Module completion_attestor 

Host-only completion attestation (#160).

The completion gate stays non-bypassable. Hosts that orchestrate third-party AgentDirs cannot predict MutationLedger::digest at session build, so exact waivers are unreachable. A CompletionAttestor is invoked with the live effect digest and mutated paths after they exist and before decide_with_observations.

Each path is paired with the ledger’s content digest so a host can re-read the file and compare like-for-like without reaching into harness internals (follow-up shape from community PR #172).

The attestor may only supply a VerificationReport. The gate still requires a Passed, digest-bound report. The attestor is not a tool and is not model-grantable. There is no Observe policy that lets an unverified mutation complete.

Structs

MutatedPathRecord

One mutated path with the content digest the ledger recorded for it.

Traits

CompletionAttestor

Host-supplied evidence binder for the completion gate.

Functions

merge_attested_report

Invoke the host attestor (if any) and append an accepted Host report.