export declare const surfaceBoundaryManifestVersion: "surface-boundary.v0.1"; export declare const surfaceIds: readonly ["sdk.runtime", "sdk.evidence", "sdk.control_plane", "sdk.policy", "sdk.adapter", "sdk.install", "sdk.gateway", "cli.operator", "cli.evidence", "mcp.runtime", "x402.protected_tool", "surfaces.a2a_negotiation", "surfaces.a2a_readback", "surfaces.service_workflow_admission", "surfaces.hosted_admission", "surfaces.agentic_endpoint_access_readback", "surfaces.recovery_guidance"]; export type SurfaceId = (typeof surfaceIds)[number]; export declare const surfaceRouteFamilies: readonly ["action_contract_proposal_write", "adapter_definition_write", "bypass_probe_write", "catalog_install_write", "certificate_mint_write", "certificate_verify_local", "delegated_authority_write", "evidence_projection_read", "gateway_credential_write", "gateway_check_write", "install_health_read", "install_proposal_shape_read", "isolation_write", "local_process_supervision", "policy_decision_write", "protected_path_posture_write", "raw_record_read", "receipt_export_write", "recovery_write", "runtime_evidence_write", "runtime_ingress_proposal_write", "surface_reconciliation_write", "tool_call_draft_write"]; export type SurfaceRouteFamily = (typeof surfaceRouteFamilies)[number]; export declare const surfaceCustodyRoles: readonly ["control_plane", "gateway_custody", "review_custody", "runtime_evidence", "none"]; export type SurfaceCustodyRole = (typeof surfaceCustodyRoles)[number]; export declare const surfacePlanes: readonly ["runtime", "evidence", "operator", "gateway", "process"]; export type SurfacePlane = (typeof surfacePlanes)[number]; export declare const surfaceImplementationStatuses: readonly ["active", "deferred"]; export type SurfaceImplementationStatus = (typeof surfaceImplementationStatuses)[number]; export declare const surfaceAuthorityPostures: readonly ["proposal_only", "evidence_only", "setup_only", "transport_only", "policy_transition_transport"]; export type SurfaceAuthorityPosture = (typeof surfaceAuthorityPostures)[number]; export declare const surfaceNonAuthorityFlags: readonly ["authorityCreated", "credentialMaterialIncluded", "gatewayCheckPerformed", "greenlightCreated", "mutationAttempted", "mutationCommandIncluded", "rawInternalRecordIncluded", "receiptExportCreated", "authorityCertificateMinted"]; export type SurfaceNonAuthorityFlag = (typeof surfaceNonAuthorityFlags)[number]; export type SurfaceBoundary = { readonly id: SurfaceId; readonly status: SurfaceImplementationStatus; readonly plane: SurfacePlane; readonly custodyRole: SurfaceCustodyRole; readonly authorityPosture: SurfaceAuthorityPosture; readonly sourceRoots: readonly string[]; readonly allowedRouteFamilies: readonly SurfaceRouteFamily[]; readonly forbiddenRouteFamilies: readonly SurfaceRouteFamily[]; readonly allowedImportRoots: readonly string[]; readonly forbiddenImportFragments: readonly string[]; readonly forbiddenCredentialShapes: readonly string[]; readonly forbiddenOutputFields: readonly string[]; readonly requiredNonAuthorityFlags: Readonly>>; readonly claimBoundaryLabels: readonly string[]; }; export declare const surfaceBoundaryManifest: { readonly "surfaces.a2a_negotiation": { readonly id: "surfaces.a2a_negotiation"; readonly status: "active"; readonly plane: "runtime"; readonly custodyRole: "runtime_evidence"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/surfaces/a2a-negotiation-support"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "runtime_evidence_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "gateway_credential_write", "protected_path_posture_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/surfaces/a2a-negotiation-support", "src/protocol/areas/action-contract", "src/protocol/areas/negotiation", "src/protocol/areas/policy-greenlight", "src/protocol/evidence-projections", "src/protocol/foundation", "src/protocol/public", "src/protocol/store/port"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/x402-payment/wallet-gateway", "storage/"]; readonly forbiddenCredentialShapes: readonly [...("allRoles" | "CallerAuthTokens" | "transitionToken" | "transitionTokens" | "control_plane_token" | "gateway_custody_token" | "private_key" | "wallet")[], "review_custody_token"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "greenlightId", "greenlightRef", "gatewayCheckInput", "mutationCommand"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "admission_readback_is_not_receipt_evidence", "agreement_is_not_permission", "a2a_ingress_admission_is_not_policy_or_gateway"]; }; readonly "surfaces.a2a_readback": { readonly id: "surfaces.a2a_readback"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/surfaces/a2a-negotiation-readback"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/surfaces/a2a-negotiation-readback", "src/protocol/public", "src/protocol/foundation", "src/protocol/evidence-projections"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly [...