CHANGELOG.md
LICENSE
MANIFEST.in
NOTICE
README.md
pyproject.toml
.github/workflows/ci.yml
docs/EXTRACTION_GUIDE.md
docs/quickstart.md
docs/receipts-and-replay.md
docs/release-checklist.md
docs/rulebook-reference.md
docs/security.md
fixtures/README.md
fixtures/adapters/bridge_agent_guard_allow_email_with_approval.json
fixtures/adapters/bridge_agent_guard_allow_workspace_write.json
fixtures/adapters/bridge_agent_guard_block_destructive.json
fixtures/adapters/bridge_agent_guard_hold_absent_approvals.json
fixtures/adapters/bridge_claims_gate_hold_http_unimplemented.json
fixtures/adapters/bridge_claims_gate_hold_over_authority.json
fixtures/adapters/bridge_claims_gate_hold_unparseable_authority.json
fixtures/adapters/bridge_pipeline_gate_allow.json
fixtures/adapters/bridge_pipeline_gate_block_failed.json
fixtures/adapters/bridge_pipeline_gate_hold_before_a_later_block.json
fixtures/adapters/bridge_pipeline_gate_hold_nonzero_exit.json
fixtures/adapters/bridge_pipeline_gate_hold_unavailable.json
fixtures/adapters/command_accept_default_working_directory.json
fixtures/adapters/command_accept_empty_environment.json
fixtures/adapters/command_accept_explicit_environment.json
fixtures/adapters/command_accept_explicit_working_directory.json
fixtures/adapters/command_accept_literal_metacharacters.json
fixtures/adapters/command_accept_object.json
fixtures/adapters/command_accept_parent_path_not_inherited.json
fixtures/adapters/command_accept_scalar.json
fixtures/adapters/command_accept_stderr_discarded.json
fixtures/adapters/command_accept_stdout_bound_exact.json
fixtures/adapters/command_error_empty_stdout.json
fixtures/adapters/command_error_missing_executable.json
fixtures/adapters/command_error_nonzero_exit.json
fixtures/adapters/command_error_not_executable.json
fixtures/adapters/command_error_stdout_float.json
fixtures/adapters/command_error_stdout_not_json.json
fixtures/adapters/command_error_stdout_oversize.json
fixtures/adapters/command_error_stdout_trailing_content.json
fixtures/adapters/command_error_timeout.json
fixtures/adapters/command_error_timeout_after_partial_output.json
fixtures/adapters/command_reject_absolute_ref.json
fixtures/adapters/command_reject_acquired_at_malformed.json
fixtures/adapters/command_reject_directory.json
fixtures/adapters/command_reject_ref_absent.json
fixtures/adapters/command_reject_symlink.json
fixtures/adapters/command_reject_symlink_parent.json
fixtures/adapters/command_reject_timeout_above_maximum.json
fixtures/adapters/command_reject_timeout_zero.json
fixtures/adapters/command_reject_traversal.json
fixtures/adapters/command_reject_working_directory_outside_root.json
fixtures/adapters/command_reject_wrong_source.json
fixtures/adapters/file_accept_bound_exact.json
fixtures/adapters/file_accept_dot_prefixed_ref.json
fixtures/adapters/file_accept_explicit_null.json
fixtures/adapters/file_accept_nested_unicode.json
fixtures/adapters/file_accept_object.json
fixtures/adapters/file_accept_ref_reenters_root.json
fixtures/adapters/file_accept_scalar_string.json
fixtures/adapters/file_error_byte_order_mark.json
fixtures/adapters/file_error_empty.json
fixtures/adapters/file_error_float.json
fixtures/adapters/file_error_not_json.json
fixtures/adapters/file_error_oversize.json
fixtures/adapters/file_error_trailing_content.json
fixtures/adapters/file_error_utf8_invalid.json
fixtures/adapters/file_missing_absent.json
fixtures/adapters/file_missing_absent_directory.json
fixtures/adapters/file_reject_absolute_ref.json
fixtures/adapters/file_reject_acquired_at_local_time.json
fixtures/adapters/file_reject_acquired_at_malformed.json
fixtures/adapters/file_reject_dangling_symlink.json
fixtures/adapters/file_reject_directory.json
fixtures/adapters/file_reject_fifo.json
fixtures/adapters/file_reject_http_source.json
fixtures/adapters/file_reject_id_absent.json
fixtures/adapters/file_reject_ref_absent.json
fixtures/adapters/file_reject_ref_empty.json
fixtures/adapters/file_reject_symlink_escaping.json
fixtures/adapters/file_reject_symlink_leaf.json
fixtures/adapters/file_reject_symlink_parent.json
fixtures/adapters/file_reject_traversal.json
fixtures/adapters/file_reject_traversal_reentrant_prefix.json
fixtures/adapters/file_reject_wrong_source.json
fixtures/authorization/accept_default_ttl_300.json
fixtures/authorization/accept_explicit_ttl_60.json
fixtures/authorization/accept_minimum_valid.json
fixtures/authorization/accept_verified_at_offset_equivalent_instant.json
fixtures/authorization/accept_verified_immediately_at_issuance.json
fixtures/authorization/accept_verified_one_second_before_expiry.json
fixtures/authorization/reject_altered_algorithm.json
fixtures/authorization/reject_altered_key_id.json
fixtures/authorization/reject_altered_key_version.json
fixtures/authorization/reject_changed_action_digest.json
fixtures/authorization/reject_changed_expires_at.json
fixtures/authorization/reject_changed_issued_at.json
