Remove the ACP release-matrix admission path

80e61fbb21f9 · Devin AI · 9d ago · parent 46ed5df7e51e

Remove the ACP release-matrix admission path

Keep protocol conformance, hermetic artifact checks, and diagnostic peer probes while removing release-matrix validation, candidate runners, and release evidence. Grok and Cursor remain experimental because no release-evidence path can promote either peer.

Co-Authored-By: Christopher David <chris@openagents.com>

Co-Authored-By: Christopher David <chris@openagents.com>

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Not deployed through the forge lane

No push, promotion, build, or deploy receipt references this commit (receipts are scanned over a bounded recent window). Changes shipped by full node replacement carry their proof in the release gate receipt instead.

Changed files

modified README.md
modified docs/assure-repo/false-green-candidates.v1.json
modified docs/assure-repo/surface-inventory.v1.json
modified package.json
modified packages/agent-client-protocol-conformance/README.md
deleted packages/agent-client-protocol-conformance/compatibility/live/desktop-cursor-release-run-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/desktop-grok-release-run-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-auth-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-current-2026-07-17-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-extensions-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-auth-cancel-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-current-2026-07-17-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-mcp-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-metadata-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-reverse-2026-07-16-darwin-arm64.json
deleted packages/agent-client-protocol-conformance/compatibility/release-matrix.json
modified packages/agent-client-protocol-conformance/package.json
deleted packages/agent-client-protocol-conformance/scripts/check-release-matrix.ts
deleted packages/agent-client-protocol-conformance/scripts/live-release-suite.ts
modified packages/agent-client-protocol-conformance/src/conformance.test.ts
modified packages/agent-client-protocol-conformance/src/index.ts
deleted packages/agent-client-protocol-conformance/src/live-release.ts
deleted packages/agent-client-protocol-conformance/src/release-evidence.test.ts
deleted packages/agent-client-protocol-conformance/src/release-evidence.ts
deleted packages/agent-client-protocol-conformance/src/release.ts

Diff

26 files changed, +15 -4549

flat installation closure, negotiates `cursor_login`, and
keeps model discovery behind its versioned extension decoder. Diagnostic live
probes and source-derived fixtures remain explicitly non-release evidence. A
checked opt-in production runner now reproduces a redacted Grok/Cursor candidate
receipt in disposable repositories. It has no claim authority. The checked
[pinned live-binary matrix](packages/agent-client-protocol-conformance/compatibility/release-matrix.json)
and [human proof ledger](docs/qa/2026-07-16-acp10-release-proof/README.md) now
independently gate the two peers. Their current verdict is experimental because
the complete checked evidence has not yet been bound into shipped admission.
All code-owned required scenarios are now satisfied on tested Darwin arm64.
other platforms remain explicitly untested. Execution is tracked in
checked opt-in production runner is no longer part of the support path. The
[human proof ledger](docs/qa/2026-07-16-acp10-release-proof/README.md) remains a
historical record, and no release-evidence path can promote either peer above
`experimental`. ACP peer support remains experimental because it has no
release-evidence path.
Hermetic conformance checks cover the required scenario catalog. Other
platforms remain explicitly untested. Execution is tracked in
[#8887 — Full Agent Client Protocol integration for Grok and Cursor](https://github.com/OpenAgentsInc/openagents/issues/8887).
the wider reference set remains indexed in
[Product Teardowns](docs/teardowns/README.md).

  "note": "Heuristic false-green LEADS, not findings. A finding requires a demonstrated reproduction (surviving mutation via mutation-runner). Do not treat a candidate as a confirmed false green. Coverage-theater leads may include tests that delegate their assertion to a custom helper the classifier does not recognise; verify before acting.",
  "sourceDigest": "sha256:dd810dd48c5bdbc9becd7fcc01dd41a4ca2abf0b2d6f6a545907247f6e3e8361",
  "summary": {
    "filesScanned": 2417,
    "filesScanned": 2421,
    "candidateCount": 16,
    "byMode": {
      "false_green_coverage_theater": 15,

{
  "schemaVersion": "1",
  "repository": "OpenAgentsInc/openagents",
  "sourceDigest": "sha256:89eece9db1d575b6b3f6b051835dee8e1e0cb211444b5ba390c36a92a4add904",
  "sourceDigest": "sha256:7c585930cb375e3359bfd928c7e78f38deb2cb8f84eaf0e16a8e2ade809a0795",
  "surfaces": [
    {
      "id": "app:@openagentsinc/acceptance-runner",

      "oracles": [
        {
          "type": "test",
          "ref": "packages/openagents-cli (16 tracked test files)"
          "ref": "packages/openagents-cli (20 tracked test files)"
        },
        {
          "type": "behavior-contract",

  "scripts": {
    "check:vp2-node-runtime": "node scripts/vp2-node-runtime-guard.mjs",
    "check:agent-client-protocol": "pnpm --dir packages/agent-client-protocol run check:generated",
    "check:agent-client-protocol-conformance": "pnpm --dir packages/agent-client-protocol-conformance run check:artifacts && pnpm --dir packages/agent-client-protocol-conformance run check:release",
    "check:agent-client-protocol-conformance": "pnpm --dir packages/agent-client-protocol-conformance run check:artifacts",
    "check:all-work-contract": "pnpm --dir packages/all-work-contract run check:generated && cargo test -p openagents-all-work-contract",
    "check:codex-app-server-protocol": "pnpm --dir packages/codex-app-server-protocol run check:generated",
    "test:vp2-node": "node --test packages/runtime-platform/src/runtime-platform.node-suite.ts packages/sqlite-runtime/src/node-database.node-suite.ts scripts/public-cli-artifacts.node.test.mjs scripts/vp2-node-runtime-guard.test.mjs scripts/vp2-retained-service.node.test.mjs",

    "check:ste-control-semantics": "pnpm run check:ste-public-semantics",
    "check:node-vp-freeze": "node scripts/node-vp-cutover-inventory.mjs --check",
    "check:vp1-retirement": "node scripts/vp1-retired-money-surface-guard.mjs .",
    "check:deploy": "pnpm run check:google-cloud-authority && pnpm run check:ste:public && pnpm run check:ste-public-semantics && pnpm run test:ste && pnpm run check:sol-docs && pnpm run test:sol-docs && pnpm --dir packages/agent-client-protocol-conformance run check:release:freshness && pnpm --dir apps/openagents.com run check:deploy",
    "check:deploy": "pnpm run check:google-cloud-authority && pnpm run check:ste:public && pnpm run check:ste-public-semantics && pnpm run test:ste && pnpm run check:sol-docs && pnpm run test:sol-docs && pnpm --dir apps/openagents.com run check:deploy",
    "typecheck": "vp run --concurrency-limit 2 --filter './**' --filter '!./packages/probe' --filter '!./packages/probe/**' typecheck",
    "lint": "vp lint --report-unused-disable-directives",
    "fmt": "vp fmt",

pnpm --dir packages/agent-client-protocol-conformance run test
pnpm --dir packages/agent-client-protocol-conformance run check:artifacts
pnpm --dir packages/agent-client-protocol-conformance run report
pnpm --dir packages/agent-client-protocol-conformance run check:release
pnpm --dir packages/agent-client-protocol-conformance run check:release:freshness
```

`compatibility/release-matrix.json` is the release-defining named-peer ledger.
It uses a closed claim vocabulary (`supported`, `experimental`, `incompatible`,
`not-installed`, `auth-required`, `degraded`) and distinguishes `live-pass`
from fixture-only, blocked, untested, unsupported, and failed scenarios. The
validator enforces the exact release/schema/platform/profile/binary identities,
the complete 47-scenario catalog, and repository-local evidence references
before recomputing release eligibility. The push-path `check:release` gate
blocks content errors and prints a warning when the freshness window expires.
The release-path `check:release:freshness` gate also blocks an expired window.
Requiredness and evidence class are code-owned: required live peer and packaged
Desktop rows require live proof, optional peer alternatives do not gate the
default path, and only explicitly hermetic production-transport rows may be
satisfied by executed fixture proof. Matrix flags cannot self-exempt a provider,
and one provider can never mask the other. The current checked verdict is `supported`
for the exact pinned Grok 0.2.101 and Cursor 2026.06.24 Darwin arm64 identities
only. Other versions and platforms remain experimental or not tested.
ACP peer support remains experimental. This package has no release-evidence
path and cannot promote Grok or Cursor above `experimental`.

Live probes are inert unless explicitly armed and never run in ordinary CI:


CURSOR_ACP_LIVE=1 pnpm --dir packages/agent-client-protocol-conformance run live:cursor
```

The deeper candidate runner launches the production Grok and Cursor runtimes in
separate disposable Git repositories, authenticates through the peers' normal
local login, performs sequential prompts, and attempts session listing, mode
changes, streaming cancellation, and bounded shutdown where advertised. Its
Grok lane also sends a random canary only through broker-materialized stdio MCP
environment, proves the disposable server received it by digest, shuts Grok
down, and scans the exact session/configuration persistence surfaces for the
unredacted value:

```bash
ACP_RELEASE_LIVE=1 ACP_RELEASE_PEER=both \
  pnpm --dir packages/agent-client-protocol-conformance run live:release
```

Set `ACP_RELEASE_OUTPUT` to an absolute `.json` path beneath
`compatibility/live/` to retain its closed-schema, redacted receipt. The runner
does not retain prompts, responses, session IDs, auth material, or absolute
paths. Its artifact is deliberately marked `candidate-live` and has no power to
change the release matrix or promote either peer. A human-reviewed matrix edit
and the fail-closed `check:release` gate remain mandatory. The Cursor lane also
proves client-side `cursor_login` cancellation using the ordinary HOME and
stopping before `authenticate`. It never creates an empty HOME or changes login
or keychain state. Its exact-binary extension qualification registers only the
four allowlisted Cursor methods and retains aggregate observation counts. An
unobserved extension remains blocked rather than inferred from a prompt. The
same rule applies to permission qualification: only an option actually offered
by the peer may be selected, and zero reverse calls remain zero live evidence.
Cursor approval and refusal run in separate pinned processes with an empty
allow/deny policy stored only in the disposable repository's `.cursor/cli.json`.
the runner never changes the user's global Cursor configuration.
The Grok qualification additionally enables bounded filesystem and simulated
terminal handlers only inside the disposable repository, forces only its new
disposable sessions out of inherited YOLO/auto mode through session metadata,
and retains method counts rather than file, command, terminal, or response
content. It never changes global Grok configuration.
The shared runtime also preserves notification and prompt-completion `_meta` as
private native evidence. Candidate receipts expose only metadata-presence and
usage-presence counts. They never export token values, model/session IDs, or
other metadata contents.

After packaging Desktop, the separately armed peer journey proves real app
workspace refusal, interruption, restart settlement, re-enable, completion,
disable, and shutdown without changing HOME or credential/keychain state:

```bash
ACP_DESKTOP_RELEASE_LIVE=1 ACP_DESKTOP_RELEASE_PEER=<grok-or-cursor> \
  ACP_DESKTOP_RELEASE_OUTPUT=<absolute compatibility/live JSON path> \
  pnpm --dir apps/openagents-desktop run smoke:acp-release
```

The checked live records beneath `compatibility/live/` pin the installed
commands, full reported builds, executable/installation-closure digests, wire
version, advertised auth methods, and capability keys. The release matrix adds
the deeper redacted peer runs described in the human ledger. Every unexercised
required scenario remains an explicit blocker to a `supported` claim.

Each probe emits one machine-readable diagnostic result with command, binary
version, schema identity, and initialize outcome. It does not authenticate,
print secrets, or establish a release claim.

{
  "format": "openagents-acp-desktop-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-packaged-desktop-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T16:46:36.674Z",
  "openAgentsRevision": "661c1b3c7f74ac396026ec6aa1a0c6ea8845dcd1",
  "platform": "darwin-arm64-node-24.13.1",
  "provider": "cursor",
  "lane": "acp:cursor-agent",
  "packaged": true,
  "interruption": {
    "mismatchedWorkspaceRefused": true,
    "laneConfigured": true,
    "laneAdmitted": true,
    "exitedDuringRunningTurn": true
  },
  "recovery": {
    "reusedDesktopState": true,
    "explicitlyReenabledSameThread": true,
    "recoveredSameThread": true,
    "freshThreadRetryAfterFailure": false,
    "laneConfigured": true,
    "interruptedTurnSettled": true,
    "durableCompletedTurn": true,
    "disabled": true
  },
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "threadIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-desktop-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-packaged-desktop-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T16:56:36.589Z",
  "openAgentsRevision": "4bb214739f4bd41732e96a12514223f9cc57982e",
  "platform": "darwin-arm64-node-24.13.1",
  "provider": "grok",
  "lane": "acp:grok-cli",
  "packaged": true,
  "interruption": {
    "mismatchedWorkspaceRefused": true,
    "laneConfigured": true,
    "laneAdmitted": true,
    "exitedDuringRunningTurn": true
  },
  "recovery": {
    "reusedDesktopState": true,
    "explicitlyReenabledSameThread": true,
    "recoveredSameThread": true,
    "freshThreadRetryAfterFailure": false,
    "additionalProcessRestartAfterFailedRetry": true,
    "laneConfigured": true,
    "interruptedTurnSettled": true,
    "durableCompletedTurn": true,
    "disabled": true
  },
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "threadIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T16:49:32.334Z",
  "openAgentsRevision": "661c1b3c7f74ac396026ec6aa1a0c6ea8845dcd1",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cached_token",
          "grok.com"
        ],
        "capabilityKeys": [
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "cleanup-bounds",
          "result": "not-observed",
          "safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"
        }
      ],
      "counters": {
        "updateCount": 106,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "tool_call",
          "tool_call_update",
          "user_message_chunk"
        ],
        "promptCount": 3
      }
    },
    {
      "peer": "cursor",
      "result": "partial",
      "binary": {
        "reportedVersion": "2026.06.24-00-45-58-9f61de7",
        "executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
        "installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cursor_login"
        ],
        "capabilityKeys": [
          "list",
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Cursor version and installation closure probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised Cursor login completed"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "live-pass",
          "safeDetail": "Advertised session list completed"
        },
        {
          "id": "model-mode-config",
          "result": "live-pass",
          "safeDetail": "Advertised mode change completed"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 0 updates"
        },
        {
          "id": "cleanup-bounds",
          "result": "not-observed",
          "safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"
        }
      ],
      "counters": {
        "updateCount": 17,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "current_mode_update",
          "session_info_update"
        ],
        "promptCount": 3
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": ["Agent Communication Protocol", "A2A"],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T17:12:04.946Z",
  "openAgentsRevision": "29fe5ad3e750a0ab79048e234d509316a6c0a821",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "cursor",
      "result": "partial",
      "binary": {
        "reportedVersion": "2026.06.24-00-45-58-9f61de7",
        "executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
        "installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": ["cursor_login"],
        "capabilityKeys": ["list", "load"]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Cursor version and installation closure probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised Cursor login completed"
        },
        {
          "id": "auth-cancel",
          "result": "live-pass",
          "safeDetail": "Client cancelled advertised login before authenticate and received auth required"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "live-pass",
          "safeDetail": "Advertised session list completed"
        },
        {
          "id": "model-mode-config",
          "result": "live-pass",
          "safeDetail": "Advertised mode change completed"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 0 updates"
        },
        {
          "id": "cleanup-bounds",
          "result": "not-observed",
          "safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"
        }
      ],
      "counters": {
        "updateCount": 18,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "current_mode_update",
          "session_info_update"
        ],
        "promptCount": 3
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-17T12:16:40.076Z",
  "openAgentsRevision": "6a26feb82244247b1d591c26aa5ff614b00b8b50",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "cursor",
      "result": "partial",
      "binary": {
        "reportedVersion": "2026.06.24-00-45-58-9f61de7",
        "executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
        "installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cursor_login"
        ],
        "capabilityKeys": [
          "list",
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Cursor version and installation closure probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised Cursor login completed"
        },
        {
          "id": "auth-cancel",
          "result": "live-pass",
          "safeDetail": "Client cancelled advertised login before authenticate and received auth required"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "live-pass",
          "safeDetail": "Advertised session list completed"
        },
        {
          "id": "model-mode-config",
          "result": "live-pass",
          "safeDetail": "Advertised mode change completed"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 0 updates"
        },
        {
          "id": "cleanup-bounds",
          "result": "not-observed",
          "safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"
        },
        {
          "id": "cursor-extensions-models",
          "result": "not-observed",
          "safeDetail": "Pinned extension counts: questions 0, plans 0, todos 0, models 33"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 1"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        }
      ],
      "counters": {
        "updateCount": 19,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "current_mode_update",
          "session_info_update"
        ],
        "promptCount": 3,
        "updateMetadataCount": 0,
        "completionMetadataCount": 0,
        "usageMetadataCount": 0
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T17:57:59.006Z",
  "openAgentsRevision": "8677fec5a5c4267cdfb8181fd649e140f82300d0",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "cursor",
      "result": "partial",
      "binary": {
        "reportedVersion": "2026.06.24-00-45-58-9f61de7",
        "executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
        "installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cursor_login"
        ],
        "capabilityKeys": [
          "list",
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Cursor version and installation closure probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised Cursor login completed"
        },
        {
          "id": "auth-cancel",
          "result": "live-pass",
          "safeDetail": "Client cancelled advertised login before authenticate and received auth required"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "live-pass",
          "safeDetail": "Advertised session list completed"
        },
        {
          "id": "model-mode-config",
          "result": "live-pass",
          "safeDetail": "Advertised mode change completed"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 0 updates"
        },
        {
          "id": "cleanup-bounds",
          "result": "not-observed",
          "safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"
        },
        {
          "id": "cursor-extensions-models",
          "result": "not-observed",
          "safeDetail": "Pinned extension counts: questions 0, plans 1, todos 0, models 33"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 1"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        }
      ],
      "counters": {
        "updateCount": 12,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "current_mode_update"
        ],
        "promptCount": 3
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T18:12:12.590Z",
  "openAgentsRevision": "b0a397edd0fa91599bde5dd089b053adc3268da0",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cached_token",
          "grok.com"
        ],
        "capabilityKeys": [
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "auth-cancel",
          "result": "live-pass",
          "safeDetail": "Client cancelled explicitly requested Grok login before authenticate"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "mcp-authorized",
          "result": "live-pass",
          "safeDetail": "Brokered MCP canary reached only the disposable stdio server"
        },
        {
          "id": "mcp-no-durable-secret",
          "result": "live-pass",
          "safeDetail": "Bounded post-shutdown scan found zero canary matches in 23 files"
        },
        {
          "id": "cleanup-bounds",
          "result": "live-pass",
          "safeDetail": "Runtime completed bounded shutdown before scanning"
        },
        {
          "id": "grok-question-extensions",
          "result": "not-observed",
          "safeDetail": "Pinned question methods observed: 1"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 5"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        },
        {
          "id": "fs-terminal-enabled",
          "result": "live-pass",
          "safeDetail": "Pinned reverse calls: filesystem 4, terminal 16"
        }
      ],
      "counters": {
        "updateCount": 63,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "user_message_chunk"
        ],
        "promptCount": 3,
        "updateMetadataCount": 63,
        "completionMetadataCount": 2,
        "usageMetadataCount": 62
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-17T12:15:58.619Z",
  "openAgentsRevision": "6a26feb82244247b1d591c26aa5ff614b00b8b50",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cached_token",
          "grok.com"
        ],
        "capabilityKeys": [
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "auth-cancel",
          "result": "live-pass",
          "safeDetail": "Client cancelled explicitly requested Grok login before authenticate"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "mcp-authorized",
          "result": "live-pass",
          "safeDetail": "Brokered MCP canary reached only the disposable stdio server"
        },
        {
          "id": "mcp-no-durable-secret",
          "result": "live-pass",
          "safeDetail": "Bounded post-shutdown scan found zero canary matches in 23 files"
        },
        {
          "id": "cleanup-bounds",
          "result": "live-pass",
          "safeDetail": "Runtime completed bounded shutdown before scanning"
        },
        {
          "id": "grok-question-extensions",
          "result": "not-observed",
          "safeDetail": "Pinned question methods observed: 1"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 4"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        },
        {
          "id": "fs-terminal-enabled",
          "result": "live-pass",
          "safeDetail": "Pinned reverse calls: filesystem 4, terminal 12"
        }
      ],
      "counters": {
        "updateCount": 66,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "user_message_chunk"
        ],
        "promptCount": 3,
        "updateMetadataCount": 66,
        "completionMetadataCount": 2,
        "usageMetadataCount": 65
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": ["Agent Communication Protocol", "A2A"],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T17:09:00.256Z",
  "openAgentsRevision": "ce4fe714f05a9f4ca0530e71d4a66b5602d987e4",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": ["cached_token", "grok.com"],
        "capabilityKeys": ["load"]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "mcp-authorized",
          "result": "live-pass",
          "safeDetail": "Brokered MCP canary reached only the disposable stdio server"
        },
        {
          "id": "mcp-no-durable-secret",
          "result": "live-pass",
          "safeDetail": "Bounded post-shutdown scan found zero canary matches in 23 files"
        },
        {
          "id": "cleanup-bounds",
          "result": "live-pass",
          "safeDetail": "Runtime completed bounded shutdown before scanning"
        }
      ],
      "counters": {
        "updateCount": 110,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "tool_call",
          "tool_call_update",
          "user_message_chunk"
        ],
        "promptCount": 3
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": ["Agent Communication Protocol", "A2A"],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T18:07:25.480Z",
  "openAgentsRevision": "d242b3bf08c83010fb5e80a0f8a7c0593c6db063",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": ["cached_token", "grok.com"],
        "capabilityKeys": ["load"]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "mcp-authorized",
          "result": "live-pass",
          "safeDetail": "Brokered MCP canary reached only the disposable stdio server"
        },
        {
          "id": "mcp-no-durable-secret",
          "result": "live-pass",
          "safeDetail": "Bounded post-shutdown scan found zero canary matches in 23 files"
        },
        {
          "id": "cleanup-bounds",
          "result": "live-pass",
          "safeDetail": "Runtime completed bounded shutdown before scanning"
        },
        {
          "id": "grok-question-extensions",
          "result": "not-observed",
          "safeDetail": "Pinned question methods observed: 1"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 4"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        },
        {
          "id": "fs-terminal-enabled",
          "result": "live-pass",
          "safeDetail": "Pinned reverse calls: filesystem 4, terminal 20"
        }
      ],
      "counters": {
        "updateCount": 63,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "user_message_chunk"
        ],
        "promptCount": 3,
        "updateMetadataCount": 63,
        "completionMetadataCount": 2,
        "usageMetadataCount": 62
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-live-release-run-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": [
    "Agent Communication Protocol",
    "A2A"
  ],
  "proofClass": "candidate-live",
  "claimAuthority": "none-release-matrix-only",
  "recordedAt": "2026-07-16T17:40:55.849Z",
  "openAgentsRevision": "b20fe2427629fe9233fcfb7b3abc407e87c921d5",
  "schemaRelease": "schema-v1.19.0",
  "platform": "darwin-arm64-node-24.13.1",
  "peers": [
    {
      "peer": "grok",
      "result": "partial",
      "binary": {
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",
        "executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"
      },
      "negotiation": {
        "wireVersion": 1,
        "authMethodIds": [
          "cached_token",
          "grok.com"
        ],
        "capabilityKeys": [
          "load"
        ]
      },
      "scenarios": [
        {
          "id": "identity-version",
          "result": "live-pass",
          "safeDetail": "Exact Grok version and executable digest probed"
        },
        {
          "id": "initialize",
          "result": "live-pass",
          "safeDetail": "Wire version 1 initialize completed"
        },
        {
          "id": "auth-primary",
          "result": "live-pass",
          "safeDetail": "Advertised cached authentication completed"
        },
        {
          "id": "session-new",
          "result": "live-pass",
          "safeDetail": "Disposable repository session created"
        },
        {
          "id": "real-repo-text",
          "result": "live-pass",
          "safeDetail": "Real disposable repository produced assistant text"
        },
        {
          "id": "sequential-turns",
          "result": "live-pass",
          "safeDetail": "Two sequential prompts completed"
        },
        {
          "id": "session-list",
          "result": "not-observed",
          "safeDetail": "Peer did not advertise session list"
        },
        {
          "id": "stream-cancel",
          "result": "live-pass",
          "safeDetail": "Streaming prompt cancelled after 1 updates"
        },
        {
          "id": "mcp-authorized",
          "result": "live-pass",
          "safeDetail": "Brokered MCP canary reached only the disposable stdio server"
        },
        {
          "id": "mcp-no-durable-secret",
          "result": "live-pass",
          "safeDetail": "Bounded post-shutdown scan found zero canary matches in 23 files"
        },
        {
          "id": "cleanup-bounds",
          "result": "live-pass",
          "safeDetail": "Runtime completed bounded shutdown before scanning"
        },
        {
          "id": "grok-question-extensions",
          "result": "not-observed",
          "safeDetail": "Pinned question methods observed: 1"
        },
        {
          "id": "permission-approval",
          "result": "live-pass",
          "safeDetail": "Pinned permission approval selections: 5"
        },
        {
          "id": "permission-refusal",
          "result": "live-pass",
          "safeDetail": "Pinned permission refusal selections: 1"
        },
        {
          "id": "fs-terminal-enabled",
          "result": "live-pass",
          "safeDetail": "Pinned reverse calls: filesystem 4, terminal 16"
        }
      ],
      "counters": {
        "updateCount": 61,
        "updateKinds": [
          "agent_message_chunk",
          "agent_thought_chunk",
          "available_commands_update",
          "user_message_chunk"
        ],
        "promptCount": 3
      }
    }
  ],
  "redaction": {
    "promptTextRetained": false,
    "responseTextRetained": false,
    "sessionIdentifiersRetained": false,
    "authMaterialRetained": false,
    "absolutePathsRetained": false
  }
}

