Merge pull request #141 from engineeredsoftware/v39/gate-6-assetpack-preview-quote-disclosure

V39 Gate 6: AssetPack Preview Quote Boundary

Author: geraldarthurdavis

.bitcode/v39-assetpack-preview-quote-boundary.json

@@ -196,6 +196,9 @@ jobs:
               if [ -f scripts/check-v39-gate5-read-fits-finding-runtime.mjs ]; then
                 node scripts/check-v39-gate5-read-fits-finding-runtime.mjs --skip-branch-check --skip-package-tests
               fi
+              if [ -f scripts/check-v39-gate6-assetpack-preview-quote-boundary.mjs ]; then
+                node scripts/check-v39-gate6-assetpack-preview-quote-boundary.mjs --skip-branch-check --skip-package-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2

.github/workflows/bitcode-canon-quality.yml

@@ -325,6 +325,9 @@ jobs:
               if [ -f scripts/check-v39-gate5-read-fits-finding-runtime.mjs ]; then
                 node scripts/check-v39-gate5-read-fits-finding-runtime.mjs --skip-branch-check --skip-package-tests
               fi
+              if [ -f scripts/check-v39-gate6-assetpack-preview-quote-boundary.mjs ]; then
+                node scripts/check-v39-gate6-assetpack-preview-quote-boundary.mjs --skip-branch-check --skip-package-tests
+              fi
             fi
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
@@ -401,6 +404,7 @@ jobs:
           pnpm --filter @bitcode/pipeline-hosts exec jest --config jest.config.cjs --runTestsByPath src/__tests__/distributed-execution-runtime-receipt.test.ts --runInBand --forceExit
           pnpm --filter @bitcode/pipeline-asset-pack exec jest --config jest.config.cjs --runTestsByPath src/__tests__/reading-pipeline-observability.test.ts src/__tests__/reading-pipeline-contract.test.ts src/__tests__/v32-reading-pipeline-proof-coverage.test.ts --runInBand --forceExit
           pnpm --filter @bitcode/pipeline-asset-pack exec jest --config jest.config.cjs --runTestsByPath src/__tests__/asset-pack-disclosure.test.ts src/__tests__/postprocess.test.ts src/__tests__/read-need.test.ts src/__tests__/read-need-review-resynthesis.test.ts --runInBand --forceExit
+          pnpm --filter @bitcode/pipeline-asset-pack exec jest --config jest.config.cjs --runTestsByPath src/__tests__/asset-pack-preview-boundary.test.ts --runInBand --forceExit
           pnpm --filter @bitcode/api exec jest --config jest.config.cjs --runTestsByPath src/conversations/__tests__/stream-events.test.ts src/conversations/__tests__/privacy.test.ts src/conversations/__tests__/telemetry.test.ts --runInBand --forceExit
           pnpm --dir packages/protocol exec node --test --test-force-exit test/conversation-telemetry-proof-hooks.test.js
           pnpm --dir packages/protocol exec node --test --test-force-exit test/conversation-rehearsal.test.js

.github/workflows/bitcode-gate-quality.yml

@@ -147,8 +147,19 @@ AssetPack source. The generated source-safe proof artifact is
 
 ### Gate 6: AssetPack Preview, Quote, And Disclosure Boundary
 
-Gate 6 makes source-safe AssetPack preview commercially usable without leaking source.
+Gate 6 makes source-safe AssetPack preview reviewable and actionable without leaking source.
 It must synthesize a preview from selected fits, expose fit measurements, quality reasons, proof roots, deterministic BTC quote, selected-fit provenance, delivery posture, and settlement instructions while withholding source-bearing AssetPack content until paid.
+The implementation basis is `AssetPackPreviewBoundary`, exported from
+`packages/pipelines/asset-pack/src/asset-pack-preview-boundary.ts`. It wraps
+`AssetPackSourceSafePreview`, `AssetPackPreviewQuoteReceipt`,
+`AssetPackDisclosureReview`, `AssetPackPreviewSettlementInstructions`,
+`AssetPackPreviewDeliveryPosture`, `AssetPackPreviewReplayReceipt`, and
+`AssetPackPreviewRepairPosture` so preview review is sufficient for buyer review
+without exposing protected source, raw protected prompts, raw provider
+responses, credentials, wallet private material, private settlement payloads,
+or unpaid AssetPack source. The deterministic proof artifact is
+`.bitcode/v39-assetpack-preview-quote-boundary.json`, checked by
+`pnpm run check:v39-gate6`.
 
