Core documentation
Core, Interop, Edit, Assurance, And Hostile Conformance Traceability
Specification metadata
title: Core, assurance, and hostile conformance traceability
status: draft
normative: false
summary: Requirement-to-source-to-test map for private ASP v1.0 Core Profile host, check-provider server, interop, edit/apply host, assurance honesty, and hostile-provider matrix reports.
updated: 2026-06-26This map binds each Core requirement to current source text, fixtures, and test names. It is private behavior traceability only; public claims, repo dogfood, Lattice parity, and old-tool retirement are outside this scaffold.
| Requirement | Source | Fixtures | Test |
|---|---|---|---|
| CORE-HOST-STATUS | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/outer-host.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json; examples/core/status.ready.json | CORE-HOST-STATUS exposes ready Core gate status, provider state, policy, and coverage |
| CORE-HOST-CAPABILITIES | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/outer-host.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json; examples/core/capabilities.check-only.json | CORE-HOST-CAPABILITIES exposes check-only Core capability coverage |
| CORE-HOST-EVALUATE | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json; examples/core/evaluate.allow.json; examples/core/evaluate.deny.json; examples/core/evaluate.indeterminate.missing-provider.json; examples/core/evaluate.indeterminate.stale-assessment.json; examples/core/evaluate.indeterminate.degraded-required-coverage.json | CORE-HOST-EVALUATE covers allow, deny, and indeterminate host decision envelopes |
| CORE-CHECK-ASSESSMENT | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/check-assessment.schema.json; schemas/check-evaluate.schema.json | tests/conformance/fixtures/core/check-assessment.valid.complete.json | CORE-CHECK-ASSESSMENT accepts the provider Assessment shape used by check/evaluate |
| CORE-CHECK-CONFIGURATION | spec/05-role-judge.md#request-configuration; schemas/check-evaluate.schema.json | tests/conformance/fixtures/core/check-evaluate.configuration.valid.json; tests/conformance/fixtures/core/check-evaluate.configuration.invalid.null.json | Opcore provider_configuration_rejects_invalid_values_and_canonicalizes_defaults; fast_configuration_changes_findings_and_binds_every_assessment_status; host_rejects_configuration_digest_mismatch |
| CORE-PROVIDER-FORBIDDEN-FIELDS | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/check-assessment.schema.json | tests/conformance/fixtures/core/check-assessment.invalid.host-owned-top-level.json; tests/conformance/fixtures/core/check-assessment.invalid.host-owned-nested.json | CORE-PROVIDER-FORBIDDEN-FIELDS rejects host-owned fields at top level and nested provider data |
| CORE-STALE-VALID-AS-OF | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/check-assessment.schema.json; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/check-assessment.valid.complete.json | CORE-STALE-VALID-AS-OF makes a required stale Assessment non-allow with degraded coverage |
| CORE-MISSING-REQUIRED-PROVIDER | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/core/helpers/core-host-harness.ts; tests/conformance/core/helpers/core-smoke-helpers.ts | CORE-MISSING-REQUIRED-PROVIDER makes an absent required provider non-allow with visible coverage |
| CORE-MISSING-AUTHORITY | spec/11-core-profile.md:87-100; spec/08-conformance.md:163-166; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json | CORE-MISSING-AUTHORITY rejects fresh complete provider coverage without explicit authority |
| CORE-INSUFFICIENT-ASSURANCE | spec/11-core-profile.md:87-100; spec/08-conformance.md:163-166; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json | CORE-INSUFFICIENT-ASSURANCE rejects authorized fresh coverage below required assurance |
| CORE-PROVIDER-QUARANTINED | spec/11-core-profile.md:87-103; spec/08-conformance.md:158-175; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json | CORE-PROVIDER-QUARANTINED keeps quarantined required provider non-allow and visibly degraded |