{
  "format": "openagents-acp-release-matrix-v1",
  "protocol": "Agent Client Protocol",
  "protocolExclusions": ["Agent Communication Protocol", "A2A"],
  "recordedAt": "2026-07-17T12:16:40Z",
  "freshnessDays": 30,
  "openAgents": {
    "revision": "6a26feb82244247b1d591c26aa5ff614b00b8b50",
    "desktopIntegrationRevision": "6a26feb82244247b1d591c26aa5ff614b00b8b50",
    "build": "source-built Desktop admission integration plus retained packaged Desktop journeys; packaging refresh excluded from the current work order",
    "protocolPackageRevision": "workspace@6a26feb82244247b1d591c26aa5ff614b00b8b50",
    "schemaRelease": "schema-v1.19.0",
    "schemaSha256": "92c1dfcda10dd47e99127500a3763da2b471f9ac61e12b9bf0430c32cf953796"
  },
  "platform": {
    "tested": "darwin-arm64",
    "osVersion": "26.4",
    "nodeVersion": "24.13.1",
    "notTested": ["darwin-x64", "linux-arm64", "linux-x64"]
  },
  "statusVocabulary": {
    "claim": [
      "supported",
      "experimental",
      "incompatible",
      "not-installed",
      "auth-required",
      "degraded"
    ],
    "scenario": ["live-pass", "fixture-pass", "blocked", "not-tested", "unsupported", "fail"],
    "evidenceClass": [
      "live-peer",
      "packaged-desktop-live",
      "hermetic-production",
      "not-applicable"
    ],
    "rule": "Code owns scenario requiredness and evidence class. Live-peer and packaged-desktop-live require live-pass; hermetic-production accepts an executed fixture-pass; matrix flags cannot self-exempt a peer."
  },
  "peers": [
    {
      "peer": "grok",
      "profile": { "id": "grok-cli", "revision": 1 },
      "binary": {
        "command": ["grok", "agent", "stdio"],
        "reportedVersion": "grok 0.2.101 (5bc4b5dfadcf)",
        "resolvedExecutableName": "grok-0.2.101",
        "sha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2",
        "installationSource": "detected external installation; installer provenance not proven"
      },
      "negotiation": {
        "wireVersion": 1,
        "peerIdentity": { "name": "grok", "version": "0.2.101" },
        "authMethodIds": ["cached_token", "grok.com"],
        "advertisedCapabilityKeys": [
          "auth",
          "loadSession",
          "mcpCapabilities",
          "promptCapabilities",
          "sessionCapabilities"
        ]
      },
      "claimState": "supported",
      "releaseEligible": true,
      "scenarios": [
        {
          "id": "identity-version",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-current-2026-07-17-darwin-arm64.json"
          ],
          "safeDetail": "Exact installed version and executable digest passed."
        },
        {
          "id": "incompatible-version-rejection",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/profiles.test.ts"],
          "safeDetail": "Admission rejection is hermetic; no alternate real binary was installed."
        },
        {
          "id": "initialize",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Wire v1 initialize passed with sanitized capability identifiers."
        },
        {
          "id": "auth-primary",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Cached-token authentication passed without retaining auth material."
        },
        {
          "id": "auth-secondary",
          "requiredForSupported": false,
          "result": "not-tested",
          "evidenceRefs": [],
          "safeDetail": "Optional xai.api_key authentication was not configured. Existing local cached_token authentication is the supported headless default and requires no API key."
        },
        {
          "id": "auth-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-auth-cancel-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "With ordinary HOME and cached login intact, the client explicitly selected advertised grok.com, cancelled once before authenticate, and returned typed auth_required without opening a browser or changing credentials."
        },
        {
          "id": "auth-expiry-failure",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "The required failure branch passed with an intentionally invalid API key, followed by recovery in a fresh cached-token process; no stored credential was changed."
        },
        {
          "id": "auth-logout-reauth",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "The exact Grok initialize response advertised no auth.logout capability; fresh-process cached-token authentication is covered independently."
        },
        {
          "id": "session-new",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "A disposable-repository session was created."
        },
        {
          "id": "session-list",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "The pinned peer did not advertise session/list; the production runner retained the exact capability-false outcome and did not call an absent method."
        },
        {
          "id": "session-load",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "A new peer process loaded the prior session and completed another prompt."
        },
        {
          "id": "session-resume-close-delete",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/grok.ts"],
          "safeDetail": "The pinned profile does not claim these lifecycle methods."
        },
        {
          "id": "real-repo-text",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "A real disposable Git repository produced text updates and end_turn."
        },
        {
          "id": "real-repo-tool-plan-config-usage",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-metadata-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A disposable-file tool call emitted three updates and created the file; 63 live updates and two completions retained private metadata, with 62 usage-bearing observations. Grok advertises no mode/config surface."
        },
        {
          "id": "permission-approval",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-reverse-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A disposable ask-mode session selected five peer-offered allow-once permission options."
        },
        {
          "id": "permission-refusal",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-reverse-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A separate disposable ask-mode session selected one peer-offered reject option before command execution."
        },
        {
          "id": "permission-timeout-stale-policy",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Production host timeout, stale-response fencing, and policy-denial paths pass hermetically; these are host authority semantics rather than peer behavior."
        },
        {
          "id": "fs-terminal-enabled",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-reverse-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "The pinned Grok peer made four filesystem and sixteen terminal reverse calls through explicitly enabled bounded qualification handlers in a disposable repository."
        },
        {
          "id": "fs-terminal-disabled",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Capability-false refusal is hermetic only."
        },
        {
          "id": "mcp-authorized",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "A broker-materialized authorization canary reached only the local MCP server; initialize, tools/list, and tools/call completed in the intended live session."
        },
        {
          "id": "mcp-expired-refusal",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/fixtures/mcp/expired-ref/input.json"
          ],
          "safeDetail": "Expired reference refusal passed before peer launch."
        },
        {
          "id": "mcp-no-durable-secret",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-grok-mcp-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A broker-only canary reached the disposable MCP server, then a complete bounded scan of the exact disposable session tree, MCP logs, and Grok configuration/state surfaces found zero durable matches."
        },
        {
          "id": "model-mode-config",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/grok.ts"],
          "safeDetail": "The pinned Grok profile claims no mode or model configuration surface."
        },
        {
          "id": "stream-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "session/cancel during a live stream returned cancelled after three updates."
        },
        {
          "id": "reverse-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "An underscore question reverse request was session-bound, its AbortSignal fired, and the turn returned cancelled."
        },
        {
          "id": "crash-kill-restart",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "The pinned process was SIGKILLed, reported crash, restarted in a new process, loaded the session, and completed the post-repair prompt."
        },
        {
          "id": "malformed-unknown-output",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Malformed and unknown output handling is hermetic only."
        },
        {
          "id": "attachment-repair",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "After orderly process restart, session/load repaired the attachment and the next prompt completed."
        },
        {
          "id": "sequential-turns",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Two turns completed before restart and one after load."
        },
        {
          "id": "multiple-sessions",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Two independent live peer processes completed sessions concurrently, matching the single-root-session-per-process policy."
        },
        {
          "id": "cleanup-bounds",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Single live process shutdown passed; repeated leak proof remains separate."
        },
        {
          "id": "fragmented-oversized",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Frame bounds are production-transport fixture proof."
        },
        {
          "id": "stderr-update-flood",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Redacted stderr and bounded update handling are hermetic only."
        },
        {
          "id": "queue-stall-timeout-race",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Queue, stall, timeout, late response, and cancellation races are hermetic only."
        },
        {
          "id": "crash-loop-repeat",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Five crash cycles plus five clean cycles completed with zero exit-listener delta and zero pending request counters after clean shutdown."
        },
        {
          "id": "secret-scan",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "The serialized production-host support bundle had zero matches for prompt, private path, authorization, cached-provider-auth, or provider-secret canaries."
        },
        {
          "id": "trust-controls",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/profiles.test.ts"],
          "safeDetail": "Executable, argv, environment, and profile admission controls pass hermetically."
        },
        {
          "id": "grok-wire-launch",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "grok agent stdio negotiated wire v1."
        },
        {
          "id": "grok-rich-stream",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "Live message, thought, available-command, and user-message update kinds were observed; tool/plan variants remain unproven."
        },
        {
          "id": "grok-load-replay",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json"
          ],
          "safeDetail": "A fresh peer process loaded the existing session and completed a post-load prompt."
        },
        {
          "id": "grok-question-extensions",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json",
            "packages/agent-client-runtime-bridge/src/vendor-handlers.test.ts"
          ],
          "safeDetail": "Pinned Grok 0.2.101 emitted _x.ai/ask_user_question live; the same allowlisted production handler also accepts the historical x.ai/ask_user_question spelling, which this exact build did not emit."
        },
        {
          "id": "cursor-wire-launch",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Cursor-only scenario."
        },
        {
          "id": "cursor-login-lifecycle",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Cursor-only scenario."
        },
        {
          "id": "cursor-extensions-models",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Cursor-only scenario."
        },
        {
          "id": "cursor-load-unsupported",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Cursor-only scenario."
        },
        {
          "id": "desktop-clean-machine",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/desktop-grok-release-run-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "The packaged Grok lane refused a mismatched workspace, interrupted a running turn across app exit, settled the old turn on restart, preserved its one-session-per-process admission rule, restarted cleanly, completed the original durable thread, disabled, and shut down."
        },
        {
          "id": "support-bundle",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/grok-0.2.101-darwin-arm64.json",
            "docs/qa/2026-07-16-acp-provider-lanes/README.md"
          ],
          "safeDetail": "The production main-owned host ran both pinned drivers and exported its closed support schema; the serialized bundle contained zero forbidden prompt, path, auth, or provider-secret matches."
        }
      ]
    },
    {
      "peer": "cursor",
      "profile": { "id": "cursor-agent", "revision": 3 },
      "binary": {
        "command": ["agent", "acp"],
        "reportedVersion": "2026.06.24-00-45-58-9f61de7",
        "classifiedVersion": "2026.6.24",
        "resolvedExecutableName": "cursor-agent",
        "sha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
        "installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa",
        "installationSource": "detected external installation; installer provenance not proven"
      },
      "negotiation": {
        "wireVersion": 1,
        "peerIdentity": { "name": "cursor-agent", "version": "2026.06.24" },
        "authMethodIds": ["cursor_login"],
        "advertisedCapabilityKeys": [
          "loadSession",
          "mcpCapabilities",
          "promptCapabilities",
          "sessionCapabilities"
        ],
        "advertisedSessionCapabilityKeys": ["list"]
      },
      "claimState": "supported",
      "releaseEligible": true,
      "scenarios": [
        {
          "id": "identity-version",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-current-2026-07-17-darwin-arm64.json"
          ],
          "safeDetail": "Exact installed version, launcher digest, and installation closure passed."
        },
        {
          "id": "incompatible-version-rejection",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/profiles.test.ts"],
          "safeDetail": "Admission rejection is hermetic; no alternate real binary was installed."
        },
        {
          "id": "initialize",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Wire v1 initialize passed with sanitized capability identifiers."
        },
        {
          "id": "auth-primary",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "cursor_login authenticated an existing signed-in session without retained auth material."
        },
        {
          "id": "auth-secondary",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/cursor.ts"],
          "safeDetail": "The pinned profile advertises no second auth path."
        },
        {
          "id": "auth-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-auth-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "Using the ordinary signed-in HOME, the client cancelled the advertised cursor_login decision before authenticate; exactly one decision callback ran and the runtime returned typed auth_required without altering login or keychain state."
        },
        {
          "id": "auth-expiry-failure",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/cursor-agent-runtime/src/cursor-peer-runtime.test.ts",
            "packages/agent-client-runtime-bridge/src/session-runtime.ts"
          ],
          "safeDetail": "The production runtime returns typed auth_lost, disposes the failed process, and permits a fresh-process cursor_login retry. Deliberate expiry of the user's stored credential was not required or performed."
        },
        {
          "id": "auth-logout-reauth",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "The exact Cursor initialize response advertised no auth.logout capability; fresh-process cursor_login authentication is covered independently."
        },
        {
          "id": "session-new",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "A disposable-repository session was created."
        },
        {
          "id": "session-list",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Advertised session/list completed successfully and returned an empty result for the disposable workspace."
        },
        {
          "id": "session-load",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "A new peer process loaded the prior session and completed another prompt."
        },
        {
          "id": "session-resume-close-delete",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Resume, close, and delete were not advertised by this build."
        },
        {
          "id": "real-repo-text",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "A real disposable Git repository produced text/thought updates and end_turn."
        },
        {
          "id": "real-repo-tool-plan-config-usage",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-extensions-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A disposable-file tool call emitted three tool updates and created the file; live plan, model listing, mode, and configuration paths passed. The exact adapter returned stopReason without a usage payload, so no unsupported usage variant is claimed."
        },
        {
          "id": "permission-approval",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-extensions-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A disposable project-local deny-by-default policy induced one peer-offered approval selection in an isolated process."
        },
        {
          "id": "permission-refusal",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-extensions-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "A separate pinned process selected one peer-offered refusal before command execution."
        },
        {
          "id": "permission-timeout-stale-policy",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Production host timeout, stale-response fencing, and policy-denial paths pass hermetically; these are host authority semantics rather than peer behavior."
        },
        {
          "id": "fs-terminal-enabled",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/cursor.ts"],
          "safeDetail": "The pinned Cursor profile deliberately withholds reverse filesystem and terminal."
        },
        {
          "id": "fs-terminal-disabled",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Capability-false refusal is hermetic only."
        },
        {
          "id": "mcp-authorized",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "A broker-materialized authorization canary reached only the local MCP server; initialize and tools/list completed in the intended live session."
        },
        {
          "id": "mcp-expired-refusal",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/fixtures/mcp/expired-ref/input.json"
          ],
          "safeDetail": "Expired reference refusal passed before peer launch."
        },
        {
          "id": "mcp-no-durable-secret",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "The canary was absent from Cursor's known post-run persistence roots; exported artifacts retain no credential value."
        },
        {
          "id": "model-mode-config",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Live session advertised modes/config identifiers; session/set_mode and session/set_config_option each completed agent-plan-agent round trips. Vendor model listing remains separately gated."
        },
        {
          "id": "stream-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "session/cancel during a live prompt returned cancelled."
        },
        {
          "id": "reverse-cancel",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "A cursor/create_plan request without native sessionId was runtime-bound, its AbortSignal fired, and the turn returned cancelled."
        },
        {
          "id": "crash-kill-restart",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "The pinned process was SIGKILLed, reported crash, restarted in a new process, loaded the session, and completed the post-repair prompt."
        },
        {
          "id": "malformed-unknown-output",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Malformed and unknown output handling is hermetic only."
        },
        {
          "id": "attachment-repair",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "After orderly process restart, session/load repaired the attachment and the next prompt completed."
        },
        {
          "id": "sequential-turns",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Two turns completed before restart and one after load."
        },
        {
          "id": "multiple-sessions",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Two independent live peer processes completed sessions concurrently, matching the single-root-session-per-process policy."
        },
        {
          "id": "cleanup-bounds",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Single live process shutdown passed; repeated leak proof remains separate."
        },
        {
          "id": "fragmented-oversized",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Frame bounds are production-transport fixture proof."
        },
        {
          "id": "stderr-update-flood",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol-conformance/src/conformance.test.ts"],
          "safeDetail": "Redacted stderr and bounded update handling are hermetic only."
        },
        {
          "id": "queue-stall-timeout-race",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/fault-matrix.json"
          ],
          "safeDetail": "Queue, stall, timeout, late response, and cancellation races are hermetic only."
        },
        {
          "id": "crash-loop-repeat",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Five crash cycles plus five clean cycles completed with zero exit-listener delta and zero pending request counters after clean shutdown."
        },
        {
          "id": "secret-scan",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "The serialized production-host support bundle had zero matches for prompt, private path, authorization, cached-provider-auth, or provider-secret canaries."
        },
        {
          "id": "trust-controls",
          "requiredForSupported": true,
          "result": "fixture-pass",
          "evidenceRefs": ["packages/agent-client-protocol/src/profiles/profiles.test.ts"],
          "safeDetail": "Executable, closure, argv, environment, and profile admission controls pass hermetically."
        },
        {
          "id": "grok-wire-launch",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Grok-only scenario."
        },
        {
          "id": "grok-rich-stream",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Grok-only scenario."
        },
        {
          "id": "grok-load-replay",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Grok-only scenario."
        },
        {
          "id": "grok-question-extensions",
          "requiredForSupported": false,
          "result": "unsupported",
          "evidenceRefs": [],
          "safeDetail": "Grok-only scenario."
        },
        {
          "id": "cursor-wire-launch",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "agent acp negotiated wire v1."
        },
        {
          "id": "cursor-login-lifecycle",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-auth-2026-07-16-darwin-arm64.json",
            "packages/cursor-agent-runtime/src/cursor-peer-runtime.test.ts"
          ],
          "safeDetail": "Existing-session cursor_login and owner cancellation passed live with ordinary HOME; typed pending/cancel/failure/retry behavior is covered without signing the user out or expiring stored credentials."
        },
        {
          "id": "cursor-extensions-models",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json",
            "packages/agent-client-protocol-conformance/compatibility/live/release-run-cursor-extensions-2026-07-16-darwin-arm64.json",
            "packages/agent-client-runtime-bridge/src/vendor-handlers.test.ts",
            "packages/cursor-agent-runtime/src/cursor-peer-runtime.test.ts"
          ],
          "safeDetail": "cursor/create_plan and list_available_models (33 models, 26 configured) passed live. The exact model did not conditionally emit ask_question or update_todos under directed prompts; both allowlisted production handlers pass bounded contract tests and remain available when emitted."
        },
        {
          "id": "cursor-load-unsupported",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json"
          ],
          "safeDetail": "Advertised load passed across process restart; absent resume/close/delete behavior is recorded as unsupported."
        },
        {
          "id": "desktop-clean-machine",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/desktop-cursor-release-run-2026-07-16-darwin-arm64.json"
          ],
          "safeDetail": "The packaged Cursor lane refused a mismatched workspace, interrupted a running turn across app exit, settled the old turn on restart, re-enabled the same durable thread, completed a real continuation, disabled, and shut down cleanly."
        },
        {
          "id": "support-bundle",
          "requiredForSupported": true,
          "result": "live-pass",
          "evidenceRefs": [
            "packages/agent-client-protocol-conformance/compatibility/live/cursor-2026.06.24-darwin-arm64.json",
            "docs/qa/2026-07-16-acp-provider-lanes/README.md"
          ],
          "safeDetail": "The production main-owned host ran both pinned drivers and exported its closed support schema; the serialized bundle contained zero forbidden prompt, path, auth, or provider-secret matches."
        }
      ]
    }
  ]
}

  },
  "scripts": {
    "check:artifacts": "node --import tsx scripts/generate-artifacts.ts --check",
    "check:release": "node --import tsx scripts/check-release-matrix.ts",
    "check:release:freshness": "node --import tsx scripts/check-release-matrix.ts --require-freshness",
    "generate": "node --import tsx scripts/generate-artifacts.ts",
    "live:grok": "node --import tsx scripts/live-probe.ts grok",
    "live:cursor": "node --import tsx scripts/live-probe.ts cursor",
    "live:release": "node --import tsx scripts/live-release-suite.ts",
    "report": "node --import tsx scripts/run-conformance-report.ts",
    "test": "vp test --run packages/agent-client-protocol-conformance/src/conformance.test.ts packages/agent-client-protocol-conformance/src/release-evidence.test.ts",
    "test": "vp test --run packages/agent-client-protocol-conformance/src/conformance.test.ts",
    "typecheck": "tsc -p tsconfig.json --noEmit"
  },
  "dependencies": {

import { existsSync, readFileSync, readdirSync } from "node:fs";
import { resolve } from "node:path";

import { evaluateAcpReleaseMatrixGate, validateAcpReleaseMatrix } from "../src/release.ts";
import {
  validateAcpDesktopReleaseArtifact,
  validateAcpLiveReleaseArtifact,
  type AcpDesktopReleaseArtifact,
  type AcpLiveReleaseArtifact,
} from "../src/live-release.ts";

const path = resolve(import.meta.dirname, "../compatibility/release-matrix.json");
const matrix = JSON.parse(readFileSync(path, "utf8")) as unknown;
const validation = validateAcpReleaseMatrix(matrix);
const requireFreshness = process.argv.includes("--require-freshness");
const gate = evaluateAcpReleaseMatrixGate(validation, requireFreshness ? "release" : "push");
const liveDirectory = resolve(import.meta.dirname, "../compatibility/live");
const liveArtifactErrors = readdirSync(liveDirectory)
  .filter((name) => name.startsWith("release-run-") && name.endsWith(".json"))
  .flatMap((name) => {
    try {
      const artifact = JSON.parse(readFileSync(resolve(liveDirectory, name), "utf8")) as AcpLiveReleaseArtifact;
      return validateAcpLiveReleaseArtifact(artifact).errors.map((error) => `${name}: ${error}`);
    } catch {
      return [`${name}: artifact is not valid JSON or does not match the closed schema`];
    }
  });
const desktopArtifactErrors = readdirSync(liveDirectory)
  .filter((name) => name.startsWith("desktop-") && name.includes("-release-run-") && name.endsWith(".json"))
  .flatMap((name) => {
    try {
      const artifact = JSON.parse(readFileSync(resolve(liveDirectory, name), "utf8")) as AcpDesktopReleaseArtifact;
      return validateAcpDesktopReleaseArtifact(artifact).errors.map(
        (error) => `${name}: ${error}`,
      );
    } catch {
      return [`${name}: artifact is not valid JSON or does not match the closed schema`];
    }
  });
const repositoryRoot = resolve(import.meta.dirname, "../../..");
const missingEvidence =
  typeof matrix === "object" && matrix !== null && "peers" in matrix && Array.isArray(matrix.peers)
    ? matrix.peers.flatMap((peer: unknown) =>
        typeof peer === "object" && peer !== null && "scenarios" in peer && Array.isArray(peer.scenarios)
          ? peer.scenarios.flatMap((scenario: unknown) =>
              typeof scenario === "object" &&
              scenario !== null &&
              "evidenceRefs" in scenario &&
              Array.isArray(scenario.evidenceRefs)
                ? scenario.evidenceRefs.filter(
                    (ref: unknown): ref is string =>
                      typeof ref === "string" && !existsSync(resolve(repositoryRoot, ref)),
                  )
                : [],
            )
          : [],
      )
    : [];
const result = {
  valid:
    gate.valid &&
    missingEvidence.length === 0 &&
    liveArtifactErrors.length === 0 &&
    desktopArtifactErrors.length === 0,
  errors: [
    ...gate.errors,
    ...missingEvidence.map((ref) => `missing evidence ref: ${ref}`),
    ...liveArtifactErrors,
    ...desktopArtifactErrors,
  ],
  ...(validation.expiry === undefined ? {} : { expiry: validation.expiry }),
};
if (!requireFreshness && gate.warning !== undefined)
  process.stderr.write(`WARNING: ${gate.warning}\n`);
process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
if (!result.valid) process.exitCode = 1;

import { execFile } from "node:child_process";
import { createHash, randomBytes } from "node:crypto";
import { mkdir, mkdtemp, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
import { tmpdir } from "node:os";
import { isAbsolute, join, resolve, sep } from "node:path";
import { promisify } from "node:util";

import {
  createCursorAcpPeerRuntime,
  probeCursorAcpExecutable,
} from "@openagentsinc/cursor-agent-runtime";
import { CURSOR_ACP_PROFILE } from "@openagentsinc/agent-client-protocol/extensions/cursor";
import { GROK_ACP_PROFILE } from "@openagentsinc/agent-client-protocol/extensions/grok";
import { createGrokAcpPeerRuntime, probeGrokAcpExecutable } from "@openagentsinc/grok-harness";
import { AgentStdioTransport } from "@openagentsinc/agent-stdio-transport";

import {
  buildAcpLiveReleaseArtifact,
  validateAcpLiveReleaseArtifact,
  type AcpLiveReleasePeerReceipt,
  type AcpLiveReleaseScenarioReceipt,
} from "../src/live-release.ts";

const execFileAsync = promisify(execFile);
const arm = process.env.ACP_RELEASE_LIVE;
if (arm !== "1") {
  process.stderr.write(
    "Set ACP_RELEASE_LIVE=1 to run real Grok/Cursor processes in disposable Git workspaces.\n",
  );
  process.exit(2);
}

const selection = process.env.ACP_RELEASE_PEER ?? "both";
if (selection !== "grok" && selection !== "cursor" && selection !== "both")
  throw new TypeError("ACP_RELEASE_PEER must be grok, cursor, or both");

const revision = (
  await execFileAsync("git", ["rev-parse", "HEAD"], { maxBuffer: 4_096 })
).stdout.trim();
const recordedAt = new Date().toISOString();
const platform = `${process.platform}-${process.arch}-node-${process.versions.node}`;

const scenario = (
  id: AcpLiveReleaseScenarioReceipt["id"],
  result: AcpLiveReleaseScenarioReceipt["result"],
  safeDetail: string,
): AcpLiveReleaseScenarioReceipt => ({ id, result, safeDetail });

const failedPeer = (peer: "grok" | "cursor"): AcpLiveReleasePeerReceipt => ({
  peer,
  result: "fail",
  binary: {
    reportedVersion: "unavailable",
    executableSha256: "0".repeat(64),
    ...(peer === "cursor" ? { installationClosureSha256: "0".repeat(64) } : {}),
  },
  negotiation: { wireVersion: 1, authMethodIds: [], capabilityKeys: [] },
  scenarios: [
    scenario("initialize", "fail", "Live release runner failed before a complete receipt"),
  ],
  counters: {
    updateCount: 0,
    updateKinds: [],
    promptCount: 0,
    updateMetadataCount: 0,
    completionMetadataCount: 0,
    usageMetadataCount: 0,
  },
});

const capabilityKeys = (value: Readonly<Record<string, boolean>>): string[] =>
  Object.entries(value)
    .filter(([, enabled]) => enabled)
    .map(([key]) => key)
    .toSorted();

const boundedCanaryScan = async (
  roots: ReadonlyArray<string>,
  canary: string,
  modifiedSince: number,
): Promise<Readonly<{ complete: boolean; files: number; bytes: number; matches: number }>> => {
  const pending = [...new Set(roots)];
  const needle = Buffer.from(canary);
  const deadlineAt = Date.now() + 30_000;
  let files = 0;
  let bytes = 0;
  let matches = 0;
  const inspectFile = async (candidate: string): Promise<void> => {
    const metadata = await stat(candidate).catch(() => undefined);
    if (metadata === undefined || !metadata.isFile() || metadata.mtimeMs < modifiedSince) return;
    files += 1;
    if (files >= 20_000 || Date.now() >= deadlineAt) return;
    const content = await readFile(candidate).catch(() => undefined);
    if (content === undefined) return;
    bytes += content.byteLength;
    if (content.includes(needle)) matches += 1;
  };
  while (
    pending.length > 0 &&
    files < 20_000 &&
    bytes < 256 * 1_048_576 &&
    Date.now() < deadlineAt
  ) {
    const directory = pending.pop()!;
    const rootMetadata = await stat(directory).catch(() => undefined);
    if (rootMetadata?.isFile()) {
      await inspectFile(directory);
      continue;
    }
    const entries = await readdir(directory, { withFileTypes: true }).catch(() => []);
    for (const entry of entries) {
      const candidate = join(directory, entry.name);
      if (entry.isDirectory()) pending.push(candidate);
      else if (entry.isFile()) {
        await inspectFile(candidate);
        if (files >= 20_000 || bytes >= 256 * 1_048_576 || Date.now() >= deadlineAt) break;
      }
    }
  }
  return {
    complete:
      pending.length === 0 && files < 20_000 && bytes < 256 * 1_048_576 && Date.now() < deadlineAt,
    files,
    bytes,
    matches,
  };
};

const workspace = async (peer: "grok" | "cursor"): Promise<string> => {
  const root = await mkdtemp(join(tmpdir(), `openagents-acp-release-${peer}-`));
  await execFileAsync("git", ["init", "--quiet", root], { maxBuffer: 4_096 });
  await writeFile(join(root, "README.md"), "# Disposable ACP release workspace\n", {
    mode: 0o600,
  });
  return root;
};

const object = (value: unknown): Record<string, unknown> =>
  value !== null && typeof value === "object" && !Array.isArray(value)
    ? (value as Record<string, unknown>)
    : {};

const qualifyCursorExtensions = async (
  root: string,
  probe: Awaited<ReturnType<typeof probeCursorAcpExecutable>>,
): Promise<
  Readonly<{
    questions: number;
    plans: number;
    todos: number;
    models: number;
  }>
> => {
  let transport: AgentStdioTransport | undefined;
  let questions = 0;
  let plans = 0;
  let todos = 0;
  try {
    transport = await AgentStdioTransport.start({
      executable: probe.realPath,
      args: ["acp"],
      cwd: root,
      env: { HOME: process.env.HOME, PATH: "/usr/bin:/bin" },
      identityPin: { realPath: probe.realPath, sha256: probe.sha256 },
      methodKinds: CURSOR_ACP_PROFILE.methods
        .filter((entry) => entry.direction === "agent-to-client")
        .map((entry) => ({ method: entry.method, kind: entry.kind })),
      limits: { requestTimeoutMs: 120_000 },
    });
    transport.registerReverseHandler("cursor/ask_question", async (params) => {
      questions += 1;
      const answers: Record<string, ReadonlyArray<string>> = {};
      const requested = object(params).questions;
      if (Array.isArray(requested)) {
        for (const rawQuestion of requested) {
          const question = object(rawQuestion);
          if (typeof question.id !== "string") continue;
          const firstOption = Array.isArray(question.options) ? object(question.options[0]) : {};
          answers[question.id] = [
            typeof firstOption.label === "string" ? firstOption.label : "Continue",
          ];
        }
      }
      return { answers };
    });
    transport.registerReverseHandler("cursor/create_plan", async () => {
      plans += 1;
      return { accepted: true };
    });
    transport.onNotification("cursor/update_todos", () => {
      todos += 1;
    });
    const initialized = object(
      await transport.request("initialize", {
        protocolVersion: 1,
        clientCapabilities: {
          fs: { readTextFile: false, writeTextFile: false },
          terminal: false,
        },
        clientInfo: { name: "openagents-release-qualification", version: "0.1.0" },
      }),
    );
    const authMethods = Array.isArray(initialized.authMethods)
      ? initialized.authMethods.map(object)
      : [];
    if (!authMethods.some((method) => method.id === "cursor_login"))
      throw new Error("Cursor did not advertise cursor_login");
    await transport.request("authenticate", {
      methodId: "cursor_login",
      _meta: { headless: true },
    });
    const attached = object(await transport.request("session/new", { cwd: root, mcpServers: [] }));
    if (typeof attached.sessionId !== "string") throw new Error("Cursor returned no session id");
    const listedModels = object(
      await transport.request("cursor/list_available_models", {}).catch(() => ({})),
    );
    const models = Array.isArray(listedModels.models) ? listedModels.models.length : 0;
    for (const [modeId, text] of [
      [
        "agent",
        "Call AskQuestion before answering. Ask one multiple-choice clarification question, accept the answer, then reply briefly.",
      ],
      [
        "plan",
        "Create a short reviewed plan and maintain a todo list for adding one sentence to README.md. Do not edit any file.",
      ],
      [
        "agent",
        "Call TodoWrite to create and then complete one harmless planning todo. Do not edit any file.",
      ],
    ] as const) {
      await transport
        .request("session/set_mode", { sessionId: attached.sessionId, modeId })
        .catch(() => undefined);
      await transport
        .request("session/prompt", {
          sessionId: attached.sessionId,
          prompt: [{ type: "text", text }],
        })
        .catch(() => undefined);
    }
    return { questions, plans, todos, models };
  } finally {
    await transport?.dispose();
  }
};

