// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
// Agent Attestation Architecture — Type Definitions
// Result of 3-round multi-model review (Claude + GPT + Gemini + Portal ground truth)
//
// Design principles:
//   P1: Memory, not gates — system REMEMBERS, never blocks
//   P2: Server observes, agent doesn't declare (Tier 0 captured silently)
//   P3: Protocol defines WHAT signals exist (public). Gateway defines HOW they're weighted (private)
//   P4: Every signal tagged with provenance and stability
//   P5: Grades reflect attestation richness, not admission rights
//   P6: Lineage links are scoped and private (four HMAC-derived links)
//   P7: Recovery is first-class (requires cryptographic proof, not just env matching)
//   P8: Evidence designed for portability and third-party review
export const PASSPORT_GRADE_LABELS = {
    0: 'self_signed', // bare keypair, no issuer involvement
    1: 'issuer_countersigned', // AEOESS processed the request
    2: 'runtime_bound', // issuer + challenge-response + trusted attestation + lineage tag
    3: 'principal_bound', // runtime_bound + verified human/org principal
};
//# sourceMappingURL=attestation.js.map