Core v2: Add corrective evidence-identity generation

README.md

@@ -47,6 +47,12 @@ The stable `scripts/core-contract.sh` wrapper and inactive resolver select this
 generation together. This is a repo-only compatibility switch. It does not install
 the resolver, select a live profile, or qualify a real forge.
 
+The v2 registry also carries one complete, unselected evidence-identity correction.
+It requires every passed evidence item to come from the exact selected execution;
+incident mismatches remain valid only when all evidence is non-passing. The stable
+wrapper still selects the prior v2 generation until a separate atomic cutover binds
+the corrective generation's reviewed merge and publisher receipt.
+
 ## Inactive fake adapter contract matrix
 
 `adapter-tests/v1/` runs a fixed 2×2 producer/forge matrix against one unrelated

RESTORE.md

@@ -308,6 +308,19 @@ materialization in a caller-disposable repository. The package is not qualified
 It grants no credential, network, publish, push, merge, or remote branch-write
 capability. The switch does not install the resolver or select a live profile.
 
+Restore the complete unselected v2 evidence-identity generation, its dedicated
+ledger, and its focused test from the manifest, then run:
+
+```sh
+bash scripts/test/portable-core-v2-evidence-identity.test.sh
+```
+
+This proof requires passed evidence to retain the exact selected performer,
+binding, environment, capability, and metadata projection. It also proves that
+all-non-passing incident mismatches remain preservable. The stable wrapper remains
+on the prior generation until the separate atomic cutover; this step grants no
+authority, qualification, credential, network, activation, or external effect.
+
 Restore every path in the manifest's inactive fake adapter matrix block, then run:
 
 ```sh

ci/required-files.txt

@@ -155,6 +155,17 @@ core/v2/generations/g-392d20099dfa99872764009b268c8871914b4dbc0da467ec346baa9218
 core/v2/generations/g-392d20099dfa99872764009b268c8871914b4dbc0da467ec346baa921818ae3e/modules/stage_request.jq
 scripts/test/portable-core-v2-fake-forge.test.sh
 
+# Inactive portable core v2 evidence-identity correction
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/contracts.jq
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/core-ingress.sh
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/modules/profile_graph.jq
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/modules/result_facts.jq
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/modules/result_truth.jq
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/modules/schema.jq
+core/v2/generations/g-c83c940afd16550a4f8a4dbee2b9a6f37e429063d277962ba81c141ba5303b43/modules/stage_request.jq
+scripts/test/portable-core-v2-evidence-identity-ledger.tsv
+scripts/test/portable-core-v2-evidence-identity.test.sh
+
 # Inactive fake producer/forge adapter contract matrix
 adapter-tests/v1/runner.sh
 adapter-tests/v1/contract.jq

control/v1/control-policy-set.json

@@ -1 +1 @@
-{"body":{"activation_state":"inactive","core_contract":{"generation_id":"g-392d20099dfa99872764009b268c8871914b4dbc0da467ec346baa921818ae3e","package_ref":{"content_id":"core-contract-package.v2","media_type":"application/vnd.ystack.core-contract+json","sha256":"005431c5c7e3a39dc3ab75dfcafd0f09359331667fdcacb140514a4384592716"},"semantic_identity":"core.contracts.v2"},"fail_mode":"closed","policy_version":"v1","sections":[{"decision_ref":{"content_id":"control-decision.credential-policy","media_type":"application/vnd.ystack.control-decision+json","sha256":"006b78ca2a937f77a870f9b5a9a0137c45702c2e6879979d6112025e90176cc0"},"policy_ref":{"content_id":"control-policy.credential-policy