P0: make verification identity and portable execution reproducible

.agents/skills/agents-shipgate/SKILL.md

@@ -1,3 +1,3 @@
 ---
 name: agents-shipgate
 description: Use when the user wants to run the prominent Agents Shipgate flows — `shipgate check`, `agents-shipgate verify`, or `shipgate audit --host` — for AI agent capability changes, PR release readiness, or coding-agent host grants.
@@ -20,7 +20,7 @@
 5. Default first-time CI to advisory mode. Do not enable release-blocking CI or save a baseline until a human has reviewed current findings.
 6. For local agent control, run `shipgate check --agent codex --workspace . --format agent-boundary-json` and read the stdout `shipgate.agent_boundary_result/v1` object. Switch on `control.state`; follow only `control.next_action`, `control.allowed_next_commands`, and `control.human_review`. Treat `decision` as diagnostic context only.
 7. Before editing `shipgate.yaml`, Shipgate CI, AGENTS/CLAUDE/Cursor rules, policy packs, baselines, waivers, suppressions, Codex hooks/config, Codex plugin manifests, `.mcp.json`, `.app.json`, or `SKILL.md`, plan to run `agents-shipgate verify` before completion and route trust-root review to a human when the verifier requires it.
-8. For full PR verification, read `agents-shipgate-reports/agent-handoff.json` first and switch on `control.state`, then read `verifier.json` for detailed control state, `verify-run.json` for reproducibility metadata, and `report.json` for reviewer detail; `report.json.release_decision.decision` remains the release gate.
+8. For full PR verification, validate `agents-shipgate-reports/verification-receipt.json` first, then read `agent-handoff.json` and switch on `control.state`; read `verifier.json` for detailed control state, `verify-run.json` for the request graph, and `report.json` for reviewer detail. `report.json.release_decision.decision` remains the release gate.
 9. Auto-apply only high-confidence safe patches. Do not auto-assert action effect, action authority, agent bindings, approval, confirmation, idempotency, broad-scope, prohibited-action, or runtime-trace evidence.
 10. Ensure `.gitignore` covers `agents-shipgate-reports/` before committing.
 

.agents/skills/agents-shipgate/references/report-reading.md

@@ -1,6 +1,7 @@
 # Reading Agents Shipgate Reports
 
-For verify runs, read `agents-shipgate-reports/agent-handoff.json` first. Then
+For verify runs, validate `agents-shipgate-reports/verification-receipt.json`
+first. Then read `agents-shipgate-reports/agent-handoff.json`. After that,
 read `agents-shipgate-reports/verifier.json` for detailed control context
 and `agents-shipgate-reports/report.json` for findings. Do not scrape Markdown.
 

.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "agents-shipgate",
       "source": "./plugins/claude-code",
       "description": "Run Agents Shipgate Tool-Use Readiness workflows from Claude Code: detect whether Shipgate applies, bootstrap the advisory gate, verify agent-capability PRs, and triage findings without fabricating human approval. Requires the agents-shipgate CLI (pipx install agents-shipgate, runtime contract 15).",
-      "version": "0.16.0b5",
+      "version": "0.16.0b6",
       "author": {
         "name": "Three Moons Lab",
         "url": "https://threemoonslab.com/"

.claude/commands/shipgate.md

@@ -1,3 +1,3 @@
 ---
 description: "Run the prominent Agents Shipgate flows: check, verify, or audit --host"
 ---
@@ -48,7 +48,8 @@
 
