# Independent Provenance Review: Runtime Boundary Decision

## Review Identity

- Component: current npm and self-contained runtime profiles
- Replacement milestone: PROPRIETARY-RUNTIME-1
- Implementation record: `ownership/evidence/PROPRIETARY-RUNTIME-1/implementation-record.md`
- Reviewer: pending independent reviewer
- Review date (UTC): pending
- Reviewer independent of implementation: pending

## Current Evidence Status

- [x] The npm Node-host boundary is explicitly disclosed.
- [x] The `pkg` profile is classified as an embedded Node/V8/libuv/OpenSSL/zlib runtime.
- [x] The Bun profile is classified as an embedded external Bun runtime without unsupported transitive-absence claims.
- [x] Product language and release notes are bounded to maximum P2 and explicitly reject P3.
- [x] A deterministic artifact-hash manifest and tamper self-test are present.
- [ ] A real release candidate for every claimed platform has been built and audited.
- [ ] Per-build SBOMs and native import/symbol inventories have been reconciled.
- [ ] Reproducibility has been demonstrated in two clean environments.
- [ ] Independent engineering and counsel review is signed.

## Decision

- Engineering boundary decision: needs independent review
- Phase 6 no-P3 strategy may be used internally: yes
- P3 capability gate may be marked achieved: no
- Public claim that the standalone runtime is proprietary: no
- Required follow-up: audit real release payloads, reconcile SBOM/import evidence, and obtain independent/counsel approval
- Reviewer signature/date: pending
- Counsel approval reference: pending