","media_type":"application/vnd.ystack.control-policy+json","sha256":"1ca546132d904900e00db532d5f2091336a8dd9f426be591ac7e9d91f47a69f3"},"section_id":"credential-policy"},{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"08f8b496a689ab6fefa976de495fa13e1f9d954cd2b33ee44acd3c70022b4697"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"b33a4022c74c8a1ccb06674c080adf2fc106561c426a7d1dd30fdb9865531dbb"},"section_id":"duty-separation"},{"decision_ref":{"content_id":"control-decision.evidence-integrity","media_type":"application/vnd.ystack.control-decision+json","sha256":"2d73d496b1535b6015843ff4c0c250bc77e476532c088ef9d7885ef393849327"},"policy_ref":{"content_id":"control-policy.evidence-integrity","media_type":"application/vnd.ystack.control-policy+json","sha256":"171b89c49c7dd6a58e4c5aa6ca13e8c95d109acf7f67429ecb33fcf1dae7582a"},"section_id":"evidence-integrity"},{"decision_ref":{"content_id":"control-decision.kill-switch","media_type":"application/vnd.ystack.control-decision+json","sha256":"213516a567c9269dcef1085a7fd84a18ab05f61cfc8042be801f1c0725ba27d2"},"policy_ref":{"content_id":"control-policy.kill-switch","media_type":"application/vnd.ystack.control-policy+json","sha256":"60a1171f13fa763076b31c0d65a3a54e70d2af28860e3a6da9ed6bb0038a15f5"},"section_id":"kill-switch"},{"decision_ref":{"content_id":"control-decision.risk-gates","media_type":"application/vnd.ystack.control-decision+json","sha256":"4e7747a495106727a3cda68f8097fae5687425608c3d66d790182e9747359d5b"},"policy_ref":{"content_id":"control-policy.risk-gates","media_type":"application/vnd.ystack.control-policy+json","sha256":"0286be22ec3d3a31be8e2c00c5e57a5b674c3f6b0e6d03c87a670e51e3141bed"},"section_id":"risk-gates"},{"decision_ref":{"content_id":"control-decision.sandbox","media_type":"application/vnd.ystack.control-decision+json","sha256":"c3e89800147d55f7c726ec66c82031915a4220d3eb7867e143f60d7026223bbd"},"policy_ref":{"content_id":"control-policy.sandbox","media_type":"application/vnd.ystack.control-policy+json","sha256":"4afb62e44fd3ad055d157ee23bfcf2917811b9ec05e4923eaa989d95d53c0a5e"},"section_id":"sandbox"}]},"id":"control-policy-set.v1","kind":"control_policy_set","schema_version":1}
+{"body":{"activation_state":"inactive","core_contract":{"generation_id":"g-392d20099dfa99872764009b268c8871914b4dbc0da467ec346baa921818ae3e","package_ref":{"content_id":"core-contract-package.v2","media_type":"application/vnd.ystack.core-contract+json","sha256":"2742f9c097943bb140cc0f19feda1e3b653ce95e699c570f9e9fc48825137c6c"},"semantic_identity":"core.contracts.v2"},"fail_mode":"closed","policy_version":"v1","sections":[{"decision_ref":{"content_id":"control-decision.credential-policy","media_type":"application/vnd.ystack.control-decision+json","sha256":"3ced3c3795d81d92f87358c8098663011e30589391dd6383179d2bfcfd722a0e"},"policy_ref":{"content_id":"control-policy.credential-policy","media_type":"application/vnd.ystack.control-policy+json","sha256":"62a71718f965ca37d83c6a5cf88c3f2d953092b4c33a1b8c30e2feb2d8ab9a1e"},"section_id":"credential-policy"},{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"25a513104dc08de8e22727901555d0a3fb6008dd8b222f7a604ed50734d4e23e"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"6a86ddbe4432dae9e6e3748295b4b1da7280aa7ca410515531d0059ba2e1d566"},"section_id":"duty-separation"},{"decision_ref":{"content_id":"control-decision.evidence-integrity","media_type":"application/vnd.ystack.control-decision+json","sha256":"109d5061bafc4b5e9fa0ef49ec00a9d806e8c085272b8b92f9fc48676226dc94"},"policy_ref":{"content_id":"control-policy.evidence-integrity","media_type":"application/vnd.ystack.control-policy+json","sha256":"e14bf8ccc36d391d4ccab5b64b931cda02e3369cf0bda