docs(LGT-021): define context kernel boundary

Author: liushiao

.legatura/contracts/context-kernel-interface.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "id": "context-kernel-interface",
+  "name": "Context Kernel Interface",
+  "owner": "context-kernel",
+  "consumers": ["change-kernel", "worker-execution"],
+  "maturity": "provisional",
+  "normativeSources": ["product-intent", "long-term-plan", "domain-language", "assurance-policy"],
+  "claims": [
+    {
+      "id": "context-materialization-binds-exact-authorized-bytes",
+      "statement": "Given one logical compiled Context Capsule and one stable exact repository source product, Context Kernel emits a bounded canonical content-addressed manifest and process-local delivery whose ordered concrete regular-file entries exactly cover the authorized initial read scope; missing, extra, drifted, escaping, ambiguous, symlink, unreadable, duplicate, malformed, or over-limit source facts fail closed."
+    },
+    {
+      "id": "context-expansion-is-recorded-before-content-disclosure",
+      "statement": "A Context Expansion grant persists an all-or-nothing settlement and append-only lineage bound to the exact execution, request, prior Context Session, stable source product, and Project Model impact product before any newly authorized source bytes are disclosed; persistence failure, stale binding, replay, partial grant, or scope broadening discloses no bytes."
+    },
+    {
+      "id": "context-expansion-resolutions-cannot-be-worker-self-granted",
+      "statement": "A Worker-authored Context Expansion Request remains inert and cannot supply its own grant, denial, successor Capsule, materialization, Context Impact, controller identity, or Authority; only a separately compiled controller settlement may advance Context Session bindings."
+    },
+    {
+      "id": "context-session-lineage-is-append-only-and-non-authoritative",
+      "statement": "Context Session records preserve exact previous and next materialization and Context Impact digests plus granted, denied, or redundant settlement facts, while source bodies remain out of coordination records and no Context fact creates Evidence, Knowledge Closure, Outcome or Claim satisfaction, an Authority Decision, capability enforcement, semantic code impact, or Change acceptance."
+    },
+    {
+      "id": "context-kernel-proof-rejects-source-scope-and-settlement-attacks",
+      "statement": "The fixed Context Kernel proof accepts one reproducible initial materialization and one exact recorded-before-disclosure expansion, and rejects forged, stale, cross-execution, cross-source, replayed, broadened, partially persisted, manifest/blob-mismatched, path-escaping, symlink, unowned, worker-self-granted, impact-substituted, and resource-exhaustion inputs."
+    }
+  ]
+}

.legatura/contracts/project-model-interface.json

@@ -3,7 +3,7 @@
   "id": "project-model-interface",
   "name": "Project Model Interface",
   "owner": "project-model",
-  "consumers": ["change-kernel"],
+  "consumers": ["change-kernel", "context-kernel"],
   "maturity": "governed",
   "normativeSources": ["product-intent", "long-term-plan", "domain-language", "assurance-policy"],
   "claims": [
@@ -23,6 +23,10 @@
       "id": "context-capsule-binds-validated-path-ownership",
       "statement": "Generated Context Capsule write scope is projected only from an opaque, exact-Model-and-path-facts-bound ownership product for the primary Module; absent, forged, stale, ambiguous, disposition-only, or over-limit input fails closed."
     },
+    {
+      "id": "context-expansion-impact-is-derived-from-frozen-sources",
+      "statement": "Given a frozen Project Model, its opaque exact path-ownership product, a current Context Session projection, and requested concrete paths, Project Model derives the exact newly disclosed path owners, Contract relations, Assurance crossings, disposition references, and Context Impact digest; worker or caller supplied owner, Module, Contract, assurance, semantic-impact, or verification classifications cannot substitute those facts."
+    },
     {
       "id": "module-path-ownership-proof-rejects-coverage-and-binding-attacks",
       "statement": "The fixed ownership proof rejects unowned tracked paths, overlapping Module write owners, owner/disposition conflicts, malformed disposition rules, forged or stale ownership products, and Context Capsule scope derivation that bypasses the product."

