{"_id":"@adlc/gate-manifest","_rev":"17-b62c5b9cec6e0646ce5ccc1ba45624c9","name":"@adlc/gate-manifest","dist-tags":{"latest":"1.11.1"},"versions":{"1.0.0":{"name":"@adlc/gate-manifest","version":"1.0.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.0.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"2027dc54d48877fc95ca3c8d018648f62b4ebe84","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.0.0.tgz","fileCount":9,"integrity":"sha512-V9DsNoXfvXEvtuaElm1+RvWjrw6Qk5uykbgta7L5rSXIog2RoJ1ZK1AvQXCXUkjSY/Oj2BQEJFhr1BRPWhjmqQ==","signatures":[{"sig":"MEUCIFlxI4t24Fs5Uxi7KgFJ/DYWlo5I0gHIUyOZ4/7W7a3GAiEA65mXWaBjcM2BLSVaVJDUhSOhr396ZB7Ps8vtO18dyeI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.0.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28960},"type":"module","engines":{"node":">=18"},"gitHead":"18f4c2890048cd9d5913b6b3aeeff6c37ae372b9","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"voodootikigod","email":"voodootikigod@gmail.com"},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"10.8.2","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.0.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.0.0_1781385141825_0.6162438066373697","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@adlc/gate-manifest","version":"1.0.2","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.0.2","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"daa785b192907ab6b24e64438ba7b57b808b9551","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.0.2.tgz","fileCount":9,"integrity":"sha512-TmEgYZaNVIqIDHxLYEdZ5BiGPvOKdq6Hurj3bbN6eOZbaQmBDA+/6R0qDb/FQi8WUG6ZOFhQ1AoY4CEI12UT9Q==","signatures":[{"sig":"MEUCIQD0GfXQBvCHu/CIohaXnbcXlhEEmEpX8oQd0hCa8mwNFAIgGv24xFRcntZUH3X9OAdfVu4QOqegIn4LrM5zgosEx+U=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28960},"type":"module","engines":{"node":">=18"},"gitHead":"9412678eb342b02cd86c1279d908f1fd56ca7bc4","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.17.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.0.2"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.0.2_1781461012556_0.29899854055158936","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@adlc/gate-manifest","version":"1.1.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.1.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"063ae0bfc72743a30ea11247cf3afefd46fc29e8","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.1.0.tgz","fileCount":9,"integrity":"sha512-lzeGA6wz7ME1u0syVHkqR/PWlA1tRcqzU/T05AhZMrTYXXvKYBPCLiEKOo6rnWrMQAhfBbSikn1KbamrCjoEUw==","signatures":[{"sig":"MEYCIQCnZ1UgpU2i61xooPeccF2p00b6fAE7CewjjtsaNbAK+wIhANvfbdo5C9iqUibxHWzLJyU+a55K7Ej3b8yr+1JQdyT9","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28960},"type":"module","engines":{"node":">=18"},"gitHead":"30e96544356c997ca986a1f9d5f4422724ad94a5","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.17.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.1.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.1.0_1782216860845_0.7306983462084016","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@adlc/gate-manifest","version":"1.2.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.2.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"c760d44085aa2de634997a1843f22629f3572802","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.2.0.tgz","fileCount":9,"integrity":"sha512-AMX/BEDYsWn0jKttsYkXrscGBG/Ip5OEmt4ErEHiInq6q+g0av2vXuMjpbMcaQdFrsMEtKyv6bIjPgNT2qYUXw==","signatures":[{"sig":"MEUCICPfIDleMNgv8kR0pCNZwXNpywHtgeGaXDPEy8OkQY5zAiEA0j0ZXMaL65gxo3BAZ4+E2+k5Rk2dN71x1peMSnDPA/U=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28984},"type":"module","engines":{"node":">=18"},"gitHead":"e1a9315750d794959884e3ed0b1cc29398d25f0e","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.2.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.2.0_1783726081058_0.3359306222721643","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"name":"@adlc/gate-manifest","version":"1.2.1","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.2.1","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"c44e6a064a69a8b887d5f345b5b48908b5976c65","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.2.1.tgz","fileCount":9,"integrity":"sha512-tQc2OZcV4C8W3xvyQsuAgpKFD4OLITL59WbT/AaJZzBolcn6ovwQl+AnErHf/eE9Uil4vobbEno/8B9Si9hBsQ==","signatures":[{"sig":"MEQCIHFekQU1Bypn6G+X04CHvHf3Oc0Z21dF0IPBReRa5WmmAiAHytBA6P+hVlZn9E1U3ibN/dRIRQOI8Ouv6TPFwqOCpg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.2.