| CORE-PROVIDER-SKEWED | spec/11-core-profile.md:87-103; spec/08-conformance.md:158-175; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json | CORE-PROVIDER-SKEWED keeps skewed required provider non-allow and visibly degraded |
| CORE-HOST-INITIALIZE-CONTRACT-REFUSAL | spec/11-core-profile.md:87-103; spec/08-conformance.md:158-175; spec/08-conformance.md:209; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json; packages/asp/src/core-host.ts; packages/asp/src/core-host-support.ts; packages/asp/src/fake-check-provider.ts | CORE-HOST-INITIALIZE-CONTRACT-REFUSAL keeps initialize version refusal non-allow and visibly degraded |
| CORE-PROVIDER-FAIL-OPEN | spec/11-core-profile.md:87-103; spec/08-conformance.md:158-175; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json | CORE-PROVIDER-FAIL-OPEN keeps fail-open required provider non-allow and visibly degraded |
| CORE-MALFORMED-REQUIRED-PROVIDER | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/check-assessment.schema.json; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/check-assessment.invalid.host-owned-nested.json | CORE-MALFORMED-REQUIRED-PROVIDER makes malformed required-provider data non-allow |
| CORE-REQUIRED-COVERAGE-VISIBLE | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; examples/core/evaluate.indeterminate.degraded-required-coverage.json | CORE-REQUIRED-COVERAGE-VISIBLE keeps every degraded required coverage reason machine-readable |
| CORE-HOST-DECISION-AUTHORITATIVE | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/check-assessment.schema.json; schemas/verdict.schema.json | tests/conformance/core/core-host-black-box.test.ts; tests/conformance/fixtures/core/core-host-adoption-receipt.valid.json; tests/conformance/fixtures/core/check-assessment.valid.complete.json; tests/conformance/fixtures/core/check-assessment.invalid.host-owned-top-level.json | CORE-HOST-DECISION-AUTHORITATIVE treats provider Assessments as inputs, never final gate output |
| CORE-NO-LATTICE-FAST-PATH | spec/11-core-profile.md:103; spec/08-conformance.md:106; schemas/verdict.schema.json | examples/outer/evaluate.lattice-fast-path.response.json | CORE-NO-LATTICE-FAST-PATH rejects direct privileged Lattice gate paths as degraded |
| CORE-SERVER-INITIALIZE | spec/11-core-profile.md:28; spec/08-conformance.md:54; schemas/initialize.schema.json | packages/asp/bin/fake-check-provider; packages/asp/src/fake-check-provider.ts | CORE-SERVER-INITIALIZE returns check identity, provenance, capability, and read-only permission request |
| CORE-SERVER-UNSUPPORTED-PROTOCOL | spec/08-conformance.md:209; schemas/error.schema.json | packages/asp/src/fake-check-provider.ts; tests/conformance/server/core-check-provider.test.ts; tests/conformance/server/helpers/core-server-harness.ts; schemas/error.schema.json | CORE-SERVER-UNSUPPORTED-PROTOCOL rejects unsupported initialize before initialized coverage |
| CORE-SERVER-PREINITIALIZED | spec/11-core-profile.md:55; spec/08-conformance.md:59; schemas/error.schema.json | tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-PREINITIALIZED rejects check/evaluate before initialized with typed provider-not-initialized error |
| CORE-SERVER-INITIALIZED-GRANT | spec/11-core-profile.md:55; spec/08-conformance.md:59; schemas/initialize.schema.json | tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-INITIALIZED-GRANT records narrowed read-only initialized grant without write or network authority |
| CORE-SERVER-CALLBACK-CONTENT | spec/11-core-profile.md:56; spec/08-conformance.md:61; schemas/host-callbacks.schema.json | tests/conformance/server/helpers/core-server-harness.ts; tests/conformance/fixtures/server/core/workspace/src/core.ts; tests/conformance/fixtures/server/core/workspace/README.md | CORE-SERVER-CALLBACK-CONTENT reads baseline and changeset blobs only through host callbacks |
| CORE-SERVER-GRANT-SCOPE | spec/03-data-model.md:82; spec/11-core-profile.md:116; schemas/host-callbacks.schema.json | packages/asp/src/workspace-store.ts; tests/conformance/server/helpers/core-server-harness.ts; tests/conformance/fixtures/server/core/workspace/secrets/out-of-grant.txt | CORE-SERVER-GRANT-SCOPE filters callback tree and blob access to the initialized read grant |