const qualifyCursorPermission = async (
  root: string,
  probe: Awaited<ReturnType<typeof probeCursorAcpExecutable>>,
  decision: "approve" | "refuse",
): Promise<number> => {
  let transport: AgentStdioTransport | undefined;
  let selections = 0;
  try {
    await mkdir(join(root, ".cursor"), { recursive: true });
    await writeFile(
      join(root, ".cursor", "cli.json"),
      `${JSON.stringify({ permissions: { allow: [], deny: [] } }, null, 2)}\n`,
      { mode: 0o600 },
    );
    transport = await AgentStdioTransport.start({
      executable: probe.realPath,
      args: ["acp"],
      cwd: root,
      env: { HOME: process.env.HOME, PATH: "/usr/bin:/bin" },
      identityPin: { realPath: probe.realPath, sha256: probe.sha256 },
      methodKinds: [{ method: "session/request_permission", kind: "request" }],
      limits: { requestTimeoutMs: 120_000 },
    });
    transport.registerReverseHandler("session/request_permission", async (params) => {
      const rawOptions = object(params).options;
      const options: ReadonlyArray<Record<string, unknown>> = Array.isArray(rawOptions)
        ? rawOptions.map(object)
        : [];
      const preferred = options.find((option) =>
        decision === "approve"
          ? typeof option.kind === "string" && option.kind.startsWith("allow")
          : typeof option.kind === "string" &&
            (option.kind.startsWith("reject") || option.kind.startsWith("deny")),
      );
      if (typeof preferred?.optionId !== "string") return { outcome: { outcome: "cancelled" } };
      selections += 1;
      return { outcome: { outcome: "selected", optionId: preferred.optionId } };
    });
    const initialized = object(
      await transport.request("initialize", {
        protocolVersion: 1,
        clientCapabilities: {
          fs: { readTextFile: false, writeTextFile: false },
          terminal: false,
        },
        clientInfo: { name: "openagents-release-qualification", version: "0.1.0" },
      }),
    );
    const authMethods = Array.isArray(initialized.authMethods)
      ? initialized.authMethods.map(object)
      : [];
    if (!authMethods.some((method) => method.id === "cursor_login"))
      throw new Error("Cursor did not advertise cursor_login");
    await transport.request("authenticate", {
      methodId: "cursor_login",
      _meta: { headless: true },
    });
    const attached = object(await transport.request("session/new", { cwd: root, mcpServers: [] }));
    if (typeof attached.sessionId !== "string") throw new Error("Cursor returned no session id");
    await transport
      .request("session/prompt", {
        sessionId: attached.sessionId,
        prompt: [
          {
            type: "text",
            text:
              decision === "approve"
                ? "Run the shell command mkdir CURSOR_PERMISSION_ALLOW_PROOF now, then reply briefly."
                : "Run the shell command mkdir CURSOR_PERMISSION_REFUSE_PROOF now, then acknowledge if permission is rejected.",
          },
        ],
      })
      .catch(() => undefined);
    return selections;
  } finally {
    await transport?.dispose();
  }
};

const qualifyGrokReverse = async (
  root: string,
  probe: Awaited<ReturnType<typeof probeGrokAcpExecutable>>,
): Promise<
  Readonly<{
    questionMethods: ReadonlyArray<string>;
    permissionApprovals: number;
    permissionRefusals: number;
    filesystemCalls: number;
    terminalCalls: number;
  }>
> => {
  let transport: AgentStdioTransport | undefined;
  const questionMethods = new Set<string>();
  let permissionApprovals = 0;
  let permissionRefusals = 0;
  let filesystemCalls = 0;
  let terminalCalls = 0;
  let preferApproval = true;
  try {
    transport = await AgentStdioTransport.start({
      executable: probe.realPath,
      args: ["agent", "stdio"],
      cwd: root,
      env: { HOME: process.env.HOME },
      identityPin: { realPath: probe.realPath, sha256: probe.sha256 },
      methodKinds: GROK_ACP_PROFILE.methods.map((entry) => ({
        method: entry.method,
        kind: entry.kind,
      })),
      limits: { requestTimeoutMs: 120_000 },
    });
    for (const method of ["x.ai/ask_user_question", "_x.ai/ask_user_question"] as const) {
      transport.registerReverseHandler(method, async (params) => {
        questionMethods.add(method);
        const answers: Record<string, ReadonlyArray<string>> = {};
        const requested = object(params).questions;
        if (Array.isArray(requested)) {
          for (const rawQuestion of requested) {
            const question = object(rawQuestion);
            if (typeof question.question !== "string") continue;
            const firstOption = Array.isArray(question.options) ? object(question.options[0]) : {};
            answers[question.question] = [
              typeof firstOption.label === "string" ? firstOption.label : "Continue",
            ];
          }
        }
        return { outcome: "accepted", answers };
      });
    }
    transport.registerReverseHandler("session/request_permission", async (params) => {
      const rawOptions = object(params).options;
      const options: ReadonlyArray<Record<string, unknown>> = Array.isArray(rawOptions)
        ? rawOptions.map(object)
        : [];
      const preferred = options.find((option) =>
        preferApproval
          ? typeof option.kind === "string" && option.kind.startsWith("allow")
          : typeof option.kind === "string" &&
            (option.kind.startsWith("reject") || option.kind.startsWith("deny")),
      );
      if (typeof preferred?.optionId !== "string") return { outcome: { outcome: "cancelled" } };
      if (preferApproval) permissionApprovals += 1;
      else permissionRefusals += 1;
      return { outcome: { outcome: "selected", optionId: preferred.optionId } };
    });
    transport.registerReverseHandler("fs/read_text_file", async () => {
      filesystemCalls += 1;
      return { content: "# Disposable ACP qualification workspace\n" };
    });
    transport.registerReverseHandler("fs/write_text_file", async () => {
      filesystemCalls += 1;
      return {};
    });
    transport.registerReverseHandler("terminal/create", async () => {
      terminalCalls += 1;
      return { terminalId: "terminal.release.proof" };
    });
    transport.registerReverseHandler("terminal/output", async () => {
      terminalCalls += 1;
      return { output: "", truncated: false };
    });
    transport.registerReverseHandler("terminal/wait_for_exit", async () => {
      terminalCalls += 1;
      return { exitCode: 0 };
    });
    for (const method of ["terminal/kill", "terminal/release"] as const)
      transport.registerReverseHandler(method, async () => {
        terminalCalls += 1;
        return {};
      });
    const initialized = object(
      await transport.request("initialize", {
        protocolVersion: 1,
        clientCapabilities: {
          fs: { readTextFile: true, writeTextFile: true },
          terminal: true,
        },
        clientInfo: { name: "openagents-release-qualification", version: "0.1.0" },
      }),
    );
    const authMethods = Array.isArray(initialized.authMethods)
      ? initialized.authMethods.map(object)
      : [];
    if (!authMethods.some((method) => method.id === "cached_token"))
      throw new Error("Grok did not advertise cached_token");
    await transport.request("authenticate", {
      methodId: "cached_token",
      _meta: { headless: true },
    });
    const attached = object(
      await transport.request("session/new", {
        cwd: root,
        mcpServers: [],
        _meta: {
          yoloMode: false,
          autoMode: false,
          clientIdentifier: "openagents-release-qualification",
        },
      }),
    );
    if (typeof attached.sessionId !== "string") throw new Error("Grok returned no session id");
    for (const text of [
      "Before answering, call ask_user_question with one multiple-choice question, accept the answer, then reply briefly.",
      "Use the ACP client filesystem read capability to read README.md, then reply briefly.",
      "Use the ACP client terminal capability for one harmless printf command, then reply briefly.",
    ])
      await transport
        .request("session/prompt", {
          sessionId: attached.sessionId,
          prompt: [{ type: "text", text }],
        })
        .catch(() => undefined);
    preferApproval = true;
    await transport
      .request("session/prompt", {
        sessionId: attached.sessionId,
        prompt: [{ type: "text", text: "Create PERMISSION_ALLOW_GROK.txt with one word." }],
      })
      .catch(() => undefined);
    preferApproval = false;
    const refusalSession = object(
      await transport.request("session/new", {
        cwd: root,
        mcpServers: [],
        _meta: {
          yoloMode: false,
          autoMode: false,
          clientIdentifier: "openagents-release-qualification",
        },
      }),
    );
    if (typeof refusalSession.sessionId !== "string")
      throw new Error("Grok returned no refusal-session id");
    await transport
      .request("session/prompt", {
        sessionId: refusalSession.sessionId,
        prompt: [
          {
            type: "text",
            text: "Run the shell command mkdir PERMISSION_REFUSE_GROK, then acknowledge if permission is rejected.",
          },
        ],
      })
      .catch(() => undefined);
    return {
      questionMethods: [...questionMethods].toSorted(),
      permissionApprovals,
      permissionRefusals,
      filesystemCalls,
      terminalCalls,
    };
  } finally {
    await transport?.dispose();
  }
};

const runGrok = async (): Promise<AcpLiveReleasePeerReceipt> => {
  const root = await workspace("grok");
  const canary = `oa-mcp-${randomBytes(24).toString("hex")}`;
  const marker = join(root, ".openagents-mcp-release-marker");
  const markerDigest = createHash("sha256").update(canary).digest("hex");
  const updates = new Set<string>();
  let updateCount = 0;
  let updateMetadataCount = 0;
  let completionMetadataCount = 0;
  let usageMetadataCount = 0;
  let assistantText = "";
  let promptCount = 0;
  let peer: Awaited<ReturnType<typeof createGrokAcpPeerRuntime>> | undefined;
  let authCancelPeer: Awaited<ReturnType<typeof createGrokAcpPeerRuntime>> | undefined;
  try {
    const probe = await probeGrokAcpExecutable();
    let authDecisionCount = 0;
    authCancelPeer = await createGrokAcpPeerRuntime({
      cwd: root,
      probe,
      environment: { HOME: process.env.HOME },
      requestedInteractiveAuthMethod: "grok.com",
      authorizeLogin: async () => {
        authDecisionCount += 1;
        return "cancel";
      },
      requestTimeoutMs: 30_000,
    });
    const authCancelled = await authCancelPeer.start();
    const authCancelPassed =
      authDecisionCount === 1 && !authCancelled.ok && authCancelled.reason === "auth_required";
    await authCancelPeer.shutdown();
    authCancelPeer = undefined;
    peer = await createGrokAcpPeerRuntime({
      cwd: root,
      probe,
      environment: { HOME: process.env.HOME },
      requestTimeoutMs: 60_000,
      materializeMcp: async (refs) => ({
        servers: refs.map((ref) => ({
          type: "stdio" as const,
          name: ref.serverRef,
          command: process.execPath,
          args: [resolve(import.meta.dirname, "live-mcp-server.mjs")],
          env: [
            { name: "OPENAGENTS_MCP_CANARY", value: canary },
            { name: "OPENAGENTS_MCP_MARKER", value: marker },
          ],
        })),
        resolvedRefs: refs.map((ref) => ({ serverRef: ref.serverRef, transport: ref.transport })),
        receiptRefs: ["receipt.acp.release.mcp"],
        dispose: () => undefined,
      }),
      onUpdate: (record) => {
        updateCount += 1;
        if (record.notificationMeta !== undefined) {
          updateMetadataCount += 1;
          if (
            typeof record.notificationMeta.totalTokens === "number" ||
            record.notificationMeta.usage !== undefined
          )
            usageMetadataCount += 1;
        }
        const update = record.update as {
          sessionUpdate?: unknown;
          content?: { text?: unknown };
        };
        if (typeof update.sessionUpdate === "string") updates.add(update.sessionUpdate);
        if (
          update.sessionUpdate === "agent_message_chunk" &&
          typeof update.content?.text === "string"
        )
          assistantText += update.content.text;
      },
    });
    const started = await peer.start();
    if (!started.ok) throw new Error(`start:${started.reason}`);
    const scenarios: AcpLiveReleaseScenarioReceipt[] = [
      scenario("identity-version", "live-pass", "Exact Grok version and executable digest probed"),
      scenario("initialize", "live-pass", "Wire version 1 initialize completed"),
      scenario("auth-primary", "live-pass", "Advertised cached authentication completed"),
      scenario(
        "auth-cancel",
        authCancelPassed ? "live-pass" : "fail",
        authCancelPassed
          ? "Client cancelled explicitly requested Grok login before authenticate"
          : "Client-side Grok login cancellation did not return auth required",
      ),
    ];
    const attached = await peer.newSession({
      cwd: root,
      canonicalThreadSeed: "release-grok",
      mcpRefs: [
        {
          serverRef: "release-proof",
          transport: "stdio",
          expiresAt: new Date(Date.now() + 300_000).toISOString(),
        },
      ],
    });
    if (!attached.ok) throw new Error(`session-new:${attached.reason}`);
    scenarios.push(scenario("session-new", "live-pass", "Disposable repository session created"));
    for (const promptText of [
      "Reply with exactly GROK_RELEASE_ONE and do not use tools.",
      "Reply with exactly GROK_RELEASE_TWO and do not use tools.",
    ]) {
      const prompted = await peer.prompt(attached.value.peerSessionId, [
        { type: "text", text: promptText },
      ]);
      promptCount += 1;
      if (!prompted.ok || prompted.value.terminal !== "completed")
        throw new Error(`prompt:${prompted.ok ? prompted.value.terminal : prompted.reason}`);
      if (prompted.value.completionMeta !== undefined) {
        completionMetadataCount += 1;
        if (
          typeof prompted.value.completionMeta.totalTokens === "number" ||
          prompted.value.completionMeta.usage !== undefined
        )
          usageMetadataCount += 1;
      }
    }
    scenarios.push(
      scenario(
        "real-repo-text",
        assistantText.length > 0 ? "live-pass" : "fail",
        assistantText.length > 0
          ? "Real disposable repository produced assistant text"
          : "No assistant text was observed",
      ),
      scenario("sequential-turns", "live-pass", "Two sequential prompts completed"),
    );
    if (started.value.capabilities.list) {
      const listed = await peer.listSessions({ cwd: root });
      scenarios.push(
        scenario(
          "session-list",
          listed.ok ? "live-pass" : "fail",
          listed.ok ? "Advertised session list completed" : `Session list failed ${listed.reason}`,
        ),
      );
    } else {
      scenarios.push(
        scenario("session-list", "not-observed", "Peer did not advertise session list"),
      );
    }
    const beforeCancel = updateCount;
    const pending = peer.prompt(attached.value.peerSessionId, [
      { type: "text", text: "Write a detailed twenty paragraph explanation of binary trees." },
    ]);
    promptCount += 1;
    await new Promise((resolve) => setTimeout(resolve, 250));
    const cancelled = await peer.cancel(attached.value.peerSessionId, "user");
    const cancelledPrompt = await pending;
    const cancelPassed =
      cancelled.ok &&
      ((!cancelledPrompt.ok && cancelledPrompt.reason === "cancelled") ||
        (cancelledPrompt.ok && cancelledPrompt.value.terminal === "cancelled"));
    scenarios.push(
      scenario(
        "stream-cancel",
        cancelPassed ? "live-pass" : "not-observed",
        cancelPassed
          ? `Streaming prompt cancelled after ${Math.max(0, updateCount - beforeCancel)} updates`
          : "Prompt completed before cancellation could be observed",
      ),
    );
    const observedMarker = (await readFile(marker, "utf8").catch(() => "")).trim();
    scenarios.push(
      scenario(
        "mcp-authorized",
        observedMarker === markerDigest ? "live-pass" : "fail",
        observedMarker === markerDigest
          ? "Brokered MCP canary reached only the disposable stdio server"
          : "Brokered MCP disposable server did not observe its canary",
      ),
    );
    await peer.shutdown();
    peer = undefined;
    const home = process.env.HOME;
    const scan = await boundedCanaryScan(
      [
        root,
        ...(home === undefined
          ? []
          : [
              ...[
                "active_sessions.json",
                "auth.json",
                "config.toml",
                "models_cache.json",
                "slash-mru.json",
                "tip_cursor.json",
                "worktrees.db",
              ].map((name) => join(home, ".grok", name)),
              join(home, ".grok", "sessions", encodeURIComponent(root)),
              join(home, ".grok", "logs", "mcp"),
              join(home, ".config", "grok"),
              join(home, "Library", "Application Support", "Grok"),
            ]),
      ],
      canary,
      Date.parse(recordedAt) - 5_000,
    );
    scenarios.push(
      scenario(
        "mcp-no-durable-secret",
        scan.complete && scan.matches === 0 ? "live-pass" : "fail",
        scan.complete && scan.matches === 0
          ? `Bounded post-shutdown scan found zero canary matches in ${scan.files} files`
          : `Bounded post-shutdown scan incomplete after ${scan.files} files or found ${scan.matches} matches`,
      ),
      scenario("cleanup-bounds", "live-pass", "Runtime completed bounded shutdown before scanning"),
    );
    const reverse = await qualifyGrokReverse(root, probe);
    scenarios.push(
      scenario(
        "grok-question-extensions",
        reverse.questionMethods.length === 2 ? "live-pass" : "not-observed",
        `Pinned question methods observed: ${reverse.questionMethods.length}`,
      ),
      scenario(
        "permission-approval",
        reverse.permissionApprovals > 0 ? "live-pass" : "not-observed",
        `Pinned permission approval selections: ${reverse.permissionApprovals}`,
      ),
      scenario(
        "permission-refusal",
        reverse.permissionRefusals > 0 ? "live-pass" : "not-observed",
        `Pinned permission refusal selections: ${reverse.permissionRefusals}`,
      ),
      scenario(
        "fs-terminal-enabled",
        reverse.filesystemCalls > 0 && reverse.terminalCalls > 0 ? "live-pass" : "not-observed",
        `Pinned reverse calls: filesystem ${reverse.filesystemCalls}, terminal ${reverse.terminalCalls}`,
      ),
    );
    return {
      peer: "grok",
      result: scenarios.some((entry) => entry.result === "fail") ? "fail" : "partial",
      binary: {
        reportedVersion: probe.reportedVersion,
        executableSha256: probe.sha256,
      },
      negotiation: {
        wireVersion: 1,
        authMethodIds: started.value.authMethodIds,
        capabilityKeys: capabilityKeys(started.value.capabilities),
      },
      scenarios,
      counters: {
        updateCount,
        updateKinds: [...updates].toSorted(),
        promptCount,
        updateMetadataCount,
        completionMetadataCount,
        usageMetadataCount,
      },
    };
  } finally {
    await authCancelPeer?.shutdown().catch(() => undefined);
    await peer?.shutdown().catch(() => undefined);
    await rm(root, { recursive: true, force: true });
  }
};

const runCursor = async (): Promise<AcpLiveReleasePeerReceipt> => {
  const root = await workspace("cursor");
  const updates = new Set<string>();
  let updateCount = 0;
  let updateMetadataCount = 0;
  let completionMetadataCount = 0;
  let usageMetadataCount = 0;
  let assistantText = "";
  let promptCount = 0;
  let peer: Awaited<ReturnType<typeof createCursorAcpPeerRuntime>> | undefined;
  let authCancelPeer: Awaited<ReturnType<typeof createCursorAcpPeerRuntime>> | undefined;
  try {
    const probe = await probeCursorAcpExecutable();
    let authDecisionCount = 0;
    authCancelPeer = await createCursorAcpPeerRuntime({
      cwd: root,
      probe,
      environment: { HOME: process.env.HOME },
      authorizeLogin: async () => {
        authDecisionCount += 1;
        return "cancel";
      },
      requestTimeoutMs: 30_000,
    });
    const authCancelled = await authCancelPeer.start();
    const authCancelPassed =
      authDecisionCount === 1 && !authCancelled.ok && authCancelled.reason === "auth_required";
    await authCancelPeer.shutdown();
    authCancelPeer = undefined;
    peer = await createCursorAcpPeerRuntime({
      cwd: root,
      probe,
      environment: { HOME: process.env.HOME },
      authorizeLogin: async () => "continue",
      requestTimeoutMs: 60_000,
      onUpdate: (record) => {
        updateCount += 1;
        if (record.notificationMeta !== undefined) {
          updateMetadataCount += 1;
          if (
            typeof record.notificationMeta.totalTokens === "number" ||
            record.notificationMeta.usage !== undefined
          )
            usageMetadataCount += 1;
        }
        const update = record.update as {
          sessionUpdate?: unknown;
          content?: { text?: unknown };
        };
        if (typeof update.sessionUpdate === "string") updates.add(update.sessionUpdate);
        if (
          update.sessionUpdate === "agent_message_chunk" &&
          typeof update.content?.text === "string"
        )
          assistantText += update.content.text;
      },
    });
    const started = await peer.start();
    if (!started.ok) throw new Error(`start:${started.reason}`);
    const scenarios: AcpLiveReleaseScenarioReceipt[] = [
      scenario(
        "identity-version",
        "live-pass",
        "Exact Cursor version and installation closure probed",
      ),
      scenario("initialize", "live-pass", "Wire version 1 initialize completed"),
      scenario("auth-primary", "live-pass", "Advertised Cursor login completed"),
      scenario(
        "auth-cancel",
        authCancelPassed ? "live-pass" : "fail",
        authCancelPassed
          ? "Client cancelled advertised login before authenticate and received auth required"
          : "Client-side login cancellation did not return the typed auth-required outcome",
      ),
    ];
    const attached = await peer.newSession({ cwd: root, canonicalThreadSeed: "release-cursor" });
    if (!attached.ok) throw new Error(`session-new:${attached.reason}`);
    scenarios.push(scenario("session-new", "live-pass", "Disposable repository session created"));
    for (const promptText of [
      "Reply with exactly CURSOR_RELEASE_ONE and do not use tools.",
      "Reply with exactly CURSOR_RELEASE_TWO and do not use tools.",
    ]) {
      const prompted = await peer.prompt(attached.value.peerSessionId, [
        { type: "text", text: promptText },
      ]);
      promptCount += 1;
      if (!prompted.ok || prompted.value.terminal !== "completed")
        throw new Error(`prompt:${prompted.ok ? prompted.value.terminal : prompted.reason}`);
      if (prompted.value.completionMeta !== undefined) {
        completionMetadataCount += 1;
        if (
          typeof prompted.value.completionMeta.totalTokens === "number" ||
          prompted.value.completionMeta.usage !== undefined
        )
          usageMetadataCount += 1;
      }
    }
    scenarios.push(
      scenario(
        "real-repo-text",
        assistantText.length > 0 ? "live-pass" : "fail",
        assistantText.length > 0
          ? "Real disposable repository produced assistant text"
          : "No assistant text was observed",
      ),
      scenario("sequential-turns", "live-pass", "Two sequential prompts completed"),
    );
    if (started.value.capabilities.list) {
      const listed = await peer.listSessions({ cwd: root });
      scenarios.push(
        scenario(
          "session-list",
          listed.ok ? "live-pass" : "fail",
          listed.ok ? "Advertised session list completed" : `Session list failed ${listed.reason}`,
        ),
      );
    }
    const modes = attached.value.modes?.availableModes ?? [];
    const alternateMode = modes.find((mode) => mode.id !== attached.value.modes?.currentModeId);
    if (alternateMode !== undefined) {
      const changed = await peer.setMode(attached.value.peerSessionId, alternateMode.id);
      scenarios.push(
        scenario(
          "model-mode-config",
          changed.ok ? "live-pass" : "fail",
          changed.ok ? "Advertised mode change completed" : `Mode change failed ${changed.reason}`,
        ),
      );
    } else {
      scenarios.push(
        scenario("model-mode-config", "not-observed", "No alternate advertised mode was available"),
      );
    }
    const beforeCancel = updateCount;
    const pending = peer.prompt(attached.value.peerSessionId, [
      { type: "text", text: "Write a detailed twenty paragraph explanation of binary trees." },
    ]);
    promptCount += 1;
    await new Promise((resolve) => setTimeout(resolve, 250));
    const cancelled = await peer.cancel(attached.value.peerSessionId, "user");
    const cancelledPrompt = await pending;
    const cancelPassed =
      cancelled.ok &&
      ((!cancelledPrompt.ok && cancelledPrompt.reason === "cancelled") ||
        (cancelledPrompt.ok && cancelledPrompt.value.terminal === "cancelled"));
    scenarios.push(
      scenario(
        "stream-cancel",
        cancelPassed ? "live-pass" : "not-observed",
        cancelPassed
          ? `Streaming prompt cancelled after ${Math.max(0, updateCount - beforeCancel)} updates`
          : "Prompt completed before cancellation could be observed",
      ),
      scenario(
        "cleanup-bounds",
        "not-observed",
        "Shutdown ran in finally; this runner does not retain process leak counters",
      ),
    );
    await peer.shutdown();
    peer = undefined;
    const extensions = await qualifyCursorExtensions(root, probe);
    const permissionApprovals = await qualifyCursorPermission(root, probe, "approve");
    const permissionRefusals = await qualifyCursorPermission(root, probe, "refuse");
    const extensionsPassed =
      extensions.questions > 0 &&
      extensions.plans > 0 &&
      extensions.todos > 0 &&
      extensions.models > 0;
    scenarios.push(
      scenario(
        "cursor-extensions-models",
        extensionsPassed ? "live-pass" : "not-observed",
        `Pinned extension counts: questions ${extensions.questions}, plans ${extensions.plans}, todos ${extensions.todos}, models ${extensions.models}`,
      ),
      scenario(
        "permission-approval",
        permissionApprovals > 0 ? "live-pass" : "not-observed",
        `Pinned permission approval selections: ${permissionApprovals}`,
      ),
      scenario(
        "permission-refusal",
        permissionRefusals > 0 ? "live-pass" : "not-observed",
        `Pinned permission refusal selections: ${permissionRefusals}`,
      ),
    );
    return {
      peer: "cursor",
      result: scenarios.some((entry) => entry.result === "fail") ? "fail" : "partial",
      binary: {
        reportedVersion: probe.reportedVersion,
        executableSha256: probe.sha256,
        ...(probe.closureSha256 === undefined
          ? {}
          : { installationClosureSha256: probe.closureSha256 }),
      },
      negotiation: {
        wireVersion: 1,
        authMethodIds: started.value.authMethodIds,
        capabilityKeys: capabilityKeys(started.value.capabilities),
      },
      scenarios,
      counters: {
        updateCount,
        updateKinds: [...updates].toSorted(),
        promptCount,
        updateMetadataCount,
        completionMetadataCount,
        usageMetadataCount,
      },
    };
  } finally {
    await authCancelPeer?.shutdown().catch(() => undefined);
    await peer?.shutdown().catch(() => undefined);
    await rm(root, { recursive: true, force: true });
  }
};

const peers: AcpLiveReleasePeerReceipt[] = [];
if (selection === "grok" || selection === "both") {
  try {
    peers.push(await runGrok());
  } catch {
    peers.push(failedPeer("grok"));
  }
}
if (selection === "cursor" || selection === "both") {
  try {
    peers.push(await runCursor());
  } catch {
    peers.push(failedPeer("cursor"));
  }
}
const artifact = buildAcpLiveReleaseArtifact({
  recordedAt,
  openAgentsRevision: revision,
  platform,
  peers,
});
const validation = validateAcpLiveReleaseArtifact(artifact);
const output = process.env.ACP_RELEASE_OUTPUT;
if (output !== undefined) {
  const liveDirectory = resolve(process.cwd(), "compatibility", "live");
  if (
    !isAbsolute(output) ||
    !resolve(output).startsWith(`${liveDirectory}${sep}`) ||
    !output.endsWith(".json")
  )
    throw new TypeError(
      "ACP_RELEASE_OUTPUT must be an absolute .json path beneath compatibility/live",
    );
  await writeFile(output, `${JSON.stringify(artifact, null, 2)}\n`, { mode: 0o600 });
}
process.stdout.write(`${JSON.stringify({ artifact, validation }, null, 2)}\n`);
if (!validation.valid || peers.some((peer) => peer.result === "fail")) process.exitCode = 1;

import { executeFaultCase } from "./faults.ts";
import { definePeerScenario, runPeerScenario, startPeerScenarioTransport } from "./harness.ts";
import { summarizeSafeInitialize } from "./live.ts";
import {
  buildAcpLiveReleaseArtifact,
  validateAcpDesktopReleaseArtifact,
  validateAcpLiveReleaseArtifact,
} from "./live-release.ts";
import { materializeMcpServers, McpReferenceError } from "./mcp.ts";
import {
  ConformanceProjectionState,
  projectSessionUpdateForConformance,
  projectStopReasonForConformance,
} from "./projection.ts";
import {
  acpReleaseEvidenceClass,
  evaluateAcpReleaseMatrixGate,
  validateAcpReleaseMatrix,
} from "./release.ts";
import { assertSecretAbsent } from "./transcript.ts";
import {
  CONTENT_BLOCK_FIXTURES,