 ### Gate 7: Settlement, BTD Rights Transfer, And Delivery
 

BITCODE_SPEC_V39.md

@@ -166,7 +166,11 @@ Closure acceptance:
 
 Closure implementation:
 
-- Pending Gate 6 work must define preview/quote artifacts, disclosure tests, and deterministic quote source.
+- Gate 6 package source is `packages/pipelines/asset-pack/src/asset-pack-preview-boundary.ts`.
+- `AssetPackPreviewBoundary` persists source-safe preview, fit measurement, selected-fit provenance, deterministic BTC quote, disclosure review, settlement instructions, delivery posture, replay receipt, and repair posture records.
+- `AssetPackPreviewQuoteReceipt` preserves the deterministic `sum(measurement.weight * measurement.volume * admitted_fit_quality)` share-to-fee formula with minimum sats, dust floor, quote root, and reader-wallet-before-broadcast posture.
+- Focused package tests cover deterministic quote replay, blocked no-worthy-fit repair posture, protected-source leak fail-closed review, and postprocess storage projection.
+- The generated proof artifact is `.bitcode/v39-assetpack-preview-quote-boundary.json`; `pnpm run check:v39-gate6` validates artifact freshness, protocol tests, package tests, source safety, docs, and workflow wiring.
 
 ### Gate 7: Settlement, BTD Rights Transfer, And Delivery
 

BITCODE_SPEC_V39_DELTA.md

@@ -93,7 +93,7 @@ discipline as all other prompt material.
 - Make `ReadFitsFindingSynthesis` a runtime search pipeline over the whole
   available Depository, gathering many above-threshold candidate deposits before
   selected-fit provenance is handed into AssetPack synthesis.
-- Make source-safe AssetPack preview commercially sufficient without IP leakage:
+- Make source-safe AssetPack preview sufficient for buyer review without IP leakage:
   show measurements, fit reasons, selected-fit provenance, quality posture,
   proof roots, deterministic BTC quote, and delivery posture while withholding
   source-bearing AssetPack content until settlement unlock.
@@ -223,6 +223,17 @@ wallet private material, settlement payloads, or unpaid AssetPack source.
 ## Gate 6 implementation notes
 
 Gate 6 closes the source-safe AssetPack preview and deterministic BTC quote boundary. Preview can show measurements, fit reasons, quality posture, proof roots, quote, and delivery posture, but not source-bearing AssetPack content.
+The package-owned `AssetPackPreviewBoundary` is the source-safe AssetPack preview boundary runtime
+projection for this boundary. It composes the source-safe preview, selected-fit
+provenance, `AssetPackPreviewQuoteReceipt`, disclosure review, settlement
+instructions, delivery posture, storage records, replay receipt, and repair
+posture. The quote is deterministic over the accepted Need measurement vector,
+admitted fit quality, weighted volume, minimum sats, dust floor, and active fee
+schedule. Settlement instructions require reader wallet authorization before
+broadcast, BTC fee payment readback, settlement finality readback, BTD rights
+transfer readback, and ledger/database/storage reconciliation before source
+unlock. Pull-request delivery is projected as available only after settlement;
+unpaid source-bearing AssetPack content remains invisible.
 