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28984},"type":"module","engines":{"node":">=18"},"gitHead":"7ce933041948a1f8076966b4c05ebcb3f08d9781","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.2.1"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.2.1_1783727122591_0.6894844248954348","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"@adlc/gate-manifest","version":"1.3.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.3.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"46e295de0c813c828bfd55e408c5dbd8e9aae59f","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.3.0.tgz","fileCount":9,"integrity":"sha512-0gBHcTvWAQau59+Qmh1lX7IHPpUM0e+4XBC2q/WrDVYjMxnb5bIOxXyr6SCZ5sgxMlLy+hWTTYL8MKUpVTFlJw==","signatures":[{"sig":"MEUCIHdLLi1CGtArIQSPJSmAyXGVjLYjaCdMDLTqMfpuDpZBAiEApTTh3WtXoepYf7kxG7cQYduByZAweBt9g+JiSBg6wdA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":28984},"type":"module","engines":{"node":">=18"},"gitHead":"de4b878aa375bcce92f1828afafd87ee6872d2b4","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.3.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.3.0_1783780340280_0.07797031827697021","host":"s3://npm-registry-packages-npm-production"}},"1.4.0":{"name":"@adlc/gate-manifest","version":"1.4.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.4.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"5c426ed343ad64d0c7e2186d5a6deb0a09353d94","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.4.0.tgz","fileCount":11,"integrity":"sha512-Ka7C86CCoOAG0+eHdK4QLeunGCH/5nNtGlkmZ0zOXV/sdzgir2U6zS6s6Y5iwFyg74Rk3WhUqGY5DX/Te4Bc5w==","signatures":[{"sig":"MEUCICEtnyP4CAP5FgXZayL4hlgahKdc+Ahpr/vQiIeo8aXXAiEA7o95z0z6Tfs7e86ezgY6crsjpSS9PJxaYKFEydN468I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":38739},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"2be4ff6ef2397811d288ae1de14c21e5b901e76d","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.4.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.4.0_1784074821670_0.2700041535074864","host":"s3://npm-registry-packages-npm-production"}},"1.4.1":{"name":"@adlc/gate-manifest","version":"1.4.1","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.4.1","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"ffe6c0d9eab2fd6ac5b7aea7f2f29ad5b233235d","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.4.1.tgz","fileCount":11,"integrity":"sha512-mP3JuhPgXJpdjOzF7jGBkKMyMGxviOWvTyHoM1y9i6HdqJL16HqZpfn/XP1az4IQxa/0O3dSW8g4o0btJS+nsQ==","signatures":[{"sig":"MEUCID5xFNwBA1GGLqUWl6RzaGeWEHF2VYoS0rYy2H3V835/AiEAghW1zqaCxnPR6x7Stsfp6MxLuVdXQDLccwRqjILHaMw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.4.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":38739},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"d1765e679c224131056836f13f5a9c296b5316f8","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.4.1"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.4.1_1784076658150_0.6434606888221068","host":"s3://npm-registry-packages-npm-production"}},"1.5.0":{"name":"@adlc/gate-manifest","version":"1.5.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.5.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"339b4669774f59992b95551d950d3c2799bbd36c","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.5.0.tgz","fileCount":11,"integrity":"sha512-1/K9Rd21FR7FYln1Fds9mpp5cm60ih2K1oIdOwZExh/gea3ic593TP/AI2dA6Vi8vhBNHqIlvkzj1V77EeJGBQ==","signatures":[{"sig":"MEUCIAs8aVUExqICKC/jNmAcWcWuzYscY0aPvWfoSt7UTO9/AiEAv5mFxcIZZFyupjffWV+wSt/V+s+hIvqcYjdAGoiyNhQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.5.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":38739},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"c2763540068dd7deb26b089209de3bd03e2437c5","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.5.