fixtures/authorization/reject_changed_nonce.json
fixtures/authorization/reject_changed_runtime_in_payload.json
fixtures/authorization/reject_consumed_nonce.json
fixtures/authorization/reject_issue_issue_before_snapshot_freeze.json
fixtures/authorization/reject_issue_issue_for_hold_outcome.json
fixtures/authorization/reject_issue_issue_with_malformed_private_key.json
fixtures/authorization/reject_malformed_signature_encoding.json
fixtures/authorization/reject_no_signature.json
fixtures/authorization/reject_outcome_not_eligible.json
fixtures/authorization/reject_retired_key.json
fixtures/authorization/reject_signature_copied_from_another_payload.json
fixtures/authorization/reject_supplied_different_candidate.json
fixtures/authorization/reject_supplied_different_rulebook.json
fixtures/authorization/reject_supplied_different_runtime.json
fixtures/authorization/reject_supplied_different_snapshot.json
fixtures/authorization/reject_truncated_signature.json
fixtures/authorization/reject_unknown_field.json
fixtures/authorization/reject_unknown_key.json
fixtures/authorization/reject_verified_after_expiry.json
fixtures/authorization/reject_verified_before_issuance.json
fixtures/authorization/reject_verified_exactly_at_expiry.json
fixtures/authorization/reject_wrong_key_signature.json
fixtures/canonicalization/canon_case_1.json
fixtures/canonicalization/canon_case_2.json
fixtures/canonicalization/canon_case_3.json
fixtures/canonicalization/canon_case_4.json
fixtures/canonicalization/canon_case_5.json
fixtures/canonicalization/canon_case_6.json
fixtures/canonicalization/canon_case_7.json
fixtures/canonicalization/canon_case_8.json
fixtures/canonicalization/canon_case_9.json
fixtures/canonicalization/canon_reject_1.json
fixtures/canonicalization/canon_reject_2.json
fixtures/canonicalization/canon_reject_3.json
fixtures/canonicalization/canon_reject_4.json
fixtures/canonicalization/canon_reject_5.json
fixtures/canonicalization/canon_reject_6.json
fixtures/canonicalization/canon_reject_7.json
fixtures/cli/check_allow_preview.json
fixtures/cli/check_block.json
fixtures/cli/check_error_malformed_candidate.json
fixtures/cli/check_error_schema_invalid_candidate.json
fixtures/cli/check_hold_unavailable_evidence.json
fixtures/cli/check_hold_unsupported_http_evidence.json
fixtures/cli/exit_codes.json
fixtures/cli/init_accept_agent_guard.json
fixtures/cli/init_accept_claims_gate.json
fixtures/cli/init_accept_pipeline_gate.json
fixtures/cli/init_idempotent_on_identical_bytes.json
fixtures/cli/init_no_test_key_leakage.json
fixtures/cli/init_reject_changed_rulebook.json
fixtures/cli/init_reject_symlinked_vfy.json
fixtures/cli/init_reject_symlinked_workspace.json
fixtures/cli/parse_deferred_rules.json
fixtures/cli/parse_deferred_serve.json
fixtures/cli/parse_deferred_watch.json
fixtures/cli/parse_no_command.json
fixtures/cli/parse_run_empty_after_separator.json
fixtures/cli/parse_run_without_command.json
fixtures/cli/parse_unknown_command.json
fixtures/cli/parse_unknown_template.json
fixtures/cli/receipts_empty_store.json
fixtures/cli/receipts_ghost_index_entry_is_never_believed.json
fixtures/cli/receipts_several_outcomes_in_order.json
fixtures/cli/receipts_stale_index_reconciles.json
fixtures/cli/replay_accept_allow.json
fixtures/cli/replay_accept_block.json
fixtures/cli/replay_accept_hold.json
fixtures/cli/replay_reject_body_mismatch.json
fixtures/cli/replay_reject_missing_bodies.json
fixtures/cli/replay_reject_path_outside_store.json
fixtures/cli/replay_reject_path_traversal.json
fixtures/cli/replay_reject_retired_key.json
fixtures/cli/replay_reject_unknown_key.json
fixtures/cli/run_agent_guard_blocks_destructive.json
fixtures/cli/run_allow_exit_nonzero.json
fixtures/cli/run_allow_exit_zero.json
fixtures/cli/run_argument_beginning_with_dash.json
fixtures/cli/run_bare_name_resolved_before_hashing.json
fixtures/cli/run_bare_name_unresolvable.json
fixtures/cli/run_block_launches_nothing.json
fixtures/cli/run_block_on_red_tests.json
fixtures/cli/run_claims_gate_holds_without_http.json
fixtures/cli/run_configured_environment_reaches_the_child.json
fixtures/cli/run_hold_launches_nothing.json
fixtures/cli/run_literal_metacharacters.json
fixtures/cli/run_parent_environment_does_not_reach_the_child.json
fixtures/evaluation/eval_allow.json
fixtures/evaluation/eval_block.json
fixtures/evaluation/eval_error.json
fixtures/evaluation/eval_hold.json
fixtures/evaluation/probe_algebra_and_false_false.json
fixtures/evaluation/probe_algebra_and_false_true.json
fixtures/evaluation/probe_algebra_and_false_unsettled.json
fixtures/evaluation/probe_algebra_and_true_false.json
fixtures/evaluation/probe_algebra_and_true_true.json
fixtures/evaluation/probe_algebra_and_true_unsettled.json
fixtures/evaluation/probe_algebra_and_unsettled_false.json
fixtures/evaluation/probe_algebra_and_unsettled_true.json
fixtures/evaluation/probe_algebra_and_unsettled_unsettled.json
