# @lssm-tech/lib.assurance-spec

Provider-neutral assurance and compliance evidence correlation contracts for autonomous-company actions.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.4`
- Package path: `packages/platform/governance/assurance-spec`
- Manifest path: `packages/platform/governance/assurance-spec/package.json`
- Manifest Git blob: `424271e08e64248e4d3575a62d94c7013c523983`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/lib.assurance-spec](https://lssm.co/docs/packages/lib.assurance-spec/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.assurance-spec.txt)

## Package metadata

```json
{
  "layer": "platform",
  "physicalArea": "governance",
  "primaryArea": "governance-and-approvals",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "contracts",
    "catalogKind": "library",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Governance, decisions and approvals](https://lssm.co/docs/areas/governance-and-approvals/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/platform/governance/assurance-spec/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/README.md",
  "blobSha": "efe3effbc758f74c08b57a6d08d81af8cf45cbd1",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# `@lssm-tech/lib.assurance-spec`

Provider-neutral assurance and compliance evidence correlation contracts for autonomous-company actions.

This package closes the P1 assurance gap as a **correlation-only** contract/evidence layer. It does not store audit events, query logs, run anomaly detection, execute providers, evaluate policy, or replace ContractSpec Connect.

## Public entrypoints

- `@lssm-tech/lib.assurance-spec`
- `@lssm-tech/lib.assurance-spec/types`
- `@lssm-tech/lib.assurance-spec/fixtures`
- `@lssm-tech/lib.assurance-spec/validation`
- `@lssm-tech/lib.assurance-spec/quality` and its `environment`, `plan`,
  `primitives`, `profile`, and `receipt` leaves own the canonical quality models.

Quality models retain the existing V1 schema versions, digests, DocBlocks and
receipt binding checks. Historical `@lssm-tech/lib.contracts-spec/quality`
imports forward to these same definitions. Supplied-receipt validation checks
exact plan, delivery, Git SHA, check and Connect decision bindings; it does not
execute checks or grant authority. Quality planning, readiness probes and
execution remain in `@lssm-tech/lib.execution-lanes/quality`.

The quality models use the pure LSSM OS delivery primitive leaf, existing Core
documentation and serialization helpers, crypto utilities and Zod. This package
has no dependency on the compatibility facade or execution runtime.

## Boundary

The canonical prebuild keeps all 12 public entrypoints and their conditional
targets. The committed export maps use the generator's ordering so repeated
prebuilds preserve the manifest bytes.

Adjacent systems are referenced through branded refs only: audit events, observability telemetry/anomalies, ai-agent model/tool/session receipts, integration calls, CompanyOS work/policy decisions, Connect reviews, orchestration workflows, and infra-ops deployment/incident refs.

## Portable Connect and Harness contracts

`@lssm-tech/lib.assurance-spec/connect/types` owns the unchanged Connect verdict and review threshold declarations. Connect retains policy evaluation, approvals, and runtime authority.

`@lssm-tech/lib.assurance-spec/harness/types` owns the unchanged Harness evidence, scenario, suite, target, and execution declarations and the identity declaration factories. It does not execute a harness. The supported Legacy paths forward these declarations. The nominal Harness registry classes retain their existing Legacy implementation and superclass identity until the coordinated runtime ownership cut.

Experience coverage scoring and validation are available at `/experience-coverage/scoring` and `/experience-coverage/validation`. They correlate supplied evidence without authorizing execution. Legacy imports forward to these canonical functions.


## Declared capabilities

### Lib Assurance Spec

Capability ID: `package.lssm.tech.lib.assurance.spec`

Provider-neutral assurance and compliance evidence correlation contracts for autonomous-company actions.