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.5.0_1784556927140_0.3098145955752871","host":"s3://npm-registry-packages-npm-production"}},"1.5.1":{"name":"@adlc/gate-manifest","version":"1.5.1","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.5.1","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"38fce9322a0761d4d8afa2949eb5c73efb7a1944","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.5.1.tgz","fileCount":11,"integrity":"sha512-J17rQcGq6JZXIUiYeo6+urHmpwiZIxGXsvGiRXZ4EQazyGiJwuTHTPYnIccTr3Gr677G+yL8RrGMBWT5VFm62A==","signatures":[{"sig":"MEUCIDOVBxxM6R003TRsY37muMnVxoi4mvBlM1e+obJkYTejAiEA9gJIBZd1rqZKAkb8BiOM6+BPtQ+MZZL8N3CHTFhA6S4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.5.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":38739},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"ba648f21aeafb9a253a243c0e268044da3513217","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.5.1"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.5.1_1784631822992_0.09148256743102667","host":"s3://npm-registry-packages-npm-production"}},"1.6.0":{"name":"@adlc/gate-manifest","version":"1.6.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.6.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"697dfcc2c2665930d3e1d104a7a1b00530f266af","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.6.0.tgz","fileCount":11,"integrity":"sha512-njahFe9o5LvLMjkbYrXWTsc65AkyWdrTG2I4D2GlpE4GqLc9jZL+OmJLRZWpAGXoYweeAhm3aO3prz7TxhWmXw==","signatures":[{"sig":"MEUCIAZAb3UsCj4POOVu9bZQI8/utB/eJQ5doQpBN+vOstSaAiEA2Rel/mzNpa+jBvdFsSimNYr/5SAf7FOq0Ymt1TchbxM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.6.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":38739},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"390a608f51165db92da1ccf68a965770db0b0376","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.6.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.6.0_1784720505625_0.18250479099818628","host":"s3://npm-registry-packages-npm-production"}},"1.7.0":{"name":"@adlc/gate-manifest","version":"1.7.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.7.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"f72dd696d6f65c70065790d5d7f0619f25f171ca","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.7.0.tgz","fileCount":14,"integrity":"sha512-Qn64JTbEJIsyGVMgW+70s5A+c5JchHTI8RSjKiX59hy1TwjfKOLVPxs9PpKO6ACCdWUbhLUmF1mZTTi0lHOCOg==","signatures":[{"sig":"MEQCIAEb8YuisRv3xqAdpXQiSn039ZoO5T5u63csfXWoS/JSAiAm3HBGLVroMbAxi22Ji00fDj7Dk6Cs9JQ9R2wNLgdRjQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.7.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":78342},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"d7eca2696e43aa6caf3de655840fae14aa0efd57","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.18.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.7.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.7.0_1785329236739_0.515943093256918","host":"s3://npm-registry-packages-npm-production"}},"1.8.0":{"name":"@adlc/gate-manifest","version":"1.8.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.8.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"736be3d64135abde99504e3a6f5f19ae4c6cf77d","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.8.0.tgz","fileCount":19,"integrity":"sha512-f3XLGhiSpCDAjvcZ+hNH+VQeD/szqp5hzT4YcvZ5DMDAo7Y5TRkzclWP69SBHhgYipssx0XEVYecXVdpsch0Kw==","signatures":[{"sig":"MEUCIQDaDv2zZ9W9wTD8/raUfxzBek+MwhSkZb334Y7boS7RQwIgf74b5eSNWu9A24pOHzNB70NzzicJ3k1a6iSUeoYr724=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.8.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":203851},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"e6b6525502d3deb214f58cffeb6c9db4b9787e39","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.19.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.8.0","@adlc/tickets":"1.8.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.8.0_1786195774646_0.022427956810842753","host":"s3://npm-registry-packages-npm-production"}},"1.9.0":{"name":"@adlc/gate-manifest","version":"1.9.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.9.