fixtures/evaluation/probe_algebra_chain_and_unsettled_first.json
fixtures/evaluation/probe_algebra_chain_and_unsettled_last.json
fixtures/evaluation/probe_algebra_chain_and_unsettled_middle.json
fixtures/evaluation/probe_algebra_chain_or_unsettled_first.json
fixtures/evaluation/probe_algebra_chain_or_unsettled_last.json
fixtures/evaluation/probe_algebra_chain_or_unsettled_middle.json
fixtures/evaluation/probe_algebra_not_false.json
fixtures/evaluation/probe_algebra_not_true.json
fixtures/evaluation/probe_algebra_not_unsettled.json
fixtures/evaluation/probe_algebra_or_false_false.json
fixtures/evaluation/probe_algebra_or_false_true.json
fixtures/evaluation/probe_algebra_or_false_unsettled.json
fixtures/evaluation/probe_algebra_or_true_false.json
fixtures/evaluation/probe_algebra_or_true_true.json
fixtures/evaluation/probe_algebra_or_true_unsettled.json
fixtures/evaluation/probe_algebra_or_unsettled_false.json
fixtures/evaluation/probe_algebra_or_unsettled_true.json
fixtures/evaluation/probe_algebra_or_unsettled_unsettled.json
fixtures/evaluation/probe_evidence_absent_item_present.json
fixtures/evaluation/probe_evidence_absent_item_value.json
fixtures/evaluation/probe_evidence_fresh_no_bound_error.json
fixtures/evaluation/probe_evidence_fresh_no_bound_missing.json
fixtures/evaluation/probe_evidence_fresh_no_bound_ok.json
fixtures/evaluation/probe_evidence_fresh_no_bound_stale.json
fixtures/evaluation/probe_evidence_nested_missing_member.json
fixtures/evaluation/probe_evidence_nested_value.json
fixtures/evaluation/probe_evidence_optional_declaration_present.json
fixtures/evaluation/probe_evidence_present_error.json
fixtures/evaluation/probe_evidence_present_missing.json
fixtures/evaluation/probe_evidence_present_ok.json
fixtures/evaluation/probe_evidence_present_stale.json
fixtures/evaluation/probe_evidence_value_error.json
fixtures/evaluation/probe_evidence_value_missing.json
fixtures/evaluation/probe_evidence_value_ok.json
fixtures/evaluation/probe_evidence_value_stale.json
fixtures/evaluation/probe_freshness_below_limit.json
fixtures/evaluation/probe_freshness_exactly_at_limit.json
fixtures/evaluation/probe_freshness_missing_item.json
fixtures/evaluation/probe_freshness_no_bound.json
fixtures/evaluation/probe_freshness_non_ok_status.json
fixtures/evaluation/probe_freshness_one_second_beyond.json
fixtures/evaluation/probe_freshness_zero_age.json
fixtures/evaluation/probe_freshness_zero_bound_one_second.json
fixtures/evaluation/probe_freshness_zero_bound_zero_age.json
fixtures/evaluation/probe_membership_empty_list.json
fixtures/evaluation/probe_membership_int_found.json
fixtures/evaluation/probe_membership_nested_list_member.json
fixtures/evaluation/probe_membership_not_in_true.json
fixtures/evaluation/probe_membership_string_absent.json
fixtures/evaluation/probe_membership_string_found.json
fixtures/evaluation/probe_membership_type_sensitive_bool_vs_int.json
fixtures/evaluation/probe_membership_type_sensitive_int_vs_string.json
fixtures/evaluation/probe_numeric_boolean_is_not_numeric.json
fixtures/evaluation/probe_numeric_decimal_trailing_zeros_equal.json
fixtures/evaluation/probe_numeric_decimal_trailing_zeros_not_equal_textually.json
fixtures/evaluation/probe_numeric_decimal_vs_decimal.json
fixtures/evaluation/probe_numeric_equality_boolean_vs_int.json
fixtures/evaluation/probe_numeric_equality_int_vs_boolean.json
fixtures/evaluation/probe_numeric_equality_int_vs_string.json
fixtures/evaluation/probe_numeric_equality_same_int.json
fixtures/evaluation/probe_numeric_int_ge_equal.json
fixtures/evaluation/probe_numeric_int_gt_int.json
fixtures/evaluation/probe_numeric_int_le_equal.json
fixtures/evaluation/probe_numeric_int_lt_int.json
fixtures/evaluation/probe_numeric_integer_vs_decimal_string.json
fixtures/evaluation/probe_numeric_large_magnitude.json
fixtures/evaluation/probe_numeric_malformed_decimal_is_an_ordinary_string.json
fixtures/evaluation/probe_numeric_negative_ordering.json
fixtures/evaluation/probe_numeric_negative_zero_equals_zero.json
fixtures/evaluation/probe_numeric_negative_zero_not_greater.json
fixtures/evaluation/probe_numeric_non_numeric_string_under_ordering.json
fixtures/evaluation/probe_path_absent_in_membership_is_false.json
fixtures/evaluation/probe_path_absent_matches_is_false.json
fixtures/evaluation/probe_path_absent_not_in_is_true.json
fixtures/evaluation/probe_path_absent_under_ordering_is_unsettled.json
fixtures/evaluation/probe_path_identity_missing_member.json
fixtures/evaluation/probe_path_identity_success.json
fixtures/evaluation/probe_path_index_into_non_array.json
fixtures/evaluation/probe_path_index_out_of_range.json
fixtures/evaluation/probe_path_index_success.json
fixtures/evaluation/probe_path_member_of_non_object.json
fixtures/evaluation/probe_path_member_success.json
fixtures/evaluation/probe_path_missing_member_equality_is_false.json
fixtures/evaluation/probe_path_missing_member_inequality_is_true.json