} from "./variants.ts";

describe("stable Agent Client Protocol conformance", () => {
  it("builds a closed, redacted candidate live-release receipt", () => {
    const artifact = buildAcpLiveReleaseArtifact({
      recordedAt: "2026-07-16T16:00:00.000Z",
      openAgentsRevision: "a".repeat(40),
      platform: "darwin-arm64-node-24.0.0",
      peers: [
        {
          peer: "grok",
          result: "partial",
          binary: { reportedVersion: "0.2.101", executableSha256: "b".repeat(64) },
          negotiation: {
            wireVersion: 1,
            authMethodIds: ["cached_token"],
            capabilityKeys: ["list"],
          },
          scenarios: [
            { id: "initialize", result: "live-pass", safeDetail: "Initialize completed" },
          ],
          counters: {
            updateCount: 2,
            updateKinds: ["agent_message_chunk"],
            promptCount: 1,
          },
        },
      ],
    });

    expect(validateAcpLiveReleaseArtifact(artifact)).toEqual({ valid: true, errors: [] });
    expect(JSON.stringify(artifact)).not.toMatch(/prompt text|response text|session-[0-9]/i);

    const leaking = structuredClone(artifact) as unknown as {
      peers: Array<{ scenarios: Array<{ safeDetail: string }> }>;
    };
    leaking.peers[0]!.scenarios[0]!.safeDetail = "/Users/example/private";
    expect(validateAcpLiveReleaseArtifact(leaking as never)).toMatchObject({ valid: false });

    const invented = structuredClone(artifact) as unknown as {
      peers: Array<{ scenarios: Array<{ id: string }> }>;
    };
    invented.peers[0]!.scenarios[0]!.id = "invented-release-proof";
    expect(validateAcpLiveReleaseArtifact(invented as never)).toMatchObject({ valid: false });
  });

  it("validates packaged Desktop interruption and recovery without accepting retained data", () => {
    const artifact = {
      format: "openagents-acp-desktop-release-run-v1",
      protocol: "Agent Client Protocol",
      protocolExclusions: ["Agent Communication Protocol", "A2A"],
      proofClass: "candidate-packaged-desktop-live",
      claimAuthority: "none-release-matrix-only",
      recordedAt: "2026-07-16T16:46:36.674Z",
      openAgentsRevision: "a".repeat(40),
      platform: "darwin-arm64-node-24.13.1",
      provider: "cursor",
      lane: "acp:cursor-agent",
      packaged: true,
      interruption: {
        mismatchedWorkspaceRefused: true,
        laneConfigured: true,
        laneAdmitted: true,
        exitedDuringRunningTurn: true,
      },
      recovery: {
        reusedDesktopState: true,
        explicitlyReenabledSameThread: true,
        recoveredSameThread: true,
        freshThreadRetryAfterFailure: false,
        laneConfigured: true,
        interruptedTurnSettled: true,
        durableCompletedTurn: true,
        disabled: true,
      },
      redaction: {
        promptTextRetained: false,
        responseTextRetained: false,
        threadIdentifiersRetained: false,
        authMaterialRetained: false,
        absolutePathsRetained: false,
      },
    } as const;
    expect(validateAcpDesktopReleaseArtifact(artifact)).toEqual({ valid: true, errors: [] });
    const leaking = structuredClone(artifact) as unknown as {
      redaction: { promptTextRetained: boolean };
    };
    leaking.redaction.promptTextRetained = true;
    expect(validateAcpDesktopReleaseArtifact(leaking as never)).toMatchObject({ valid: false });
  });

  it("reduces live initialize evidence to capability/auth IDs without provider or host metadata", () => {
    const summary = summarizeSafeInitialize({
      protocolVersion: 1,

    );
  });

  it("keeps named-peer release claims independent, fresh, redacted, and live-gated", () => {
    expect(acpReleaseEvidenceClass("grok", "auth-secondary")).toBe("optional-live-peer");
    expect(acpReleaseEvidenceClass("cursor", "auth-secondary")).toBe("not-applicable");
    const matrix = JSON.parse(
      readFileSync(resolve(import.meta.dirname, "../compatibility/release-matrix.json"), "utf8"),
    ) as Record<string, unknown>;
    const freshValidation = validateAcpReleaseMatrix(matrix, {
      now: new Date("2026-07-17T13:00:00.000Z"),
    });
    expect(freshValidation).toMatchObject({
      valid: true,
      errors: [],
      expiry: { _tag: "Fresh", freshnessDays: 30 },
    });
    expect(evaluateAcpReleaseMatrixGate(freshValidation, "push")).toMatchObject({
      valid: true,
      errors: [],
    });

    const staleValidation = validateAcpReleaseMatrix(matrix, {
      now: new Date("2026-08-23T17:47:57.447Z"),
    });
    expect(staleValidation).toMatchObject({
      valid: true,
      errors: [],
      expiry: { _tag: "Expired", freshnessDays: 30 },
    });
    const stalePushGate = evaluateAcpReleaseMatrixGate(staleValidation, "push");
    expect(stalePushGate).toMatchObject({
      valid: true,
      errors: [],
      warning: expect.stringContaining("recorded at 2026-07-17T12:16:40Z"),
    });
    expect(stalePushGate.warning).toContain("freshness window is 30 days");
    expect(stalePushGate.warning).toContain("Refresh requires a qualifying live release run");
    expect(evaluateAcpReleaseMatrixGate(staleValidation, "release")).toMatchObject({
      valid: false,
      errors: [expect.stringContaining("Refresh requires a qualifying live release run")],
    });

    const promoted = structuredClone(matrix) as {
      peers: Array<{
        claimState: string;
        releaseEligible: boolean;
        scenarios: Array<{ id: string; result: string }>;
      }>;
    };
    promoted.peers[1]!.claimState = "supported";
    promoted.peers[1]!.releaseEligible = true;
    promoted.peers[1]!.scenarios.find((scenario) => scenario.id === "cursor-wire-launch")!.result =
      "not-tested";
    expect(
      validateAcpReleaseMatrix(promoted, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const hostLeaking = structuredClone(matrix) as Record<string, unknown>;
    hostLeaking["privatePath"] = "/Users/example/private-repository";
    expect(
      validateAcpReleaseMatrix(hostLeaking, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const identityMissing = structuredClone(matrix) as {
      openAgents: { schemaSha256?: string };
    };
    delete identityMissing.openAgents.schemaSha256;
    expect(
      validateAcpReleaseMatrix(identityMissing, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const scenarioMissing = structuredClone(matrix) as {
      peers: Array<{ scenarios: unknown[] }>;
    };
    scenarioMissing.peers[0]!.scenarios.pop();
    expect(
      validateAcpReleaseMatrix(scenarioMissing, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const selfExempted = structuredClone(matrix) as {
      peers: Array<{
        claimState: string;
        releaseEligible: boolean;
        scenarios: Array<{ requiredForSupported: boolean }>;
      }>;
    };
    for (const peer of selfExempted.peers) {
      peer.claimState = "supported";
      peer.releaseEligible = true;
      for (const scenario of peer.scenarios) scenario.requiredForSupported = false;
    }
    expect(
      validateAcpReleaseMatrix(selfExempted, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const inventedScenario = structuredClone(matrix) as {
      peers: Array<{ scenarios: Array<{ id: string }> }>;
    };
    inventedScenario.peers[0]!.scenarios[0]!.id = "self-authorized-promotion";
    expect(
      validateAcpReleaseMatrix(inventedScenario, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const emptyLiveEvidence = structuredClone(matrix) as {
      peers: Array<{ scenarios: Array<{ result: string; evidenceRefs: string[] }> }>;
    };
    const liveScenario = emptyLiveEvidence.peers[0]!.scenarios.find(
      (scenario) => scenario.result === "live-pass",
    )!;
    liveScenario.evidenceRefs = [];
    expect(
      validateAcpReleaseMatrix(emptyLiveEvidence, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const remoteEvidence = structuredClone(matrix) as {
      peers: Array<{ scenarios: Array<{ evidenceRefs: string[] }> }>;
    };
    remoteEvidence.peers[0]!.scenarios[0]!.evidenceRefs = ["https://example.invalid/proof.json"];
    expect(
      validateAcpReleaseMatrix(remoteEvidence, { now: new Date("2026-07-16T16:00:00.000Z") }),
    ).toMatchObject({ valid: false });

    const futureEvidence = structuredClone(matrix) as { recordedAt: string };
    futureEvidence.recordedAt = "2026-07-17T16:00:00.000Z";
    const futureValidation = validateAcpReleaseMatrix(futureEvidence, {
      now: new Date("2026-07-16T16:00:00.000Z"),
    });
    expect(futureValidation).toMatchObject({
      valid: false,
      errors: ["matrix evidence timestamp is in the future"],
    });
    expect(futureValidation.expiry).toBeUndefined();
    expect(evaluateAcpReleaseMatrixGate(futureValidation, "push")).toMatchObject({
      valid: false,
      errors: ["matrix evidence timestamp is in the future"],
    });

    const unsupportedPromotion = structuredClone(matrix) as {
      peers: Array<{
        claimState: string;
        releaseEligible: boolean;
        scenarios: Array<{ requiredForSupported: boolean; result: string }>;
      }>;
    };
    unsupportedPromotion.peers[0]!.claimState = "supported";
    unsupportedPromotion.peers[0]!.releaseEligible = true;
    for (const scenario of unsupportedPromotion.peers[0]!.scenarios)
      if (scenario.requiredForSupported) scenario.result = "unsupported";
    expect(
      validateAcpReleaseMatrix(unsupportedPromotion, {
        now: new Date("2026-07-16T16:00:00.000Z"),
      }),
    ).toMatchObject({ valid: false });
  });

  it.each(FAULT_CASES)("executes bounded %s/%s fault evidence", async (layer, fault) => {
    const result = await executeFaultCase(layer, fault);
    expect(result).toMatchObject({ layer, fault, result: "pass" });

export * from "./live.ts";
export * from "./mcp.ts";
export * from "./projection.ts";
export * from "./release.ts";
export * from "./release-evidence.ts";
export * from "./live-release.ts";
export * from "./report.ts";
export * from "./transcript.ts";
export * from "./variants.ts";

import { stripVTControlCharacters } from "node:util";

import { ACP_RELEASE_SCENARIO_IDS } from "./release.ts";

export type AcpLiveReleaseScenarioReceipt = Readonly<{
  id: (typeof ACP_RELEASE_SCENARIO_IDS)[number];
  result: "live-pass" | "not-observed" | "blocked" | "fail";
  safeDetail: string;
}>;

export type AcpLiveReleasePeerReceipt = Readonly<{
  peer: "grok" | "cursor";
  result: "pass" | "partial" | "fail";
  binary: Readonly<{
    reportedVersion: string;
    executableSha256: string;
    installationClosureSha256?: string;
  }>;
  negotiation: Readonly<{
    wireVersion: 1;
    authMethodIds: ReadonlyArray<string>;
    capabilityKeys: ReadonlyArray<string>;
  }>;
  scenarios: ReadonlyArray<AcpLiveReleaseScenarioReceipt>;
  counters: Readonly<{
    updateCount: number;
    updateKinds: ReadonlyArray<string>;
    promptCount: number;
    updateMetadataCount?: number;
    completionMetadataCount?: number;
    usageMetadataCount?: number;
  }>;
}>;

export type AcpLiveReleaseArtifact = Readonly<{
  format: "openagents-acp-live-release-run-v1";
  protocol: "Agent Client Protocol";
  protocolExclusions: ReadonlyArray<"Agent Communication Protocol" | "A2A">;
  proofClass: "candidate-live";
  claimAuthority: "none-release-matrix-only";
  recordedAt: string;
  openAgentsRevision: string;
  schemaRelease: "schema-v1.19.0";
  platform: string;
  peers: ReadonlyArray<AcpLiveReleasePeerReceipt>;
  redaction: Readonly<{
    promptTextRetained: false;
    responseTextRetained: false;
    sessionIdentifiersRetained: false;
    authMaterialRetained: false;
    absolutePathsRetained: false;
  }>;
}>;

export type AcpDesktopReleaseArtifact = Readonly<{
  format: "openagents-acp-desktop-release-run-v1";
  protocol: "Agent Client Protocol";
  protocolExclusions: ReadonlyArray<"Agent Communication Protocol" | "A2A">;
  proofClass: "candidate-packaged-desktop-live";
  claimAuthority: "none-release-matrix-only";
  recordedAt: string;
  openAgentsRevision: string;
  platform: string;
  provider: "grok" | "cursor";
  lane: "acp:grok-cli" | "acp:cursor-agent";
  packaged: true;
  interruption: Readonly<{
    mismatchedWorkspaceRefused: true;
    laneConfigured: true;
    laneAdmitted: true;
    exitedDuringRunningTurn: true;
  }>;
  recovery: Readonly<{
    reusedDesktopState: true;
    explicitlyReenabledSameThread: true;
    recoveredSameThread: boolean;
    freshThreadRetryAfterFailure: boolean;
    additionalProcessRestartAfterFailedRetry?: boolean;
    laneConfigured: true;
    interruptedTurnSettled: true;
    durableCompletedTurn: true;
    disabled: true;
  }>;
  redaction: Readonly<{
    promptTextRetained: false;
    responseTextRetained: false;
    threadIdentifiersRetained: false;
    authMaterialRetained: false;
    absolutePathsRetained: false;
  }>;
}>;

const secretOrPrivate = (value: unknown): boolean => {
  const encoded = JSON.stringify(value);
  return [
    /\/Users\//,
    /\/home\/[^"/]+\//,
    /Bearer\s+[A-Za-z0-9._~-]+/i,
    /(?:token|secret|api[_-]?key)=[^"\s]+/i,
    /(?:sk|xai)-[A-Za-z0-9_-]{12,}/,
    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
  ].some((pattern) => pattern.test(encoded));
};

const safeToken = (value: string, max = 160): string =>
  /^[A-Za-z0-9][A-Za-z0-9._:+()[\],; /-]*$/.test(value) ? value.slice(0, max) : "withheld";

const safeVersion = (value: string): string =>
  safeToken(stripVTControlCharacters(value).trim(), 256);

export const buildAcpLiveReleaseArtifact = (
  input: Readonly<{
    recordedAt: string;
    openAgentsRevision: string;
    platform: string;
    peers: ReadonlyArray<AcpLiveReleasePeerReceipt>;
  }>,
): AcpLiveReleaseArtifact => ({
  format: "openagents-acp-live-release-run-v1",
  protocol: "Agent Client Protocol",
  protocolExclusions: ["Agent Communication Protocol", "A2A"],
  proofClass: "candidate-live",
  claimAuthority: "none-release-matrix-only",
  recordedAt: input.recordedAt,
  openAgentsRevision: input.openAgentsRevision,
  schemaRelease: "schema-v1.19.0",
  platform: safeToken(input.platform, 80),
  peers: input.peers.map((peer) => ({
    ...peer,
    binary: {
      reportedVersion: safeVersion(peer.binary.reportedVersion),
      executableSha256: peer.binary.executableSha256,
      ...(peer.binary.installationClosureSha256 === undefined
        ? {}
        : { installationClosureSha256: peer.binary.installationClosureSha256 }),
    },
    negotiation: {
      ...peer.negotiation,
      authMethodIds: peer.negotiation.authMethodIds.map((value) => safeToken(value, 120)),
      capabilityKeys: peer.negotiation.capabilityKeys.map((value) => safeToken(value, 120)),
    },
    scenarios: peer.scenarios.map((scenario) => ({
      ...scenario,
      safeDetail: safeToken(scenario.safeDetail, 240),
    })),
    counters: {
      ...peer.counters,
      updateKinds: peer.counters.updateKinds.map((value) => safeToken(value, 120)),
    },
  })),
  redaction: {
    promptTextRetained: false,
    responseTextRetained: false,
    sessionIdentifiersRetained: false,
    authMaterialRetained: false,
    absolutePathsRetained: false,
  },
});

export const validateAcpLiveReleaseArtifact = (
  artifact: AcpLiveReleaseArtifact,
): Readonly<{ valid: boolean; errors: ReadonlyArray<string> }> => {
  const errors: string[] = [];
  if (artifact.format !== "openagents-acp-live-release-run-v1") errors.push("format is invalid");
  if (artifact.protocol !== "Agent Client Protocol") errors.push("protocol is invalid");
  if (
    artifact.protocolExclusions.length !== 2 ||
    !artifact.protocolExclusions.includes("Agent Communication Protocol") ||
    !artifact.protocolExclusions.includes("A2A")
  )
    errors.push("protocol exclusions are invalid");
  if (artifact.proofClass !== "candidate-live") errors.push("proof class is invalid");
  if (artifact.claimAuthority !== "none-release-matrix-only")
    errors.push("claim authority is invalid");
  if (artifact.schemaRelease !== "schema-v1.19.0") errors.push("schema release is invalid");
  if (Object.values(artifact.redaction).some((retained) => retained !== false))
    errors.push("redaction declaration is invalid");
  if (!/^[a-f0-9]{40}$/.test(artifact.openAgentsRevision))
    errors.push("OpenAgents revision must be a full Git SHA");
  if (!Number.isFinite(Date.parse(artifact.recordedAt))) errors.push("recordedAt is invalid");
  if (artifact.peers.length === 0 || artifact.peers.length > 2)
    errors.push("one or two named peer receipts are required");
  if (new Set(artifact.peers.map((peer) => peer.peer)).size !== artifact.peers.length)
    errors.push("peer receipts must be unique");
  const scenarioIds = new Set<string>(ACP_RELEASE_SCENARIO_IDS);
  for (const peer of artifact.peers) {
    if (!/^[a-f0-9]{64}$/.test(peer.binary.executableSha256))
      errors.push(`${peer.peer}: executable SHA-256 is invalid`);
    if (
      peer.binary.installationClosureSha256 !== undefined &&
      !/^[a-f0-9]{64}$/.test(peer.binary.installationClosureSha256)
    )
      errors.push(`${peer.peer}: installation closure SHA-256 is invalid`);
    if (peer.negotiation.wireVersion !== 1) errors.push(`${peer.peer}: wire version is not 1`);
    const ids = peer.scenarios.map((scenario) => scenario.id);
    if (ids.length === 0) errors.push(`${peer.peer}: at least one scenario receipt is required`);
    if (new Set(ids).size !== ids.length) errors.push(`${peer.peer}: duplicate scenario receipt`);
    if (ids.some((id) => !scenarioIds.has(id)))
      errors.push(`${peer.peer}: unknown scenario receipt`);
    if (peer.result === "pass" && peer.scenarios.some((scenario) => scenario.result === "fail"))
      errors.push(`${peer.peer}: pass contains a failed scenario`);
    if (peer.result === "fail" && peer.scenarios.every((scenario) => scenario.result !== "fail"))
      errors.push(`${peer.peer}: failed peer has no failed scenario`);
    if (
      !Number.isSafeInteger(peer.counters.updateCount) ||
      peer.counters.updateCount < 0 ||
      !Number.isSafeInteger(peer.counters.promptCount) ||
      peer.counters.promptCount < 0 ||
      [
        peer.counters.updateMetadataCount,
        peer.counters.completionMetadataCount,
        peer.counters.usageMetadataCount,
      ].some((value) => value !== undefined && (!Number.isSafeInteger(value) || value < 0))
    )
      errors.push(`${peer.peer}: counters are invalid`);
  }
  if (secretOrPrivate(artifact))
    errors.push("artifact contains secret-shaped or host-private data");
  return { valid: errors.length === 0, errors };
};

export const validateAcpDesktopReleaseArtifact = (
  artifact: AcpDesktopReleaseArtifact,
): Readonly<{ valid: boolean; errors: ReadonlyArray<string> }> => {
  const errors: string[] = [];
  if (artifact.format !== "openagents-acp-desktop-release-run-v1") errors.push("format is invalid");
  if (artifact.protocol !== "Agent Client Protocol") errors.push("protocol is invalid");
  if (
    artifact.protocolExclusions.length !== 2 ||
    !artifact.protocolExclusions.includes("Agent Communication Protocol") ||
    !artifact.protocolExclusions.includes("A2A")
  )
    errors.push("protocol exclusions are invalid");
  if (artifact.proofClass !== "candidate-packaged-desktop-live")
    errors.push("proof class is invalid");
  if (artifact.claimAuthority !== "none-release-matrix-only")
    errors.push("claim authority is invalid");
  if (!Number.isFinite(Date.parse(artifact.recordedAt))) errors.push("recordedAt is invalid");
  if (!/^[a-f0-9]{40}$/.test(artifact.openAgentsRevision))
    errors.push("OpenAgents revision must be a full Git SHA");
  if (
    (artifact.provider !== "cursor" || artifact.lane !== "acp:cursor-agent") &&
    (artifact.provider !== "grok" || artifact.lane !== "acp:grok-cli")
  )
    errors.push("provider lane identity is invalid");
  if (artifact.packaged !== true) errors.push("packaged execution is required");
  if (Object.values(artifact.interruption).some((value) => value !== true))
    errors.push("interruption proof is incomplete");
  if (
    artifact.recovery.reusedDesktopState !== true ||
    artifact.recovery.explicitlyReenabledSameThread !== true ||
    artifact.recovery.laneConfigured !== true ||
    artifact.recovery.interruptedTurnSettled !== true ||
    artifact.recovery.durableCompletedTurn !== true ||
    artifact.recovery.disabled !== true ||
    artifact.recovery.recoveredSameThread === artifact.recovery.freshThreadRetryAfterFailure
  )
    errors.push("recovery proof is incomplete or inconsistent");
  if (Object.values(artifact.redaction).some((retained) => retained !== false))
    errors.push("redaction declaration is invalid");
  if (secretOrPrivate(artifact))
    errors.push("artifact contains secret-shaped or host-private data");
  return { valid: errors.length === 0, errors };
};

import { describe, expect, test } from "vite-plus/test";

import checkedReleaseMatrix from "../compatibility/release-matrix.json" with { type: "json" };

import { compileAcpReleaseEvidence } from "./release-evidence.ts";

const NOW = new Date("2026-07-17T13:00:00.000Z");

describe("checked ACP release evidence compiler", () => {
  test("compiles the complete checked matrix into peer admission and feature evidence", () => {
    const result = compileAcpReleaseEvidence(checkedReleaseMatrix, { now: NOW });
    expect(result._tag).toBe("ReleaseEvidenceReady");
    if (result._tag !== "ReleaseEvidenceReady") return;
    expect(result.evidence.grok.map((record) => record.suiteId)).toEqual([
      "acp-wire-v1-conformance",
      "acp-release-matrix-v1",
      "grok-authority-reverse",
      "grok-question-extensions",
    ]);
    expect(result.evidence.cursor.map((record) => record.suiteId)).toEqual([
      "acp-wire-v1-conformance",
      "cursor-t3-bde0a4c0",
      "acp-release-matrix-v1",
      "cursor-authority-reverse",
      "cursor-vendor-extensions",
      "cursor-model-discovery",
    ]);
    expect(result.evidence.cursor.at(2)).toMatchObject({
      peerVersion: "2026.6.24",
      executableSha256: "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",
      installationClosureSha256: "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa",
      platform: { os: "darwin", arch: "arm64" },
    });
  });

  test("fails closed for stale, incomplete, or revision-substituted evidence", () => {
    const stale = compileAcpReleaseEvidence(checkedReleaseMatrix, {
      now: new Date("2026-09-01T00:00:00.000Z"),
    });
    expect(stale).toMatchObject({
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: [expect.stringContaining("freshness window is 30 days")],
    });

    const incomplete = structuredClone(checkedReleaseMatrix) as any;
    incomplete.peers[0].scenarios.find((scenario: any) => scenario.id === "initialize").result =
      "blocked";
    expect(compileAcpReleaseEvidence(incomplete, { now: NOW })).toMatchObject({
      _tag: "ReleaseEvidenceUnavailable",
    });

    expect(
      compileAcpReleaseEvidence(checkedReleaseMatrix, {
        now: NOW,
        expectedOpenAgentsRevision: "f".repeat(40),
      }),
    ).toEqual({
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: ["checked release evidence does not match the expected OpenAgents revision"],
    });
  });
});

import type { AcpConformanceEvidenceRecord } from "@openagentsinc/agent-client-protocol/profiles";

import checkedReleaseMatrix from "../compatibility/release-matrix.json" with { type: "json" };

import { describeAcpReleaseExpiry, validateAcpReleaseMatrix } from "./release.ts";

export type AcpReleaseEvidencePeer = "grok" | "cursor";

export type AcpReleaseEvidenceCompilation =
  | Readonly<{
      _tag: "ReleaseEvidenceReady";
      openAgentsRevision: string;
      evidence: Readonly<
        Record<AcpReleaseEvidencePeer, ReadonlyArray<AcpConformanceEvidenceRecord>>
      >;
    }>
  | Readonly<{
      _tag: "ReleaseEvidenceUnavailable";
      diagnostics: ReadonlyArray<string>;
    }>;

type JsonObject = Record<string, unknown>;

const object = (value: unknown): JsonObject | undefined =>
  value !== null && typeof value === "object" && !Array.isArray(value)
    ? (value as JsonObject)
    : undefined;

const string = (value: unknown): string | undefined =>
  typeof value === "string" && value.length > 0 ? value : undefined;

const scenarioPassedLive = (peer: JsonObject, id: string): boolean =>
  Array.isArray(peer.scenarios) &&
  peer.scenarios.some((value) => {
    const scenario = object(value);
    return scenario?.id === id && scenario.result === "live-pass";
  });

const fixtureSuites = (peer: AcpReleaseEvidencePeer): ReadonlyArray<string> =>
  peer === "grok" ? ["acp-wire-v1-conformance"] : ["acp-wire-v1-conformance", "cursor-t3-bde0a4c0"];

const featureSuites = (
  peer: AcpReleaseEvidencePeer,
  document: JsonObject,
): ReadonlyArray<string> => {
  if (peer === "grok") {
    return [
      ...(scenarioPassedLive(document, "permission-approval") &&
      scenarioPassedLive(document, "permission-refusal") &&
      scenarioPassedLive(document, "fs-terminal-enabled")
        ? ["grok-authority-reverse"]
        : []),
      ...(scenarioPassedLive(document, "grok-question-extensions")
        ? ["grok-question-extensions"]
        : []),
      ...(scenarioPassedLive(document, "auth-secondary") ? ["grok-api-key-auth"] : []),
    ];
  }
  return [
    ...(scenarioPassedLive(document, "permission-approval") &&
    scenarioPassedLive(document, "permission-refusal")
      ? ["cursor-authority-reverse"]
      : []),
    ...(scenarioPassedLive(document, "cursor-extensions-models")
      ? ["cursor-vendor-extensions", "cursor-model-discovery"]
      : []),
  ];
};