("allRoles" | "CallerAuthTokens" | "transitionToken" | "transitionTokens" | "control_plane_token" | "gateway_custody_token" | "private_key" | "wallet")[], "signerMaterialIncluded"]; readonly forbiddenOutputFields: readonly [...("PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "gateway_check_remains_final_enforcement_point", "agreement_evidence_is_not_downstream_success", "admission_readback_is_not_receipt_evidence"]; }; readonly "surfaces.service_workflow_admission": { readonly id: "surfaces.service_workflow_admission"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/surfaces/service-workflow-admission"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/surfaces/service-workflow-admission", "src/protocol/public", "src/protocol/foundation"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "admission_readback_is_not_receipt_evidence", "service_workflow_handle_is_not_clearance", "fresh_action_contract_required"]; }; /** Phase-03 D-39 canonical package; D-71 defers external hosted workspace promotion. */ readonly "surfaces.hosted_admission": { readonly id: "surfaces.hosted_admission"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "control_plane"; readonly authorityPosture: "setup_only"; readonly sourceRoots: readonly ["src/hosted-admission"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "gateway_credential_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/hosted-admission", "src/protocol/context", "src/protocol/foundation", "src/protocol/public", "src/protocol/foundation/errors", "src/http/errors"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "gateway_custody_token", "private_key", "signer", "transitionTokens", "wallet"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "greenlightId", "greenlightRef", "gatewayCheckInput"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "hosted_admission_package_is_not_http_internals", "hosted_caller_identity_is_not_reusable_auth", "verifier_adapter_claim_is_not_gateway_check"]; }; readonly "surfaces.agentic_endpoint_access_readback": { readonly id: "surfaces.agentic_endpoint_access_readback"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/surfaces/agentic-endpoint-access-readback"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "gateway_credential_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/surfaces/agentic-endpoint-access-readback", "src/protocol/areas/agentic-endpoint-access"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "endpoint_access_readback_is_not_mutation_authority", "endpoint_access_lease_is_endpoint_entry_only", "fresh_action_contract_required"]; }; readonly "surfaces.recovery_guidance": { readonly id: "surfaces.recovery_guidance"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/surfaces/protected-action-recovery-guidance.ts"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "certificate_verify_local", "delegated_authority_write", "gateway_check_write", "gateway_credential_write", "protected_path_posture_write", "runtime_evidence_write", "runtime_ingress_proposal_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/surfaces", "src/protocol/public"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "runtime/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "recovery_guidance_is_not_recovery_authority", "candidate_draft_is_not_action_contract", "fresh_action_contract_required"]; }; readonly "mcp.runtime": { readonly id: "mcp.runtime"; readonly status: "active"; readonly plane: "runtime"; readonly custodyRole: "runtime_evidence"; readonly authorityPosture: "proposal_only"; readonly sourceRoots: readonly ["src/mcp"]; readonly allowedRouteFamilies: readonly ["action_contract_proposal_write", "evidence_projection_read", "install_health_read", "runtime_evidence_write", "tool_call_draft_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "protected_path_posture_write", "surface_reconciliation_write"]; readonly allowedImportRoots: readonly ["src/mcp", "src/integrations/a1-evidence", "src/protocol/evidence-projections", "src/protocol/foundation/failure-class", "src/sdk", "src/surfaces"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet", "review_custody_token"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer", "greenlightId", "gatewayCheckInput", "mutationCommand", "mutationAttemptId"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "tool_visibility_is_not_authorization"]; }; readonly "x402.protected_tool": { readonly id: "x402.protected_tool"; readonly status: "active"; readonly plane: "runtime"; readonly custodyRole: "runtime_evidence"; readonly authorityPosture: "proposal_only"; readonly sourceRoots: readonly ["src/x402-protected-tool"]; readonly allowedRouteFamilies: readonly ["action_contract_proposal_write", "evidence_projection_read", "install_health_read", "runtime_evidence_write", "tool_call_draft_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "protected_path_posture_write", "surface_reconciliation_write"]; readonly allowedImportRoots: readonly ["src/x402-protected-tool", "src/adapters/x402-payment/protected-tool-facade", "src/adapters/x402-payment/protected-tool-profile", "src/adapters/x402-payment/protected-tool-readiness", "src/surfaces"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/x402-payment/wallet-gateway", "protocol/areas/gateway-gate/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet", "review_custody_token"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer", "greenlightId", "gatewayCheckInput", "mutationCommand", "mutationAttemptId"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "protected_tool_readiness_is_pre_contract", "x402_tool_profile_is_not_gateway_custody", "tool_visibility_is_not_authorization"]; }; readonly "cli.operator": { readonly id: "cli.operator"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "control_plane"; readonly authorityPosture: "setup_only"; readonly sourceRoots: readonly ["src/cli/command-manifest.ts", "src/cli/host/doctor.ts", "src/cli/local-project/doctor.ts", "src/cli/local-project/index.ts", "src/cli/main.ts", "src/cli/mcp/doctor.ts", "src/cli/output.ts", "src/cli/quickstart/x402.ts", "src/cli/x402/index.ts", "src/cli/x402/local-state.ts"]; readonly allowedRouteFamilies: readonly ["catalog_install_write", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "gateway_check_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/cli", "src/adapters/x402-payment/bypass-probes", "src/adapters/x402-payment/conformance", "src/adapters/x402-payment/install-proposal", "src/adapters/x402-payment/protected-tool-profile", "src/adapters/x402-payment/protected-tool-readiness", "src/install/install-proposal", "src/mcp", "src/protocol/areas/bypass-probe", "src/protocol/evidence-projections", "src/protocol/foundation", "src/surfaces"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "wallet-gateway", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "gateway_custody_token", "runtime_evidence_token", "transitionTokens"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "greenlightId", "greenlightRef", "gatewayCheckInput"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "operator_setup_is_not_authorization"]; }; readonly "cli.evidence": { readonly id: "cli.evidence"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/cli/aps-report.ts", "src/cli/certificate.ts", "src/cli/command-manifest.ts", "src/cli/evidence/operation-readback-view.ts", "src/cli/main.ts", "src/cli/output.ts", "src/cli/projection-evidence.ts", "src/cli/simulate/x402-payment.ts", "src/cli/support-bundle.ts"]; readonly allowedRouteFamilies: readonly ["certificate_verify_local", "evidence_projection_read", "install_health_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "catalog_install_write", "gateway_check_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/cli", "src/hosted-admission", "src/mcp", "src/protocol/areas/authority-certificate/verify", "src/protocol/evidence-projections", "src/protocol/public", "src/surfaces"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "control_plane_token", "gateway_custody_token", "transitionTokens"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "cli_evidence_is_not_clearance"]; }; readonly "sdk.runtime": { readonly id: "sdk.runtime"; readonly status: "active"; readonly plane: "runtime"; readonly custodyRole: "runtime_evidence"; readonly authorityPosture: "proposal_only"; readonly sourceRoots: readonly ["src/sdk/surface-clients/runtime-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["runtime_evidence_write", "runtime_ingress_proposal_write", "tool_call_draft_write", "action_contract_proposal_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "protected_path_posture_write", "surface_reconciliation_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/runtime", "src/protocol/public", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "protocol/areas/gateway-gate/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet", "review_custody_token"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "greenlightId", "greenlightRef", "gatewayCheckInput"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "runtime_evidence_is_not_authority"]; }; readonly "sdk.evidence": { readonly id: "sdk.evidence"; readonly status: "active"; readonly plane: "evidence"; readonly custodyRole: "review_custody"; readonly authorityPosture: "evidence_only"; readonly sourceRoots: readonly ["src/sdk/surface-clients/evidence-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["evidence_projection_read", "install_health_read", "certificate_verify_local"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "protected_path_posture_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/protocol/public", "src/protocol/areas/authority-certificate/verify", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "protocol/store"]; readonly forbiddenCredentialShapes: readonly [...("signer" | "allRoles" | "CallerAuthTokens" | "transitionToken" | "transitionTokens" | "gateway_custody_token" | "private_key" | "wallet")[], "runtime_evidence_write_token"]; readonly forbiddenOutputFields: readonly [...("signer" | "PAYMENT-SIGNATURE" | "rawInternalRecord" | "PaymentPayload" | "authorityCertificateMint" | "gatewayCheckInput" | "mutationCommand" | "privateKey" | "rawCredentialMaterial" | "receiptExport")[], "downstreamSuccess"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "evidence_is_not_downstream_success"]; }; readonly "sdk.control_plane": { readonly id: "sdk.control_plane"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "control_plane"; readonly authorityPosture: "setup_only"; readonly sourceRoots: readonly ["src/sdk/surface-clients/control-plane-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["delegated_authority_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "gateway_check_write", "protected_path_posture_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/protocol/public", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "gateway_custody_token", "private_key", "runtime_evidence_token", "signer", "transitionTokens", "wallet"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer", "greenlightId", "greenlightRef", "gatewayCheckInput"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "delegation_management_is_not_execution_authority"]; }; readonly "sdk.policy": { readonly id: "sdk.policy"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "control_plane"; readonly authorityPosture: "policy_transition_transport"; readonly sourceRoots: readonly ["src/sdk/surface-clients/policy-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["policy_decision_write"]; readonly forbiddenRouteFamilies: readonly ["action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "certificate_mint_write", "evidence_projection_read", "gateway_check_write", "install_health_read", "isolation_write", "local_process_supervision", "protected_path_posture_write", "raw_record_read", "receipt_export_write", "recovery_write", "runtime_evidence_write", "runtime_ingress_proposal_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/protocol/public", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["adapters/", "experimental", "protocol/areas/authority-certificate/", "protocol/areas/gateway-gate/", "protocol/areas/policy-greenlight/", "protocol/areas/receipt-export/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "gateway_custody_token", "private_key", "runtime_evidence_token", "signer", "transitionTokens", "wallet"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer"]; readonly requiredNonAuthorityFlags: { readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "policy_transition_transport_is_not_gateway_execution"]; }; readonly "sdk.adapter": { readonly id: "sdk.adapter"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "none"; readonly authorityPosture: "setup_only"; readonly sourceRoots: readonly ["src/adapter-sdk"]; readonly allowedRouteFamilies: readonly ["adapter_definition_write", "install_proposal_shape_read"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "catalog_install_write", "certificate_verify_local", "evidence_projection_read", "gateway_check_write", "install_health_read", "local_process_supervision", "protected_path_posture_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/adapter-sdk", "src/install"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "experimental", "runtime/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "transitionToken", "transitionTokens", "control_plane_token", "gateway_custody_token", "private_key", "signer", "wallet", "review_custody_token", "runtime_evidence_write_token"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer", "greenlightId", "greenlightRef"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "adapter_sdk_is_definition_only"]; }; readonly "sdk.install": { readonly id: "sdk.install"; readonly status: "active"; readonly plane: "operator"; readonly custodyRole: "control_plane"; readonly authorityPosture: "setup_only"; readonly sourceRoots: readonly ["src/sdk/surface-clients/install-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["catalog_install_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "bypass_probe_write", "gateway_check_write", "protected_path_posture_write", "runtime_evidence_write", "surface_reconciliation_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/install", "src/protocol/public", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["protocol/kernel", "protocol/areas/policy-greenlight/guards", "protocol/areas/policy-greenlight/policy", "protocol/areas/policy-greenlight/policy-record", "protocol/areas/policy-greenlight/sequence-dependencies", "protocol/areas/policy-greenlight/transitions", "protocol/areas/gateway-gate/artifacts", "protocol/areas/gateway-gate/gateway-policy", "protocol/areas/gateway-gate/guards", "protocol/areas/gateway-gate/replay-refusal", "protocol/areas/gateway-gate/transitions", "protocol/areas/receipt-export/transitions", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "storage/", "adapters/x402-payment/wallet-gateway", "experimental", "adapters/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "gateway_custody_token", "private_key", "runtime_evidence_token", "signer", "transitionTokens", "wallet"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "authorityCertificateMint", "gatewayCheckInput", "mutationCommand", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "receiptExport", "signer"]; readonly requiredNonAuthorityFlags: { readonly authorityCreated: false; readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly gatewayCheckPerformed: false; readonly greenlightCreated: false; readonly mutationAttempted: false; readonly mutationCommandIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "install_is_not_permission"]; }; readonly "sdk.gateway": { readonly id: "sdk.gateway"; readonly status: "active"; readonly plane: "gateway"; readonly custodyRole: "gateway_custody"; readonly authorityPosture: "transport_only"; readonly sourceRoots: readonly ["src/sdk/surface-clients/gateway-client.ts", "src/sdk/surface-clients/transport.ts"]; readonly allowedRouteFamilies: readonly ["bypass_probe_write", "gateway_credential_write", "gateway_check_write", "protected_path_posture_write", "surface_reconciliation_write"]; readonly forbiddenRouteFamilies: readonly ["certificate_mint_write", "isolation_write", "policy_decision_write", "raw_record_read", "receipt_export_write", "recovery_write", "action_contract_proposal_write", "catalog_install_write", "runtime_evidence_write", "tool_call_draft_write"]; readonly allowedImportRoots: readonly ["src/sdk", "src/protocol/public", "src/protocol/foundation/errors", "src/protocol/foundation/failure-class", "src/http/errors", "src/http/admission"]; readonly forbiddenImportFragments: readonly ["adapters/x402-payment/wallet-gateway", "experimental", "protocol/areas/authority-certificate/signing", "protocol/areas/authority-certificate/transitions", "protocol/areas/policy-greenlight/", "storage/"]; readonly forbiddenCredentialShapes: readonly ["allRoles", "CallerAuthTokens", "control_plane_token", "private_key", "runtime_evidence_token", "signer_factory", "transitionTokens"]; readonly forbiddenOutputFields: readonly ["PaymentPayload", "PAYMENT-SIGNATURE", "privateKey", "rawCredentialMaterial", "rawInternalRecord", "signerFactory"]; readonly requiredNonAuthorityFlags: { readonly authorityCertificateMinted: false; readonly credentialMaterialIncluded: false; readonly rawInternalRecordIncluded: false; readonly receiptExportCreated: false; }; readonly claimBoundaryLabels: readonly ["local_or_self_hosted_only", "no_broad_runtime_control", "no_clearing_house_operation", "no_cross_org_trust", "no_hosted_operation", "no_provider_custody", "no_settlement_claim", "gateway_transport_is_not_signer_custody"]; }; };