.legatura/gates/minimum.json

@@ -8,7 +8,8 @@
     "project-model",
     "change-kernel",
     "local-workbench",
-    "worker-execution"
+    "worker-execution",
+    "context-kernel"
   ],
   "commands": [
     {
@@ -216,6 +217,45 @@
         "Filesystem, process, network, and secret capabilities are not independently enforced until LGT-022.",
         "Local Authority identities remain unauthenticated and Worker observations do not prove work correctness."
       ]
+    },
+    {
+      "id": "context-kernel-interface-proof",
+      "appliesTo": ["context-kernel"],
+      "command": ["node", "--test", "test/context-kernel/interface.test.mjs"],
+      "timeoutMs": 120000,
+      "claimRefs": [
+        "context-capsule-cannot-broaden-scope",
+        "context-expansion-impact-is-derived-from-frozen-sources",
+        "context-materialization-binds-exact-authorized-bytes",
+        "context-expansion-is-recorded-before-content-disclosure",
+        "context-expansion-resolutions-cannot-be-worker-self-granted",
+        "context-session-lineage-is-append-only-and-non-authoritative",
+        "context-kernel-proof-rejects-source-scope-and-settlement-attacks",
+        "worker-execution-observations-cannot-self-ratify"
+      ],
+      "oracle": {
+        "kind": "context-kernel-interface-proof-exit",
+        "description": "The fixed Context Kernel cross-Interface proof must accept exact initial materialization and recorded-before-disclosure expansion while every declared source, scope, settlement, lineage, authority, and resource attack exits nonzero inside the scenario."
+      },
+      "applicability": {
+        "phase": "acceptance",
+        "purpose": "context-materialization-and-expansion-binding-proof"
+      },
+      "discriminatoryPower": {
+        "rejects": [
+          "initial materialization that includes bytes outside the logical Context Capsule read scope",
+          "missing, extra, drifted, ambiguous, escaping, symlink, unreadable, duplicate, or over-limit source entries",
+          "a Worker request that grants its own scope, successor Context, or Context Impact",
+          "stale, cross-execution, cross-source, replayed, broadened, partial, or impact-substituted settlement",
+          "new source-byte disclosure before the exact expansion ledger and blob state persist",
+          "Context lineage that changes write scope or creates capability, semantic-impact, Evidence, Knowledge Closure, Authority, or acceptance conclusions"
+        ]
+      },
+      "residualUncertainty": [
+        "The proof establishes the local Context delivery seam, not that a same-user Worker process cannot read the repository or acquire knowledge through another channel.",
+        "Raw filesystem read and write enforcement remains the worker-capability-enforcement-not-proven Gap and LGT-022 responsibility.",
+        "Real provider delivery, use of disclosed content, adapter parity, and intent-to-acceptance remain LGT-023 and LGT-024 responsibilities."
+      ]
     }
   ]
 }

.legatura/knowledge-gaps.json

@@ -311,6 +311,17 @@
       "statement": "No declared local execution profile independently proves that filesystem, process, network, or secret capability limits are enforced at the worker execution boundary rather than merely observed or requested.",
       "expansionTrigger": "Before LGT-022 is activated or any capability profile is described as enforced."
     },
+    {
+      "id": "context-materialization-and-expansion-binding-not-proven",
+      "status": "open",
+      "affects": ["context-kernel", "project-model", "worker-execution", "change-kernel"],
+      "owner": "governance-maintainer",
+      "statement": "No fixed proof binds a logical compiled Context Capsule to one exact bounded source-byte materialization or proves that only a controller-owned recorded-before-disclosure settlement can produce an append-only successor Context with compiler-derived Context Impact facts.",
+      "proofClaimRefs": [
+        "context-kernel-proof-rejects-source-scope-and-settlement-attacks"
+      ],
+      "expansionTrigger": "Before LGT-021 is achieved or any Worker Adapter receives a Context materialization."
+    },
     {
       "id": "authority-identity-not-authenticated",
       "status": "open",

.legatura/modules/context-kernel.json

@@ -0,0 +1,53 @@
+{
+  "schemaVersion": 1,
+  "id": "context-kernel",
+  "name": "Context Kernel",
+  "status": "provisional",
+  "summary": "Materializes exact bounded Context bytes and settles controller-owned Context Expansions atomically without interpreting acceptance or claiming filesystem isolation.",
+  "factAuthority": "context-kernel-facts",
+  "decisionAuthority": "module-maintainer",
+  "interface": {
+    "entrypoints": [
+      "createContextSession(input, options)",
+      "resolveContextExpansion(input, options)",
+      "validateContextKernelDocument(value)",
+      "CONTEXT_KERNEL_SCHEMA_VERSION",
+      "CONTEXT_KERNEL_PROOF_VERSION",
+      "CONTEXT_KERNEL_LIMITS"
+    ],
+    "invariants": [
+      "A Context Session binds one execution, compiled Change, logical Context Capsule, stable repository source product, exact content-addressed manifest, and compiler-derived Context Impact.",
+      "Source bodies live only in a bounded process-local delivery or content-addressed blob store; Context Session, Worker Execution, Change, HTTP, CLI, and Profile records carry manifests and digests rather than source bodies.",
+      "Initial materialization expands only the logical Capsule read scope into concrete regular-file entries, rejects symlink and path escape, and fails closed on missing, extra, ambiguous, drifted, unreadable, duplicate, malformed, or over-limit source facts.",
+      "A Worker-authored Context Expansion Request is inert; only a controller-owned settlement bound to the exact execution, request, prior Context Session, source product, and Project Model impact product may grant, deny, or mark it redundant.",
+      "A granted expansion is all-or-nothing, appends lineage and persistence before disclosure, preserves write scope, adds only exact authorized bytes, and records previous and next materialization and Context Impact digests.",
+      "Context Kernel owns disclosure facts, not raw filesystem enforcement, worker knowledge, semantic code impact, Evidence, Knowledge Closure, Outcome, Claim, Authority, or Change acceptance conclusions."
+    ]
+  },
+  "paths": {
+    "include": [
+      "src/context-kernel/**",
+      "test/context-kernel/**"
+    ],
+    "exclude": []
+  },
+  "focusedTests": [
+    {
+      "path": "test/context-kernel/interface.test.mjs",
+      "command": "node --test test/context-kernel/interface.test.mjs"
+    }
+  ],
+  "publicContracts": ["context-kernel-interface"],
+  "dependencies": [
+    {
+      "module": "project-model",
+      "via": "project-model-interface",
+      "access": "interface-only"
+    },
+    {
+      "module": "assurance-runtime",
+      "via": "assurance-runtime-interface",
+      "access": "interface-only"
+    }
+  ]
+}