fixtures/evaluation/probe_path_nested_member_success.json
fixtures/evaluation/probe_path_two_absent_paths_are_equal.json
fixtures/evaluation/probe_pattern_case_sensitive.json
fixtures/evaluation/probe_pattern_class_member.json
fixtures/evaluation/probe_pattern_class_negated.json
fixtures/evaluation/probe_pattern_class_negated_excludes.json
fixtures/evaluation/probe_pattern_class_non_member.json
fixtures/evaluation/probe_pattern_class_range.json
fixtures/evaluation/probe_pattern_dot_is_literal.json
fixtures/evaluation/probe_pattern_literal_bracket_when_unclosed.json
fixtures/evaluation/probe_pattern_literal_close_bracket_first.json
fixtures/evaluation/probe_pattern_no_regex_meaning.json
fixtures/evaluation/probe_pattern_non_string_value_is_unsettled.json
fixtures/evaluation/probe_pattern_question_not_zero.json
fixtures/evaluation/probe_pattern_question_one_char.json
fixtures/evaluation/probe_pattern_star_any.json
fixtures/evaluation/probe_pattern_star_crosses_slash.json
fixtures/evaluation/probe_pattern_star_empty_run.json
fixtures/evaluation/probe_pattern_whole_string_not_search.json
fixtures/evaluation/walk_all_false_block_default.json
fixtures/evaluation/walk_all_false_hold_default.json
fixtures/evaluation/walk_duplicate_reason_text_two_rules.json
fixtures/evaluation/walk_explicit_hold_rule.json
fixtures/evaluation/walk_first_false_second_true.json
fixtures/evaluation/walk_first_rule_true.json
fixtures/evaluation/walk_first_unsettled_stops_the_walk.json
fixtures/evaluation/walk_requires_evidence_not_ok_is_unsettled.json
fixtures/evaluation/walk_requires_evidence_ok_proceeds.json
fixtures/evaluation/walk_rule_naming_no_evidence.json
fixtures/evaluation/walk_source_order_preserved.json
fixtures/evaluation/walk_two_unsettled_causes_in_one_rule.json
fixtures/execution/accept_absolute_argv0_under_cwd.json
fixtures/execution/accept_bounded_output.json
fixtures/execution/accept_exit_nonzero.json
fixtures/execution/accept_exit_zero.json
fixtures/execution/accept_explicit_environment_reaches_the_child.json
fixtures/execution/accept_explicit_working_directory.json
fixtures/execution/accept_launch_failure_not_executable.json
fixtures/execution/accept_launch_failure_still_receipts.json
fixtures/execution/accept_literal_metacharacters.json
fixtures/execution/accept_parent_environment_does_not_reach_the_child.json
fixtures/execution/accept_shell_string_is_one_literal_path.json
fixtures/execution/accept_signal_termination.json
fixtures/execution/accept_timeout.json
fixtures/execution/concurrency_eight_callers.json
fixtures/execution/reject_already_consumed.json
fixtures/execution/reject_argv0_bare_name.json
fixtures/execution/reject_argv0_empty_string.json
fixtures/execution/reject_argv_absent.json
fixtures/execution/reject_argv_changed_after_authorization.json
fixtures/execution/reject_argv_empty.json
fixtures/execution/reject_argv_member_not_string.json
fixtures/execution/reject_candidate_metadata_changed_after_authorization.json
fixtures/execution/reject_cwd_is_a_file.json
fixtures/execution/reject_cwd_is_a_symlink.json
fixtures/execution/reject_cwd_missing.json
fixtures/execution/reject_environment_member_not_string.json
fixtures/execution/reject_expired_authorization.json
fixtures/execution/reject_kind_custom.json
fixtures/execution/reject_kind_http_request.json
fixtures/execution/reject_kind_tool_call.json
fixtures/execution/reject_result_block.json
fixtures/execution/reject_result_error.json
fixtures/execution/reject_result_hold.json
fixtures/execution/reject_retired_authorization_key.json
fixtures/execution/reject_timeout_above_maximum.json
fixtures/execution/reject_timeout_zero.json
fixtures/execution/reject_unknown_authorization_key.json
fixtures/execution/reject_verified_before_issuance.json
fixtures/execution/reject_wrong_runtime.json
fixtures/execution/reject_wrong_snapshot.json
fixtures/execution/seam_crash_after_consumption_before_launch.json
fixtures/execution/seam_crash_after_launch_before_receipt.json
fixtures/execution/seam_crash_after_receipt_before_commit.json
fixtures/execution/seam_launch_failed.json
fixtures/execution/seam_receipt_issue_failed.json
fixtures/execution/seam_refused_before_consumption.json
fixtures/execution/seam_store_commit_failed.json
fixtures/execution/seam_timed_out.json
fixtures/expressions/accept_and_flattened.json
fixtures/expressions/accept_boolean_literals.json
fixtures/expressions/accept_decimal_string_is_a_string.json
fixtures/expressions/accept_double_negation_via_parentheses.json
fixtures/expressions/accept_empty_list.json
fixtures/expressions/accept_equality.json
fixtures/expressions/accept_evidence_path.json
fixtures/expressions/accept_evidence_path_nested.json
fixtures/expressions/accept_fresh_call.json
fixtures/expressions/accept_index_then_member.json
fixtures/expressions/accept_indexed_path.json
fixtures/expressions/accept_inequality.json
fixtures/expressions/accept_integer_boundaries.json