| CORE-SERVER-VALID-RESULTS | spec/11-core-profile.md:57; spec/08-conformance.md:74; schemas/check-assessment.schema.json; schemas/check-evaluate.schema.json | tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-VALID-RESULTS returns valid complete, diagnostic, incomplete, unsupported, and cancelled Assessments |
| CORE-SERVER-TYPED-ERROR | spec/08-conformance.md:79; schemas/error.schema.json | packages/asp/src/fake-check-provider.ts; tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-TYPED-ERROR reports inability to evaluate on the JSON-RPC error channel with failClass |
| CORE-SERVER-REJECTED-MALFORMED-HOST-FIELDS | spec/11-core-profile.md:69; spec/08-conformance.md:81; schemas/check-assessment.schema.json | packages/asp/src/assessment-validator.ts; packages/asp/src/fake-check-provider.ts | CORE-SERVER-REJECTED-MALFORMED-HOST-FIELDS rejects malformed and host-owned provider result fields |
| CORE-SERVER-REJECTED-FRESHNESS | spec/11-core-profile.md:66; spec/08-conformance.md:122; schemas/check-assessment.schema.json | packages/asp/src/assessment-validator.ts; tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-REJECTED-FRESHNESS rejects stale baseline or changeset freshness |
| CORE-SERVER-TIMEOUT | spec/11-core-profile.md:86; spec/08-conformance.md:140; packages/asp/src/json-rpc-peer.ts | packages/asp/src/fake-check-provider.ts; tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-TIMEOUT reports a hung provider as failed server evidence, not pass |
| CORE-SERVER-BEHAVIOR-ONLY | spec/11-core-profile.md:72; spec/08-conformance.md:17; schemas/check-assessment.schema.json | tests/conformance/server/core-check-provider.test.ts | CORE-SERVER-BEHAVIOR-ONLY accepts provider outputs only as Assessments, never host Decisions or authority grants |
| INTEROP-REF-HOST-FAKE | spec/08-conformance.md:106; spec/09-outer-seam.md:35; spec/11-core-profile.md:103 | tests/conformance/interop/interop-matrix.test.ts; tests/conformance/interop/helpers/interop-harness.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-REF-HOST-FAKE reference host and fake provider use the Core check contract |
| INTEROP-REF-HOST-OPCORE | spec/08-conformance.md:106; spec/10-installation-and-discovery.md:88; spec/11-core-profile.md:103 | tests/conformance/interop/interop-matrix.test.ts; tests/conformance/interop/helpers/interop-harness.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-REF-HOST-OPCORE reference host and ordinary provider enrollment use the Core check contract |
| INTEROP-INDEPENDENT-HOST-FAKE | spec/08-conformance.md:54; spec/09-outer-seam.md:35; spec/11-core-profile.md:55 | tests/conformance/interop/interop-matrix.test.ts; tests/conformance/interop/helpers/interop-harness.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-INDEPENDENT-HOST-FAKE independent host and fake provider use the Core check contract |
| INTEROP-INDEPENDENT-HOST-OPCORE | spec/08-conformance.md:54; spec/09-outer-seam.md:35; spec/10-installation-and-discovery.md:88 | tests/conformance/interop/interop-matrix.test.ts; tests/conformance/interop/helpers/interop-harness.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-INDEPENDENT-HOST-OPCORE independent host and ordinary provider entrypoint use the Core check contract |
| INTEROP-UNSUPPORTED-COVERAGE-VISIBLE | spec/08-conformance.md:74; spec/08-conformance.md:158; spec/11-core-profile.md:57 | tests/conformance/interop/interop-matrix.test.ts; packages/asp/src/fake-check-provider.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-UNSUPPORTED-COVERAGE-VISIBLE unsupported coverage remains explicit |
| INTEROP-NO-OPCORE-FAST-PATH | spec/08-conformance.md:175; spec/09-outer-seam.md:35; docs/conformance/requirements.md | tests/conformance/interop/interop-matrix.test.ts; tests/conformance/interop/helpers/interop-harness.ts; scripts/conformance/run-interop-suite.ts; scripts/conformance/interop-report-catalog.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-NO-OPCORE-FAST-PATH rejects privileged fast-path tokens in interop artifacts |