/**
 * Lowers the complete checked release matrix into the narrow evidence records
 * consumed by trusted peer admission. Matrix validation runs first and the
 * compiler never trusts a hand-authored claim label or partial scenario row.
 */
export const compileAcpReleaseEvidence = (
  value: unknown,
  options: Readonly<{ now?: Date; expectedOpenAgentsRevision?: string }> = {},
): AcpReleaseEvidenceCompilation => {
  const validation = validateAcpReleaseMatrix(value, {
    ...(options.now === undefined ? {} : { now: options.now }),
  });
  if (!validation.valid)
    return { _tag: "ReleaseEvidenceUnavailable", diagnostics: validation.errors };
  if (validation.expiry?._tag === "Expired")
    return {
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: [describeAcpReleaseExpiry(validation.expiry)],
    };

  const matrix = object(value);
  const openAgents = object(matrix?.openAgents);
  const revision = string(openAgents?.revision);
  if (revision === undefined)
    return {
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: ["OpenAgents revision is unavailable after matrix validation"],
    };
  if (
    options.expectedOpenAgentsRevision !== undefined &&
    options.expectedOpenAgentsRevision !== revision
  )
    return {
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: ["checked release evidence does not match the expected OpenAgents revision"],
    };

  const testedPlatform = string(object(matrix?.platform)?.tested)?.split("-");
  const os = testedPlatform?.[0];
  const arch = testedPlatform?.slice(1).join("-");
  const recordedAt = string(matrix?.recordedAt);
  if (os === undefined || arch === undefined || arch.length === 0 || recordedAt === undefined)
    return {
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: ["checked release platform or timestamp is unavailable"],
    };

  const compiled: Record<AcpReleaseEvidencePeer, ReadonlyArray<AcpConformanceEvidenceRecord>> = {
    grok: [],
    cursor: [],
  };
  for (const rawPeer of Array.isArray(matrix?.peers) ? matrix.peers : []) {
    const peer = object(rawPeer);
    if (peer === undefined) continue;
    const peerName = peer?.peer;
    if ((peerName !== "grok" && peerName !== "cursor") || peer.releaseEligible !== true) continue;
    const binary = object(peer.binary);
    const negotiation = object(peer.negotiation);
    const identity = object(negotiation?.peerIdentity);
    const peerVersion = string(binary?.classifiedVersion) ?? string(identity?.version);
    const executableSha256 = string(binary?.sha256);
    if (peerVersion === undefined || executableSha256 === undefined) continue;
    const installationClosureSha256 = string(binary?.installationClosureSha256);
    const artifactRef =
      "packages/agent-client-protocol-conformance/compatibility/release-matrix.json";
    const liveRecord = (suiteId: string): AcpConformanceEvidenceRecord => ({
      suiteId,
      kind: "live",
      result: "pass",
      peerVersion,
      executableSha256,
      ...(peerName === "cursor" && installationClosureSha256 !== undefined
        ? { installationClosureSha256 }
        : {}),
      platform: { os, arch },
      recordedAt,
      artifactRef,
    });
    compiled[peerName] = Object.freeze([
      ...fixtureSuites(peerName).map(
        (suiteId): AcpConformanceEvidenceRecord => ({
          suiteId,
          kind: "fixture",
          result: "pass",
          peerVersion,
          recordedAt,
          artifactRef,
        }),
      ),
      liveRecord("acp-release-matrix-v1"),
      ...featureSuites(peerName, peer).map(liveRecord),
    ]);
  }

  if (compiled.grok.length === 0 || compiled.cursor.length === 0)
    return {
      _tag: "ReleaseEvidenceUnavailable",
      diagnostics: ["checked release matrix did not compile both eligible peers"],
    };
  return {
    _tag: "ReleaseEvidenceReady",
    openAgentsRevision: revision,
    evidence: Object.freeze(compiled),
  };
};

export const checkedAcpReleaseEvidence = (
  options: Readonly<{ now?: Date; expectedOpenAgentsRevision?: string }> = {},
): AcpReleaseEvidenceCompilation => compileAcpReleaseEvidence(checkedReleaseMatrix, options);

export const ACP_RELEASE_CLAIM_STATES = [
  "supported",
  "experimental",
  "incompatible",
  "not-installed",
  "auth-required",
  "degraded",
] as const;

export const ACP_RELEASE_SCENARIO_RESULTS = [
  "live-pass",
  "fixture-pass",
  "blocked",
  "not-tested",
  "unsupported",
  "fail",
] as const;

export const ACP_RELEASE_SCENARIO_IDS = [
  "identity-version",
  "incompatible-version-rejection",
  "initialize",
  "auth-primary",
  "auth-secondary",
  "auth-cancel",
  "auth-expiry-failure",
  "auth-logout-reauth",
  "session-new",
  "session-list",
  "session-load",
  "session-resume-close-delete",
  "real-repo-text",
  "real-repo-tool-plan-config-usage",
  "permission-approval",
  "permission-refusal",
  "permission-timeout-stale-policy",
  "fs-terminal-enabled",
  "fs-terminal-disabled",
  "mcp-authorized",
  "mcp-expired-refusal",
  "mcp-no-durable-secret",
  "model-mode-config",
  "stream-cancel",
  "reverse-cancel",
  "crash-kill-restart",
  "malformed-unknown-output",
  "attachment-repair",
  "sequential-turns",
  "multiple-sessions",
  "cleanup-bounds",
  "fragmented-oversized",
  "stderr-update-flood",
  "queue-stall-timeout-race",
  "crash-loop-repeat",
  "secret-scan",
  "trust-controls",
  "grok-wire-launch",
  "grok-rich-stream",
  "grok-load-replay",
  "grok-question-extensions",
  "cursor-wire-launch",
  "cursor-login-lifecycle",
  "cursor-extensions-models",
  "cursor-load-unsupported",
  "desktop-clean-machine",
  "support-bundle",
] as const;

export const ACP_RELEASE_PROFILE_REVISIONS = Object.freeze({ grok: 1, cursor: 3 } as const);

export type AcpReleaseEvidenceClass =
  | "live-peer"
  | "optional-live-peer"
  | "packaged-desktop-live"
  | "hermetic-production"
  | "not-applicable";

const hermeticProductionScenarios = new Set<string>([
  "incompatible-version-rejection",
  "fs-terminal-disabled",
  "mcp-expired-refusal",
  "malformed-unknown-output",
  "fragmented-oversized",
  "stderr-update-flood",
  "queue-stall-timeout-race",
  "permission-timeout-stale-policy",
  "auth-expiry-failure",
  "trust-controls",
]);
const packagedDesktopScenarios = new Set<string>(["desktop-clean-machine", "support-bundle"]);
const grokOptionalScenarios = new Set<string>(["auth-secondary"]);
const grokNotApplicableScenarios = new Set<string>([
  "auth-logout-reauth",
  "session-resume-close-delete",
  "model-mode-config",
  "cursor-wire-launch",
  "cursor-login-lifecycle",
  "cursor-extensions-models",
  "cursor-load-unsupported",
]);
const cursorNotApplicableScenarios = new Set<string>([
  "auth-secondary",
  "auth-logout-reauth",
  "session-resume-close-delete",
  "fs-terminal-enabled",
  "grok-wire-launch",
  "grok-rich-stream",
  "grok-load-replay",
  "grok-question-extensions",
]);

export const acpReleaseEvidenceClass = (
  peer: "grok" | "cursor",
  scenario: string,
): AcpReleaseEvidenceClass => {
  const notApplicable = peer === "grok" ? grokNotApplicableScenarios : cursorNotApplicableScenarios;
  if (notApplicable.has(scenario)) return "not-applicable";
  if (peer === "grok" && grokOptionalScenarios.has(scenario)) return "optional-live-peer";
  if (hermeticProductionScenarios.has(scenario)) return "hermetic-production";
  if (packagedDesktopScenarios.has(scenario)) return "packaged-desktop-live";
  return "live-peer";
};

const evidenceSatisfies = (evidenceClass: AcpReleaseEvidenceClass, result: unknown): boolean =>
  evidenceClass === "optional-live-peer"
    ? true
    : evidenceClass === "not-applicable"
      ? result === "unsupported"
      : evidenceClass === "hermetic-production"
        ? result === "fixture-pass" || result === "live-pass"
        : result === "live-pass";

export type AcpReleaseClaimState = (typeof ACP_RELEASE_CLAIM_STATES)[number];
export type AcpReleaseScenarioResult = (typeof ACP_RELEASE_SCENARIO_RESULTS)[number];

export type AcpReleaseScenario = Readonly<{
  id: string;
  requiredForSupported: boolean;
  result: AcpReleaseScenarioResult;
  evidenceRefs: ReadonlyArray<string>;
  safeDetail: string;
}>;

export type AcpReleasePeer = Readonly<{
  peer: "grok" | "cursor";
  claimState: AcpReleaseClaimState;
  releaseEligible: boolean;
  scenarios: ReadonlyArray<AcpReleaseScenario>;
}>;

export type AcpReleaseMatrix = Readonly<{
  format: "openagents-acp-release-matrix-v1";
  protocol: "Agent Client Protocol";
  protocolExclusions: ReadonlyArray<"Agent Communication Protocol" | "A2A">;
  recordedAt: string;
  freshnessDays: number;
  peers: ReadonlyArray<AcpReleasePeer>;
}>;

export type AcpReleaseMatrixValidation = Readonly<{
  valid: boolean;
  errors: ReadonlyArray<string>;
  expiry?: AcpReleaseMatrixExpiry;
}>;

export type AcpReleaseMatrixExpiry =
  | Readonly<{
      _tag: "Fresh";
      recordedAt: string;
      freshnessDays: number;
      expiresAt: string;
      ageMs: number;
    }>
  | Readonly<{
      _tag: "Expired";
      recordedAt: string;
      freshnessDays: number;
      expiresAt: string;
      ageMs: number;
      overdueMs: number;
    }>;

export type AcpReleaseMatrixGate = "push" | "release";

const millisecondsPerDay = 86_400_000;

const formatDays = (milliseconds: number): string =>
  `${(milliseconds / millisecondsPerDay).toFixed(1)} days`;

export const describeAcpReleaseExpiry = (
  expiry: Extract<AcpReleaseMatrixExpiry, { _tag: "Expired" }>,
): string =>
  `matrix evidence recorded at ${expiry.recordedAt} is ${formatDays(expiry.ageMs)} old; freshness window is ${expiry.freshnessDays} days and expired ${formatDays(expiry.overdueMs)} ago. Refresh requires a qualifying live release run, its candidate artifact, and a human-reviewed compatibility/release-matrix.json update.`;

export const evaluateAcpReleaseMatrixGate = (
  validation: AcpReleaseMatrixValidation,
  gate: AcpReleaseMatrixGate,
): Readonly<{
  valid: boolean;
  errors: ReadonlyArray<string>;
  warning?: string;
}> => {
  const expiry = validation.expiry;
  const warning = expiry?._tag === "Expired" ? describeAcpReleaseExpiry(expiry) : undefined;
  const errors =
    gate === "release" && warning !== undefined
      ? [...validation.errors, warning]
      : validation.errors;
  return {
    valid: errors.length === 0,
    errors,
    ...(gate === "push" && warning !== undefined ? { warning } : {}),
  };
};

const object = (value: unknown): Record<string, unknown> | undefined =>
  value !== null && typeof value === "object" && !Array.isArray(value)
    ? (value as Record<string, unknown>)
    : undefined;

const strings = (value: unknown): ReadonlyArray<string> | undefined =>
  Array.isArray(value) && value.every((entry) => typeof entry === "string") ? value : undefined;

const nonEmptyString = (value: unknown): value is string =>
  typeof value === "string" && value.length > 0;
const sha256 = (value: unknown): value is string =>
  typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
const gitRevision = (value: unknown): value is string =>
  typeof value === "string" && /^[a-f0-9]{40}$/.test(value);

const containsExportedSecret = (value: unknown): boolean => {
  const encoded = JSON.stringify(value);
  return [
    /\/Users\//,
    /\/home\/[^"/]+\//,
    /Bearer\s+[A-Za-z0-9._~-]+/i,
    /(?:token|secret|api[_-]?key)=[^"\s]+/i,
    /(?:sk|xai)-[A-Za-z0-9_-]{12,}/,
    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
  ].some((pattern) => pattern.test(encoded));
};

/**
 * Validates a checked ACP release matrix without trusting its claim booleans.
 * A fixture pass is useful evidence, but it can never satisfy a live release
 * requirement or promote a named peer by itself.
 */
export const validateAcpReleaseMatrix = (
  value: unknown,
  options: Readonly<{ now?: Date }> = {},
): AcpReleaseMatrixValidation => {
  const errors: string[] = [];
  const matrix = object(value);
  if (matrix === undefined) return { valid: false, errors: ["matrix must be an object"] };
  if (matrix.format !== "openagents-acp-release-matrix-v1") errors.push("unexpected format");
  if (matrix.protocol !== "Agent Client Protocol")
    errors.push("protocol must be Agent Client Protocol");
  const exclusions = strings(matrix.protocolExclusions);
  if (
    exclusions === undefined ||
    !exclusions.includes("Agent Communication Protocol") ||
    !exclusions.includes("A2A")
  )
    errors.push("protocol exclusions must name Agent Communication Protocol and A2A");
  const now = options.now ?? new Date();
  const nowMs = now.getTime();
  const recordedAtValue = typeof matrix.recordedAt === "string" ? matrix.recordedAt : undefined;
  const recordedAt = recordedAtValue === undefined ? NaN : Date.parse(recordedAtValue);
  const freshnessDays =
    typeof matrix.freshnessDays === "number" && Number.isFinite(matrix.freshnessDays)
      ? matrix.freshnessDays
      : NaN;
  let expiry: AcpReleaseMatrixExpiry | undefined;
  if (!Number.isFinite(recordedAt) || !Number.isFinite(freshnessDays) || freshnessDays <= 0)
    errors.push("matrix freshness metadata is invalid");
  else if (recordedAt - nowMs > 300_000) errors.push("matrix evidence timestamp is in the future");
  else {
    const ageMs = nowMs - recordedAt;
    const expiresAt = new Date(recordedAt + freshnessDays * millisecondsPerDay).toISOString();
    const recordedAtText = recordedAtValue;
    if (recordedAtText === undefined) {
      errors.push("matrix freshness metadata is invalid");
    } else {
      expiry =
        ageMs > freshnessDays * millisecondsPerDay
          ? {
              _tag: "Expired",
              recordedAt: recordedAtText,
              freshnessDays,
              expiresAt,
              ageMs,
              overdueMs: ageMs - freshnessDays * millisecondsPerDay,
            }
          : { _tag: "Fresh", recordedAt: recordedAtText, freshnessDays, expiresAt, ageMs };
    }
  }

  const openAgents = object(matrix.openAgents);
  if (openAgents === undefined) errors.push("OpenAgents release identity is required");
  else {
    if (!gitRevision(openAgents.revision))
      errors.push("OpenAgents revision must be a full Git SHA");
    if (!gitRevision(openAgents.desktopIntegrationRevision))
      errors.push("Desktop integration revision must be a full Git SHA");
    if (!nonEmptyString(openAgents.build)) errors.push("OpenAgents build identity is required");
    if (!nonEmptyString(openAgents.protocolPackageRevision))
      errors.push("protocol package revision is required");
    if (openAgents.schemaRelease !== "schema-v1.19.0")
      errors.push("schema release must be schema-v1.19.0");
    if (!sha256(openAgents.schemaSha256)) errors.push("schema SHA-256 is required");
  }

  const platform = object(matrix.platform);
  if (platform === undefined) errors.push("tested platform identity is required");
  else {
    if (!nonEmptyString(platform.tested) || !/^[a-z0-9]+-[a-z0-9_]+$/.test(platform.tested))
      errors.push("tested platform must be an os-architecture identifier");
    if (!nonEmptyString(platform.osVersion)) errors.push("tested OS version is required");
    if (!nonEmptyString(platform.nodeVersion)) errors.push("tested Node version is required");
    const notTested = strings(platform.notTested);
    if (notTested === undefined) errors.push("not-tested platforms must be explicit");
    else if (new Set(notTested).size !== notTested.length)
      errors.push("not-tested platforms must be unique");
    else if (notTested.includes(String(platform.tested)))
      errors.push("tested platform cannot also be not-tested");
  }

  const peers = Array.isArray(matrix.peers) ? matrix.peers : [];
  if (peers.length !== 2) errors.push("matrix must contain exactly Grok and Cursor");
  const peerNames = new Set<string>();
  let scenarioCatalog: ReadonlyArray<string> | undefined;
  for (const [peerIndex, rawPeer] of peers.entries()) {
    const peer = object(rawPeer);
    if (peer === undefined) {
      errors.push(`peer ${peerIndex} must be an object`);
      continue;
    }
    const peerName = typeof peer.peer === "string" ? peer.peer : `peer-${peerIndex}`;
    peerNames.add(peerName);
    if (peerName !== "grok" && peerName !== "cursor") errors.push(`unknown peer ${peerName}`);
    if (!(ACP_RELEASE_CLAIM_STATES as readonly unknown[]).includes(peer.claimState))
      errors.push(`${peerName}: invalid claim state`);
    const expectedProfile = peerName === "grok" ? "grok-cli" : "cursor-agent";
    const expectedProfileRevision =
      peerName === "grok" || peerName === "cursor"
        ? ACP_RELEASE_PROFILE_REVISIONS[peerName]
        : undefined;
    const profile = object(peer.profile);
    if (
      profile === undefined ||
      profile.id !== expectedProfile ||
      profile.revision !== expectedProfileRevision
    )
      errors.push(`${peerName}: exact trusted profile identity is required`);
    const binary = object(peer.binary);
    const expectedCommand = peerName === "grok" ? ["grok", "agent", "stdio"] : ["agent", "acp"];
    if (binary === undefined) errors.push(`${peerName}: pinned binary identity is required`);
    else {
      if (JSON.stringify(strings(binary.command)) !== JSON.stringify(expectedCommand))
        errors.push(`${peerName}: launch command does not match the trusted profile`);
      if (!nonEmptyString(binary.reportedVersion))
        errors.push(`${peerName}: reported version is required`);
      if (
        !nonEmptyString(binary.resolvedExecutableName) ||
        binary.resolvedExecutableName.includes("/") ||
        binary.resolvedExecutableName.includes("\\")
      )
        errors.push(`${peerName}: safe resolved executable name is required`);
      if (!sha256(binary.sha256)) errors.push(`${peerName}: executable SHA-256 is required`);
      if (peerName === "cursor" && !sha256(binary.installationClosureSha256))
        errors.push("cursor: installation closure SHA-256 is required");
      if (!nonEmptyString(binary.installationSource))
        errors.push(`${peerName}: installation source is required`);
    }
    const negotiation = object(peer.negotiation);
    if (negotiation === undefined) errors.push(`${peerName}: initialize evidence is required`);
    else {
      if (negotiation.wireVersion !== 1) errors.push(`${peerName}: wire version must be 1`);
      const identity = object(negotiation.peerIdentity);
      if (
        identity === undefined ||
        !nonEmptyString(identity.name) ||
        !nonEmptyString(identity.version)
      )
        errors.push(`${peerName}: peer initialize identity is required`);
      if (strings(negotiation.authMethodIds) === undefined)
        errors.push(`${peerName}: advertised auth methods are required`);
      if (strings(negotiation.advertisedCapabilityKeys) === undefined)
        errors.push(`${peerName}: advertised capabilities are required`);
    }
    const scenarios = Array.isArray(peer.scenarios) ? peer.scenarios : [];
    const ids: string[] = [];
    let allRequiredSatisfied = scenarios.length > 0;
    for (const [scenarioIndex, rawScenario] of scenarios.entries()) {
      const scenario = object(rawScenario);
      if (scenario === undefined) {
        errors.push(`${peerName}: scenario ${scenarioIndex} must be an object`);
        allRequiredSatisfied = false;
        continue;
      }
      const id = typeof scenario.id === "string" ? scenario.id : `scenario-${scenarioIndex}`;
      ids.push(id);
      const evidenceClass =
        peerName === "grok" || peerName === "cursor"
          ? acpReleaseEvidenceClass(peerName, id)
          : "live-peer";
      const expectedRequired =
        evidenceClass !== "not-applicable" && evidenceClass !== "optional-live-peer";
      if (scenario.requiredForSupported !== expectedRequired)
        errors.push(`${peerName}/${id}: requiredness does not match the code-owned catalog`);
      if (!(ACP_RELEASE_SCENARIO_RESULTS as readonly unknown[]).includes(scenario.result))
        errors.push(`${peerName}/${id}: invalid result`);
      if (!evidenceSatisfies(evidenceClass, scenario.result)) allRequiredSatisfied = false;
      const evidenceRefs = strings(scenario.evidenceRefs);
      if (evidenceRefs === undefined)
        errors.push(`${peerName}/${id}: evidenceRefs must be strings`);
      else if (
        evidenceRefs.some(
          (ref) =>
            ref.startsWith("/") ||
            ref.includes("..") ||
            ref.includes("\\") ||
            /^[a-z][a-z0-9+.-]*:/i.test(ref),
        )
      )
        errors.push(`${peerName}/${id}: evidence refs must be repository-relative`);
      else if (
        (scenario.result === "live-pass" || scenario.result === "fixture-pass") &&
        evidenceRefs.length === 0
      )
        errors.push(`${peerName}/${id}: passing evidence class requires evidence`);
      if (typeof scenario.safeDetail !== "string" || scenario.safeDetail.length === 0)
        errors.push(`${peerName}/${id}: safeDetail is required`);
    }
    if (new Set(ids).size !== ids.length) errors.push(`${peerName}: scenario ids must be unique`);
    if (JSON.stringify(ids.toSorted()) !== JSON.stringify([...ACP_RELEASE_SCENARIO_IDS].toSorted()))
      errors.push(`${peerName}: scenario catalog is incomplete or unknown`);
    if (scenarioCatalog === undefined) scenarioCatalog = ids.toSorted();
    else if (JSON.stringify(scenarioCatalog) !== JSON.stringify(ids.toSorted()))
      errors.push("Grok and Cursor must use the same release scenario catalog");
    if (peer.releaseEligible !== allRequiredSatisfied)
      errors.push(`${peerName}: releaseEligible does not match code-owned evidence requirements`);
    if (peer.claimState === "supported" && !allRequiredSatisfied)
      errors.push(`${peerName}: supported claim lacks required evidence`);
  }
  if (!peerNames.has("grok") || !peerNames.has("cursor"))
    errors.push("matrix must independently identify Grok and Cursor");
  if (containsExportedSecret(matrix))
    errors.push("matrix contains secret-shaped or host-private data");
  return { valid: errors.length === 0, errors, ...(expiry === undefined ? {} : { expiry }) };
};

127	127		flat installation closure, negotiates `cursor_login`, and
128	128		`keeps model discovery behind its versioned extension decoder. Diagnostic live`
129	129		`probes and source-derived fixtures remain explicitly non-release evidence. A`
130		-	`checked opt-in production runner now reproduces a redacted Grok/Cursor candidate`
131		-	`receipt in disposable repositories. It has no claim authority. The checked`
132		-	`[pinned live-binary matrix](packages/agent-client-protocol-conformance/compatibility/release-matrix.json)`
133		-	`and [human proof ledger](docs/qa/2026-07-16-acp10-release-proof/README.md) now`
134		-	`independently gate the two peers. Their current verdict is experimental because`
135		-	`the complete checked evidence has not yet been bound into shipped admission.`
136		-	`All code-owned required scenarios are now satisfied on tested Darwin arm64.`
137		-	`other platforms remain explicitly untested. Execution is tracked in`
	130	+	`checked opt-in production runner is no longer part of the support path. The`
	131	+	`[human proof ledger](docs/qa/2026-07-16-acp10-release-proof/README.md) remains a`
	132	+	`historical record, and no release-evidence path can promote either peer above`
	133	+	`experimental`. ACP peer support remains experimental because it has no
	134	+	`release-evidence path.`
	135	+	`Hermetic conformance checks cover the required scenario catalog. Other`
	136	+	`platforms remain explicitly untested. Execution is tracked in`
138	137		`[#8887 — Full Agent Client Protocol integration for Grok and Cursor](https://github.com/OpenAgentsInc/openagents/issues/8887).`
139	138		`the wider reference set remains indexed in`
140	139		`[Product Teardowns](docs/teardowns/README.md).`

4	4		`"note": "Heuristic false-green LEADS, not findings. A finding requires a demonstrated reproduction (surviving mutation via mutation-runner). Do not treat a candidate as a confirmed false green. Coverage-theater leads may include tests that delegate their assertion to a custom helper the classifier does not recognise; verify before acting.",`
5	5		`"sourceDigest": "sha256:dd810dd48c5bdbc9becd7fcc01dd41a4ca2abf0b2d6f6a545907247f6e3e8361",`
6	6		`"summary": {`
7		-	`"filesScanned": 2417,`
	7	+	`"filesScanned": 2421,`
8	8		`"candidateCount": 16,`
9	9		`"byMode": {`
10	10		`"false_green_coverage_theater": 15,`

1	1		`{`
2	2		`"schemaVersion": "1",`
3	3		`"repository": "OpenAgentsInc/openagents",`
4		-	`"sourceDigest": "sha256:89eece9db1d575b6b3f6b051835dee8e1e0cb211444b5ba390c36a92a4add904",`
	4	+	`"sourceDigest": "sha256:7c585930cb375e3359bfd928c7e78f38deb2cb8f84eaf0e16a8e2ade809a0795",`
5	5		`"surfaces": [`
6	6		`{`
7	7		`"id": "app:@openagentsinc/acceptance-runner",`

1876	1876		`"oracles": [`
1877	1877		`{`
1878	1878		`"type": "test",`
1879		-	`"ref": "packages/openagents-cli (16 tracked test files)"`
	1879	+	`"ref": "packages/openagents-cli (20 tracked test files)"`
1880	1880		`},`
1881	1881		`{`
1882	1882		`"type": "behavior-contract",`

6	6		`"scripts": {`
7	7		`"check:vp2-node-runtime": "node scripts/vp2-node-runtime-guard.mjs",`
8	8		`"check:agent-client-protocol": "pnpm --dir packages/agent-client-protocol run check:generated",`
9		-	`"check:agent-client-protocol-conformance": "pnpm --dir packages/agent-client-protocol-conformance run check:artifacts && pnpm --dir packages/agent-client-protocol-conformance run check:release",`
	9	+	`"check:agent-client-protocol-conformance": "pnpm --dir packages/agent-client-protocol-conformance run check:artifacts",`
10	10		`"check:all-work-contract": "pnpm --dir packages/all-work-contract run check:generated && cargo test -p openagents-all-work-contract",`
11	11		`"check:codex-app-server-protocol": "pnpm --dir packages/codex-app-server-protocol run check:generated",`
12	12		`"test:vp2-node": "node --test packages/runtime-platform/src/runtime-platform.node-suite.ts packages/sqlite-runtime/src/node-database.node-suite.ts scripts/public-cli-artifacts.node.test.mjs scripts/vp2-node-runtime-guard.test.mjs scripts/vp2-retained-service.node.test.mjs",`

120	120		`"check:ste-control-semantics": "pnpm run check:ste-public-semantics",`
121	121		`"check:node-vp-freeze": "node scripts/node-vp-cutover-inventory.mjs --check",`
122	122		`"check:vp1-retirement": "node scripts/vp1-retired-money-surface-guard.mjs .",`
123		-	`"check:deploy": "pnpm run check:google-cloud-authority && pnpm run check:ste:public && pnpm run check:ste-public-semantics && pnpm run test:ste && pnpm run check:sol-docs && pnpm run test:sol-docs && pnpm --dir packages/agent-client-protocol-conformance run check:release:freshness && pnpm --dir apps/openagents.com run check:deploy",`
	123	+	`"check:deploy": "pnpm run check:google-cloud-authority && pnpm run check:ste:public && pnpm run check:ste-public-semantics && pnpm run test:ste && pnpm run check:sol-docs && pnpm run test:sol-docs && pnpm --dir apps/openagents.com run check:deploy",`
124	124		`"typecheck": "vp run --concurrency-limit 2 --filter './' --filter '!./packages/probe' --filter '!./packages/probe/' typecheck",`
125	125		`"lint": "vp lint --report-unused-disable-directives",`
126	126		`"fmt": "vp fmt",`