Use cases:

- Adopt provider-neutral assurance and compliance evidence correlation contracts for autonomous-company actions

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/lib.assurance-spec package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "lib",
    "assurance",
    "spec"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.assurance-spec",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/fixtures",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/types",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/validation",
    "symbols": []
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/quality",
    "symbols": [
      "QualityPlanV1",
      "QualityRunReceiptV1",
      "qualityPlanV1Schema",
      "verifyQualityRunReceiptV1"
    ]
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/connect/types",
    "symbols": [
      "ConnectVerdict",
      "ConnectReviewThresholds"
    ]
  },
  {
    "from": "@lssm-tech/lib.assurance-spec/harness/types",
    "symbols": [
      "EvidenceArtifact",
      "EvidenceArtifactKind",
      "HarnessAssertionResult",
      "HarnessRunRecord",
      "HarnessScenarioSpec",
      "defineHarnessScenario",
      "defineHarnessSuite"
    ]
  }
]
```

## Catalogue metadata

```json
{
  "family": "contracts",
  "kind": "library",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./fixtures",
    "./types",
    "./validation",
    "./quality",
    "./quality/environment",
    "./quality/plan",
    "./quality/primitives",
    "./quality/profile",
    "./quality/receipt",
    "./connect/types",
    "./harness/types",
    "./experience-coverage/scoring",
    "./experience-coverage/validation"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/fixtures",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/types",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/validation",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/quality",
    "symbols": [
      "QualityPlanV1",
      "QualityRunReceiptV1",
      "qualityPlanV1Schema",
      "verifyQualityRunReceiptV1"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/connect/types",
    "symbols": [
      "ConnectVerdict",
      "ConnectReviewThresholds"
    ]
  },
  {
    "capabilityId": "package.lssm.tech.lib.assurance.spec",
    "from": "@lssm-tech/lib.assurance-spec/harness/types",
    "symbols": [
      "EvidenceArtifact",
      "EvidenceArtifactKind",
      "HarnessAssertionResult",
      "HarnessRunRecord",
      "HarnessScenarioSpec",
      "defineHarnessScenario",
      "defineHarnessSuite"
    ]
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/lib.assurance-spec` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/index.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/connect/types` — subpath `./connect/types`
  - `unconditional`: `./src/connect/types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/connect/types.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/fixtures` — subpath `./fixtures`
  - `unconditional`: `./src/fixtures.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/fixtures.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/harness/types` — subpath `./harness/types`
  - `unconditional`: `./src/harness/types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/harness/types.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality` — subpath `./quality`
  - `unconditional`: `./src/quality/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/index.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality/environment` — subpath `./quality/environment`
  - `unconditional`: `./src/quality/environment.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/environment.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality/plan` — subpath `./quality/plan`
  - `unconditional`: `./src/quality/plan.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/plan.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality/primitives` — subpath `./quality/primitives`
  - `unconditional`: `./src/quality/primitives.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/primitives.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality/profile` — subpath `./quality/profile`
  - `unconditional`: `./src/quality/profile.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/profile.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/quality/receipt` — subpath `./quality/receipt`
  - `unconditional`: `./src/quality/receipt.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/quality/receipt.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/types` — subpath `./types`
  - `unconditional`: `./src/types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/types.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/validation` — subpath `./validation`
  - `unconditional`: `./src/validation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/validation.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/experience-coverage/scoring` — subpath `./experience-coverage/scoring`
  - `unconditional`: `./src/experience-coverage/scoring.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/experience-coverage/scoring.ts); verified source file.

