Crate proofborne_core 

Stable, serializable primitives shared by every Proofborne surface.

The JSON shapes in this crate form the v0.1 compatibility boundary. Internal orchestration APIs may change while the project is pre-1.0.

Structs

AgentAuthority

Secret-free, content-addressed authority assigned to one agent session.

AgentAuthorityTemplate

Secret-free provider/model material used to mint one runtime-owned authority.

AgentBudget

Hard runtime budget propagated from parent to child.

AgentGraphBudget

Hard aggregate limits reserved before an agent graph may execute.

AgentGraphNode

Immutable recipe for one worker, reviewer, or adversary node.

AgentGraphNodeTemplate

Parent-independent recipe for one worker, reviewer, or adversary node.

AgentGraphPlan

Immutable, content-addressed decomposition and authority graph.

AgentGraphTemplate

Versioned graph topology that can be bound to one exact verified parent.

ArtifactRef

A content-addressed artifact referenced by evidence.

AuthBindings

Secret-free identity and token-state binding for one provider account.

AuthReceipt

Proof-carrying auth check bound to one routing step and workspace authority.

CompactionBudget

Hard provider-context boundary used by one compaction decision.

CompactionPlan

Complete deterministic decision before provider context is rewritten.

CompactionReceipt

Durable proof that one validated plan produced one exact provider input.

CompactionUsage

Prompt-category accounting measured by the versioned deterministic fallback estimator.

ContextAuthority

Authority that produced a context statement.

ContextInvalidation

Durable invalidation receipt.

ContextItem

Immutable, content-addressed context statement.

ContextScope

Scope in which a context statement may be retrieved.

ContextSelection

One content-addressed, provenance-preserving selection decision.

ContextSource

Provenance anchor for one context statement.

Criterion

One independently evaluable acceptance criterion.

CriterionEvaluation

Deterministic details of one criterion evaluation.

DelegationInvalidation

Versioned receipt proving why an active delegation was invalidated.

DelegationPlan

Proof-carrying plan for exactly one parent-to-child delegation.

EventEnvelope

One append-only, hash-chained session event.

Evidence

Runtime evidence that can support one or more criteria.

EvidenceLink

Directed proof edge from evidence to a criterion.

EvidenceRequirement

Typed rules deciding which successful observations may satisfy a criterion.

HandoffChange

One content-addressed path change proposed by a child.

HandoffReceipt

Proof-carrying worker output, bound to one delegation plan and child session.

MemoryItem

Persisted context plus its runtime-owned lifecycle state.

MergeReceipt

Runtime-owned receipt for an atomically accepted handoff.

ModelCatalog

Versioned, content-addressed catalog embedded in every routing plan.

ModelDescriptor

One content-addressed model description in the local catalog.

ModelPricing

Immutable local pricing used only for deterministic preflight estimates.

ProofEvaluation

Deterministic result of reducing a contract and proof graph.

ProofGraph

Evidence nodes and their links to contract criteria.

ProviderCapabilities

Capabilities declared by a provider adapter.

ProviderRequest

One provider turn request.

ProviderTurn

Normalized result of one provider turn.

ReviewFinding

One reviewer finding with explicit criterion/path scope.

ReviewReceipt

Review receipt produced by a separately authorized reviewer session.

RoutingAttemptReceipt

One secret-free attempt in exact execution order.

RoutingBindings

State and authority bindings that make a routing decision non-replayable.

RoutingCandidate

Executable candidate bound to a catalog descriptor and runtime authority.

RoutingPlan

Proof-carrying deterministic route plan for exactly one provider step.

RoutingReceipt

Deterministic execution receipt bound to exactly one routing plan.

RoutingRequirements

Runtime-owned requirements and hard budgets for one model decision.

RoutingSelection

Deterministic reducer output for one candidate.

SchedulerDecision

One hash-chained scheduler state transition.

SchedulerReceipt

Offline-verifiable terminal scheduler receipt.

TaskContract

A user-visible contract that defines when a task may be called complete.

TokenUsage

Provider token usage.

ToolCall

Structured provider-requested tool call.

ToolDefinition

JSON-schema-described tool visible to providers.

ToolResult

Structured runtime result returned to the provider.

Waiver

Human authorization to complete without satisfying one criterion.