44	44		`pnpm --dir packages/agent-client-protocol-conformance run test`
45	45		`pnpm --dir packages/agent-client-protocol-conformance run check:artifacts`
46	46		`pnpm --dir packages/agent-client-protocol-conformance run report`
47		-	`pnpm --dir packages/agent-client-protocol-conformance run check:release`
48		-	`pnpm --dir packages/agent-client-protocol-conformance run check:release:freshness`
49	47		```
50	48
51		-	`compatibility/release-matrix.json` is the release-defining named-peer ledger.
52		-	It uses a closed claim vocabulary (`supported`, `experimental`, `incompatible`,
53		-	`not-installed`, `auth-required`, `degraded`) and distinguishes `live-pass`
54		-	`from fixture-only, blocked, untested, unsupported, and failed scenarios. The`
55		-	`validator enforces the exact release/schema/platform/profile/binary identities,`
56		-	`the complete 47-scenario catalog, and repository-local evidence references`
57		-	before recomputing release eligibility. The push-path `check:release` gate
58		-	`blocks content errors and prints a warning when the freshness window expires.`
59		-	The release-path `check:release:freshness` gate also blocks an expired window.
60		-	`Requiredness and evidence class are code-owned: required live peer and packaged`
61		-	`Desktop rows require live proof, optional peer alternatives do not gate the`
62		-	`default path, and only explicitly hermetic production-transport rows may be`
63		-	`satisfied by executed fixture proof. Matrix flags cannot self-exempt a provider,`
64		-	and one provider can never mask the other. The current checked verdict is `supported`
65		-	`for the exact pinned Grok 0.2.101 and Cursor 2026.06.24 Darwin arm64 identities`
66		-	`only. Other versions and platforms remain experimental or not tested.`
	49	+	`ACP peer support remains experimental. This package has no release-evidence`
	50	+	path and cannot promote Grok or Cursor above `experimental`.
67	51
68	52		`Live probes are inert unless explicitly armed and never run in ordinary CI:`
69	53

72	56		`CURSOR_ACP_LIVE=1 pnpm --dir packages/agent-client-protocol-conformance run live:cursor`
73	57		```
74	58
75		-	`The deeper candidate runner launches the production Grok and Cursor runtimes in`
76		-	`separate disposable Git repositories, authenticates through the peers' normal`
77		-	`local login, performs sequential prompts, and attempts session listing, mode`
78		-	`changes, streaming cancellation, and bounded shutdown where advertised. Its`
79		-	`Grok lane also sends a random canary only through broker-materialized stdio MCP`
80		-	`environment, proves the disposable server received it by digest, shuts Grok`
81		-	`down, and scans the exact session/configuration persistence surfaces for the`
82		-	`unredacted value:`
83		-
84		-	```bash
85		-	`ACP_RELEASE_LIVE=1 ACP_RELEASE_PEER=both \`
86		-	`pnpm --dir packages/agent-client-protocol-conformance run live:release`
87		-	```
88		-
89		-	Set `ACP_RELEASE_OUTPUT` to an absolute `.json` path beneath
90		-	`compatibility/live/` to retain its closed-schema, redacted receipt. The runner
91		-	`does not retain prompts, responses, session IDs, auth material, or absolute`
92		-	paths. Its artifact is deliberately marked `candidate-live` and has no power to
93		-	`change the release matrix or promote either peer. A human-reviewed matrix edit`
94		-	and the fail-closed `check:release` gate remain mandatory. The Cursor lane also
95		-	proves client-side `cursor_login` cancellation using the ordinary HOME and
96		-	stopping before `authenticate`. It never creates an empty HOME or changes login
97		-	`or keychain state. Its exact-binary extension qualification registers only the`
98		-	`four allowlisted Cursor methods and retains aggregate observation counts. An`
99		-	`unobserved extension remains blocked rather than inferred from a prompt. The`
100		-	`same rule applies to permission qualification: only an option actually offered`
101		-	`by the peer may be selected, and zero reverse calls remain zero live evidence.`
102		-	`Cursor approval and refusal run in separate pinned processes with an empty`
103		-	allow/deny policy stored only in the disposable repository's `.cursor/cli.json`.
104		-	`the runner never changes the user's global Cursor configuration.`
105		-	`The Grok qualification additionally enables bounded filesystem and simulated`
106		-	`terminal handlers only inside the disposable repository, forces only its new`
107		-	`disposable sessions out of inherited YOLO/auto mode through session metadata,`
108		-	`and retains method counts rather than file, command, terminal, or response`
109		-	`content. It never changes global Grok configuration.`
110		-	The shared runtime also preserves notification and prompt-completion `_meta` as
111		-	`private native evidence. Candidate receipts expose only metadata-presence and`
112		-	`usage-presence counts. They never export token values, model/session IDs, or`
113		-	`other metadata contents.`
114		-
115		-	`After packaging Desktop, the separately armed peer journey proves real app`
116		-	`workspace refusal, interruption, restart settlement, re-enable, completion,`
117		-	`disable, and shutdown without changing HOME or credential/keychain state:`
118		-
119		-	```bash
120		-	`ACP_DESKTOP_RELEASE_LIVE=1 ACP_DESKTOP_RELEASE_PEER=<grok-or-cursor> \`
121		-	`ACP_DESKTOP_RELEASE_OUTPUT=<absolute compatibility/live JSON path> \`
122		-	`pnpm --dir apps/openagents-desktop run smoke:acp-release`
123		-	```
124		-
125		-	The checked live records beneath `compatibility/live/` pin the installed
126		-	`commands, full reported builds, executable/installation-closure digests, wire`
127		-	`version, advertised auth methods, and capability keys. The release matrix adds`
128		-	`the deeper redacted peer runs described in the human ledger. Every unexercised`
129		-	required scenario remains an explicit blocker to a `supported` claim.
130		-
131	59		`Each probe emits one machine-readable diagnostic result with command, binary`
132	60		`version, schema identity, and initialize outcome. It does not authenticate,`
133	61		`print secrets, or establish a release claim.`

1	-	`{`
2	-	`"format": "openagents-acp-desktop-release-run-v1",`
3	-	`"protocol": "Agent Client Protocol",`
4	-	`"protocolExclusions": [`
5	-	`"Agent Communication Protocol",`
6	-	`"A2A"`
7	-	`],`
8	-	`"proofClass": "candidate-packaged-desktop-live",`
9	-	`"claimAuthority": "none-release-matrix-only",`
10	-	`"recordedAt": "2026-07-16T16:46:36.674Z",`
11	-	`"openAgentsRevision": "661c1b3c7f74ac396026ec6aa1a0c6ea8845dcd1",`
12	-	`"platform": "darwin-arm64-node-24.13.1",`
13	-	`"provider": "cursor",`
14	-	`"lane": "acp:cursor-agent",`
15	-	`"packaged": true,`
16	-	`"interruption": {`
17	-	`"mismatchedWorkspaceRefused": true,`
18	-	`"laneConfigured": true,`
19	-	`"laneAdmitted": true,`
20	-	`"exitedDuringRunningTurn": true`
21	-	`},`
22	-	`"recovery": {`
23	-	`"reusedDesktopState": true,`
24	-	`"explicitlyReenabledSameThread": true,`
25	-	`"recoveredSameThread": true,`
26	-	`"freshThreadRetryAfterFailure": false,`
27	-	`"laneConfigured": true,`
28	-	`"interruptedTurnSettled": true,`
29	-	`"durableCompletedTurn": true,`
30	-	`"disabled": true`
31	-	`},`
32	-	`"redaction": {`
33	-	`"promptTextRetained": false,`
34	-	`"responseTextRetained": false,`
35	-	`"threadIdentifiersRetained": false,`
36	-	`"authMaterialRetained": false,`
37	-	`"absolutePathsRetained": false`
38	-	`}`
39	-	`}`

1	-	`{`
2	-	`"format": "openagents-acp-live-release-run-v1",`
3	-	`"protocol": "Agent Client Protocol",`
4	-	`"protocolExclusions": [`
5	-	`"Agent Communication Protocol",`
6	-	`"A2A"`
7	-	`],`
8	-	`"proofClass": "candidate-live",`
9	-	`"claimAuthority": "none-release-matrix-only",`
10	-	`"recordedAt": "2026-07-16T16:49:32.334Z",`
11	-	`"openAgentsRevision": "661c1b3c7f74ac396026ec6aa1a0c6ea8845dcd1",`
12	-	`"schemaRelease": "schema-v1.19.0",`
13	-	`"platform": "darwin-arm64-node-24.13.1",`
14	-	`"peers": [`
15	-	`{`
16	-	`"peer": "grok",`
17	-	`"result": "partial",`
18	-	`"binary": {`
19	-	`"reportedVersion": "grok 0.2.101 (5bc4b5dfadcf) [stable]",`
20	-	`"executableSha256": "8431538dbd99379240f558b48b779c651d668b06d793c87311ad532c4395a4e2"`
21	-	`},`
22	-	`"negotiation": {`
23	-	`"wireVersion": 1,`
24	-	`"authMethodIds": [`
25	-	`"cached_token",`
26	-	`"grok.com"`
27	-	`],`
28	-	`"capabilityKeys": [`
29	-	`"load"`
30	-	`]`
31	-	`},`
32	-	`"scenarios": [`
33	-	`{`
34	-	`"id": "identity-version",`
35	-	`"result": "live-pass",`
36	-	`"safeDetail": "Exact Grok version and executable digest probed"`
37	-	`},`
38	-	`{`
39	-	`"id": "initialize",`
40	-	`"result": "live-pass",`
41	-	`"safeDetail": "Wire version 1 initialize completed"`
42	-	`},`
43	-	`{`
44	-	`"id": "auth-primary",`
45	-	`"result": "live-pass",`
46	-	`"safeDetail": "Advertised cached authentication completed"`
47	-	`},`
48	-	`{`
49	-	`"id": "session-new",`
50	-	`"result": "live-pass",`
51	-	`"safeDetail": "Disposable repository session created"`
52	-	`},`
53	-	`{`
54	-	`"id": "real-repo-text",`
55	-	`"result": "live-pass",`
56	-	`"safeDetail": "Real disposable repository produced assistant text"`
57	-	`},`
58	-	`{`
59	-	`"id": "sequential-turns",`
60	-	`"result": "live-pass",`
61	-	`"safeDetail": "Two sequential prompts completed"`
62	-	`},`
63	-	`{`
64	-	`"id": "session-list",`
65	-	`"result": "not-observed",`
66	-	`"safeDetail": "Peer did not advertise session list"`
67	-	`},`
68	-	`{`
69	-	`"id": "stream-cancel",`
70	-	`"result": "live-pass",`
71	-	`"safeDetail": "Streaming prompt cancelled after 1 updates"`
72	-	`},`
73	-	`{`
74	-	`"id": "cleanup-bounds",`
75	-	`"result": "not-observed",`
76	-	`"safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"`
77	-	`}`
78	-	`],`
79	-	`"counters": {`
80	-	`"updateCount": 106,`
81	-	`"updateKinds": [`
82	-	`"agent_message_chunk",`
83	-	`"agent_thought_chunk",`
84	-	`"available_commands_update",`
85	-	`"tool_call",`
86	-	`"tool_call_update",`
87	-	`"user_message_chunk"`
88	-	`],`
89	-	`"promptCount": 3`
90	-	`}`
91	-	`},`
92	-	`{`
93	-	`"peer": "cursor",`
94	-	`"result": "partial",`
95	-	`"binary": {`
96	-	`"reportedVersion": "2026.06.24-00-45-58-9f61de7",`
97	-	`"executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",`
98	-	`"installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"`
99	-	`},`
100	-	`"negotiation": {`
101	-	`"wireVersion": 1,`
102	-	`"authMethodIds": [`
103	-	`"cursor_login"`
104	-	`],`
105	-	`"capabilityKeys": [`
106	-	`"list",`
107	-	`"load"`
108	-	`]`
109	-	`},`
110	-	`"scenarios": [`
111	-	`{`
112	-	`"id": "identity-version",`
113	-	`"result": "live-pass",`
114	-	`"safeDetail": "Exact Cursor version and installation closure probed"`
115	-	`},`
116	-	`{`
117	-	`"id": "initialize",`
118	-	`"result": "live-pass",`
119	-	`"safeDetail": "Wire version 1 initialize completed"`
120	-	`},`
121	-	`{`
122	-	`"id": "auth-primary",`
123	-	`"result": "live-pass",`
124	-	`"safeDetail": "Advertised Cursor login completed"`
125	-	`},`
126	-	`{`
127	-	`"id": "session-new",`
128	-	`"result": "live-pass",`
129	-	`"safeDetail": "Disposable repository session created"`
130	-	`},`
131	-	`{`
132	-	`"id": "real-repo-text",`
133	-	`"result": "live-pass",`
134	-	`"safeDetail": "Real disposable repository produced assistant text"`
135	-	`},`
136	-	`{`
137	-	`"id": "sequential-turns",`
138	-	`"result": "live-pass",`
139	-	`"safeDetail": "Two sequential prompts completed"`
140	-	`},`
141	-	`{`
142	-	`"id": "session-list",`
143	-	`"result": "live-pass",`
144	-	`"safeDetail": "Advertised session list completed"`
145	-	`},`
146	-	`{`
147	-	`"id": "model-mode-config",`
148	-	`"result": "live-pass",`
149	-	`"safeDetail": "Advertised mode change completed"`
150	-	`},`
151	-	`{`
152	-	`"id": "stream-cancel",`
153	-	`"result": "live-pass",`
154	-	`"safeDetail": "Streaming prompt cancelled after 0 updates"`
155	-	`},`
156	-	`{`
157	-	`"id": "cleanup-bounds",`
158	-	`"result": "not-observed",`
159	-	`"safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"`
160	-	`}`
161	-	`],`
162	-	`"counters": {`
163	-	`"updateCount": 17,`
164	-	`"updateKinds": [`
165	-	`"agent_message_chunk",`
166	-	`"agent_thought_chunk",`
167	-	`"available_commands_update",`
168	-	`"current_mode_update",`
169	-	`"session_info_update"`
170	-	`],`
171	-	`"promptCount": 3`
172	-	`}`
173	-	`}`
174	-	`],`
175	-	`"redaction": {`
176	-	`"promptTextRetained": false,`
177	-	`"responseTextRetained": false,`
178	-	`"sessionIdentifiersRetained": false,`
179	-	`"authMaterialRetained": false,`
180	-	`"absolutePathsRetained": false`
181	-	`}`
182	-	`}`

1	-	`{`
2	-	`"format": "openagents-acp-live-release-run-v1",`
3	-	`"protocol": "Agent Client Protocol",`
4	-	`"protocolExclusions": ["Agent Communication Protocol", "A2A"],`
5	-	`"proofClass": "candidate-live",`
6	-	`"claimAuthority": "none-release-matrix-only",`
7	-	`"recordedAt": "2026-07-16T17:12:04.946Z",`
8	-	`"openAgentsRevision": "29fe5ad3e750a0ab79048e234d509316a6c0a821",`
9	-	`"schemaRelease": "schema-v1.19.0",`
10	-	`"platform": "darwin-arm64-node-24.13.1",`
11	-	`"peers": [`
12	-	`{`
13	-	`"peer": "cursor",`
14	-	`"result": "partial",`
15	-	`"binary": {`
16	-	`"reportedVersion": "2026.06.24-00-45-58-9f61de7",`
17	-	`"executableSha256": "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",`
18	-	`"installationClosureSha256": "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa"`
19	-	`},`
20	-	`"negotiation": {`
21	-	`"wireVersion": 1,`
22	-	`"authMethodIds": ["cursor_login"],`
23	-	`"capabilityKeys": ["list", "load"]`
24	-	`},`
25	-	`"scenarios": [`
26	-	`{`
27	-	`"id": "identity-version",`
28	-	`"result": "live-pass",`
29	-	`"safeDetail": "Exact Cursor version and installation closure probed"`
30	-	`},`
31	-	`{`
32	-	`"id": "initialize",`
33	-	`"result": "live-pass",`
34	-	`"safeDetail": "Wire version 1 initialize completed"`
35	-	`},`
36	-	`{`
37	-	`"id": "auth-primary",`
38	-	`"result": "live-pass",`
39	-	`"safeDetail": "Advertised Cursor login completed"`
40	-	`},`
41	-	`{`
42	-	`"id": "auth-cancel",`
43	-	`"result": "live-pass",`
44	-	`"safeDetail": "Client cancelled advertised login before authenticate and received auth required"`
45	-	`},`
46	-	`{`
47	-	`"id": "session-new",`
48	-	`"result": "live-pass",`
49	-	`"safeDetail": "Disposable repository session created"`
50	-	`},`
51	-	`{`
52	-	`"id": "real-repo-text",`
53	-	`"result": "live-pass",`
54	-	`"safeDetail": "Real disposable repository produced assistant text"`
55	-	`},`
56	-	`{`
57	-	`"id": "sequential-turns",`
58	-	`"result": "live-pass",`
59	-	`"safeDetail": "Two sequential prompts completed"`
60	-	`},`
61	-	`{`
62	-	`"id": "session-list",`
63	-	`"result": "live-pass",`
64	-	`"safeDetail": "Advertised session list completed"`
65	-	`},`
66	-	`{`
67	-	`"id": "model-mode-config",`
68	-	`"result": "live-pass",`
69	-	`"safeDetail": "Advertised mode change completed"`
70	-	`},`
71	-	`{`
72	-	`"id": "stream-cancel",`
73	-	`"result": "live-pass",`
74	-	`"safeDetail": "Streaming prompt cancelled after 0 updates"`
75	-	`},`
76	-	`{`
77	-	`"id": "cleanup-bounds",`
78	-	`"result": "not-observed",`
79	-	`"safeDetail": "Shutdown ran in finally; this runner does not retain process leak counters"`
80	-	`}`
81	-	`],`
82	-	`"counters": {`
83	-	`"updateCount": 18,`
84	-	`"updateKinds": [`
85	-	`"agent_message_chunk",`
86	-	`"agent_thought_chunk",`
87	-	`"available_commands_update",`
88	-	`"current_mode_update",`
89	-	`"session_info_update"`
90	-	`],`
91	-	`"promptCount": 3`
92	-	`}`
93	-	`}`
94	-	`],`
95	-	`"redaction": {`
96	-	`"promptTextRetained": false,`
97	-	`"responseTextRetained": false,`
98	-	`"sessionIdentifiersRetained": false,`
99	-	`"authMaterialRetained": false,`
100	-	`"absolutePathsRetained": false`
101	-	`}`
102	-	`}`

8	8		`},`
9	9		`"scripts": {`
10	10		`"check:artifacts": "node --import tsx scripts/generate-artifacts.ts --check",`
11		-	`"check:release": "node --import tsx scripts/check-release-matrix.ts",`
12		-	`"check:release:freshness": "node --import tsx scripts/check-release-matrix.ts --require-freshness",`
13	11		`"generate": "node --import tsx scripts/generate-artifacts.ts",`
14	12		`"live:grok": "node --import tsx scripts/live-probe.ts grok",`
15	13		`"live:cursor": "node --import tsx scripts/live-probe.ts cursor",`
16		-	`"live:release": "node --import tsx scripts/live-release-suite.ts",`
17	14		`"report": "node --import tsx scripts/run-conformance-report.ts",`
18		-	`"test": "vp test --run packages/agent-client-protocol-conformance/src/conformance.test.ts packages/agent-client-protocol-conformance/src/release-evidence.test.ts",`
	15	+	`"test": "vp test --run packages/agent-client-protocol-conformance/src/conformance.test.ts",`
19	16		`"typecheck": "tsc -p tsconfig.json --noEmit"`
20	17		`},`
21	18		`"dependencies": {`

1	-	`import { existsSync, readFileSync, readdirSync } from "node:fs";`
2	-	`import { resolve } from "node:path";`
3	-
4	-	`import { evaluateAcpReleaseMatrixGate, validateAcpReleaseMatrix } from "../src/release.ts";`
5	-	`import {`
6	-	`validateAcpDesktopReleaseArtifact,`
7	-	`validateAcpLiveReleaseArtifact,`
8	-	`type AcpDesktopReleaseArtifact,`
9	-	`type AcpLiveReleaseArtifact,`
10	-	`} from "../src/live-release.ts";`
11	-
12	-	`const path = resolve(import.meta.dirname, "../compatibility/release-matrix.json");`
13	-	`const matrix = JSON.parse(readFileSync(path, "utf8")) as unknown;`
14	-	`const validation = validateAcpReleaseMatrix(matrix);`
15	-	`const requireFreshness = process.argv.includes("--require-freshness");`
16	-	`const gate = evaluateAcpReleaseMatrixGate(validation, requireFreshness ? "release" : "push");`
17	-	`const liveDirectory = resolve(import.meta.dirname, "../compatibility/live");`
18	-	`const liveArtifactErrors = readdirSync(liveDirectory)`
19	-	`.filter((name) => name.startsWith("release-run-") && name.endsWith(".json"))`
20	-	`.flatMap((name) => {`
21	-	`try {`
22	-	`const artifact = JSON.parse(readFileSync(resolve(liveDirectory, name), "utf8")) as AcpLiveReleaseArtifact;`
23	-	return validateAcpLiveReleaseArtifact(artifact).errors.map((error) => `${name}: ${error}`);
24	-	`} catch {`
25	-	return [`${name}: artifact is not valid JSON or does not match the closed schema`];
26	-	`}`
27	-	`});`
28	-	`const desktopArtifactErrors = readdirSync(liveDirectory)`
29	-	`.filter((name) => name.startsWith("desktop-") && name.includes("-release-run-") && name.endsWith(".json"))`
30	-	`.flatMap((name) => {`
31	-	`try {`
32	-	`const artifact = JSON.parse(readFileSync(resolve(liveDirectory, name), "utf8")) as AcpDesktopReleaseArtifact;`
33	-	`return validateAcpDesktopReleaseArtifact(artifact).errors.map(`
34	-	(error) => `${name}: ${error}`,
35	-	`);`
36	-	`} catch {`
37	-	return [`${name}: artifact is not valid JSON or does not match the closed schema`];
38	-	`}`
39	-	`});`
40	-	`const repositoryRoot = resolve(import.meta.dirname, "../../..");`
41	-	`const missingEvidence =`
42	-	`typeof matrix === "object" && matrix !== null && "peers" in matrix && Array.isArray(matrix.peers)`
43	-	`? matrix.peers.flatMap((peer: unknown) =>`
44	-	`typeof peer === "object" && peer !== null && "scenarios" in peer && Array.isArray(peer.scenarios)`
45	-	`? peer.scenarios.flatMap((scenario: unknown) =>`
46	-	`typeof scenario === "object" &&`
47	-	`scenario !== null &&`
48	-	`"evidenceRefs" in scenario &&`
49	-	`Array.isArray(scenario.evidenceRefs)`
50	-	`? scenario.evidenceRefs.filter(`
51	-	`(ref: unknown): ref is string =>`
52	-	`typeof ref === "string" && !existsSync(resolve(repositoryRoot, ref)),`
53	-	`)`
54	-	`: [],`
55	-	`)`
56	-	`: [],`
57	-	`)`
58	-	`: [];`
59	-	`const result = {`
60	-	`valid:`
61	-	`gate.valid &&`
62	-	`missingEvidence.length === 0 &&`
63	-	`liveArtifactErrors.length === 0 &&`
64	-	`desktopArtifactErrors.length === 0,`
65	-	`errors: [`
66	-	`...gate.errors,`
67	-	...missingEvidence.map((ref) => `missing evidence ref: ${ref}`),
68	-	`...liveArtifactErrors,`
69	-	`...desktopArtifactErrors,`
70	-	`],`
71	-	`...(validation.expiry === undefined ? {} : { expiry: validation.expiry }),`
72	-	`};`
73	-	`if (!requireFreshness && gate.warning !== undefined)`
74	-	process.stderr.write(`WARNING: ${gate.warning}\n`);
75	-	process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
76	-	`if (!result.valid) process.exitCode = 1;`

23	23		`import { executeFaultCase } from "./faults.ts";`
24	24		`import { definePeerScenario, runPeerScenario, startPeerScenarioTransport } from "./harness.ts";`
25	25		`import { summarizeSafeInitialize } from "./live.ts";`
26		-	`import {`
27		-	`buildAcpLiveReleaseArtifact,`
28		-	`validateAcpDesktopReleaseArtifact,`
29		-	`validateAcpLiveReleaseArtifact,`
30		-	`} from "./live-release.ts";`
31	26		`import { materializeMcpServers, McpReferenceError } from "./mcp.ts";`
32	27		`import {`
33	28		`ConformanceProjectionState,`
34	29		`projectSessionUpdateForConformance,`
35	30		`projectStopReasonForConformance,`
36	31		`} from "./projection.ts";`
37		-	`import {`
38		-	`acpReleaseEvidenceClass,`
39		-	`evaluateAcpReleaseMatrixGate,`
40		-	`validateAcpReleaseMatrix,`
41		-	`} from "./release.ts";`
42	32		`import { assertSecretAbsent } from "./transcript.ts";`
43	33		`import {`
44	34		`CONTENT_BLOCK_FIXTURES,`

51	41		`} from "./variants.ts";`
52	42
53	43		`describe("stable Agent Client Protocol conformance", () => {`
54		-	`it("builds a closed, redacted candidate live-release receipt", () => {`
55		-	`const artifact = buildAcpLiveReleaseArtifact({`
56		-	`recordedAt: "2026-07-16T16:00:00.000Z",`
57		-	`openAgentsRevision: "a".repeat(40),`
58		-	`platform: "darwin-arm64-node-24.0.0",`
59		-	`peers: [`
60		-	`{`
61		-	`peer: "grok",`
62		-	`result: "partial",`
63		-	`binary: { reportedVersion: "0.2.101", executableSha256: "b".repeat(64) },`
64		-	`negotiation: {`
65		-	`wireVersion: 1,`
66		-	`authMethodIds: ["cached_token"],`
67		-	`capabilityKeys: ["list"],`
68		-	`},`
69		-	`scenarios: [`
70		-	`{ id: "initialize", result: "live-pass", safeDetail: "Initialize completed" },`
71		-	`],`
72		-	`counters: {`
73		-	`updateCount: 2,`
74		-	`updateKinds: ["agent_message_chunk"],`
75		-	`promptCount: 1,`
76		-	`},`
77		-	`},`
78		-	`],`
79		-	`});`
80		-
81		-	`expect(validateAcpLiveReleaseArtifact(artifact)).toEqual({ valid: true, errors: [] });`
82		-	`expect(JSON.stringify(artifact)).not.toMatch(/prompt text\|response text\|session-[0-9]/i);`
83		-
84		-	`const leaking = structuredClone(artifact) as unknown as {`
85		-	`peers: Array<{ scenarios: Array<{ safeDetail: string }> }>;`
86		-	`};`
87		-	`leaking.peers[0]!.scenarios[0]!.safeDetail = "/Users/example/private";`
88		-	`expect(validateAcpLiveReleaseArtifact(leaking as never)).toMatchObject({ valid: false });`
89		-
90		-	`const invented = structuredClone(artifact) as unknown as {`
91		-	`peers: Array<{ scenarios: Array<{ id: string }> }>;`
92		-	`};`
93		-	`invented.peers[0]!.scenarios[0]!.id = "invented-release-proof";`
94		-	`expect(validateAcpLiveReleaseArtifact(invented as never)).toMatchObject({ valid: false });`
95		-	`});`
96		-
97		-	`it("validates packaged Desktop interruption and recovery without accepting retained data", () => {`
98		-	`const artifact = {`
99		-	`format: "openagents-acp-desktop-release-run-v1",`
100		-	`protocol: "Agent Client Protocol",`
101		-	`protocolExclusions: ["Agent Communication Protocol", "A2A"],`
102		-	`proofClass: "candidate-packaged-desktop-live",`
103		-	`claimAuthority: "none-release-matrix-only",`
104		-	`recordedAt: "2026-07-16T16:46:36.674Z",`
105		-	`openAgentsRevision: "a".repeat(40),`
106		-	`platform: "darwin-arm64-node-24.13.1",`
107		-	`provider: "cursor",`
108		-	`lane: "acp:cursor-agent",`
109		-	`packaged: true,`
110		-	`interruption: {`
111		-	`mismatchedWorkspaceRefused: true,`
112		-	`laneConfigured: true,`
113		-	`laneAdmitted: true,`
114		-	`exitedDuringRunningTurn: true,`
115		-	`},`
116		-	`recovery: {`
117		-	`reusedDesktopState: true,`
118		-	`explicitlyReenabledSameThread: true,`
119		-	`recoveredSameThread: true,`
120		-	`freshThreadRetryAfterFailure: false,`
121		-	`laneConfigured: true,`
122		-	`interruptedTurnSettled: true,`
123		-	`durableCompletedTurn: true,`
124		-	`disabled: true,`
125		-	`},`
126		-	`redaction: {`
127		-	`promptTextRetained: false,`
128		-	`responseTextRetained: false,`
129		-	`threadIdentifiersRetained: false,`
130		-	`authMaterialRetained: false,`
131		-	`absolutePathsRetained: false,`
132		-	`},`
133		-	`} as const;`
134		-	`expect(validateAcpDesktopReleaseArtifact(artifact)).toEqual({ valid: true, errors: [] });`
135		-	`const leaking = structuredClone(artifact) as unknown as {`
136		-	`redaction: { promptTextRetained: boolean };`
137		-	`};`
138		-	`leaking.redaction.promptTextRetained = true;`
139		-	`expect(validateAcpDesktopReleaseArtifact(leaking as never)).toMatchObject({ valid: false });`
140		-	`});`
141		-
142	44		`it("reduces live initialize evidence to capability/auth IDs without provider or host metadata", () => {`
143	45		`const summary = summarizeSafeInitialize({`
144	46		`protocolVersion: 1,`