| INTEROP-PRIVATE-CLAIMS | spec/08-conformance.md:17; docs/conformance/requirements.md | tests/conformance/interop/interop-report.test.ts; scripts/conformance/interop-report-catalog.ts; scripts/conformance/run-interop-suite.ts; tests/conformance/fixtures/interop/interop-conformance-report.valid.json | INTEROP-PRIVATE-CLAIMS keeps interop evidence private and non-authoritative |
| HOSTILE-MALFORMED-INITIALIZE | spec/08-conformance.md:158; spec/11-core-profile.md:86; schemas/initialize.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; tests/conformance/hostile/helpers/hostile-host-harness.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/provider-runtime.ts | HOSTILE-MALFORMED-INITIALIZE rejects malformed provider initialize without silent allow |
| HOSTILE-MALFORMED-ASSESSMENT | spec/08-conformance.md:81; spec/11-core-profile.md:69; schemas/check-assessment.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/assessment-validator.ts | HOSTILE-MALFORMED-ASSESSMENT rejects malformed provider Assessment without silent allow |
| HOSTILE-FORGED-HOST-FIELDS | spec/08-conformance.md:81; spec/09-outer-seam.md:92; schemas/check-assessment.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/provider-host-owned-fields.ts; packages/asp/src/assessment-validator.ts | HOSTILE-FORGED-HOST-FIELDS rejects provider-minted decision authority assurance and receipt fields |
| HOSTILE-STALE-ASSESSMENT | spec/08-conformance.md:122; spec/11-core-profile.md:66; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/assessment-validator.ts | HOSTILE-STALE-ASSESSMENT rejects stale validAsOf without silent allow |
| HOSTILE-MISSING-REQUIRED-PROVIDER | spec/08-conformance.md:158; spec/11-core-profile.md:87; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-support.ts | HOSTILE-MISSING-REQUIRED-PROVIDER keeps missing required provider non-allow and visible |
| HOSTILE-OPTIONAL-DEGRADED-PROVIDER | spec/08-conformance.md:158; spec/09-outer-seam.md:120; schemas/outer-host.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; tests/conformance/hostile/helpers/hostile-host-harness.ts | HOSTILE-OPTIONAL-DEGRADED-PROVIDER keeps optional degradation visible while required coverage can allow |
| HOSTILE-UNSUPPORTED-REQUIRED-CAPABILITY | spec/08-conformance.md:158; spec/09-outer-seam.md:119; schemas/outer-host.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/provider-runtime.ts; packages/asp/src/fake-check-provider.ts | HOSTILE-UNSUPPORTED-REQUIRED-CAPABILITY treats missing advertised required capability as unsupported |
| HOSTILE-INCOMPLETE-REQUIRED-COVERAGE | spec/08-conformance.md:158; spec/11-core-profile.md:103; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-evaluation.ts | HOSTILE-INCOMPLETE-REQUIRED-COVERAGE rejects incomplete required coverage |
| HOSTILE-PROVIDER-ERROR | spec/08-conformance.md:140; spec/11-core-profile.md:86; schemas/error.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/provider-supervision.ts | HOSTILE-PROVIDER-ERROR reports provider error as non-allow degraded coverage |
| HOSTILE-CANCELLED-PROVIDER-REQUEST | spec/02-transport-and-lifecycle.md:68; spec/08-conformance.md:140; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-evaluation.ts | HOSTILE-CANCELLED-PROVIDER-REQUEST reports cancelled provider request as non-allow degraded coverage |
| HOSTILE-SLOW-PROVIDER-TIMEOUT | spec/08-conformance.md:140; spec/11-core-profile.md:86; schemas/error.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/json-rpc-peer.ts; packages/asp/src/provider-supervision.ts | HOSTILE-SLOW-PROVIDER-TIMEOUT reports slow provider timeout as non-allow degraded coverage |
| HOSTILE-PROVIDER-CRASH | spec/08-conformance.md:140; spec/11-core-profile.md:86; schemas/error.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/provider-runtime.ts | HOSTILE-PROVIDER-CRASH reports provider crash during initialize and active request |
| HOSTILE-QUARANTINED-PROVIDER | spec/08-conformance.md:158; spec/11-core-profile.md:87; schemas/outer-host.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/provider-supervision.ts | HOSTILE-QUARANTINED-PROVIDER keeps quarantined required provider non-allow and visible |