fixtures/expressions/accept_keyword_prefixed_identifiers.json
fixtures/expressions/accept_matches_call.json
fixtures/expressions/accept_membership_in.json
fixtures/expressions/accept_membership_not_in.json
fixtures/expressions/accept_mixed_list.json
fixtures/expressions/accept_nested_list.json
fixtures/expressions/accept_not_over_parenthesised_group.json
fixtures/expressions/accept_or_flattened.json
fixtures/expressions/accept_ordering_ge.json
fixtures/expressions/accept_ordering_gt.json
fixtures/expressions/accept_ordering_le.json
fixtures/expressions/accept_ordering_lt.json
fixtures/expressions/accept_precedence_and_binds_tighter_than_or.json
fixtures/expressions/accept_precedence_not_binds_tighter_than_and.json
fixtures/expressions/accept_precedence_overridden_by_parentheses.json
fixtures/expressions/accept_present_call.json
fixtures/expressions/accept_repeated_index.json
fixtures/expressions/accept_string_escapes.json
fixtures/expressions/accept_supplementary_escape.json
fixtures/expressions/accept_template_agent_no_destructive_shell.json
fixtures/expressions/accept_template_agent_outbound_email.json
fixtures/expressions/accept_template_agent_undeclared_network.json
fixtures/expressions/accept_template_agent_write_inside_workspace.json
fixtures/expressions/accept_template_claims_auto_approve.json
fixtures/expressions/accept_template_claims_coverage_denies.json
fixtures/expressions/accept_template_claims_over_authority.json
fixtures/expressions/accept_template_pipeline_tests_green.json
fixtures/expressions/accept_template_pipeline_tests_red.json
fixtures/expressions/accept_template_pipeline_wrong_branch.json
fixtures/expressions/accept_unary_not.json
fixtures/expressions/equivalent_and_flattened.json
fixtures/expressions/equivalent_equality.json
fixtures/expressions/equivalent_matches_call.json
fixtures/expressions/equivalent_membership_in.json
fixtures/expressions/reject_static_evidence_path_undeclared.json
fixtures/expressions/reject_static_fresh_undeclared.json
fixtures/expressions/reject_static_nested_evidence_path_undeclared.json
fixtures/expressions/reject_static_present_undeclared.json
fixtures/expressions/reject_static_second_reference_undeclared.json
fixtures/expressions/reject_syntax_arithmetic.json
fixtures/expressions/reject_syntax_assignment.json
fixtures/expressions/reject_syntax_bare_list_predicate.json
fixtures/expressions/reject_syntax_bare_path_predicate.json
fixtures/expressions/reject_syntax_bare_scalar_predicate.json
fixtures/expressions/reject_syntax_chained_comparison.json
fixtures/expressions/reject_syntax_comma_outside_list.json
fixtures/expressions/reject_syntax_empty_index.json
fixtures/expressions/reject_syntax_empty_source.json
fixtures/expressions/reject_syntax_exponent_literal.json
fixtures/expressions/reject_syntax_float_literal.json
fixtures/expressions/reject_syntax_integer_above_range.json
fixtures/expressions/reject_syntax_invalid_escape.json
fixtures/expressions/reject_syntax_literal_newline_in_string.json
fixtures/expressions/reject_syntax_lone_surrogate.json
fixtures/expressions/reject_syntax_malformed_integer_leading_zero.json
fixtures/expressions/reject_syntax_negative_index.json
fixtures/expressions/reject_syntax_non_integer_index.json
fixtures/expressions/reject_syntax_not_not.json
fixtures/expressions/reject_syntax_path_without_member.json
fixtures/expressions/reject_syntax_regex_operator.json
fixtures/expressions/reject_syntax_short_unicode_escape.json
fixtures/expressions/reject_syntax_single_quoted_string.json
fixtures/expressions/reject_syntax_trailing_list_comma.json
fixtures/expressions/reject_syntax_trailing_token.json
fixtures/expressions/reject_syntax_unknown_function.json
fixtures/expressions/reject_syntax_unknown_root.json
fixtures/expressions/reject_syntax_unmatched_bracket.json
fixtures/expressions/reject_syntax_unmatched_close_parenthesis.json
fixtures/expressions/reject_syntax_unmatched_open_parenthesis.json
fixtures/expressions/reject_syntax_unterminated_string.json
fixtures/expressions/reject_syntax_uppercase_keyword.json
fixtures/expressions/reject_syntax_whitespace_only.json
fixtures/expressions/reject_type_fresh_takes_a_path.json
fixtures/expressions/reject_type_fresh_wrong_arity_two.json
fixtures/expressions/reject_type_fresh_wrong_arity_zero.json
fixtures/expressions/reject_type_literal_type_mismatch_bool_int.json
fixtures/expressions/reject_type_literal_type_mismatch_int_string.json
fixtures/expressions/reject_type_matches_non_path_first_argument.json
fixtures/expressions/reject_type_matches_non_string_pattern.json
fixtures/expressions/reject_type_matches_wrong_arity_one.json
fixtures/expressions/reject_type_matches_wrong_arity_three.json
fixtures/expressions/reject_type_membership_right_not_a_list.json
fixtures/expressions/reject_type_nested_call_argument.json
fixtures/expressions/reject_type_ordering_boolean_literals.json