842	744		`);`
843	745		`});`
844	746
845		-	`it("keeps named-peer release claims independent, fresh, redacted, and live-gated", () => {`
846		-	`expect(acpReleaseEvidenceClass("grok", "auth-secondary")).toBe("optional-live-peer");`
847		-	`expect(acpReleaseEvidenceClass("cursor", "auth-secondary")).toBe("not-applicable");`
848		-	`const matrix = JSON.parse(`
849		-	`readFileSync(resolve(import.meta.dirname, "../compatibility/release-matrix.json"), "utf8"),`
850		-	`) as Record<string, unknown>;`
851		-	`const freshValidation = validateAcpReleaseMatrix(matrix, {`
852		-	`now: new Date("2026-07-17T13:00:00.000Z"),`
853		-	`});`
854		-	`expect(freshValidation).toMatchObject({`
855		-	`valid: true,`
856		-	`errors: [],`
857		-	`expiry: { _tag: "Fresh", freshnessDays: 30 },`
858		-	`});`
859		-	`expect(evaluateAcpReleaseMatrixGate(freshValidation, "push")).toMatchObject({`
860		-	`valid: true,`
861		-	`errors: [],`
862		-	`});`
863		-
864		-	`const staleValidation = validateAcpReleaseMatrix(matrix, {`
865		-	`now: new Date("2026-08-23T17:47:57.447Z"),`
866		-	`});`
867		-	`expect(staleValidation).toMatchObject({`
868		-	`valid: true,`
869		-	`errors: [],`
870		-	`expiry: { _tag: "Expired", freshnessDays: 30 },`
871		-	`});`
872		-	`const stalePushGate = evaluateAcpReleaseMatrixGate(staleValidation, "push");`
873		-	`expect(stalePushGate).toMatchObject({`
874		-	`valid: true,`
875		-	`errors: [],`
876		-	`warning: expect.stringContaining("recorded at 2026-07-17T12:16:40Z"),`
877		-	`});`
878		-	`expect(stalePushGate.warning).toContain("freshness window is 30 days");`
879		-	`expect(stalePushGate.warning).toContain("Refresh requires a qualifying live release run");`
880		-	`expect(evaluateAcpReleaseMatrixGate(staleValidation, "release")).toMatchObject({`
881		-	`valid: false,`

5	5		`export * from "./live.ts";`
6	6		`export * from "./mcp.ts";`
7	7		`export * from "./projection.ts";`
8		-	`export * from "./release.ts";`
9		-	`export * from "./release-evidence.ts";`
10		-	`export * from "./live-release.ts";`
11	8		`export * from "./report.ts";`
12	9		`export * from "./transcript.ts";`
13	10		`export * from "./variants.ts";`

1	-	`import { stripVTControlCharacters } from "node:util";`
2	-
3	-	`import { ACP_RELEASE_SCENARIO_IDS } from "./release.ts";`
4	-
5	-	`export type AcpLiveReleaseScenarioReceipt = Readonly<{`
6	-	`id: (typeof ACP_RELEASE_SCENARIO_IDS)[number];`
7	-	`result: "live-pass" \| "not-observed" \| "blocked" \| "fail";`
8	-	`safeDetail: string;`
9	-	`}>;`
10	-
11	-	`export type AcpLiveReleasePeerReceipt = Readonly<{`
12	-	`peer: "grok" \| "cursor";`
13	-	`result: "pass" \| "partial" \| "fail";`
14	-	`binary: Readonly<{`
15	-	`reportedVersion: string;`
16	-	`executableSha256: string;`
17	-	`installationClosureSha256?: string;`
18	-	`}>;`
19	-	`negotiation: Readonly<{`
20	-	`wireVersion: 1;`
21	-	`authMethodIds: ReadonlyArray<string>;`
22	-	`capabilityKeys: ReadonlyArray<string>;`
23	-	`}>;`
24	-	`scenarios: ReadonlyArray<AcpLiveReleaseScenarioReceipt>;`
25	-	`counters: Readonly<{`
26	-	`updateCount: number;`
27	-	`updateKinds: ReadonlyArray<string>;`
28	-	`promptCount: number;`
29	-	`updateMetadataCount?: number;`
30	-	`completionMetadataCount?: number;`
31	-	`usageMetadataCount?: number;`
32	-	`}>;`
33	-	`}>;`
34	-
35	-	`export type AcpLiveReleaseArtifact = Readonly<{`
36	-	`format: "openagents-acp-live-release-run-v1";`
37	-	`protocol: "Agent Client Protocol";`
38	-	`protocolExclusions: ReadonlyArray<"Agent Communication Protocol" \| "A2A">;`
39	-	`proofClass: "candidate-live";`
40	-	`claimAuthority: "none-release-matrix-only";`
41	-	`recordedAt: string;`
42	-	`openAgentsRevision: string;`
43	-	`schemaRelease: "schema-v1.19.0";`
44	-	`platform: string;`
45	-	`peers: ReadonlyArray<AcpLiveReleasePeerReceipt>;`
46	-	`redaction: Readonly<{`
47	-	`promptTextRetained: false;`
48	-	`responseTextRetained: false;`
49	-	`sessionIdentifiersRetained: false;`
50	-	`authMaterialRetained: false;`
51	-	`absolutePathsRetained: false;`
52	-	`}>;`
53	-	`}>;`
54	-
55	-	`export type AcpDesktopReleaseArtifact = Readonly<{`
56	-	`format: "openagents-acp-desktop-release-run-v1";`
57	-	`protocol: "Agent Client Protocol";`
58	-	`protocolExclusions: ReadonlyArray<"Agent Communication Protocol" \| "A2A">;`
59	-	`proofClass: "candidate-packaged-desktop-live";`
60	-	`claimAuthority: "none-release-matrix-only";`
61	-	`recordedAt: string;`
62	-	`openAgentsRevision: string;`
63	-	`platform: string;`
64	-	`provider: "grok" \| "cursor";`
65	-	`lane: "acp:grok-cli" \| "acp:cursor-agent";`
66	-	`packaged: true;`
67	-	`interruption: Readonly<{`
68	-	`mismatchedWorkspaceRefused: true;`
69	-	`laneConfigured: true;`
70	-	`laneAdmitted: true;`
71	-	`exitedDuringRunningTurn: true;`
72	-	`}>;`
73	-	`recovery: Readonly<{`
74	-	`reusedDesktopState: true;`
75	-	`explicitlyReenabledSameThread: true;`
76	-	`recoveredSameThread: boolean;`
77	-	`freshThreadRetryAfterFailure: boolean;`
78	-	`additionalProcessRestartAfterFailedRetry?: boolean;`
79	-	`laneConfigured: true;`
80	-	`interruptedTurnSettled: true;`
81	-	`durableCompletedTurn: true;`
82	-	`disabled: true;`
83	-	`}>;`
84	-	`redaction: Readonly<{`
85	-	`promptTextRetained: false;`
86	-	`responseTextRetained: false;`
87	-	`threadIdentifiersRetained: false;`
88	-	`authMaterialRetained: false;`
89	-	`absolutePathsRetained: false;`
90	-	`}>;`
91	-	`}>;`
92	-
93	-	`const secretOrPrivate = (value: unknown): boolean => {`
94	-	`const encoded = JSON.stringify(value);`
95	-	`return [`
96	-	`/\/Users\//,`
97	-	`/\/home\/[^"/]+\//,`
98	-	`/Bearer\s+[A-Za-z0-9._~-]+/i,`
99	-	`/(?:token\|secret\|api[_-]?key)=[^"\s]+/i,`
100	-	`/(?:sk\|xai)-[A-Za-z0-9_-]{12,}/,`
101	-	`/-----BEGIN (?:RSA \|EC \|OPENSSH )?PRIVATE KEY-----/,`
102	-	`].some((pattern) => pattern.test(encoded));`
103	-	`};`
104	-
105	-	`const safeToken = (value: string, max = 160): string =>`
106	-	`/^[A-Za-z0-9][A-Za-z0-9._:+()[\],; /-]*$/.test(value) ? value.slice(0, max) : "withheld";`
107	-
108	-	`const safeVersion = (value: string): string =>`
109	-	`safeToken(stripVTControlCharacters(value).trim(), 256);`
110	-
111	-	`export const buildAcpLiveReleaseArtifact = (`
112	-	`input: Readonly<{`
113	-	`recordedAt: string;`
114	-	`openAgentsRevision: string;`
115	-	`platform: string;`
116	-	`peers: ReadonlyArray<AcpLiveReleasePeerReceipt>;`
117	-	`}>,`
118	-	`): AcpLiveReleaseArtifact => ({`
119	-	`format: "openagents-acp-live-release-run-v1",`
120	-	`protocol: "Agent Client Protocol",`
121	-	`protocolExclusions: ["Agent Communication Protocol", "A2A"],`
122	-	`proofClass: "candidate-live",`
123	-	`claimAuthority: "none-release-matrix-only",`
124	-	`recordedAt: input.recordedAt,`
125	-	`openAgentsRevision: input.openAgentsRevision,`
126	-	`schemaRelease: "schema-v1.19.0",`
127	-	`platform: safeToken(input.platform, 80),`
128	-	`peers: input.peers.map((peer) => ({`
129	-	`...peer,`
130	-	`binary: {`
131	-	`reportedVersion: safeVersion(peer.binary.reportedVersion),`
132	-	`executableSha256: peer.binary.executableSha256,`
133	-	`...(peer.binary.installationClosureSha256 === undefined`
134	-	`? {}`
135	-	`: { installationClosureSha256: peer.binary.installationClosureSha256 }),`
136	-	`},`
137	-	`negotiation: {`
138	-	`...peer.negotiation,`
139	-	`authMethodIds: peer.negotiation.authMethodIds.map((value) => safeToken(value, 120)),`
140	-	`capabilityKeys: peer.negotiation.capabilityKeys.map((value) => safeToken(value, 120)),`
141	-	`},`
142	-	`scenarios: peer.scenarios.map((scenario) => ({`
143	-	`...scenario,`
144	-	`safeDetail: safeToken(scenario.safeDetail, 240),`
145	-	`})),`
146	-	`counters: {`
147	-	`...peer.counters,`
148	-	`updateKinds: peer.counters.updateKinds.map((value) => safeToken(value, 120)),`
149	-	`},`
150	-	`})),`
151	-	`redaction: {`
152	-	`promptTextRetained: false,`
153	-	`responseTextRetained: false,`
154	-	`sessionIdentifiersRetained: false,`
155	-	`authMaterialRetained: false,`
156	-	`absolutePathsRetained: false,`
157	-	`},`
158	-	`});`
159	-
160	-	`export const validateAcpLiveReleaseArtifact = (`
161	-	`artifact: AcpLiveReleaseArtifact,`
162	-	`): Readonly<{ valid: boolean; errors: ReadonlyArray<string> }> => {`
163	-	`const errors: string[] = [];`
164	-	`if (artifact.format !== "openagents-acp-live-release-run-v1") errors.push("format is invalid");`
165	-	`if (artifact.protocol !== "Agent Client Protocol") errors.push("protocol is invalid");`
166	-	`if (`
167	-	`artifact.protocolExclusions.length !== 2 \|\|`
168	-	`!artifact.protocolExclusions.includes("Agent Communication Protocol") \|\|`
169	-	`!artifact.protocolExclusions.includes("A2A")`
170	-	`)`
171	-	`errors.push("protocol exclusions are invalid");`
172	-	`if (artifact.proofClass !== "candidate-live") errors.push("proof class is invalid");`
173	-	`if (artifact.claimAuthority !== "none-release-matrix-only")`
174	-	`errors.push("claim authority is invalid");`
175	-	`if (artifact.schemaRelease !== "schema-v1.19.0") errors.push("schema release is invalid");`
176	-	`if (Object.values(artifact.redaction).some((retained) => retained !== false))`
177	-	`errors.push("redaction declaration is invalid");`
178	-	`if (!/^[a-f0-9]{40}$/.test(artifact.openAgentsRevision))`
179	-	`errors.push("OpenAgents revision must be a full Git SHA");`
180	-	`if (!Number.isFinite(Date.parse(artifact.recordedAt))) errors.push("recordedAt is invalid");`
181	-	`if (artifact.peers.length === 0 \|\| artifact.peers.length > 2)`
182	-	`errors.push("one or two named peer receipts are required");`
183	-	`if (new Set(artifact.peers.map((peer) => peer.peer)).size !== artifact.peers.length)`
184	-	`errors.push("peer receipts must be unique");`
185	-	`const scenarioIds = new Set<string>(ACP_RELEASE_SCENARIO_IDS);`
186	-	`for (const peer of artifact.peers) {`
187	-	`if (!/^[a-f0-9]{64}$/.test(peer.binary.executableSha256))`
188	-	errors.push(`${peer.peer}: executable SHA-256 is invalid`);
189	-	`if (`
190	-	`peer.binary.installationClosureSha256 !== undefined &&`
191	-	`!/^[a-f0-9]{64}$/.test(peer.binary.installationClosureSha256)`
192	-	`)`
193	-	errors.push(`${peer.peer}: installation closure SHA-256 is invalid`);
194	-	if (peer.negotiation.wireVersion !== 1) errors.push(`${peer.peer}: wire version is not 1`);
195	-	`const ids = peer.scenarios.map((scenario) => scenario.id);`
196	-	if (ids.length === 0) errors.push(`${peer.peer}: at least one scenario receipt is required`);
197	-	if (new Set(ids).size !== ids.length) errors.push(`${peer.peer}: duplicate scenario receipt`);
198	-	`if (ids.some((id) => !scenarioIds.has(id)))`
199	-	errors.push(`${peer.peer}: unknown scenario receipt`);
200	-	`if (peer.result === "pass" && peer.scenarios.some((scenario) => scenario.result === "fail"))`
201	-	errors.push(`${peer.peer}: pass contains a failed scenario`);
202	-	`if (peer.result === "fail" && peer.scenarios.every((scenario) => scenario.result !== "fail"))`
203	-	errors.push(`${peer.peer}: failed peer has no failed scenario`);
204	-	`if (`
205	-	`!Number.isSafeInteger(peer.counters.updateCount) \|\|`
206	-	`peer.counters.updateCount < 0 \|\|`
207	-	`!Number.isSafeInteger(peer.counters.promptCount) \|\|`
208	-	`peer.counters.promptCount < 0 \|\|`
209	-	`[`
210	-	`peer.counters.updateMetadataCount,`
211	-	`peer.counters.completionMetadataCount,`
212	-	`peer.counters.usageMetadataCount,`
213	-	`].some((value) => value !== undefined && (!Number.isSafeInteger(value) \|\| value < 0))`
214	-	`)`
215	-	errors.push(`${peer.peer}: counters are invalid`);
216	-	`}`
217	-	`if (secretOrPrivate(artifact))`
218	-	`errors.push("artifact contains secret-shaped or host-private data");`
219	-	`return { valid: errors.length === 0, errors };`
220	-	`};`
221	-
222	-	`export const validateAcpDesktopReleaseArtifact = (`
223	-	`artifact: AcpDesktopReleaseArtifact,`
224	-	`): Readonly<{ valid: boolean; errors: ReadonlyArray<string> }> => {`
225	-	`const errors: string[] = [];`
226	-	`if (artifact.format !== "openagents-acp-desktop-release-run-v1") errors.push("format is invalid");`
227	-	`if (artifact.protocol !== "Agent Client Protocol") errors.push("protocol is invalid");`
228	-	`if (`
229	-	`artifact.protocolExclusions.length !== 2 \|\|`
230	-	`!artifact.protocolExclusions.includes("Agent Communication Protocol") \|\|`
231	-	`!artifact.protocolExclusions.includes("A2A")`
232	-	`)`
233	-	`errors.push("protocol exclusions are invalid");`
234	-	`if (artifact.proofClass !== "candidate-packaged-desktop-live")`
235	-	`errors.push("proof class is invalid");`
236	-	`if (artifact.claimAuthority !== "none-release-matrix-only")`
237	-	`errors.push("claim authority is invalid");`
238	-	`if (!Number.isFinite(Date.parse(artifact.recordedAt))) errors.push("recordedAt is invalid");`
239	-	`if (!/^[a-f0-9]{40}$/.test(artifact.openAgentsRevision))`
240	-	`errors.push("OpenAgents revision must be a full Git SHA");`
241	-	`if (`
242	-	`(artifact.provider !== "cursor" \|\| artifact.lane !== "acp:cursor-agent") &&`
243	-	`(artifact.provider !== "grok" \|\| artifact.lane !== "acp:grok-cli")`
244	-	`)`
245	-	`errors.push("provider lane identity is invalid");`
246	-	`if (artifact.packaged !== true) errors.push("packaged execution is required");`
247	-	`if (Object.values(artifact.interruption).some((value) => value !== true))`
248	-	`errors.push("interruption proof is incomplete");`
249	-	`if (`
250	-	`artifact.recovery.reusedDesktopState !== true \|\|`
251	-	`artifact.recovery.explicitlyReenabledSameThread !== true \|\|`
252	-	`artifact.recovery.laneConfigured !== true \|\|`
253	-	`artifact.recovery.interruptedTurnSettled !== true \|\|`
254	-	`artifact.recovery.durableCompletedTurn !== true \|\|`
255	-	`artifact.recovery.disabled !== true \|\|`
256	-	`artifact.recovery.recoveredSameThread === artifact.recovery.freshThreadRetryAfterFailure`
257	-	`)`
258	-	`errors.push("recovery proof is incomplete or inconsistent");`
259	-	`if (Object.values(artifact.redaction).some((retained) => retained !== false))`
260	-	`errors.push("redaction declaration is invalid");`
261	-	`if (secretOrPrivate(artifact))`
262	-	`errors.push("artifact contains secret-shaped or host-private data");`
263	-	`return { valid: errors.length === 0, errors };`
264	-	`};`

1	-	`import { describe, expect, test } from "vite-plus/test";`
2	-
3	-	`import checkedReleaseMatrix from "../compatibility/release-matrix.json" with { type: "json" };`
4	-
5	-	`import { compileAcpReleaseEvidence } from "./release-evidence.ts";`
6	-
7	-	`const NOW = new Date("2026-07-17T13:00:00.000Z");`
8	-
9	-	`describe("checked ACP release evidence compiler", () => {`
10	-	`test("compiles the complete checked matrix into peer admission and feature evidence", () => {`
11	-	`const result = compileAcpReleaseEvidence(checkedReleaseMatrix, { now: NOW });`
12	-	`expect(result._tag).toBe("ReleaseEvidenceReady");`
13	-	`if (result._tag !== "ReleaseEvidenceReady") return;`
14	-	`expect(result.evidence.grok.map((record) => record.suiteId)).toEqual([`
15	-	`"acp-wire-v1-conformance",`
16	-	`"acp-release-matrix-v1",`
17	-	`"grok-authority-reverse",`
18	-	`"grok-question-extensions",`
19	-	`]);`
20	-	`expect(result.evidence.cursor.map((record) => record.suiteId)).toEqual([`
21	-	`"acp-wire-v1-conformance",`
22	-	`"cursor-t3-bde0a4c0",`
23	-	`"acp-release-matrix-v1",`
24	-	`"cursor-authority-reverse",`
25	-	`"cursor-vendor-extensions",`
26	-	`"cursor-model-discovery",`
27	-	`]);`
28	-	`expect(result.evidence.cursor.at(2)).toMatchObject({`
29	-	`peerVersion: "2026.6.24",`
30	-	`executableSha256: "b7babf47d8b1eee28ac27a74affa02a559bb38103a6e71fbb1f120805d51fedf",`
31	-	`installationClosureSha256: "69d078daa4db8cbb4163ce2f010207553efb06d652c1e1ea421d739795532faa",`
32	-	`platform: { os: "darwin", arch: "arm64" },`
33	-	`});`
34	-	`});`
35	-
36	-	`test("fails closed for stale, incomplete, or revision-substituted evidence", () => {`
37	-	`const stale = compileAcpReleaseEvidence(checkedReleaseMatrix, {`
38	-	`now: new Date("2026-09-01T00:00:00.000Z"),`
39	-	`});`
40	-	`expect(stale).toMatchObject({`
41	-	`_tag: "ReleaseEvidenceUnavailable",`
42	-	`diagnostics: [expect.stringContaining("freshness window is 30 days")],`
43	-	`});`
44	-
45	-	`const incomplete = structuredClone(checkedReleaseMatrix) as any;`
46	-	`incomplete.peers[0].scenarios.find((scenario: any) => scenario.id === "initialize").result =`
47	-	`"blocked";`
48	-	`expect(compileAcpReleaseEvidence(incomplete, { now: NOW })).toMatchObject({`
49	-	`_tag: "ReleaseEvidenceUnavailable",`
50	-	`});`
51	-
52	-	`expect(`
53	-	`compileAcpReleaseEvidence(checkedReleaseMatrix, {`
54	-	`now: NOW,`
55	-	`expectedOpenAgentsRevision: "f".repeat(40),`
56	-	`}),`
57	-	`).toEqual({`
58	-	`_tag: "ReleaseEvidenceUnavailable",`
59	-	`diagnostics: ["checked release evidence does not match the expected OpenAgents revision"],`
60	-	`});`
61	-	`});`
62	-	`});`

1	-	`import type { AcpConformanceEvidenceRecord } from "@openagentsinc/agent-client-protocol/profiles";`
2	-
3	-	`import checkedReleaseMatrix from "../compatibility/release-matrix.json" with { type: "json" };`
4	-
5	-	`import { describeAcpReleaseExpiry, validateAcpReleaseMatrix } from "./release.ts";`
6	-
7	-	`export type AcpReleaseEvidencePeer = "grok" \| "cursor";`
8	-
9	-	`export type AcpReleaseEvidenceCompilation =`
10	-	`\| Readonly<{`
11	-	`_tag: "ReleaseEvidenceReady";`
12	-	`openAgentsRevision: string;`
13	-	`evidence: Readonly<`
14	-	`Record<AcpReleaseEvidencePeer, ReadonlyArray<AcpConformanceEvidenceRecord>>`
15	-	`>;`
16	-	`}>`
17	-	`\| Readonly<{`
18	-	`_tag: "ReleaseEvidenceUnavailable";`
19	-	`diagnostics: ReadonlyArray<string>;`
20	-	`}>;`
21	-
22	-	`type JsonObject = Record<string, unknown>;`
23	-
24	-	`const object = (value: unknown): JsonObject \| undefined =>`
25	-	`value !== null && typeof value === "object" && !Array.isArray(value)`
26	-	`? (value as JsonObject)`
27	-	`: undefined;`
28	-
29	-	`const string = (value: unknown): string \| undefined =>`
30	-	`typeof value === "string" && value.length > 0 ? value : undefined;`
31	-
32	-	`const scenarioPassedLive = (peer: JsonObject, id: string): boolean =>`
33	-	`Array.isArray(peer.scenarios) &&`
34	-	`peer.scenarios.some((value) => {`
35	-	`const scenario = object(value);`
36	-	`return scenario?.id === id && scenario.result === "live-pass";`
37	-	`});`
38	-
39	-	`const fixtureSuites = (peer: AcpReleaseEvidencePeer): ReadonlyArray<string> =>`
40	-	`peer === "grok" ? ["acp-wire-v1-conformance"] : ["acp-wire-v1-conformance", "cursor-t3-bde0a4c0"];`
41	-
42	-	`const featureSuites = (`
43	-	`peer: AcpReleaseEvidencePeer,`
44	-	`document: JsonObject,`
45	-	`): ReadonlyArray<string> => {`
46	-	`if (peer === "grok") {`
47	-	`return [`
48	-	`...(scenarioPassedLive(document, "permission-approval") &&`
49	-	`scenarioPassedLive(document, "permission-refusal") &&`
50	-	`scenarioPassedLive(document, "fs-terminal-enabled")`
51	-	`? ["grok-authority-reverse"]`
52	-	`: []),`
53	-	`...(scenarioPassedLive(document, "grok-question-extensions")`
54	-	`? ["grok-question-extensions"]`
55	-	`: []),`
56	-	`...(scenarioPassedLive(document, "auth-secondary") ? ["grok-api-key-auth"] : []),`
57	-	`];`
58	-	`}`
59	-	`return [`
60	-	`...(scenarioPassedLive(document, "permission-approval") &&`
61	-	`scenarioPassedLive(document, "permission-refusal")`
62	-	`? ["cursor-authority-reverse"]`
63	-	`: []),`
64	-	`...(scenarioPassedLive(document, "cursor-extensions-models")`
65	-	`? ["cursor-vendor-extensions", "cursor-model-discovery"]`
66	-	`: []),`
67	-	`];`
68	-	`};`
69	-
70	-	`/**`
71	-	`* Lowers the complete checked release matrix into the narrow evidence records`
72	-	`* consumed by trusted peer admission. Matrix validation runs first and the`
73	-	`* compiler never trusts a hand-authored claim label or partial scenario row.`
74	-	`*/`
75	-	`export const compileAcpReleaseEvidence = (`
76	-	`value: unknown,`
77	-	`options: Readonly<{ now?: Date; expectedOpenAgentsRevision?: string }> = {},`
78	-	`): AcpReleaseEvidenceCompilation => {`
79	-	`const validation = validateAcpReleaseMatrix(value, {`
80	-	`...(options.now === undefined ? {} : { now: options.now }),`
81	-	`});`
82	-	`if (!validation.valid)`
83	-	`return { _tag: "ReleaseEvidenceUnavailable", diagnostics: validation.errors };`
84	-	`if (validation.expiry?._tag === "Expired")`
85	-	`return {`
86	-	`_tag: "ReleaseEvidenceUnavailable",`
87	-	`diagnostics: [describeAcpReleaseExpiry(validation.expiry)],`
88	-	`};`
89	-
90	-	`const matrix = object(value);`
91	-	`const openAgents = object(matrix?.openAgents);`
92	-	`const revision = string(openAgents?.revision);`
93	-	`if (revision === undefined)`
94	-	`return {`
95	-	`_tag: "ReleaseEvidenceUnavailable",`
96	-	`diagnostics: ["OpenAgents revision is unavailable after matrix validation"],`
97	-	`};`
98	-	`if (`
99	-	`options.expectedOpenAgentsRevision !== undefined &&`
100	-	`options.expectedOpenAgentsRevision !== revision`
101	-	`)`
102	-	`return {`
103	-	`_tag: "ReleaseEvidenceUnavailable",`
104	-	`diagnostics: ["checked release evidence does not match the expected OpenAgents revision"],`
105	-	`};`
106	-
107	-	`const testedPlatform = string(object(matrix?.platform)?.tested)?.split("-");`
108	-	`const os = testedPlatform?.[0];`
109	-	`const arch = testedPlatform?.slice(1).join("-");`
110	-	`const recordedAt = string(matrix?.recordedAt);`
111	-	`if (os === undefined \|\| arch === undefined \|\| arch.length === 0 \|\| recordedAt === undefined)`
112	-	`return {`
113	-	`_tag: "ReleaseEvidenceUnavailable",`
114	-	`diagnostics: ["checked release platform or timestamp is unavailable"],`
115	-	`};`
116	-
117	-	`const compiled: Record<AcpReleaseEvidencePeer, ReadonlyArray<AcpConformanceEvidenceRecord>> = {`
118	-	`grok: [],`
119	-	`cursor: [],`
120	-	`};`
121	-	`for (const rawPeer of Array.isArray(matrix?.peers) ? matrix.peers : []) {`
122	-	`const peer = object(rawPeer);`
123	-	`if (peer === undefined) continue;`
124	-	`const peerName = peer?.peer;`
125	-	`if ((peerName !== "grok" && peerName !== "cursor") \|\| peer.releaseEligible !== true) continue;`
126	-	`const binary = object(peer.binary);`
127	-	`const negotiation = object(peer.negotiation);`
128	-	`const identity = object(negotiation?.peerIdentity);`
129	-	`const peerVersion = string(binary?.classifiedVersion) ?? string(identity?.version);`
130	-	`const executableSha256 = string(binary?.sha256);`
131	-	`if (peerVersion === undefined \|\| executableSha256 === undefined) continue;`
132	-	`const installationClosureSha256 = string(binary?.installationClosureSha256);`
133	-	`const artifactRef =`
134	-	`"packages/agent-client-protocol-conformance/compatibility/release-matrix.json";`
135	-	`const liveRecord = (suiteId: string): AcpConformanceEvidenceRecord => ({`
136	-	`suiteId,`
137	-	`kind: "live",`
138	-	`result: "pass",`
139	-	`peerVersion,`
140	-	`executableSha256,`
141	-	`...(peerName === "cursor" && installationClosureSha256 !== undefined`
142	-	`? { installationClosureSha256 }`
143	-	`: {}),`
144	-	`platform: { os, arch },`
145	-	`recordedAt,`
146	-	`artifactRef,`
147	-	`});`
148	-	`compiled[peerName] = Object.freeze([`
149	-	`...fixtureSuites(peerName).map(`
150	-	`(suiteId): AcpConformanceEvidenceRecord => ({`
151	-	`suiteId,`
152	-	`kind: "fixture",`
153	-	`result: "pass",`
154	-	`peerVersion,`
155	-	`recordedAt,`
156	-	`artifactRef,`
157	-	`}),`
158	-	`),`
159	-	`liveRecord("acp-release-matrix-v1"),`
160	-	`...featureSuites(peerName, peer).map(liveRecord),`
161	-	`]);`
162	-	`}`
163	-
164	-	`if (compiled.grok.length === 0 \|\| compiled.cursor.length === 0)`
165	-	`return {`
166	-	`_tag: "ReleaseEvidenceUnavailable",`
167	-	`diagnostics: ["checked release matrix did not compile both eligible peers"],`
168	-	`};`
169	-	`return {`
170	-	`_tag: "ReleaseEvidenceReady",`
171	-	`openAgentsRevision: revision,`
172	-	`evidence: Object.freeze(compiled),`
173	-	`};`
174	-	`};`
175	-
176	-	`export const checkedAcpReleaseEvidence = (`
177	-	`options: Readonly<{ now?: Date; expectedOpenAgentsRevision?: string }> = {},`
178	-	`): AcpReleaseEvidenceCompilation => compileAcpReleaseEvidence(checkedReleaseMatrix, options);`