 ## Gate 7 implementation notes
 

BITCODE_SPEC_V39_NOTES.md

@@ -74,7 +74,7 @@ No `_legacy/` source is active source truth.
 | Enterprise Reading UX state machine | Gate 3 | `uapi/app/terminal/terminal-enterprise-reading-ux-state.ts`, `TerminalDepositReadWorkbench.tsx`, Conversation handoff, Terminal route query, `.bitcode/v39-enterprise-reading-ux-state.json`, focused UAPI tests, opt-in browser proof workflow | implemented | The five-step enterprise Reading UX is implemented with low-detail defaults, expandable source-safe detail, route-state handoff, rich execution stream integration, and source-safe disclosure proof. |
 | ReadNeed review and resynthesis | Gate 4 | `packages/pipelines/asset-pack/src/read-need-review-resynthesis.ts`, `.bitcode/v39-read-need-review-resynthesis.json`, package tests, route tests, protocol tests | implemented | Finding Fits remains blocked until a reviewed Need is accepted; rejected Needs preserve feedback and stay blocked. |
 | ReadFitsFinding runtime and replay | Gate 5 | `packages/pipelines/asset-pack/src/read-fits-finding-runtime.ts`, `depository-search.ts`, `.bitcode/v39-read-fits-finding-runtime.json`, package tests, protocol tests | implemented | Finding Fits searches the whole available Depository for many above-threshold candidates and persists source-safe replay, storage, telemetry, and repair receipts. |
-| AssetPack preview and quote boundary | Gate 6 | AssetPack preview tests, quote tests, disclosure leak scans, proof roots | pending | Preview is commercially sufficient without exposing source-bearing AssetPack content. |
+| AssetPack preview and quote boundary | Gate 6 | `packages/pipelines/asset-pack/src/asset-pack-preview-boundary.ts`, `.bitcode/v39-assetpack-preview-quote-boundary.json`, package tests, protocol tests | implemented | Preview exposes source-safe measurements, deterministic quote, settlement instructions, and withheld delivery posture without source-bearing AssetPack content. |
 | Settlement, BTD rights, and delivery | Gate 7 | BTC settlement receipt, BTD rights transfer, source-to-shares, ledger/database/storage, PR delivery | pending | Payment unlocks rights and delivery; repair paths are auditable. |
 | Operational telemetry and repair | Gate 8 | stream events, operator readback, runbook hooks, proof roots, repair commands | pending | Reading is observable and repairable end to end. |
 | Interface and Conversation parity | Gate 9 | Conversation, MCP/API, ChatGPT App, package contract tests | pending | Interfaces follow Terminal authority and cannot bypass gating, preview, settlement, rights, or delivery boundaries. |
@@ -165,7 +165,7 @@ No `_legacy/` source is active source truth.
 
 ## Later Gate Parity
 
-Later V39 gates must add gate-specific parity sections when their implementation begins. Gates 1 through 5 intentionally do not claim closure for preview/quote, settlement/delivery, telemetry/repair, interface parity, rehearsal, or promotion readiness.
+Later V39 gates must add gate-specific parity sections when their implementation begins. Gates 1 through 6 intentionally do not claim closure for paid settlement/delivery, telemetry/repair, interface parity, rehearsal, or promotion readiness.
 
 ## accepted boundaries and reopen conditions
 
@@ -174,6 +174,7 @@ V39 Gate 2 accepts only Depository supply indexing, source-safe search document,
 V39 Gate 3 accepts only enterprise Reading UX state, source-safe route handoff/readback, low-detail/expandable Terminal rendering, rich stream-log integration, opt-in browser proof wiring, and generated UX proof artifact closure.
 V39 Gate 4 accepts only ReadNeed review runtime storage projection, feedback/resynthesis lineage, accepted-Need admission, rejected-Need posture, source-safe telemetry receipts, route actions, and generated review proof artifact closure.
 V39 Gate 5 accepts only ReadFitsFinding runtime storage projection, many-candidate depository search, source-safe query/ranking/provenance evidence, replay receipts, repair posture, active embedding policy, and generated runtime proof artifact closure.
+V39 Gate 6 accepts only source-safe AssetPack preview, deterministic share-to-fee quote, disclosure leak scanning, settlement instructions, delivery-withheld posture, replay receipts, repair posture, and generated preview proof artifact closure.
 Later gate scope is intentionally pending and must be reopened into gate-specific parity sections before implementation starts.
 
 ## Gate 5 Parity
@@ -188,6 +189,19 @@ AssetPack source. The generated proof artifact is
 `.bitcode/v39-read-fits-finding-runtime.json` and the gate check is
 `pnpm run check:v39-gate5`.
 