fixtures/expressions/reject_type_ordering_non_numeric_literals.json
fixtures/expressions/reject_type_present_takes_a_literal.json
fixtures/loading/load_json_accept_1.json
fixtures/loading/load_json_accept_2.json
fixtures/loading/load_json_accept_3.json
fixtures/loading/load_json_accept_4.json
fixtures/loading/load_json_accept_5.json
fixtures/loading/load_json_accept_6.json
fixtures/loading/load_json_reject_01.json
fixtures/loading/load_json_reject_02.json
fixtures/loading/load_json_reject_03.json
fixtures/loading/load_json_reject_04.json
fixtures/loading/load_json_reject_05.json
fixtures/loading/load_json_reject_06.json
fixtures/loading/load_json_reject_07.json
fixtures/loading/load_json_reject_08.json
fixtures/loading/load_json_reject_09.json
fixtures/loading/load_json_reject_10.json
fixtures/loading/load_json_reject_11.json
fixtures/loading/load_json_reject_12.json
fixtures/loading/load_json_reject_13.json
fixtures/loading/load_json_reject_14.json
fixtures/loading/load_json_reject_15.json
fixtures/loading/load_json_reject_16.json
fixtures/loading/load_yaml_accept_01.json
fixtures/loading/load_yaml_accept_02.json
fixtures/loading/load_yaml_accept_03.json
fixtures/loading/load_yaml_accept_04.json
fixtures/loading/load_yaml_accept_05.json
fixtures/loading/load_yaml_accept_06.json
fixtures/loading/load_yaml_accept_07.json
fixtures/loading/load_yaml_accept_08.json
fixtures/loading/load_yaml_accept_09.json
fixtures/loading/load_yaml_reject_01.json
fixtures/loading/load_yaml_reject_02.json
fixtures/loading/load_yaml_reject_03.json
fixtures/loading/load_yaml_reject_04.json
fixtures/loading/load_yaml_reject_05.json
fixtures/loading/load_yaml_reject_06.json
fixtures/loading/load_yaml_reject_07.json
fixtures/loading/load_yaml_reject_08.json
fixtures/loading/load_yaml_reject_09.json
fixtures/loading/load_yaml_reject_10.json
fixtures/loading/load_yaml_reject_11.json
fixtures/loading/load_yaml_reject_12.json
fixtures/loading/load_yaml_reject_13.json
fixtures/loading/load_yaml_reject_14.json
fixtures/loading/load_yaml_reject_15.json
fixtures/loading/load_yaml_reject_16.json
fixtures/loading/load_yaml_reject_17.json
fixtures/loading/load_yaml_reject_18.json
fixtures/loading/load_yaml_reject_19.json
fixtures/loading/load_yaml_reject_20.json
fixtures/loading/load_yaml_reject_21.json
fixtures/loading/load_yaml_reject_22.json
fixtures/loading/load_yaml_reject_23.json
fixtures/loading/load_yaml_reject_24.json
fixtures/loading/load_yaml_reject_25.json
fixtures/loading/load_yaml_reject_26.json
fixtures/loading/load_yaml_reject_27.json
fixtures/loading/load_yaml_reject_28.json
fixtures/loading/load_yaml_reject_29.json
fixtures/loading/load_yaml_reject_30.json
fixtures/loading/load_yaml_reject_31.json
fixtures/loading/load_yaml_reject_32.json
fixtures/loading/load_yaml_reject_33.json
fixtures/loading/load_yaml_reject_34.json
fixtures/loading/load_yaml_reject_35.json
fixtures/loading/load_yaml_reject_36.json
fixtures/loading/load_yaml_reject_37.json
fixtures/loading/load_yaml_reject_38.json
fixtures/loading/load_yaml_reject_39.json
fixtures/loading/load_yaml_reject_40.json
fixtures/loading/load_yaml_reject_41.json
fixtures/loading/load_yaml_reject_42.json
fixtures/loading/load_yaml_reject_43.json
fixtures/loading/load_yaml_reject_44.json
fixtures/loading/load_yaml_reject_45.json
fixtures/loading/load_yaml_reject_46.json
fixtures/receipts/accept_allow_with_authorization_and_execution.json
fixtures/receipts/accept_allow_without_execution.json
fixtures/receipts/accept_block_decision.json
fixtures/receipts/accept_hold_decision.json
fixtures/receipts/reject_altered_authorization_reference.json
fixtures/receipts/reject_altered_candidate_digest.json
fixtures/receipts/reject_altered_created_at.json
fixtures/receipts/reject_altered_evidence_digest.json
fixtures/receipts/reject_altered_execution_acknowledgment.json
fixtures/receipts/reject_altered_key_id.json
fixtures/receipts/reject_altered_key_version.json
fixtures/receipts/reject_altered_nested_result.json
fixtures/receipts/reject_altered_receipt_id.json
fixtures/receipts/reject_authorization_not_the_one_named.json
fixtures/receipts/reject_copied_signature.json
fixtures/receipts/reject_invalid_signature.json
fixtures/receipts/reject_issue_block_with_authorization.json
fixtures/receipts/reject_issue_block_with_execution.json
fixtures/receipts/reject_issue_error_outcome.json
fixtures/receipts/reject_issue_malformed_private_key.json
fixtures/receipts/reject_malformed_signature.json
fixtures/receipts/reject_missing_candidate_body.json
fixtures/receipts/reject_missing_rulebook_body.json
fixtures/receipts/reject_missing_snapshot_body.json
fixtures/receipts/reject_no_signature.json
fixtures/receipts/reject_revoked_receipt_key.json
fixtures/receipts/reject_unknown_field.json
fixtures/receipts/reject_unknown_receipt_key.json
fixtures/receipts/reject_unsupported_replay_mode.json
fixtures/receipts/reject_untrusted_key_valid_signature.json