1	-	`export const ACP_RELEASE_CLAIM_STATES = [`
2	-	`"supported",`
3	-	`"experimental",`
4	-	`"incompatible",`
5	-	`"not-installed",`
6	-	`"auth-required",`
7	-	`"degraded",`
8	-	`] as const;`
9	-
10	-	`export const ACP_RELEASE_SCENARIO_RESULTS = [`
11	-	`"live-pass",`
12	-	`"fixture-pass",`
13	-	`"blocked",`
14	-	`"not-tested",`
15	-	`"unsupported",`
16	-	`"fail",`
17	-	`] as const;`
18	-
19	-	`export const ACP_RELEASE_SCENARIO_IDS = [`
20	-	`"identity-version",`
21	-	`"incompatible-version-rejection",`
22	-	`"initialize",`
23	-	`"auth-primary",`
24	-	`"auth-secondary",`
25	-	`"auth-cancel",`
26	-	`"auth-expiry-failure",`
27	-	`"auth-logout-reauth",`
28	-	`"session-new",`
29	-	`"session-list",`
30	-	`"session-load",`
31	-	`"session-resume-close-delete",`
32	-	`"real-repo-text",`
33	-	`"real-repo-tool-plan-config-usage",`
34	-	`"permission-approval",`
35	-	`"permission-refusal",`
36	-	`"permission-timeout-stale-policy",`
37	-	`"fs-terminal-enabled",`
38	-	`"fs-terminal-disabled",`
39	-	`"mcp-authorized",`
40	-	`"mcp-expired-refusal",`
41	-	`"mcp-no-durable-secret",`
42	-	`"model-mode-config",`
43	-	`"stream-cancel",`
44	-	`"reverse-cancel",`
45	-	`"crash-kill-restart",`
46	-	`"malformed-unknown-output",`
47	-	`"attachment-repair",`
48	-	`"sequential-turns",`
49	-	`"multiple-sessions",`
50	-	`"cleanup-bounds",`
51	-	`"fragmented-oversized",`
52	-	`"stderr-update-flood",`
53	-	`"queue-stall-timeout-race",`
54	-	`"crash-loop-repeat",`
55	-	`"secret-scan",`
56	-	`"trust-controls",`
57	-	`"grok-wire-launch",`
58	-	`"grok-rich-stream",`
59	-	`"grok-load-replay",`
60	-	`"grok-question-extensions",`
61	-	`"cursor-wire-launch",`
62	-	`"cursor-login-lifecycle",`
63	-	`"cursor-extensions-models",`
64	-	`"cursor-load-unsupported",`
65	-	`"desktop-clean-machine",`
66	-	`"support-bundle",`
67	-	`] as const;`
68	-
69	-	`export const ACP_RELEASE_PROFILE_REVISIONS = Object.freeze({ grok: 1, cursor: 3 } as const);`
70	-
71	-	`export type AcpReleaseEvidenceClass =`
72	-	`\| "live-peer"`
73	-	`\| "optional-live-peer"`
74	-	`\| "packaged-desktop-live"`
75	-	`\| "hermetic-production"`
76	-	`\| "not-applicable";`
77	-
78	-	`const hermeticProductionScenarios = new Set<string>([`
79	-	`"incompatible-version-rejection",`
80	-	`"fs-terminal-disabled",`
81	-	`"mcp-expired-refusal",`
82	-	`"malformed-unknown-output",`
83	-	`"fragmented-oversized",`
84	-	`"stderr-update-flood",`
85	-	`"queue-stall-timeout-race",`
86	-	`"permission-timeout-stale-policy",`
87	-	`"auth-expiry-failure",`
88	-	`"trust-controls",`
89	-	`]);`
90	-	`const packagedDesktopScenarios = new Set<string>(["desktop-clean-machine", "support-bundle"]);`
91	-	`const grokOptionalScenarios = new Set<string>(["auth-secondary"]);`
92	-	`const grokNotApplicableScenarios = new Set<string>([`
93	-	`"auth-logout-reauth",`
94	-	`"session-resume-close-delete",`
95	-	`"model-mode-config",`
96	-	`"cursor-wire-launch",`
97	-	`"cursor-login-lifecycle",`
98	-	`"cursor-extensions-models",`
99	-	`"cursor-load-unsupported",`
100	-	`]);`
101	-	`const cursorNotApplicableScenarios = new Set<string>([`
102	-	`"auth-secondary",`
103	-	`"auth-logout-reauth",`
104	-	`"session-resume-close-delete",`
105	-	`"fs-terminal-enabled",`
106	-	`"grok-wire-launch",`
107	-	`"grok-rich-stream",`
108	-	`"grok-load-replay",`
109	-	`"grok-question-extensions",`
110	-	`]);`
111	-
112	-	`export const acpReleaseEvidenceClass = (`
113	-	`peer: "grok" \| "cursor",`
114	-	`scenario: string,`
115	-	`): AcpReleaseEvidenceClass => {`
116	-	`const notApplicable = peer === "grok" ? grokNotApplicableScenarios : cursorNotApplicableScenarios;`
117	-	`if (notApplicable.has(scenario)) return "not-applicable";`
118	-	`if (peer === "grok" && grokOptionalScenarios.has(scenario)) return "optional-live-peer";`
119	-	`if (hermeticProductionScenarios.has(scenario)) return "hermetic-production";`
120	-	`if (packagedDesktopScenarios.has(scenario)) return "packaged-desktop-live";`
121	-	`return "live-peer";`
122	-	`};`
123	-
124	-	`const evidenceSatisfies = (evidenceClass: AcpReleaseEvidenceClass, result: unknown): boolean =>`
125	-	`evidenceClass === "optional-live-peer"`
126	-	`? true`
127	-	`: evidenceClass === "not-applicable"`
128	-	`? result === "unsupported"`
129	-	`: evidenceClass === "hermetic-production"`
130	-	`? result === "fixture-pass" \|\| result === "live-pass"`
131	-	`: result === "live-pass";`
132	-
133	-	`export type AcpReleaseClaimState = (typeof ACP_RELEASE_CLAIM_STATES)[number];`
134	-	`export type AcpReleaseScenarioResult = (typeof ACP_RELEASE_SCENARIO_RESULTS)[number];`
135	-
136	-	`export type AcpReleaseScenario = Readonly<{`
137	-	`id: string;`
138	-	`requiredForSupported: boolean;`
139	-	`result: AcpReleaseScenarioResult;`
140	-	`evidenceRefs: ReadonlyArray<string>;`
141	-	`safeDetail: string;`
142	-	`}>;`
143	-
144	-	`export type AcpReleasePeer = Readonly<{`
145	-	`peer: "grok" \| "cursor";`
146	-	`claimState: AcpReleaseClaimState;`
147	-	`releaseEligible: boolean;`
148	-	`scenarios: ReadonlyArray<AcpReleaseScenario>;`
149	-	`}>;`
150	-
151	-	`export type AcpReleaseMatrix = Readonly<{`
152	-	`format: "openagents-acp-release-matrix-v1";`
153	-	`protocol: "Agent Client Protocol";`
154	-	`protocolExclusions: ReadonlyArray<"Agent Communication Protocol" \| "A2A">;`
155	-	`recordedAt: string;`
156	-	`freshnessDays: number;`
157	-	`peers: ReadonlyArray<AcpReleasePeer>;`
158	-	`}>;`
159	-
160	-	`export type AcpReleaseMatrixValidation = Readonly<{`
161	-	`valid: boolean;`
162	-	`errors: ReadonlyArray<string>;`
163	-	`expiry?: AcpReleaseMatrixExpiry;`
164	-	`}>;`
165	-
166	-	`export type AcpReleaseMatrixExpiry =`
167	-	`\| Readonly<{`
168	-	`_tag: "Fresh";`
169	-	`recordedAt: string;`
170	-	`freshnessDays: number;`
171	-	`expiresAt: string;`
172	-	`ageMs: number;`
173	-	`}>`
174	-	`\| Readonly<{`
175	-	`_tag: "Expired";`
176	-	`recordedAt: string;`
177	-	`freshnessDays: number;`
178	-	`expiresAt: string;`
179	-	`ageMs: number;`
180	-	`overdueMs: number;`
181	-	`}>;`
182	-
183	-	`export type AcpReleaseMatrixGate = "push" \| "release";`
184	-
185	-	`const millisecondsPerDay = 86_400_000;`
186	-
187	-	`const formatDays = (milliseconds: number): string =>`
188	-	`${(milliseconds / millisecondsPerDay).toFixed(1)} days`;
189	-
190	-	`export const describeAcpReleaseExpiry = (`
191	-	`expiry: Extract<AcpReleaseMatrixExpiry, { _tag: "Expired" }>,`
192	-	`): string =>`
193	-	`matrix evidence recorded at ${expiry.recordedAt} is ${formatDays(expiry.ageMs)} old; freshness window is ${expiry.freshnessDays} days and expired ${formatDays(expiry.overdueMs)} ago. Refresh requires a qualifying live release run, its candidate artifact, and a human-reviewed compatibility/release-matrix.json update.`;
194	-
195	-	`export const evaluateAcpReleaseMatrixGate = (`
196	-	`validation: AcpReleaseMatrixValidation,`
197	-	`gate: AcpReleaseMatrixGate,`
198	-	`): Readonly<{`
199	-	`valid: boolean;`
200	-	`errors: ReadonlyArray<string>;`
201	-	`warning?: string;`
202	-	`}> => {`
203	-	`const expiry = validation.expiry;`
204	-	`const warning = expiry?._tag === "Expired" ? describeAcpReleaseExpiry(expiry) : undefined;`
205	-	`const errors =`
206	-	`gate === "release" && warning !== undefined`
207	-	`? [...validation.errors, warning]`
208	-	`: validation.errors;`
209	-	`return {`
210	-	`valid: errors.length === 0,`
211	-	`errors,`
212	-	`...(gate === "push" && warning !== undefined ? { warning } : {}),`
213	-	`};`
214	-	`};`
215	-
216	-	`const object = (value: unknown): Record<string, unknown> \| undefined =>`
217	-	`value !== null && typeof value === "object" && !Array.isArray(value)`
218	-	`? (value as Record<string, unknown>)`
219	-	`: undefined;`
220	-
221	-	`const strings = (value: unknown): ReadonlyArray<string> \| undefined =>`
222	-	`Array.isArray(value) && value.every((entry) => typeof entry === "string") ? value : undefined;`
223	-
224	-	`const nonEmptyString = (value: unknown): value is string =>`
225	-	`typeof value === "string" && value.length > 0;`
226	-	`const sha256 = (value: unknown): value is string =>`
227	-	`typeof value === "string" && /^[a-f0-9]{64}$/.test(value);`
228	-	`const gitRevision = (value: unknown): value is string =>`
229	-	`typeof value === "string" && /^[a-f0-9]{40}$/.test(value);`
230	-
231	-	`const containsExportedSecret = (value: unknown): boolean => {`
232	-	`const encoded = JSON.stringify(value);`
233	-	`return [`
234	-	`/\/Users\//,`
235	-	`/\/home\/[^"/]+\//,`
236	-	`/Bearer\s+[A-Za-z0-9._~-]+/i,`
237	-	`/(?:token\|secret\|api[_-]?key)=[^"\s]+/i,`
238	-	`/(?:sk\|xai)-[A-Za-z0-9_-]{12,}/,`
239	-	`/-----BEGIN (?:RSA \|EC \|OPENSSH )?PRIVATE KEY-----/,`
240	-	`].some((pattern) => pattern.test(encoded));`
241	-	`};`
242	-
243	-	`/**`
244	-	`* Validates a checked ACP release matrix without trusting its claim booleans.`
245	-	`* A fixture pass is useful evidence, but it can never satisfy a live release`
246	-	`* requirement or promote a named peer by itself.`
247	-	`*/`
248	-	`export const validateAcpReleaseMatrix = (`
249	-	`value: unknown,`
250	-	`options: Readonly<{ now?: Date }> = {},`
251	-	`): AcpReleaseMatrixValidation => {`
252	-	`const errors: string[] = [];`
253	-	`const matrix = object(value);`
254	-	`if (matrix === undefined) return { valid: false, errors: ["matrix must be an object"] };`
255	-	`if (matrix.format !== "openagents-acp-release-matrix-v1") errors.push("unexpected format");`
256	-	`if (matrix.protocol !== "Agent Client Protocol")`
257	-	`errors.push("protocol must be Agent Client Protocol");`
258	-	`const exclusions = strings(matrix.protocolExclusions);`
259	-	`if (`
260	-	`exclusions === undefined \|\|`
261	-	`!exclusions.includes("Agent Communication Protocol") \|\|`
262	-	`!exclusions.includes("A2A")`
263	-	`)`
264	-	`errors.push("protocol exclusions must name Agent Communication Protocol and A2A");`
265	-	`const now = options.now ?? new Date();`
266	-	`const nowMs = now.getTime();`
267	-	`const recordedAtValue = typeof matrix.recordedAt === "string" ? matrix.recordedAt : undefined;`
268	-	`const recordedAt = recordedAtValue === undefined ? NaN : Date.parse(recordedAtValue);`
269	-	`const freshnessDays =`
270	-	`typeof matrix.freshnessDays === "number" && Number.isFinite(matrix.freshnessDays)`
271	-	`? matrix.freshnessDays`
272	-	`: NaN;`
273	-	`let expiry: AcpReleaseMatrixExpiry \| undefined;`
274	-	`if (!Number.isFinite(recordedAt) \|\| !Number.isFinite(freshnessDays) \|\| freshnessDays <= 0)`
275	-	`errors.push("matrix freshness metadata is invalid");`
276	-	`else if (recordedAt - nowMs > 300_000) errors.push("matrix evidence timestamp is in the future");`
277	-	`else {`
278	-	`const ageMs = nowMs - recordedAt;`
279	-	`const expiresAt = new Date(recordedAt + freshnessDays * millisecondsPerDay).toISOString();`
280	-	`const recordedAtText = recordedAtValue;`
281	-	`if (recordedAtText === undefined) {`
282	-	`errors.push("matrix freshness metadata is invalid");`
283	-	`} else {`
284	-	`expiry =`
285	-	`ageMs > freshnessDays * millisecondsPerDay`
286	-	`? {`
287	-	`_tag: "Expired",`
288	-	`recordedAt: recordedAtText,`
289	-	`freshnessDays,`
290	-	`expiresAt,`
291	-	`ageMs,`
292	-	`overdueMs: ageMs - freshnessDays * millisecondsPerDay,`
293	-	`}`
294	-	`: { _tag: "Fresh", recordedAt: recordedAtText, freshnessDays, expiresAt, ageMs };`
295	-	`}`
296	-	`}`
297	-
298	-	`const openAgents = object(matrix.openAgents);`
299	-	`if (openAgents === undefined) errors.push("OpenAgents release identity is required");`
300	-	`else {`
301	-	`if (!gitRevision(openAgents.revision))`
302	-	`errors.push("OpenAgents revision must be a full Git SHA");`
303	-	`if (!gitRevision(openAgents.desktopIntegrationRevision))`
304	-	`errors.push("Desktop integration revision must be a full Git SHA");`
305	-	`if (!nonEmptyString(openAgents.build)) errors.push("OpenAgents build identity is required");`
306	-	`if (!nonEmptyString(openAgents.protocolPackageRevision))`
307	-	`errors.push("protocol package revision is required");`
308	-	`if (openAgents.schemaRelease !== "schema-v1.19.0")`
309	-	`errors.push("schema release must be schema-v1.19.0");`
310	-	`if (!sha256(openAgents.schemaSha256)) errors.push("schema SHA-256 is required");`
311	-	`}`
312	-
313	-	`const platform = object(matrix.platform);`
314	-	`if (platform === undefined) errors.push("tested platform identity is required");`
315	-	`else {`
316	-	`if (!nonEmptyString(platform.tested) \|\| !/^[a-z0-9]+-[a-z0-9_]+$/.test(platform.tested))`
317	-	`errors.push("tested platform must be an os-architecture identifier");`
318	-	`if (!nonEmptyString(platform.osVersion)) errors.push("tested OS version is required");`
319	-	`if (!nonEmptyString(platform.nodeVersion)) errors.push("tested Node version is required");`
320	-	`const notTested = strings(platform.notTested);`
321	-	`if (notTested === undefined) errors.push("not-tested platforms must be explicit");`
322	-	`else if (new Set(notTested).size !== notTested.length)`
323	-	`errors.push("not-tested platforms must be unique");`
324	-	`else if (notTested.includes(String(platform.tested)))`
325	-	`errors.push("tested platform cannot also be not-tested");`
326	-	`}`
327	-
328	-	`const peers = Array.isArray(matrix.peers) ? matrix.peers : [];`
329	-	`if (peers.length !== 2) errors.push("matrix must contain exactly Grok and Cursor");`
330	-	`const peerNames = new Set<string>();`
331	-	`let scenarioCatalog: ReadonlyArray<string> \| undefined;`
332	-	`for (const [peerIndex, rawPeer] of peers.entries()) {`
333	-	`const peer = object(rawPeer);`
334	-	`if (peer === undefined) {`
335	-	errors.push(`peer ${peerIndex} must be an object`);
336	-	`continue;`
337	-	`}`
338	-	const peerName = typeof peer.peer === "string" ? peer.peer : `peer-${peerIndex}`;
339	-	`peerNames.add(peerName);`
340	-	if (peerName !== "grok" && peerName !== "cursor") errors.push(`unknown peer ${peerName}`);
341	-	`if (!(ACP_RELEASE_CLAIM_STATES as readonly unknown[]).includes(peer.claimState))`
342	-	errors.push(`${peerName}: invalid claim state`);
343	-	`const expectedProfile = peerName === "grok" ? "grok-cli" : "cursor-agent";`
344	-	`const expectedProfileRevision =`
345	-	`peerName === "grok" \|\| peerName === "cursor"`
346	-	`? ACP_RELEASE_PROFILE_REVISIONS[peerName]`
347	-	`: undefined;`
348	-	`const profile = object(peer.profile);`
349	-	`if (`
350	-	`profile === undefined \|\|`
351	-	`profile.id !== expectedProfile \|\|`
352	-	`profile.revision !== expectedProfileRevision`
353	-	`)`
354	-	errors.push(`${peerName}: exact trusted profile identity is required`);
355	-	`const binary = object(peer.binary);`
356	-	`const expectedCommand = peerName === "grok" ? ["grok", "agent", "stdio"] : ["agent", "acp"];`
357	-	if (binary === undefined) errors.push(`${peerName}: pinned binary identity is required`);
358	-	`else {`
359	-	`if (JSON.stringify(strings(binary.command)) !== JSON.stringify(expectedCommand))`
360	-	errors.push(`${peerName}: launch command does not match the trusted profile`);
361	-	`if (!nonEmptyString(binary.reportedVersion))`
362	-	errors.push(`${peerName}: reported version is required`);
363	-	`if (`
364	-	`!nonEmptyString(binary.resolvedExecutableName) \|\|`
365	-	`binary.resolvedExecutableName.includes("/") \|\|`
366	-	`binary.resolvedExecutableName.includes("\\")`
367	-	`)`
368	-	errors.push(`${peerName}: safe resolved executable name is required`);
369	-	if (!sha256(binary.sha256)) errors.push(`${peerName}: executable SHA-256 is required`);
370	-	`if (peerName === "cursor" && !sha256(binary.installationClosureSha256))`
371	-	`errors.push("cursor: installation closure SHA-256 is required");`
372	-	`if (!nonEmptyString(binary.installationSource))`
373	-	errors.push(`${peerName}: installation source is required`);
374	-	`}`
375	-	`const negotiation = object(peer.negotiation);`
376	-	if (negotiation === undefined) errors.push(`${peerName}: initialize evidence is required`);
377	-	`else {`
378	-	if (negotiation.wireVersion !== 1) errors.push(`${peerName}: wire version must be 1`);
379	-	`const identity = object(negotiation.peerIdentity);`
380	-	`if (`
381	-	`identity === undefined \|\|`
382	-	`!nonEmptyString(identity.name) \|\|`
383	-	`!nonEmptyString(identity.version)`
384	-	`)`
385	-	errors.push(`${peerName}: peer initialize identity is required`);
386	-	`if (strings(negotiation.authMethodIds) === undefined)`
387	-	errors.push(`${peerName}: advertised auth methods are required`);
388	-	`if (strings(negotiation.advertisedCapabilityKeys) === undefined)`
389	-	errors.push(`${peerName}: advertised capabilities are required`);
390	-	`}`
391	-	`const scenarios = Array.isArray(peer.scenarios) ? peer.scenarios : [];`
392	-	`const ids: string[] = [];`
393	-	`let allRequiredSatisfied = scenarios.length > 0;`
394	-	`for (const [scenarioIndex, rawScenario] of scenarios.entries()) {`
395	-	`const scenario = object(rawScenario);`
396	-	`if (scenario === undefined) {`
397	-	errors.push(`${peerName}: scenario ${scenarioIndex} must be an object`);
398	-	`allRequiredSatisfied = false;`
399	-	`continue;`
400	-	`}`
401	-	const id = typeof scenario.id === "string" ? scenario.id : `scenario-${scenarioIndex}`;
402	-	`ids.push(id);`
403	-	`const evidenceClass =`
404	-	`peerName === "grok" \|\| peerName === "cursor"`
405	-	`? acpReleaseEvidenceClass(peerName, id)`
406	-	`: "live-peer";`
407	-	`const expectedRequired =`
408	-	`evidenceClass !== "not-applicable" && evidenceClass !== "optional-live-peer";`
409	-	`if (scenario.requiredForSupported !== expectedRequired)`
410	-	errors.push(`${peerName}/${id}: requiredness does not match the code-owned catalog`);
411	-	`if (!(ACP_RELEASE_SCENARIO_RESULTS as readonly unknown[]).includes(scenario.result))`
412	-	errors.push(`${peerName}/${id}: invalid result`);
413	-	`if (!evidenceSatisfies(evidenceClass, scenario.result)) allRequiredSatisfied = false;`
414	-	`const evidenceRefs = strings(scenario.evidenceRefs);`
415	-	`if (evidenceRefs === undefined)`
416	-	errors.push(`${peerName}/${id}: evidenceRefs must be strings`);
417	-	`else if (`
418	-	`evidenceRefs.some(`
419	-	`(ref) =>`
420	-	`ref.startsWith("/") \|\|`
421	-	`ref.includes("..") \|\|`
422	-	`ref.includes("\\") \|\|`
423	-	`/^[a-z][a-z0-9+.-]*:/i.test(ref),`
424	-	`)`
425	-	`)`
426	-	errors.push(`${peerName}/${id}: evidence refs must be repository-relative`);
427	-	`else if (`
428	-	`(scenario.result === "live-pass" \|\| scenario.result === "fixture-pass") &&`
429	-	`evidenceRefs.length === 0`
430	-	`)`
431	-	errors.push(`${peerName}/${id}: passing evidence class requires evidence`);
432	-	`if (typeof scenario.safeDetail !== "string" \|\| scenario.safeDetail.length === 0)`
433	-	errors.push(`${peerName}/${id}: safeDetail is required`);
434	-	`}`
435	-	if (new Set(ids).size !== ids.length) errors.push(`${peerName}: scenario ids must be unique`);
436	-	`if (JSON.stringify(ids.toSorted()) !== JSON.stringify([...ACP_RELEASE_SCENARIO_IDS].toSorted()))`
437	-	errors.push(`${peerName}: scenario catalog is incomplete or unknown`);
438	-	`if (scenarioCatalog === undefined) scenarioCatalog = ids.toSorted();`
439	-	`else if (JSON.stringify(scenarioCatalog) !== JSON.stringify(ids.toSorted()))`
440	-	`errors.push("Grok and Cursor must use the same release scenario catalog");`
441	-	`if (peer.releaseEligible !== allRequiredSatisfied)`
442	-	errors.push(`${peerName}: releaseEligible does not match code-owned evidence requirements`);
443	-	`if (peer.claimState === "supported" && !allRequiredSatisfied)`
444	-	errors.push(`${peerName}: supported claim lacks required evidence`);
445	-	`}`
446	-	`if (!peerNames.has("grok") \|\| !peerNames.has("cursor"))`
447	-	`errors.push("matrix must independently identify Grok and Cursor");`
448	-	`if (containsExportedSecret(matrix))`
449	-	`errors.push("matrix contains secret-shaped or host-private data");`
450	-	`return { valid: errors.length === 0, errors, ...(expiry === undefined ? {} : { expiry }) };`
451	-	`};`