 1. Set `AGENTS_SHIPGATE_AGENT_MODE=1` for every CLI call so errors emit a `next_action` JSON line on stderr.
 2. Run `agents-shipgate contract --json` when available and use it to verify the installed CLI's schema versions and gating signal.
-3. For verifier runs, parse `agents-shipgate-reports/agent-handoff.json` first,
+3. For verifier runs, validate `agents-shipgate-reports/verification-receipt.json` first,
+   then parse `agents-shipgate-reports/agent-handoff.json`,
    then `verifier.json`, `verify-run.json`, and
    `report.json.release_decision.decision` as the release gate.
 4. For check runs, parse stdout as `shipgate.agent_boundary_result/v1` and
@@ -77,7 +78,8 @@
 agents-shipgate verify --base origin/main --head HEAD --json
 ```
 
-Read `agents-shipgate-reports/agent-handoff.json` first and lead with
+Validate `agents-shipgate-reports/verification-receipt.json` first, then read
+`agents-shipgate-reports/agent-handoff.json` and lead with
 `gate.merge_verdict` (a deterministic projection of `release_decision.decision`,
 which remains the gate in `report.json`), then the authoritative substrate
 `agents-shipgate-reports/verifier.json` and supporting/provisional

.cursor/rules/agents-shipgate.mdc

@@ -1,3 +1,3 @@
 ---
 description: Run Agents Shipgate as the deterministic merge gate for AI-generated agent capability changes.
 globs:
@@ -58,7 +58,8 @@
 
 For committed PR/CI verification, run `agents-shipgate verify --base
 origin/main --head HEAD --json` after making the base ref available; it never
-fetches. Read `agents-shipgate-reports/agent-handoff.json` first for
+fetches. Validate `agents-shipgate-reports/verification-receipt.json` first,
+then read `agents-shipgate-reports/agent-handoff.json` for
 `gate.merge_verdict`, `gate.can_merge_without_human`, and `control`; then read
 `agents-shipgate-reports/verifier.json` for detailed control context,
 `agents-shipgate-reports/verify-run.json` for reproducibility metadata, and

.well-known/agents-shipgate.json

@@ -3,7 +3,7 @@
   "name": "agents-shipgate",
   "display_name": "Agents Shipgate",
   "tagline": "The deterministic merge gate for AI-generated agent capability changes",
-  "version": "0.16.0b5",
+  "version": "0.16.0b6",
   "license": "Apache-2.0",
   "publisher": {
     "name": "Three Moons Lab",
@@ -102,6 +102,10 @@
     "install_ai_coding_workflow": "agents-shipgate init --workspace . --write --json",
     "verify_local": "agents-shipgate verify --workspace . --config shipgate.yaml --ci-mode advisory --json",
     "verify_pr": "agents-shipgate verify --workspace . --config shipgate.yaml --base origin/main --head HEAD --ci-mode advisory --format json",
+    "verification_prepare": "agents-shipgate verification prepare --workspace . --config shipgate.yaml --base origin/main --head HEAD --out agents-shipgate-reports/verification-plan.json",
+    "verification_worker": "agents-shipgate verification worker --plan agents-shipgate-reports/verification-plan.json --workspace . --out agents-shipgate-reports/verification-unit-result.json",
+    "verification_assemble": "agents-shipgate verification assemble --plan agents-shipgate-reports/verification-plan.json --unit-result agents-shipgate-reports/verification-unit-result.json --verifier agents-shipgate-reports/verifier.json --artifacts-root agents-shipgate-reports --out agents-shipgate-reports/verification-receipt.json",
+    "verification_reproduce": "agents-shipgate verification reproduce --receipt agents-shipgate-reports/verification-receipt.json --artifacts-root agents-shipgate-reports",
     "agent_handoff": "agents-shipgate agent handoff --from agents-shipgate-reports/verifier.json --json",
     "trigger": "agents-shipgate trigger --base origin/main --head HEAD --json",
     "capability_export": "agents-shipgate capability export -c shipgate.yaml",
@@ -172,16 +176,20 @@
   "codex_boundary_result_schema_path": "docs/codex-boundary-result-schema.v2.json",
   "agent_boundary_result_schema_version": "shipgate.agent_boundary_result/v1",
   "agent_boundary_result_schema_path": "docs/agent-boundary-result-schema.v1.json",
-  "report_schema_version": "0.33",
-  "packet_schema_version": "0.11",
-  "verifier_schema_version": "0.4",
-  "verify_run_schema_version": "shipgate.verify_run/v2",
-  "agent_handoff_schema_version": "shipgate.agent_handoff/v4",
-  "agent_handoff_schema_path": "docs/agent-handoff-schema.v4.json",
+  "report_schema_version": "0.34",
+  "packet_schema_version": "0.12",
+  "verifier_schema_version": "0.5",
+  "verify_run_schema_version": "shipgate.verify_run/v3",
+  "verification_plan_schema_version": "shipgate.verification_plan/v1",
+  "verification_unit_result_schema_version": "shipgate.verification_unit_result/v1",
+  "verification_artifact_manifest_schema_version": "shipgate.verification_artifact_manifest/v1",
+  "verification_receipt_schema_version": "shipgate.verification_receipt/v1",
+  "agent_handoff_schema_version": "shipgate.agent_handoff/v5",
+  "agent_handoff_schema_path": "docs/agent-handoff-schema.v5.json",
   "agent_handoff_artifact": "agents-shipgate-reports/agent-handoff.json",
-  "contract_version": "16",
+  "contract_version": "17",
   "minimum_control_contract_version": "14",
-  "local_agent_contract_schema_version": "5",
+  "local_agent_contract_schema_version": "6",
   "inputs": [
     "mcp",
     "openapi",
@@ -206,6 +214,10 @@
     "verifier_json",
     "verify_run_json",
     "agent_handoff_json",
+    "verification_plan_json",
+    "verification_unit_result_json",
+    "verification_artifact_manifest_json",
+    "verification_receipt_json",
     "pr_comment_md",
     "check_annotations_json",
     "capability_lock_json",
@@ -224,6 +236,10 @@
     "verifier": "agents-shipgate-reports/verifier.json",
     "verify_run": "agents-shipgate-reports/verify-run.json",
     "agent_handoff": "agents-shipgate-reports/agent-handoff.json",
