTests(ctx context.Context, req TestRequest) (CheckResult, error) + type SchemaChecker interface + CheckSchema func(context.Context, SchemaRequest) (CheckResult, error) + type SchemaRequest struct + type Source struct + Digest string + Resource string + RetrievedAt time.Time + Revision string + func (s Source) Equal(other Source) bool + func (s Source) Validate() error + type StateChecker interface + CheckState func(context.Context, StateRequest) (CheckResult, error) + type StateManifest struct + Binding Binding + Criterion Criterion + Digest string + MaxObservationWindow time.Duration + Probes []Source + SchemaVersion int + func SealStateManifest(m StateManifest) (StateManifest, error) + func (m StateManifest) Validate() error + type StateObservation struct + BindingDigest string + ExpiresAt time.Time + FinishedAt time.Time + ManifestDigest string + Source Source + StartedAt time.Time + type StateObserver interface + ObserveState func(context.Context, StateProbeRequest) (StateObservation, error) + type StateProbeRequest struct + Binding Binding + ManifestDigest string + Source Source + type StateRequest struct + type StateVerifier struct + func NewStateVerifier(c StateVerifierConfig) (*StateVerifier, error) + func (v *StateVerifier) CheckState(ctx context.Context, req StateRequest) (CheckResult, error) + type StateVerifierConfig struct + Authorizer BindingAuthorizer + Clock Clock + Manifests []StateManifest + MaxConcurrent int + Observer StateObserver + type Status string + const StatusFailed + const StatusInconclusive + const StatusPassed + const StatusPending + const StatusStale + const StatusUnchecked + func CheckFreshness(report Report, current Binding, at time.Time) Status + func (s Status) Normalized() Status + type Store interface + CreateContract func(context.Context, Contract) error + GetContract func(context.Context, id.ID) (Contract, error) + GetReport func(context.Context, id.ID) (Report, error) + ListReports func(context.Context, ListRequest) ([]Report, error) + SaveReport func(context.Context, Report) error + type SupervisedCheck struct + Name string + Status Status + type TestEvaluator interface + EvaluateTests func(context.Context, TestRequest) (CheckResult, error) + type TestRequest struct + type ToolOutcome string + const ToolCompleted + const ToolDenied + const ToolFailed + type ToolResult struct + CallID string + Outcome ToolOutcome + Source ToolSource + type ToolRevision struct + Name string + Revision string + type ToolSource string + const ToolExternal + const ToolLocal + type Verifier interface + Verify func(context.Context, Request) (Report, error) + func NewVerifier(registrations []Registration, authorizer BindingAuthorizer, clock Clock) (Verifier, error) v1.8.0 Oct 18, 2026
Go to main page