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"a079a32ebb6ff98cbca99fc2e38e6c5db23c87ca","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.9.0.tgz","fileCount":19,"integrity":"sha512-mRjpK9tCNb4B3lCT1WELj5lHXPRZlC8t7McGh3qek/+VWj4wDtqxVvCt+WIBOimQmRlCFQk7EH5QeYBT3ASYaQ==","signatures":[{"sig":"MEYCIQCIUBhPv4y/vg5nZlKrIfDt8b5EjGXV3wPaKMfXTwaW4gIhAL++WcWGNAXs9WeNaQ0JP+y5dXEhDmB4W7NWMjN2yNKs","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.9.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":214796},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"a928a7eeb3c2c5078b44c181702c3220ba1a7a5b","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.19.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.9.0","@adlc/tickets":"1.9.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.9.0_1786221109718_0.6821958557806287","host":"s3://npm-registry-packages-npm-production"}},"1.10.0":{"name":"@adlc/gate-manifest","version":"1.10.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.10.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"d76f3aa80f046b82408ca1fadfe726adaeb44ae9","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.10.0.tgz","fileCount":21,"integrity":"sha512-ZE4mUSbFq6ITx3imfah+Md4T5EZ0VuRuHBDgBk9HlaWIsDbHnLY2dxQutjWzWjrEP/x2f85fiG0fabL2ocxkEA==","signatures":[{"sig":"MEYCIQCJNP2A7oleF5D4uqzRctDMkZoq2K7b1p9YmQKSUaAPzQIhAPUriNnDA80W0MPBRawi0cfsJNR1CTwjiU3B1u9W0+zE","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.10.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":256929},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"905d493f596a62b4bc3236f97281a43982c1e300","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.19.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.10.0","@adlc/tickets":"1.10.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.10.0_1786385911612_0.242895331436638","host":"s3://npm-registry-packages-npm-production"}},"1.11.0":{"name":"@adlc/gate-manifest","version":"1.11.0","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","_id":"@adlc/gate-manifest@1.11.0","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"dist":{"shasum":"75299a5d04d777c754bb8c2aeef57c2a16fcf562","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.11.0.tgz","fileCount":22,"integrity":"sha512-p59Uy/nX+5+dl+O9UB3olgt6JkcMgOSQMmbgHUchB/r+CkTM5bygOXZywr95c8LUIuC3M4u0VoAJJxDTpSQ9FQ==","signatures":[{"sig":"MEUCIGkoJFjsfioUr9KwoWWE2K2IGUC5E3oaCMsdk8QujjAZAiEAiP5SVm20J+fjJYht9I6qC+MrbpQIzmpSB/uEsmqBdf0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.11.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":265497},"main":"./index.mjs","type":"module","engines":{"node":">=18"},"gitHead":"1e4e6f704912c912d9b3c87f57e077a48ca78c5d","scripts":{"test":"node --test test/*.test.mjs"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.19.0","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.11.0","@adlc/tickets":"1.11.0"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/gate-manifest_1.11.0_1787594155954_0.01838609648791878","host":"s3://npm-registry-packages-npm-production"}},"1.11.1":{"_id":"@adlc/gate-manifest@1.11.1","bin":{"adlc-spend":"bin/spend.mjs","gate-manifest":"bin/gate-manifest.mjs"},"bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"dist":{"shasum":"666bec7a714fcc0cf5fb54973b9d3cde282d639d","tarball":"https://registry.npmjs.org/@adlc/gate-manifest/-/gate-manifest-1.11.1.tgz","fileCount":22,"integrity":"sha512-pVE/lPHU4AO3Hutt9V8tBVYeW/V6sEvu70ENMvVe6Z7fN3Y9Red2VmF5UwJz2Z0g4o6D2FZt4n3S11/FyAFzAQ==","signatures":[{"sig":"MEUCICJQk5Fn5o4xZC04PnzrSRplhNZHCtmsLIjsrSpOkv1YAiEAiI+X+8gKvNiPem9yi3WOXQPJjMVgGD6ozo1ufbdHBiM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCS+NZXnuYA5+jT3UXv1M8F61FzZ5ickiewiMz2GqVfVAIgLkxBk6GauJOfQ4D8f3gO+UcPfDLGMiM2MlJTP382HAA="}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@adlc%2fgate-manifest@1.11.