| HOSTILE-MISSING-AUTHORITY | spec/07-host-obligations.md:53; spec/08-conformance.md:163; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-support.ts | HOSTILE-MISSING-AUTHORITY rejects fresh complete coverage without required authority |
| HOSTILE-INSUFFICIENT-ASSURANCE | spec/07-host-obligations.md:70; spec/08-conformance.md:166; schemas/verdict.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-support.ts | HOSTILE-INSUFFICIENT-ASSURANCE rejects authorized coverage below required assurance |
| HOSTILE-POLICY-SELF-AUTHORIZATION | spec/10-installation-and-discovery.md:122; spec/08-conformance.md:175; schemas/asp-config.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-support.ts | HOSTILE-POLICY-SELF-AUTHORIZATION rejects candidate policy self-authorization attempts |
| HOSTILE-DIRECT-WRITE-RISK | spec/07-host-obligations.md:93; spec/09-outer-seam.md:178; schemas/edit-plan.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-edit-risk.ts | HOSTILE-DIRECT-WRITE-RISK rejects direct-write provider risk and untrusted edit launch |
| HOSTILE-COMMAND-LIKE-EDIT-OUTPUT | spec/06-role-act.md:46; spec/09-outer-seam.md:165; schemas/edit-plan.schema.json | tests/conformance/hostile/hostile-provider-matrix.test.ts; packages/asp/src/core-host-edit.ts | HOSTILE-COMMAND-LIKE-EDIT-OUTPUT rejects command-like edit output before apply |
| HOSTILE-NO-OPCORE-FAST-PATH | spec/08-conformance.md:175; spec/09-outer-seam.md:35; docs/conformance/requirements.md | tests/conformance/hostile/hostile-provider-matrix.test.ts; scripts/conformance/run-hostile-suite.ts; tests/conformance/fixtures/hostile/hostile-provider-conformance-report.valid.json | HOSTILE-NO-OPCORE-FAST-PATH rejects privileged fast-path tokens in hostile suite artifacts |
| EDIT-HOST-REQUEST-PLAN-NO-WRITE | spec/06-role-act.md:46; spec/09-outer-seam.md:165; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-REQUEST-PLAN-NO-WRITE returns provider EditPlan without mutating workspace |
| EDIT-HOST-POSITIVE-APPLY | spec/07-host-obligations.md:93; spec/09-outer-seam.md:178; schemas/outer-host.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/core-host-edit.ts; packages/asp/src/workspace-edit-apply.ts | EDIT-HOST-POSITIVE-APPLY validates and applies canonical EditPlan |
| EDIT-HOST-STALE-PLAN | spec/08-conformance.md:122; spec/09-outer-seam.md:165; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/edit-plan-validator.ts | EDIT-HOST-STALE-PLAN rejects stale provider EditPlan before apply |
| EDIT-HOST-CAS-CONFLICT | spec/03-data-model.md:82; spec/09-outer-seam.md:178; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/workspace-edit-apply.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-CAS-CONFLICT refuses apply after expected before digest changes |
| EDIT-HOST-PATH-POLICY | spec/07-host-obligations.md:53; spec/09-outer-seam.md:178; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-PATH-POLICY validates create absence and requested scope |
| EDIT-HOST-UNKNOWN-PROPOSAL | spec/09-outer-seam.md:165; schemas/outer-host.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-UNKNOWN-PROPOSAL refuses unknown proposal identity |
| EDIT-HOST-DENIED-VALIDATION | spec/07-host-obligations.md:70; spec/08-conformance.md:166; schemas/verdict.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-DENIED-VALIDATION prevents apply |
| EDIT-HOST-INDETERMINATE-VALIDATION | spec/07-host-obligations.md:70; spec/08-conformance.md:166; schemas/verdict.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-INDETERMINATE-VALIDATION prevents apply |
| EDIT-HOST-COMMAND-LIKE-OUTPUT | spec/06-role-act.md:46; spec/09-outer-seam.md:165; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/edit-plan-validator.ts | EDIT-HOST-COMMAND-LIKE-OUTPUT rejects command-like provider output before apply |
| EDIT-HOST-DIRECT-WRITE-RISK | spec/07-host-obligations.md:93; spec/09-outer-seam.md:178; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/core-host-edit-risk.ts; packages/asp/src/edit-plan-validator.ts | EDIT-HOST-DIRECT-WRITE-RISK rejects direct-write output and untrusted edit launch |