fixtures/receipts/reject_wrong_candidate_body.json
fixtures/receipts/reject_wrong_rulebook_body.json
fixtures/receipts/reject_wrong_snapshot_body.json
fixtures/rulebooks/accept_block_equivalent_quoted.json
fixtures/rulebooks/accept_block_literal_clip_differs.json
fixtures/rulebooks/accept_block_literal_strip.json
fixtures/rulebooks/accept_defaults_omitted.json
fixtures/rulebooks/accept_defaults_written_out.json
fixtures/rulebooks/accept_minimum.json
fixtures/rulebooks/accept_optional_fields_full.json
fixtures/rulebooks/accept_presentation_commented.json
fixtures/rulebooks/accept_presentation_reordered.json
fixtures/rulebooks/accept_presentation_requoted.json
fixtures/rulebooks/accept_template_agent_guard.json
fixtures/rulebooks/accept_template_claims_gate.json
fixtures/rulebooks/accept_template_pipeline_gate.json
fixtures/rulebooks/collision_same_identity_different_content.json
fixtures/rulebooks/reject_duplicate_evidence_id.json
fixtures/rulebooks/reject_duplicate_rule_id.json
fixtures/rulebooks/reject_empty_rules.json
fixtures/rulebooks/reject_evidence_id_leading_digit.json
fixtures/rulebooks/reject_evidence_id_not_an_identifier.json
fixtures/rulebooks/reject_malformed_adopted_at.json
fixtures/rulebooks/reject_malformed_rulebook_id.json
fixtures/rulebooks/reject_malformed_version.json
fixtures/rulebooks/reject_missing_rules.json
fixtures/rulebooks/reject_requires_evidence_undeclared.json
fixtures/rulebooks/reject_unknown_top_level_field.json
fixtures/rulebooks/reject_yaml_duplicate_key.json
fixtures/rulebooks/reject_yaml_root_not_mapping.json
fixtures/rulebooks/reject_yaml_syntax_error.json
fixtures/rulebooks/reject_yaml_unquoted_timestamp.json
fixtures/schema/invalid_authorization_bad_action_digest.json
fixtures/schema/invalid_authorization_bad_alg.json
fixtures/schema/invalid_authorization_bad_issued_at.json
fixtures/schema/invalid_authorization_key_version_zero.json
fixtures/schema/invalid_authorization_missing_runtime_id.json
fixtures/schema/invalid_authorization_short_nonce.json
fixtures/schema/invalid_candidate_action_missing_summary.json
fixtures/schema/invalid_candidate_argv_item_not_string.json
fixtures/schema/invalid_candidate_bad_kind.json
fixtures/schema/invalid_candidate_identity_value_not_string.json
fixtures/schema/invalid_candidate_missing_required.json
fixtures/schema/invalid_candidate_params_not_object.json
fixtures/schema/invalid_candidate_root_not_object.json
fixtures/schema/invalid_candidate_unknown_field.json
fixtures/schema/invalid_outcome_bad_spelling.json
fixtures/schema/invalid_outcome_empty_reasons.json
fixtures/schema/invalid_outcome_reason_missing_code.json
fixtures/schema/invalid_outcome_reason_unknown_field.json
fixtures/schema/invalid_outcome_trace_item_not_string.json
fixtures/schema/invalid_receipt_bad_replay_mode.json
fixtures/schema/invalid_receipt_bad_spec_version.json
fixtures/schema/invalid_receipt_missing_candidate_digest.json
fixtures/schema/invalid_receipt_nested_result_bad_outcome.json
fixtures/schema/invalid_receipt_signature_missing_key_id.json
fixtures/schema/invalid_receipt_unknown_field.json
fixtures/schema/invalid_rulebook_allow_as_default.json
fixtures/schema/invalid_rulebook_bad_adopted_at.json
fixtures/schema/invalid_rulebook_bad_evidence_source.json
fixtures/schema/invalid_rulebook_bad_identifier.json
fixtures/schema/invalid_rulebook_bad_outcome.json
fixtures/schema/invalid_rulebook_bad_version.json
fixtures/schema/invalid_rulebook_boolean_as_integer.json
fixtures/schema/invalid_rulebook_empty_rules.json
fixtures/schema/invalid_rulebook_missing_rules.json
fixtures/schema/invalid_rulebook_negative_max_age.json
fixtures/schema/invalid_rulebook_single_use_false.json
fixtures/schema/invalid_rulebook_ttl_zero.json
fixtures/schema/invalid_rulebook_unknown_field.json
fixtures/schema/invalid_snapshot_bad_digest.json
fixtures/schema/invalid_snapshot_bad_frozen_at.json
fixtures/schema/invalid_snapshot_bad_status.json
fixtures/schema/invalid_snapshot_digest_trailing_newline.json
fixtures/schema/invalid_snapshot_missing_digest.json
fixtures/schema/invalid_snapshot_negative_order.json
fixtures/schema/invalid_snapshot_unknown_item_field.json
fixtures/schema/registry_invalid_duplicate_id.json
fixtures/schema/registry_invalid_forbidden_lookahead.json
fixtures/schema/registry_invalid_forbidden_regex_class.json
fixtures/schema/registry_invalid_missing_id.json
fixtures/schema/registry_invalid_not_an_object.json
fixtures/schema/registry_invalid_unanchored_pattern.json
fixtures/schema/registry_invalid_unknown_ref.json
fixtures/schema/registry_invalid_unresolvable_fragment.json
fixtures/schema/registry_invalid_unsupported_format.json
fixtures/schema/registry_invalid_unsupported_keyword.json
fixtures/schema/registry_invalid_unsupported_type.json
fixtures/schema/valid_authorization_min.json
fixtures/schema/valid_candidate_full.json
fixtures/schema/valid_candidate_min.json
fixtures/schema/valid_outcome_allow.json