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":265497},"main":"./index.mjs","name":"@adlc/gate-manifest","type":"module","author":{"url":"@voodootikigod","name":"Chris Williams"},"engines":{"node":">=18"},"gitHead":"c5772b4ff942bec77a34454c4fc888ae4e4b2c14","license":"MIT","scripts":{"test":"node --test test/*.test.mjs"},"version":"1.11.1","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:7263a72d-676d-4afe-9478-dc4668404550"}},"homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"_npmVersion":"11.19.1","description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","directories":{},"maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"_nodeVersion":"20.20.2","dependencies":{"@adlc/core":"1.11.1","@adlc/tickets":"1.11.1"},"publishConfig":{"access":"public","provenance":true},"_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/gate-manifest_1.11.1_1788949723409_0.7610159328842876"}}},"time":{"created":"2026-06-13T21:12:21.595Z","modified":"2026-09-09T10:28:43.852Z","1.0.0":"2026-06-13T21:12:21.963Z","1.0.2":"2026-06-14T18:16:52.764Z","1.1.0":"2026-06-23T12:14:20.993Z","1.2.0":"2026-07-10T23:28:01.190Z","1.2.1":"2026-07-10T23:45:22.724Z","1.3.0":"2026-07-11T14:32:20.422Z","1.4.0":"2026-07-15T00:20:21.829Z","1.4.1":"2026-07-15T00:50:58.280Z","1.5.0":"2026-07-20T14:15:27.342Z","1.5.1":"2026-07-21T11:03:43.163Z","1.6.0":"2026-07-22T11:41:45.759Z","1.7.0":"2026-07-29T12:47:16.873Z","1.8.0":"2026-08-08T13:29:34.800Z","1.9.0":"2026-08-08T20:31:49.864Z","1.10.0":"2026-08-10T18:18:31.788Z","1.11.0":"2026-08-24T17:55:56.112Z","1.11.1":"2026-09-09T10:28:43.494Z"},"bugs":{"url":"https://github.com/voodootikigod/adlc/issues"},"author":{"url":"@voodootikigod","name":"Chris Williams"},"license":"MIT","homepage":"https://github.com/voodootikigod/adlc/tree/main/packages/gate-manifest#readme","keywords":["adlc","agentic","ai","llm","cli","gate-manifest","gate"],"repository":{"url":"git+https://github.com/voodootikigod/adlc.git","type":"git","directory":"packages/gate-manifest"},"description":"Hash-chained evidence ledger recording what each ADLC gate verified — agentic provenance with optional HMAC signing (C11).","maintainers":[{"name":"voodootikigod","email":"voodootikigod@gmail.com"}],"readme":"# gate-manifest\n\n**ADLC C11 — cross-cutting provenance.** A hash-chained evidence ledger that records what each ADLC gate verified, proving to auditors (and CI) that agentic code was checked before it shipped. Set `ADLC_MANIFEST_KEY` to add HMAC-SHA256 signatures so the chain attests *authorship*, not just internal consistency (see [Signing & provenance](#signing--provenance)).\n\n## ADLC phase\n\nServes **C11** (cross-cutting provenance / agentic SLSA). Consumed by **P6 human-gate** reviewers who need `attest` output as a PR comment, and by **CI** which runs `verify` as a blocking gate.\n\n## Usage\n\n```\ngate-manifest record <gate-name> [--ticket id] [--data '{json}'] [--files a,b,c] [--dir path] [--json]\ngate-manifest verify [--json] [--dir path] [--allow-legacy-unsigned]\ngate-manifest show   [--ticket id] [--json] [--dir path]\ngate-manifest attest [--ticket id] [--dir path]\ngate-manifest repair-chain --reason \"...\" [--write] [--attest-unsigned] [--json] [--dir path]\n```\n\nProsecution, runner acceptance, rails evidence, and manual gate records use the\nsame atomic chain writer. `repair-chain` recovers ledgers made\nby older raw appenders: it refuses valid ledgers, preserves the original bytes\nin a hash-named backup, rechains entries in order, and records the repair as the\nfinal entry. Signed ledgers require the original matching `ADLC_MANIFEST_KEY`;\nrepair verifies every existing signature before it rewrites anything. If keyed\nrepair would sign previously unsigned entries, it refuses unless the operator\npasses `--attest-unsigned`; the repair plan and audit entry disclose their count\nand original line numbers.\n\n### record\n\nAppend one entry to `.adlc/manifest.jsonl`.\n\n```sh\ngate-manifest record spec-lint --ticket T-42 --data '{\"model\":\"haiku\",\"pass\":true}' --files src/foo.mjs,src/bar.mjs\n```\n\nThe entry stored:\n\n```json\n{\n  \"seq\": 3,\n  \"gate\": \"spec-lint\",\n  \"ticket\": \"T-42\",\n  \"ts\": \"2024-01-01T00:00:00.000Z\",\n  \"data\": { \"model\": \"haiku\", \"pass\": true },\n  \"files\": { \"src/foo.mjs\": \"<sha256>\", \"src/bar.mjs\": \"<sha256>\" },\n  \"prev\": \"<sha256 of the previous raw JSONL line, or null>\",\n  \"sig\": \"<HMAC-SHA256 over the canonical entry bytes — present only when ADLC_MANIFEST_KEY is set>\"\n}\n```\n\nWhen `ADLC_MANIFEST_KEY` is set, `record` appends a `sig` (the human output prints `(signed)` / `(unsigned)`). See **Signing & provenance** below.