- `@lssm-tech/lib.assurance-spec/experience-coverage/validation` — subpath `./experience-coverage/validation`
  - `unconditional`: `./src/experience-coverage/validation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/assurance-spec/src/experience-coverage/validation.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./connect/types": {
      "types": "./dist/connect/types.d.ts",
      "browser": "./dist/browser/connect/types.js",
      "bun": "./dist/connect/types.js",
      "node": "./dist/node/connect/types.js",
      "default": "./dist/connect/types.js"
    },
    "./fixtures": {
      "types": "./dist/fixtures.d.ts",
      "browser": "./dist/browser/fixtures.js",
      "bun": "./dist/fixtures.js",
      "node": "./dist/node/fixtures.js",
      "default": "./dist/fixtures.js"
    },
    "./harness/types": {
      "types": "./dist/harness/types.d.ts",
      "browser": "./dist/browser/harness/types.js",
      "bun": "./dist/harness/types.js",
      "node": "./dist/node/harness/types.js",
      "default": "./dist/harness/types.js"
    },
    "./quality": {
      "types": "./dist/quality/index.d.ts",
      "browser": "./dist/browser/quality/index.js",
      "bun": "./dist/quality/index.js",
      "node": "./dist/node/quality/index.js",
      "default": "./dist/quality/index.js"
    },
    "./quality/environment": {
      "types": "./dist/quality/environment.d.ts",
      "browser": "./dist/browser/quality/environment.js",
      "bun": "./dist/quality/environment.js",
      "node": "./dist/node/quality/environment.js",
      "default": "./dist/quality/environment.js"
    },
    "./quality/plan": {
      "types": "./dist/quality/plan.d.ts",
      "browser": "./dist/browser/quality/plan.js",
      "bun": "./dist/quality/plan.js",
      "node": "./dist/node/quality/plan.js",
      "default": "./dist/quality/plan.js"
    },
    "./quality/primitives": {
      "types": "./dist/quality/primitives.d.ts",
      "browser": "./dist/browser/quality/primitives.js",
      "bun": "./dist/quality/primitives.js",
      "node": "./dist/node/quality/primitives.js",
      "default": "./dist/quality/primitives.js"
    },
    "./quality/profile": {
      "types": "./dist/quality/profile.d.ts",
      "browser": "./dist/browser/quality/profile.js",
      "bun": "./dist/quality/profile.js",
      "node": "./dist/node/quality/profile.js",
      "default": "./dist/quality/profile.js"
    },
    "./quality/receipt": {
      "types": "./dist/quality/receipt.d.ts",
      "browser": "./dist/browser/quality/receipt.js",
      "bun": "./dist/quality/receipt.js",
      "node": "./dist/node/quality/receipt.js",
      "default": "./dist/quality/receipt.js"
    },
    "./types": {
      "types": "./dist/types.d.ts",
      "browser": "./dist/browser/types.js",
      "bun": "./dist/types.js",
      "node": "./dist/node/types.js",
      "default": "./dist/types.js"
    },
    "./validation": {
      "types": "./dist/validation.d.ts",
      "browser": "./dist/browser/validation.js",
      "bun": "./dist/validation.js",
      "node": "./dist/node/validation.js",
      "default": "./dist/validation.js"
    },
    "./experience-coverage/scoring": {
      "types": "./dist/experience-coverage/scoring.d.ts",
      "bun": "./dist/experience-coverage/scoring.js",
      "node": "./dist/node/experience-coverage/scoring.js",
      "default": "./dist/experience-coverage/scoring.js"
    },
    "./experience-coverage/validation": {
      "types": "./dist/experience-coverage/validation.d.ts",
      "bun": "./dist/experience-coverage/validation.js",
      "node": "./dist/node/experience-coverage/validation.js",
      "default": "./dist/experience-coverage/validation.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-spec-core](https://lssm.co/docs/packages/lib.contracts-spec-core/): `workspace:^`
- [@lssm-tech/lib.crypto-utils](https://lssm.co/docs/packages/lib.crypto-utils/): `workspace:^`
- [@lssm-tech/lib.lssm-os-spec](https://lssm.co/docs/packages/lib.lssm-os-spec/): `workspace:^`
- `zod`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "publish:pkg": "bun publish --tolerate-republish --ignore-scripts --verbose",
  "publish:pkg:canary": "bun publish:pkg --tag canary",
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "dev": "contractspec-bun-build dev",
  "clean": "rimraf dist .turbo",
  "lint": "bun lint:fix",
  "lint:fix": "node ../../../../scripts/biome.cjs check --write .",
  "lint:check": "node ../../../../scripts/biome.cjs check .",
  "test": "bun test",
  "prebuild": "contractspec-bun-build prebuild",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Lib Assurance Spec documentation](https://www.npmjs.com/package/%40lssm-tech%2Flib.assurance-spec) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Flib.assurance-spec",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/lib.assurance-spec.txt",
  "route": "/llms/lib.assurance-spec",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.assurance-spec.txt",
  "blobSha": "efe3effbc758f74c08b57a6d08d81af8cf45cbd1",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```