fixtures/schema/valid_outcome_block.json
fixtures/schema/valid_outcome_error.json
fixtures/schema/valid_outcome_hold.json
fixtures/schema/valid_receipt_full.json
fixtures/schema/valid_receipt_min.json
fixtures/schema/valid_rulebook_full.json
fixtures/schema/valid_rulebook_min.json
fixtures/schema/valid_snapshot_items.json
fixtures/schema/valid_snapshot_min.json
fixtures/snapshots/accept_acquired_before_freeze.json
fixtures/snapshots/accept_acquired_exactly_at_freeze.json
fixtures/snapshots/accept_all_four_statuses.json
fixtures/snapshots/accept_error_without_a_value.json
fixtures/snapshots/accept_explicit_null_is_a_value.json
fixtures/snapshots/accept_nested_value.json
fixtures/snapshots/accept_offset_spelling_is_preserved.json
fixtures/snapshots/accept_one_ok_item.json
fixtures/snapshots/accept_optional_declaration_omitted.json
fixtures/snapshots/accept_required_missing_is_synthesized.json
fixtures/snapshots/accept_several_items_in_acquisition_order.json
fixtures/snapshots/accept_stale_retains_its_observed_value.json
fixtures/snapshots/accept_zero_declarations.json
fixtures/snapshots/bridge_error_fresh.json
fixtures/snapshots/bridge_error_present.json
fixtures/snapshots/bridge_error_requires.json
fixtures/snapshots/bridge_error_value.json
fixtures/snapshots/bridge_missing_fresh.json
fixtures/snapshots/bridge_missing_present.json
fixtures/snapshots/bridge_missing_requires.json
fixtures/snapshots/bridge_missing_value.json
fixtures/snapshots/bridge_ok_fresh.json
fixtures/snapshots/bridge_ok_present.json
fixtures/snapshots/bridge_ok_requires.json
fixtures/snapshots/bridge_ok_value.json
fixtures/snapshots/bridge_stale_fresh.json
fixtures/snapshots/bridge_stale_present.json
fixtures/snapshots/bridge_stale_requires.json
fixtures/snapshots/bridge_stale_value.json
fixtures/snapshots/reject_acquired_after_freeze.json
fixtures/snapshots/reject_acquisition_missing_status.json
fixtures/snapshots/reject_acquisition_not_a_mapping.json
fixtures/snapshots/reject_acquisition_unknown_field.json
fixtures/snapshots/reject_duplicate_acquisition_id.json
fixtures/snapshots/reject_empty_id.json
fixtures/snapshots/reject_float_value.json
fixtures/snapshots/reject_freeze_before_adoption.json
fixtures/snapshots/reject_invalid_status.json
fixtures/snapshots/reject_malformed_acquired_time.json
fixtures/snapshots/reject_malformed_freeze_time.json
fixtures/snapshots/reject_missing_with_value.json
fixtures/snapshots/reject_non_string_id.json
fixtures/snapshots/reject_ok_without_value.json
fixtures/snapshots/reject_undeclared_acquisition_id.json
fixtures/snapshots/verify_reject_digest_mismatch.json
fixtures/snapshots/verify_reject_duplicate_item_id.json
fixtures/snapshots/verify_reject_item_acquired_after_freeze.json
fixtures/snapshots/verify_reject_item_unknown_field.json
fixtures/snapshots/verify_reject_ok_item_without_value.json
fixtures/snapshots/verify_reject_order_disagrees_with_array_position.json
fixtures/snapshots/verify_reject_required_item_missing.json
fixtures/snapshots/verify_reject_rulebook_mismatch.json
fixtures/snapshots/verify_reject_top_level_unknown_field.json
fixtures/snapshots/verify_reject_undeclared_item.json
fixtures/store/accept_consumption_record.json
fixtures/store/accept_tree_allow.json
fixtures/store/accept_tree_block.json
fixtures/store/accept_tree_hold.json
fixtures/tamper/ATTACK_CLASSES.md
spec/__init__.py
spec/authorization.md
spec/authorization.schema.json
spec/candidate.schema.json
spec/canonicalization.md
spec/cli.md
spec/document-loading.md
spec/evaluation.md
spec/evidence-adapters.md
spec/evidence.schema.json
spec/execution-chain.md
spec/execution.md
spec/expression-language.md
spec/local-store.md
spec/outcome.schema.json
spec/reason-codes.md
spec/receipt-and-replay.md
spec/receipt.schema.json
spec/release.md
spec/rulebook-language.md
spec/rulebook-loading.md
spec/rulebook.schema.json
spec/schema-validation.md
spec/snapshot-construction.md
templates/__init__.py
templates/agent-guard.yaml
templates/claims-gate.yaml
templates/pipeline-gate.yaml
tests/__init__.py
tests/test_adapters.py
tests/test_authorization.py
tests/test_canon.py
tests/test_cli.py
tests/test_execution.py
tests/test_expr.py
tests/test_gate.py
tests/test_load.py
tests/test_receipt.py
tests/test_release.py
tests/test_rulebook.py
tests/test_schema.py
tests/test_snapshot.py
tests/test_store.py
verify_run.egg-info/PKG-INFO
verify_run.egg-info/SOURCES.txt
verify_run.egg-info/dependency_links.txt
verify_run.egg-info/entry_points.txt
verify_run.egg-info/requires.txt
verify_run.egg-info/top_level.txt
vfy/__init__.py
vfy/authorization.py
vfy/canon.py
vfy/cli.py
vfy/errors.py
vfy/expr.py
vfy/gate.py
vfy/load.py
vfy/receipt.py
vfy/resources.py
vfy/rulebook.py
vfy/runner.py
vfy/schema.py
vfy/snapshot.py
vfy/store.py
vfy/workflow.py
vfy/evidence/__init__.py
vfy/evidence/_common.py
vfy/evidence/acquisition.py
vfy/evidence/command.py
vfy/evidence/file.py