\n\n| Flag | Description |\n|------|-------------|\n| `--ticket id` | Associate this entry with a ticket id (optional) |\n| `--data '{json}'` | Arbitrary JSON payload (must be valid JSON; malformed → exit 1) |\n| `--files a,b,c` | Comma-separated paths; each is SHA-256 hashed (missing files hash to null) |\n| `--dir path` | Override ledger directory (default `.adlc`) |\n| `--json` | Print the recorded entry as JSON |\n\n### verify\n\nWalk the raw ledger lines and validate the hash chain. Every entry's `prev` must equal `sha256` of the exact raw bytes of the previous line; sequence numbers must start at 1 and increase strictly by 1 (contiguous from 1).\n\n```sh\ngate-manifest verify                            # human-readable\ngate-manifest verify --json                      # machine-readable\ngate-manifest verify --allow-legacy-unsigned      # tolerate an honest pre-signing prefix\n```\n\n**Exit 0** when valid (or empty manifest). **Exit 2** when the chain is broken — reports the seq and line number of the first break.\n\nWhen `ADLC_MANIFEST_KEY` is set, `verify` additionally checks every entry's HMAC signature. By default every entry must carry a valid sig: a missing sig (`unsigned entry`) or a wrong sig (`signature invalid`) breaks the chain. The JSON result includes `signed: true` only when a key was present and every entry verified cryptographically; otherwise `signed: false`.\n\n`--allow-legacy-unsigned` relaxes the missing-sig requirement, but only for a **contiguous legacy prefix**: entries before the first entry in the file that carries a sig (i.e. entries recorded before this ledger ever adopted signing). As soon as the scan passes that first signed entry, every later entry is \"signed-era\" and a missing sig on it still breaks the chain — an attacker cannot regress a signed ledger back to unsigned by appending plain entries after the fact. A **present-but-invalid** signature is rejected everywhere, at any position, with or without this flag — this only tolerates an honest unsigned history, never a tampered one. Use this flag for routine health checks (e.g. a Stop hook) on a ledger that predates signing; omit it when you specifically want to prove the whole chain is under key control (e.g. a forge-from-scratch check).\n\nHonest limit: if a manifest has **zero** signed entries, this flag reports the whole file as a valid legacy prefix — a wholesale-forged, entirely-unsigned chain is indistinguishable from a ledger that genuinely predates signing end to end (sha256 is public and keyless; forging it needs no secret). `signed` stays `false` in both cases, so it cannot be used to tell them apart. A caller that needs a stronger guarantee (proof that at least one entry is under key control) must check for that itself.\n\n| Flag | Description |\n|------|-------------|\n| `--json` | Emit `{ valid, message, count, signed, break }` |\n| `--dir path` | Override ledger directory |\n| `--allow-legacy-unsigned` | Tolerate a missing sig on the contiguous legacy prefix only |\n\n### show\n\nPrint entries from the ledger, optionally filtered by ticket.\n\n```sh\ngate-manifest show\ngate-manifest show --ticket T-42\ngate-manifest show --ticket T-42 --json\n```\n\n| Flag | Description |\n|------|-------------|\n| `--ticket id` | Filter to entries with this ticket id |\n| `--json` | Emit `{ entries, skipped }` |\n| `--dir path` | Override ledger directory |\n\n### attest\n\nGenerate a Markdown summary suitable for a PR comment.\n\n```sh\ngate-manifest attest --ticket T-42\n```\n\nOutput example:\n\n```markdown\n## Gate evidence for T-42\n\n| seq | gate | ts | files | data |\n|-----|------|-----|-------|------|\n| 1 | spec-lint | 2024-01-01T… | 0 | — |\n| 2 | hollow-test | 2024-01-01T… | 3 | model=haiku |\n\nChain status: **valid** (2 entries)\n```\n\n| Flag | Description |\n|------|-------------|\n| `--ticket id` | Filter entries and use ticket id in heading |\n| `--dir path` | Override ledger directory |\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Gate passes (record, show, attest always; verify when chain is valid) |\n| 1 | Operational error (bad input, unreadable file, malformed `--data` JSON) |\n| 2 | Gate fails (verify detects chain break) |\n\n## Chain integrity\n\nThe atomic writer derives `prev` from the byte-exact ledger state while holding\nthe append lock—never from parsed and re-serialized entries. The `prev` field is\n`sha256(previous raw JSONL line)` (null for the first entry). Tampering any\nmiddle line breaks all subsequent links and is detected by `verify`.