+    "verification_plan": "agents-shipgate-reports/verification-plan.json",
+    "verification_unit_result": "agents-shipgate-reports/verification-unit-result.json",
+    "verification_artifact_manifest": "agents-shipgate-reports/verification-artifacts.json",
+    "verification_receipt": "agents-shipgate-reports/verification-receipt.json",
     "report": "agents-shipgate-reports/report.json",
     "pr_comment": "agents-shipgate-reports/pr-comment.md",
     "check_annotations": "agents-shipgate-reports/check-annotations.json",
@@ -245,9 +261,9 @@
   "capability_lock_schema_version": "0.6",
   "capability_lock_diff_schema_version": "0.7",
   "preflight_schema_version": "0.3",
-  "attestation_schema_version": "0.4",
-  "registry_schema_version": "0.3",
-  "org_evidence_bundle_schema_version": "shipgate.org_evidence_bundle/v1",
+  "attestation_schema_version": "0.5",
+  "registry_schema_version": "0.4",
+  "org_evidence_bundle_schema_version": "shipgate.org_evidence_bundle/v2",
   "host_grants_inventory_schema_version": "0.2",
   "host_grants_baseline_schema_version": "0.2",
   "host_grants_drift_schema_version": "0.2",
@@ -276,6 +292,10 @@
     "registry",
     "org_governance",
     "org_evidence_bundle",
+    "verification_plan",
+    "verification_unit_result",
+    "verification_artifact_manifest",
+    "verification_receipt",
     "host_grants_inventory",
     "host_grants_baseline",
     "host_grants_drift",
@@ -365,9 +385,14 @@
     "control.next_action",
     "fix_task",
     "capability_review.top_changes",
-    "release_decision.decision"
+    "release_decision.decision",
+    "request_id",
+    "decision_id"
   ],
   "agent_read_order": [
+    "verification-receipt.json",
+    "verification-receipt.json.request_id",
+    "verification-receipt.json.receipt_id",
     "agent-handoff.json",
     "agent-handoff.json.control.state",
     "verifier.json.control.state",
@@ -396,24 +421,28 @@
   "static_verdict_disclaimer": "This verdict covers deterministic static evidence only. Agents Shipgate did not execute the agent or prove runtime behavior, tool routing, credential enforcement, or safety.",
   "schemas": {
     "manifest": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/manifest-v0.1.json",
-    "report": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/report-schema.v0.33.json",
+    "report": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/report-schema.v0.34.json",
     "agent_result": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/agent-result-schema.v2.json",
     "agent_boundary_result": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/agent-boundary-result-schema.v1.json",
     "codex_boundary_result": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/codex-boundary-result-schema.v2.json",
-    "verifier": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verifier-schema.v0.4.json",
-    "verify_run": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verify-run-schema.v2.json",
-    "agent_handoff": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/agent-handoff-schema.v4.json",
-    "packet": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/packet-schema.v0.11.json",
+    "verifier": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verifier-schema.v0.5.json",
+    "verify_run": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verify-run-schema.v3.json",
+    "verification_plan": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verification-plan-schema.v1.json",
+    "verification_unit_result": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verification-unit-result-schema.v1.json",
+    "verification_artifact_manifest": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verification-artifact-manifest-schema.v1.json",
+    "verification_receipt": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/verification-receipt-schema.v1.json",
+    "agent_handoff": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/agent-handoff-schema.v5.json",
+    "packet": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/packet-schema.v0.12.json",
     "preflight": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/preflight-schema.v0.3.json",
     "capability_lock": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/capability-lock-schema.v0.6.json",
     "capability_lock_diff": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/capability-lock-diff-schema.v0.7.json",
     "governance_benchmark_catalog": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/governance-benchmark-catalog-schema.v0.2.json",
     "governance_benchmark_result": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/governance-benchmark-result-schema.v0.2.json",
     "feedback": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/feedback-schema.v0.1.json",
-    "attestation": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/attestation-schema.v0.4.json",
+    "attestation": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/attestation-schema.v0.5.json",
     "org_governance": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/org-governance-schema.v0.1.json",
-    "org_evidence_bundle": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/org-evidence-bundle-schema.v1.json",
-    "registry": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/registry-schema.v0.3.json",
+    "org_evidence_bundle": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/org-evidence-bundle-schema.v2.json",
+    "registry": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/registry-schema.v0.4.json",
     "host_grants_inventory": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-inventory-schema.v0.2.json",
     "host_grants_baseline": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-baseline-schema.v0.2.json",
     "host_grants_drift": "https://raw.githubusercontent.com/ThreeMoonsLab/agents-shipgate/main/docs/host-grants-drift-schema.v0.2.json",