4e34a4cd4c3b19da662"},"section_id":"evidence-integrity"},{"decision_ref":{"content_id":"control-decision.kill-switch","media_type":"application/vnd.ystack.control-decision+json","sha256":"61cf6af051efe6438bbf58e1db61aca916bb79c9eb54ff1896e3a7a48143a36a"},"policy_ref":{"content_id":"control-policy.kill-switch","media_type":"application/vnd.ystack.control-policy+json","sha256":"6cc216935f62d1a705c8fa4d7ec6fc076d71313b24b2b0fce5ba63243f1ffad2"},"section_id":"kill-switch"},{"decision_ref":{"content_id":"control-decision.risk-gates","media_type":"application/vnd.ystack.control-decision+json","sha256":"be42e1b8387ba51297e60d40043339886606faecaaf134a4fd1ea0fa15db30b3"},"policy_ref":{"content_id":"control-policy.risk-gates","media_type":"application/vnd.ystack.control-policy+json","sha256":"130c4fc32ddabbddc25b12df7c03ec1ad5bb4925915b4bd90375a0a573c7ef0b"},"section_id":"risk-gates"},{"decision_ref":{"content_id":"control-decision.sandbox","media_type":"application/vnd.ystack.control-decision+json","sha256":"c3e89800147d55f7c726ec66c82031915a4220d3eb7867e143f60d7026223bbd"},"policy_ref":{"content_id":"control-policy.sandbox","media_type":"application/vnd.ystack.control-policy+json","sha256":"4afb62e44fd3ad055d157ee23bfcf2917811b9ec05e4923eaa989d95d53c0a5e"},"section_id":"sandbox"}]},"id":"control-policy-set.v1","kind":"control_policy_set","schema_version":1}

control/v1/credential-policy-decision.json

@@ -1 +1 @@
-{"body":{"activation_state":"inactive","decision":"allow-observation-only-evaluation","dependencies":{"duty_separation":{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"08f8b496a689ab6fefa976de495fa13e1f9d954cd2b33ee44acd3c70022b4697"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"b33a4022c74c8a1ccb06674c080adf2fc106561c426a7d1dd30fdb9865531dbb"}}},"evaluator":{"driver_ref":{"content_id":"control-evaluator-driver.credential-policy.v1","media_type":"text/x-shellscript","sha256":"5c9bab9d00754d63e4ead770489564db8122c53ab1bc8b6e92c27719265c18f7"},"program_ref":{"content_id":"control-evaluator-program.credential-policy.v1","media_type":"text/x-jq","sha256":"a90bcd3c837af1e2f3f8f4867b679f7a699b6257c56306abe098d5c569a27ed2"}},"fail_mode":"closed","policy_ref":{"content_id":"control-policy.credential-policy","media_type":"application/vnd.ystack.control-policy+json","sha256":"1ca546132d904900e00db532d5f2091336a8dd9f426be591ac7e9d91f47a69f3"},"semantics":{"authority_effect":"none","claim_provenance":"unqualified-input-claim","input_contract":"control-policy-set+public-core-stage-run+duty-evaluation+credential-boundary-claim.v1","output_kind":"credential_policy_evaluation","output_schema_version":1,"qualification_effect":"none","reference_semantics":"identity-only","verdicts":["inconclusive","violated"]}},"id":"control-decision.credential-policy","kind":"credential_policy_decision","schema_version":1}
+{"body":{"activation_state":"inactive","decision":"allow-observation-only-evaluation","dependencies":{"duty_separation":{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"25a513104dc08de8e22727901555d0a3fb6008dd8b222f7a604ed50734d4e23e"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"6a86ddbe4432dae9e6e3748295b4b1da7280aa7ca410515531d0059ba2e1d566"}}},"evaluator":{"driver_ref":{"content_id":"control-evaluator-driver.credential-policy.v1","media_type":"text/x-shellscript","sha256":"5c9bab9d00754d63e4ead770489564db8122c53ab1bc8b6e92c27719265c18f7"},"program_ref":{"content_id":"control-evaluator-program.credential-policy.v1","media_type":"text/x-jq","sha256":"e91ff0b189ea1962baf4d83bfb4da9accbb48e74487c3d3d92417c313a89c8b8"}},"fail_mode":"closed","policy_ref":{"content_id":"control-policy.credential-policy","media_type":"application/vnd.ystack.control-policy+json","sha256":"62a71718f965ca37d83c6a5cf88c3f2d953092b4c33a1b8c30e2feb2d8ab9a1e"},"semantics":{"authority_effect":"none","claim_provenance":"unqualified-input-claim","input_contract":"control-policy-set+public-core-stage-run+duty-evaluation+credential-boundary-claim.v1","output_kind":"credential_policy_evaluation","output_schema_version":1,"qualification_effect":"none","reference_semantics":"identity-only","verdicts":["inconclusive","violated"]}},"id":"control-decision.credential-policy","kind":"credential_policy_decision","schema_version":1}

control/v1/credential-policy.jq

@@ -57,7 +57,7 @@ def expected_core:
      "6f6acbbd0cf40ab3c913328d6c0070635424ffe920bcdb900fbd0718345d7137",
    package_ref:{content_id:"core-contract-package.v2",
      media_type:"application/vnd.ystack.core-contract+json",
-     sha256:"005431c5c7e3a39dc3ab75dfcafd0f09359331667fdcacb140514a4384592716"}};
+     sha256:"2742f9c097943bb140cc0f19feda1e3b653ce95e699c570f9e9fc48825137c6c"}};
 
 def expected_credential_classes:
   [{credential_class:"model-inference",delivery:"brokered",
@@ -81,10 +81,10 @@ def policy_ok:
     .duty_separation == {
       decision_ref:{content_id:"control-decision.duty-separation",
         media_type:"application/vnd.ystack.control-decision+json",
-        sha256:"08f8b496a689ab6fefa976de495fa13e1f9d954cd2b33ee44acd3c70022b4697"},
+        sha256:"25a513104dc08de8e22727901555d0a3fb6008dd8b222f7a604ed50734d4e23e"},
       policy_ref:{content_id:"control-policy.duty-separation",
         media_type:"application/vnd.ystack.control-policy+json",
-        sha256:"b33a4022c74c8a1ccb06674c080adf2fc106561c426a7d1dd30fdb9865531dbb"}} and
+        sha256:"6a86ddbe4432dae9e6e3748295b4b1da7280aa7ca410515531d0059ba2e1d566"}} and
     .evaluation_mode == "observation-only" and .fail_mode == "closed" and
     .policy_version == "v1" and
     .protected_roles ==

control/v1/credential-policy.json

@@ -1 +1 @@
-{"body":{"activation_state":"inactive","claim_provenance":"unqualified-input-claim","core_contract":{"generation_id_sha256":"6f6acbbd0cf40ab3c913328d6c0070635424ffe920bcdb900fbd0718345d7137","package_ref":{"content_id":"core-contract-package.v2","media_type":"application/vnd.ystack.core-contract+json","sha256":"005431c5c7e3a39dc3ab75dfcafd0f09359331667fdcacb140514a4384592716"},"semantic_identity":"core.contracts.v2"},"credential_classes":[{"credential_class":"model-inference","delivery":"brokered","execution_kinds":["model"],"exposure":"none","roles":["producer","reviewer"],"scope":"single-stage"}],"credential_incompatible_permissions":["core.perm.candidate-repository.write.v2","core.perm.candidate.execute.v1"],"duty_separation":{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"08f8b496a689ab6fefa976de495fa13e1f9d954cd2b33ee44acd3c70022b4697"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"b33a4022c74c8a1ccb06674c080adf2fc106561c426a7d1dd30fdb9865531dbb"}},"evaluation_mode":"observation-only","fail_mode":"closed","policy_version":"v1","protected_roles":["ci","execution","forge","identity","producer","publisher","reviewer","verifier"],"reference_semantics":"identity-only"},"id":"control-policy.credential-policy","kind":"credential_policy","schema_version":1}