\n\n## Signing & provenance\n\nThe hash chain alone proves **internal consistency**, not **authorship**. `sha256` is a public, keyless function: anyone who can write `manifest.jsonl` can recompute every `prev` and forge a clean chain from scratch. On its own the chain is therefore *not* cryptographic provenance — do not represent a hash-chain-only pass as in-toto/SLSA attestation.\n\nTo get real provenance, generate a secret signing key with the ceremony below — not\n`export ADLC_MANIFEST_KEY=\"$(openssl rand -hex 32)\"`. That form, and equally\n`export ADLC_MANIFEST_KEY=\"$(cat handoff-file)\"`, put the key in a shell **assignment**:\nwith tracing enabled (`set -x`, or any CI runner that logs commands) the shell prints the\ncommand AFTER expanding it, so the key ends up in the terminal or build log regardless of\nwhere the value came from. `generate-key` never prints the key on any stream — it writes\nit to a mode-0600 file at an operator-chosen path OUTSIDE the repository, and prints only\nthe path and a one-way fingerprint. Load it with `read`, not `export VAR=\"$(...)\"`: `read`\nwrites directly into the variable without the value ever appearing as an expanded command\nargument, so it is safe under tracing even with no `set +x` needed:\n\n```sh\ngate-manifest generate-key --output /path/outside/the/repo/manifest-key.txt\n# fingerprint: <sha256 of the key — safe to log, not the key itself>\n\n# STOP — store the CONTENTS of that file in your secret manager (CI secret store,\n# vault, etc.) now, before going any further. The file is the ONLY durable copy of\n# this key: deleting it before it is stored elsewhere makes the key permanently\n# unrecoverable, and every signature ever made with it becomes unverifiable.\n\nIFS= read -r ADLC_MANIFEST_KEY < /path/outside/the/repo/manifest-key.txt\nexport ADLC_MANIFEST_KEY\nrm /path/outside/the/repo/manifest-key.txt   # only once the key is durably stored elsewhere\ngate-manifest record spec-lint --ticket T-42\ngate-manifest verify --json    # → { ..., \"signed\": true }\n```\n\n- **record** keeps its compatible v1 signature over `{ seq, gate, ts, ticket?, data?, files, prev }`. Generalized first-party evidence uses `sigVersion: 2` and signs canonical JSON for every entry field except `sig`, including ticket, revision, and provenance data.\n- **verify** (run with the key) requires every entry to carry a valid sig — comparison is constant-time (`crypto.timingSafeEqual`). A missing sig → `unsigned entry`; a wrong sig → `signature invalid`. Either breaks the chain (exit 2). This defeats the forge-from-scratch attack: without the key, an attacker cannot produce valid signatures.\n- **verify** without a key still checks the hash chain but reports `signed: false`, so callers cannot claim cryptographic provenance.\n\nZero-dependency: HMAC comes from Node's built-in `node:crypto`. Key management (rotation, distribution) is out of scope for this tool — supply the key via the environment.\n\n## Sibling tools\n\n- `rails-guard` (C5) — appends its own proof here after verifying diff is rails-clean.\n- `hollow-test` (C4) — appends coverage and mutation results.\n- `review-calibration` (C8) — appends prosecution verdicts and calibration score.\n\n## Core gaps\n\nNone for ledger/CLI primitives — `sha256`, `hashFiles`, `appendEntry`, `readEntries`, `ledgerPath`, `ADLC_DIR`, `parseArgs`, `pass`, `gateFail`, `opError`, `printJson` from `@adlc/core` cover them. Core exposes `sha256` but no keyed-MAC primitive, so HMAC signing uses Node's built-in `node:crypto` (`createHmac`, `timingSafeEqual`) directly in `lib/sign.mjs` — still zero runtime dependencies.\n","readmeFilename":"README.md"}