+## Gate 6 Parity
+
+V39 Gate 6 is implemented when `AssetPackPreviewBoundary` wraps
+`AssetPackSourceSafePreview` with deterministic BTC quote, disclosure review,
+selected-fit provenance, settlement instructions, delivery posture, storage
+projection, replay receipt, and repair posture. The parity source is
+`packages/pipelines/asset-pack/src/asset-pack-preview-boundary.ts`; it must not
+expose protected source, raw protected prompts, raw provider responses,
+credentials, wallet private material, settlement private payloads, or unpaid
+AssetPack source. The generated proof artifact is
+`.bitcode/v39-assetpack-preview-quote-boundary.json` and the gate check is
+`pnpm run check:v39-gate6`.
+
 ## completion condition
 
-V39 Gate 5 is complete when `check:v39-gate5`, focused ReadFitsFinding package tests, V39 draft spec-family validation, V38/V39 canon-posture drift validation, and promoted V38 spec-family validation all pass on a `v39/gate-5-*` branch.
+V39 Gate 6 is complete when `check:v39-gate6`, focused AssetPack preview boundary package tests, V39 draft spec-family validation, V38/V39 canon-posture drift validation, promoted V38 spec-family validation, and Gate Quality pass on a `v39/gate-6-*` branch.

BITCODE_SPEC_V39_PARITY_MATRIX.md

@@ -283,6 +283,14 @@ provenance, active embedding policy, replay receipts, repair posture, and
 telemetry receipts into PipelineExecution-compatible storage records. Use
 `pnpm run generate:v39-read-fits-finding-runtime` and
 `pnpm run check:v39-gate5` before closing the gate.
+V39 Gate 6 adds the package-owned `AssetPackPreviewBoundary` and source-safe
+generated artifact `.bitcode/v39-assetpack-preview-quote-boundary.json`.
+AssetPack preview now projects source-safe measurements, selected-fit
+provenance, deterministic share-to-fee BTC quote, disclosure leak review,
+settlement instructions, withheld pull-request delivery posture, replay
+receipt, and repair posture without exposing unpaid source-bearing AssetPack
+content. Use `pnpm run generate:v39-assetpack-preview-quote-boundary` and
+`pnpm run check:v39-gate6` before closing the gate.
 V36 Gate 2 anchors market-wide activity through the package-owned
 `ExchangeActivityBook` and the source-safe generated artifact
 `.bitcode/v36-exchange-activity-book.json`, including listing, bid, ask,
@@ -448,7 +456,9 @@ through `pnpm run check:v39-gate3` and its generated
 `.bitcode/v39-enterprise-reading-ux-state.json` artifact. V39 Gate 4 is wired
 through `pnpm run check:v39-gate4`; V39 Gate 5 is wired through
 `pnpm run check:v39-gate5` and its generated
-`.bitcode/v39-read-fits-finding-runtime.json` artifact.
+`.bitcode/v39-read-fits-finding-runtime.json` artifact. V39 Gate 6 is wired
+through `pnpm run check:v39-gate6` and its generated
+`.bitcode/v39-assetpack-preview-quote-boundary.json` artifact.
 V38 Gates 1 through 11 are wired through `pnpm run check:v38-gate1`,
 `pnpm run check:v38-gate2`, `pnpm run check:v38-gate3`,
 `pnpm run check:v38-gate4`, `pnpm run check:v38-gate5`,