+{"body":{"activation_state":"inactive","claim_provenance":"unqualified-input-claim","core_contract":{"generation_id_sha256":"6f6acbbd0cf40ab3c913328d6c0070635424ffe920bcdb900fbd0718345d7137","package_ref":{"content_id":"core-contract-package.v2","media_type":"application/vnd.ystack.core-contract+json","sha256":"2742f9c097943bb140cc0f19feda1e3b653ce95e699c570f9e9fc48825137c6c"},"semantic_identity":"core.contracts.v2"},"credential_classes":[{"credential_class":"model-inference","delivery":"brokered","execution_kinds":["model"],"exposure":"none","roles":["producer","reviewer"],"scope":"single-stage"}],"credential_incompatible_permissions":["core.perm.candidate-repository.write.v2","core.perm.candidate.execute.v1"],"duty_separation":{"decision_ref":{"content_id":"control-decision.duty-separation","media_type":"application/vnd.ystack.control-decision+json","sha256":"25a513104dc08de8e22727901555d0a3fb6008dd8b222f7a604ed50734d4e23e"},"policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"6a86ddbe4432dae9e6e3748295b4b1da7280aa7ca410515531d0059ba2e1d566"}},"evaluation_mode":"observation-only","fail_mode":"closed","policy_version":"v1","protected_roles":["ci","execution","forge","identity","producer","publisher","reviewer","verifier"],"reference_semantics":"identity-only"},"id":"control-policy.credential-policy","kind":"credential_policy","schema_version":1}

control/v1/duty-separation-decision.json

@@ -1 +1 @@
-{"body":{"activation_state":"inactive","decision":"allow-observation-only-evaluation","evaluator":{"driver_ref":{"content_id":"control-evaluator-driver.duty-separation.v1","media_type":"text/x-shellscript","sha256":"146e73dc880d363e889f32140ac375997fb709e3101de32b8d9603f1f38ca0fa"},"policy_set_validator":{"driver_ref":{"content_id":"control-policy-set-validator-driver.v1","media_type":"text/x-shellscript","sha256":"cf173ad0eaa08244bf636e3937845e894b21f14291fc5e66753e8673bdd2bd2a"},"program_ref":{"content_id":"control-policy-set-validator-program.v1","media_type":"text/x-jq","sha256":"2be97550574ee4522fc0bd14780c92dee3c1b455f2c04b7763b0e437665a8d58"}},"program_ref":{"content_id":"control-evaluator-program.duty-separation.v1","media_type":"text/x-jq","sha256":"ea977f36619a199d965c8f525c428dbc2f4d3a58418373529b8a79bc9488b076"}},"fail_mode":"closed","policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"b33a4022c74c8a1ccb06674c080adf2fc106561c426a7d1dd30fdb9865531dbb"},"semantics":{"authority_effect":"none","input_contract":"control-policy-set+public-core-stage-run.v1","output_kind":"duty_separation_evaluation","output_schema_version":1,"reference_semantics":"identity-only","verdicts":["inconclusive","satisfied","violated"]}},"id":"control-decision.duty-separation","kind":"duty_separation_decision","schema_version":1}
+{"body":{"activation_state":"inactive","decision":"allow-observation-only-evaluation","evaluator":{"driver_ref":{"content_id":"control-evaluator-driver.duty-separation.v1","media_type":"text/x-shellscript","sha256":"146e73dc880d363e889f32140ac375997fb709e3101de32b8d9603f1f38ca0fa"},"policy_set_validator":{"driver_ref":{"content_id":"control-policy-set-validator-driver.v1","media_type":"text/x-shellscript","sha256":"cf173ad0eaa08244bf636e3937845e894b21f14291fc5e66753e8673bdd2bd2a"},"program_ref":{"content_id":"control-policy-set-validator-program.v1","media_type":"text/x-jq","sha256":"2be97550574ee4522fc0bd14780c92dee3c1b455f2c04b7763b0e437665a8d58"}},"program_ref":{"content_id":"control-evaluator-program.duty-separation.v1","media_type":"text/x-jq","sha256":"755b51ba0ed7d463309d9ab5d30243f60d2847f2370140c2bf3b3b45a63b2611"}},"fail_mode":"closed","policy_ref":{"content_id":"control-policy.duty-separation","media_type":"application/vnd.ystack.control-policy+json","sha256":"6a86ddbe4432dae9e6e3748295b4b1da7280aa7ca410515531d0059ba2e1d566"},"semantics":{"authority_effect":"none","input_contract":"control-policy-set+public-core-stage-run.v1","output_kind":"duty_separation_evaluation","output_schema_version":1,"reference_semantics":"identity-only","verdicts":["inconclusive","satisfied","violated"]}},"id":"control-decision.duty-separation","kind":"duty_separation_decision","schema_version":1}