Module proposals 

Proposal-first frontier writes and proof freshness tracking.

Structs

AgentRun

Agent provenance attached to a StateProposal.

CreateProposalResult

ImportProposalReport

PermissionState

Declared permission boundary for an AgentRun. Lists what the agent could read and which tools it could call. Reviewers can diff this against tool_calls to spot scope creep. v0.49.

ProofPacketRecord

ProofPacketState

ProofState

ProposalPreview

ProposalSummary

ProposalValidationReport

StateProposal

ToolCallTrace

One tool invocation made during an AgentRun. Stored as a content-addressable summary, never the raw payload — keeps the bundle bounded while preserving “did this happen, with what inputs, returning what outputs” for reviewer audit. v0.49.

Constants

PROPOSAL_SCHEMA

Functions

accept_at_path

create_or_apply

Phase P (v0.5): upsert by content address. If a proposal with the same vpr_… already exists in the frontier, return the existing record instead of inserting a duplicate. Combined with the created_at-free preimage, this makes agent retries idempotent at the substrate level.

export_to_path

import_from_path

is_placeholder_reviewer

list

manifest_hash

mark_proof_stale

new_proposal

preview_at_path

preview_in_frontier

proof_state_json

proposal_id

Phase P (v0.5): vpr_… is content-addressed over the logical proposal content only — created_at is excluded from the preimage. Identical logical proposals (same actor, target, kind, reason, payload) deterministically produce the same proposal_id regardless of when they were constructed.

proposal_state_hash

proposals_for_finding

record_proof_export

reject_at_path

repo_proposals_dir

request_revision_at_path

show

summary

validate_reviewer_identity

validate_source