README.md

@@ -5,8 +5,8 @@
 - Current active canonical pointer: `BITCODE_SPEC.txt` -> `V38`
 - Current active canon: `BITCODE_SPEC_V38.md`
 - Current draft target: `BITCODE_SPEC_V39.md`.
-- Current working gate: V39 Gate 5 ReadFitsFinding Runtime, Ranking, And Replay.
-- Next queued gate after V39 Gate 5 closure: V39 Gate 6 AssetPack Preview, Quote, And Disclosure Boundary.
+- Current working gate: V39 Gate 6 AssetPack Preview, Quote, And Disclosure Boundary.
+- Next queued gate after V39 Gate 6 closure: V39 Gate 7 Settlement, BTD Rights Transfer, And Delivery.
 - Latest closed version: V38 Inference Correctness, which promoted pipeline execution call-stack law, PTRR/Failsafe/Thricified parity, prompt and PromptPart benchmarking, source-safe inference telemetry, ReadNeedComprehensionSynthesis hardening, ReadFitsFindingSynthesis search and embeddings, AssetPack economic traceability, local/staging inference rehearsal, and V38 promotion readiness.
 - Recent V38 closure anchor: V38 Gate 11 Promotion Readiness generated V38 proof support, promoted `BITCODE_SPEC.txt` to `V38`, prepared V38 active / V39 draft runtime posture, and closed inference correctness canon.
 - V34 Gate 2 closure anchor: deployment-depth now owns package-backed `DeploymentHostCapabilityCatalog` and `EnvironmentLaneContract` source, deterministic `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, and visible `value-bearing-mainnet` blocking through `blocked_future_canon_required`.
@@ -65,6 +65,7 @@
 - V39 Gate 3 closure anchor: Commercial Reading readiness now owns package-backed `TerminalEnterpriseReadingUxState` source, deterministic `.bitcode/v39-enterprise-reading-ux-state.json`, five-step Reading state, source-safe `readingStage` Conversation handoff and Terminal readback, low-detail defaults, expandable source-safe detail, rich execution stream integration, component/route tests, opt-in browser proof workflow wiring, and `check:v39-gate3`.
 - V39 Gate 4 closure anchor: Commercial Reading readiness now owns package-backed `ReadNeedReviewResynthesisRuntime` source, deterministic `.bitcode/v39-read-need-review-resynthesis.json`, Read Request persistence, synthesized Need storage, feedback/resynthesis lineage, Need measurement storage, accepted-Need admission, rejected-Need posture, source-safe telemetry receipts, route/runtime storage projection tests, workflow wiring, and `check:v39-gate4`.
 - V39 Gate 5 closure anchor: Commercial Reading readiness now owns package-backed `ReadFitsFindingRuntime` source, deterministic `.bitcode/v39-read-fits-finding-runtime.json`, accepted-Need-only Finding Fits admission, source-safe query plans, seven search channels, many-candidate ranking, selected-fit provenance roots, active OpenAI embedding policy, replay receipts, repair posture, package tests, protocol tests, workflow wiring, and `check:v39-gate5`.
+- V39 Gate 6 closure anchor: Reading readiness now owns package-backed `AssetPackPreviewBoundary` source, deterministic `.bitcode/v39-assetpack-preview-quote-boundary.json`, source-safe preview measurements, deterministic share-to-fee BTC quotes, disclosure leak scanning, selected-fit provenance, settlement instructions, withheld pull-request delivery posture, replay receipts, repair posture, package tests, protocol tests, workflow wiring, and `check:v39-gate6`.
 - Purpose: concise running index of Bitcode/ENGI specification history, current work, and planned work.
 
 This roadmap is not an active system specification.

SPECIFICATIONS_ROADMAP.md

@@ -227,6 +227,9 @@
     "generate:v39-read-fits-finding-runtime": "node scripts/generate-v39-read-fits-finding-runtime.mjs",
     "check:v39-read-fits-finding-runtime": "node scripts/generate-v39-read-fits-finding-runtime.mjs --check",
     "check:v39-gate5": "node scripts/check-v39-gate5-read-fits-finding-runtime.mjs",
+    "generate:v39-assetpack-preview-quote-boundary": "node scripts/generate-v39-assetpack-preview-quote-boundary.mjs",
+    "check:v39-assetpack-preview-quote-boundary": "node scripts/generate-v39-assetpack-preview-quote-boundary.mjs --check",
+    "check:v39-gate6": "node scripts/check-v39-gate6-assetpack-preview-quote-boundary.mjs",
     "generate:v38-inference-surface-inventory": "node scripts/generate-v38-inference-surface-inventory.mjs",
     "check:v38-inference-surface-inventory": "node scripts/generate-v38-inference-surface-inventory.mjs --check",
     "check:v38-gate2": "node scripts/check-v38-gate2-inference-surface-inventory.mjs",