WorkspaceLease

Read/write scope delegated from one immutable parent workspace generation.

Enums

ActionClass

Runtime-owned action classification.

AgentError

Fail-closed delegation or handoff validation error.

AgentGraphError

Fail-closed graph planning, scheduling, or receipt validation error.

AgentGraphOutcome

Terminal outcome of one complete agent graph.

AgentNodeState

Durable state of one scheduler node.

AgentRole

Runtime role of one authority in a delegated task.

AssuranceLevel

Strength of the environment in which an observation was made.

AuthError

Authentication contract failures.

AuthReceiptOutcome

Terminal authorization outcome of one auth check, as durable evidence.

ClaimScope

The claim a successful completion gate is allowed to make.

CompactionContextKind

Semantic class of one item considered by compaction.

CompactionDecision

Final disposition of one considered context item.

CompactionError

Compaction contract or receipt validation failure.

CompactionPriority

Deterministic priority class. Lower classes are selected first.

CompactionSelectionReason

Runtime-owned reason for a deterministic selection decision.

ContextError

Context contract validation failure.

ContextInvalidationReason

Runtime-owned reason a memory item ceased to be current.

ContextKind

Semantic category of one provenance-bound context statement.

ConversationItem

Provider-neutral conversation items retained by the session engine.

CriterionState

Runtime state for an acceptance criterion.

DelegationInvalidationReason

Runtime-owned reason that an unmerged delegation became unusable.

EventError

Hash-chain validation failures.

EvidenceFreshness

How tightly evidence must be bound to the final workspace state.

EvidenceKind

Evidence categories used by the completion gate.

HandoffChangeKind

Kind of one deterministic child-workspace change.

MemoryStatus

Durable retrieval lifecycle of one context item.

ProofError

Proof and contract validation errors.

ProofTermination

Runtime-owned reason normal criterion evaluation could not complete.

ProviderError

Failures visible at the provider boundary.

ProviderStreamEvent

Provider-neutral events emitted while one model turn is in progress.

ReviewDecision

Independent reviewer disposition for one handoff.

RoutingAttemptOutcome

Outcome of one provider attempt committed by a routing receipt.

RoutingCapability

Portable capability that a route may require from a provider adapter.

RoutingContextSource

Provenance of the context-window value used by routing.

RoutingError

Routing contract or deterministic reduction failure.

RoutingExclusionReason

Stable reason why a candidate cannot execute.

RoutingReceiptOutcome

Terminal reducer state for one provider step.

RunOutcome

Final runtime outcome; only the first two represent completed work.

SchedulerDecisionKind

Runtime-owned reason for one persisted state transition.

SecretTaint

Public indication that sensitive input was removed before persistence.

StopReason

Provider-neutral stop reasons.

TokenLifecycleEvent

A discrete lifecycle event that moves a token between states.

TokenStatus

Token lifecycle state visible to routing and evidence.

Constants

AGENT_GRAPH_PROTOCOL_VERSION

Version of the proof-carrying multi-agent graph protocol.

AGENT_PROTOCOL_VERSION

Version of the proof-carrying parent/child delegation protocol.

AUTH_PROTOCOL_VERSION

Version of the proof-carrying authentication protocol.

COMPACTION_ALGORITHM_VERSION

Version of the deterministic context-compaction algorithm.

COMPACTION_TOKEN_ESTIMATOR

Deterministic fallback estimator used when an adapter exposes no model tokenizer.

MODEL_CATALOG_VERSION

Version of the proof-carrying local model-catalog contract.

ROUTING_ALGORITHM_VERSION

Deterministic routing reducer understood by this release.

ROUTING_PRICE_TOKEN_SCALE

Pricing is expressed in micro-US-dollars per one million tokens.

SCHEMA_VERSION

Current stable external schema identifier.

Functions

canonical_json_bytes

Serializes JSON deterministically by sorting object keys recursively.

hash_bytes

Returns a lowercase BLAKE3 digest for arbitrary bytes.

hash_json

Returns a lowercase BLAKE3 digest for canonical JSON.

resolve_token_status

Derives the effective token status from recorded lifecycle facts.

transition_token

Deterministically advances a token lifecycle on a discrete event.

verify_event_chain

Verifies sequence numbers, session identity, previous hashes, and event hashes.