.legatura/modules/project-model.json

@@ -13,6 +13,7 @@
       "validateProjectModel(model)",
       "publicProjectModel(model)",
       "compileChangeAgainstGovernance(change, baseline, { modulePathOwnershipProduct })",
+      "compileContextExpansionImpact(input, { modulePathOwnershipProduct })",
       "compileChangePlanAuthoringProjection(baseline)",
       "parseChangePlanRefs(value)",
       "compileOutcomePlanAmendment(input)",
@@ -32,6 +33,7 @@
       "Project Model alone compiles one opaque bounded Module path ownership product bound to the exact Model and exact tracked-path facts: Module and disposition selectors use only canonical exact paths or literal recursive prefixes with include-minus-exclude matching; every disposition has a stable id, kind ungoverned, canonical include and exclude lists, and substantive rationale; every latent or concrete owner-owner, owner-disposition, or disposition-disposition overlap fails without precedence; every tracked path has exactly one Module write owner or one disposition; and a disposition never grants write authority.",
       "For an exact compiled Context write scope, the same ownership product validates one bounded digest-bound scope selection as a narrowing of the authoritative Module scope and projects closed concrete path decisions that distinguish ownership authority, selected-scope membership, and final write allowance; forged, broadened, malformed, stale, duplicate, or over-limit selections fail closed, and consumers never interpret selectors or dispositions.",
       "Generated Context Capsule write scope is projected only from the exact ownership product for its primary Module; absent, forged, stale, ambiguous, disposition-only, or over-limit inputs fail closed, and callers may narrow but never widen that scope.",
+      "Context Expansion Impact is derived only from the frozen Project Model, an opaque exact ownership product, the current Context Session projection, and requested concrete paths; caller or Worker classifications cannot create owner, Contract, Assurance, disposition, semantic-impact, or verification facts.",
       "The ownership product enters Change compilation only through a process-local options seam and is never serialized into worker, HTTP, Store, or browser input.",
       "Unrelated Claims require an explicit authority-bound mapping.",
       "Acceptance Evidence eligibility is compiled from canonical Claim Gate routes at exact Gate and command identity, filtered to routes applicable to the primary Module through acceptance-eligible Gates; cross-Claim mappings expose exact source routes, and integration-only full Gate routes never enter acceptance mappings.",
@@ -62,6 +64,7 @@
     "include": [
       "src/core/project-model.mjs",
       "src/core/change-compiler.mjs",
+      "src/core/context-impact.mjs",
       "src/core/outcome-evolution.mjs",
       "src/core/outcome-transitions.mjs",
       "src/core/architecture-profile.mjs",
@@ -89,6 +92,8 @@
       ".legatura/gates/brownfield-adoption.json",
       ".legatura/modules/worker-execution.json",
       ".legatura/contracts/worker-execution-interface.json",
+      ".legatura/modules/context-kernel.json",
+      ".legatura/contracts/context-kernel-interface.json",
       "examples/brownfield-app-apk-relay/**",
       ".legatura/modules/project-model.json",
       ".legatura/contracts/project-model-interface.json"

.legatura/modules/worker-execution.json

@@ -39,5 +39,11 @@
     }
   ],
   "publicContracts": ["worker-execution-interface"],
-  "dependencies": []
+  "dependencies": [
+    {
+      "module": "context-kernel",
+      "via": "context-kernel-interface",
+      "access": "interface-only"
+    }
+  ]
 }