| EDIT-HOST-MALFORMED-OUTPUT | spec/08-conformance.md:81; spec/09-outer-seam.md:165; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/edit-plan-validator.ts | EDIT-HOST-MALFORMED-OUTPUT rejects malformed provider proposal |
| EDIT-HOST-HOST-FIELD-SMUGGLING | spec/08-conformance.md:81; spec/09-outer-seam.md:92; schemas/edit-plan.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/provider-host-owned-fields.ts; packages/asp/src/edit-plan-validator.ts | EDIT-HOST-HOST-FIELD-SMUGGLING rejects provider-owned decisions apply receipts authority and assurance fields |
| EDIT-HOST-MISSING-AUTHORITY | spec/07-host-obligations.md:53; spec/08-conformance.md:163; schemas/outer-host.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-MISSING-AUTHORITY refuses apply without edit authority |
| EDIT-HOST-INSUFFICIENT-ASSURANCE | spec/07-host-obligations.md:70; spec/08-conformance.md:166; schemas/outer-host.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-INSUFFICIENT-ASSURANCE refuses advisory isolation apply |
| EDIT-HOST-CONCURRENT-APPLY | spec/07-host-obligations.md:93; spec/09-outer-seam.md:178; schemas/outer-host.schema.json | tests/conformance/edit/edit-apply-host-profile.test.ts; packages/asp/src/core-host-edit.ts | EDIT-HOST-CONCURRENT-APPLY serializes concurrent apply attempts |
| EDIT-HOST-NO-OPCORE-FAST-PATH | spec/08-conformance.md:175; spec/09-outer-seam.md:35; docs/conformance/requirements.md | tests/conformance/edit/edit-apply-host-profile.test.ts; scripts/conformance/run-edit-host-suite.ts; tests/conformance/fixtures/edit/edit-host-conformance-report.valid.json | EDIT-HOST-NO-OPCORE-FAST-PATH rejects privileged fast-path tokens in edit artifacts |
| ASSURANCE-ADVISORY-REPORTING | spec/07-host-obligations.md:70; spec/08-conformance.md:166; schemas/assurance.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; tests/conformance/edit/helpers/edit-host-harness.ts; packages/asp/src/core-host-edit.ts | ASSURANCE-ADVISORY-REPORTING reports advisory refusal without blocking authority |
| ASSURANCE-GATED-BOUNDARY | spec/07-host-obligations.md:53; spec/09-outer-seam.md:178; schemas/outer-host.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; packages/asp/src/core-host-edit.ts; packages/asp/src/core-host-evaluation.ts | ASSURANCE-GATED-BOUNDARY reports gated apply and the controlled gate and interactive boundaries |
| ASSURANCE-MEDIATED-WRITE-DOWNGRADE | spec/07-host-obligations.md:93; spec/08-conformance.md:166; schemas/assurance.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; tests/conformance/shared/provider-fixtures.ts; packages/asp/src/core-host-edit.ts | ASSURANCE-MEDIATED-WRITE-DOWNGRADE refuses mediated-write claims without host-mediated evidence |
| ASSURANCE-ISOLATED-DOWNGRADE | spec/07-host-obligations.md:93; spec/08-conformance.md:166; schemas/assurance.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; tests/conformance/shared/provider-fixtures.ts; packages/asp/src/core-host-edit.ts | ASSURANCE-ISOLATED-DOWNGRADE refuses isolated claims without enforced write isolation |
| ASSURANCE-DIRECT-WRITE-REFUSAL | spec/07-host-obligations.md:93; spec/09-outer-seam.md:178; schemas/edit-plan.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; packages/asp/src/core-host-edit-risk.ts; packages/asp/src/edit-plan-validator.ts | ASSURANCE-DIRECT-WRITE-REFUSAL rejects direct-write provider output and untrusted edit launch |
| ASSURANCE-TRANSACTION-GUARANTEE-BOUND | spec/07-host-obligations.md:93; schemas/assurance.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; packages/asp/src/core-host-support.ts; packages/asp/src/host-receipts.ts | ASSURANCE-TRANSACTION-GUARANTEE-BOUND only observes accepted none transaction guarantees |
| ASSURANCE-FAILED-APPLY-NO-SUCCESSFUL-RECEIPT | spec/08-conformance.md:158; spec/09-outer-seam.md:178; schemas/outer-host.schema.json | tests/conformance/assurance/assurance-mode-honesty.test.ts; packages/asp/src/fake-check-provider.ts; packages/asp/src/core-host-edit.ts | ASSURANCE-FAILED-APPLY-NO-SUCCESSFUL-RECEIPT prevents false successful apply receipts |