fix(runner): attest upstream releases and bind ACPX uniformly for every harness (#18325)

## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - Native ACPX runs admit a provider only when its saved profile and
`commandDigest` match the current profile exactly.
> - For Copilot, Grok and Pi, `commandDigest` hashed dozens of Paperclip
source files. Claude, Codex, Cursor and Antigravity hash only their
upstream release.
> - Any change to a bound source therefore advanced these profiles.
#18212 alone moved Copilot from v88 to v91 and Grok from v15 to v19.
Each bump reset in-flight sessions and added immutable identity fixtures
(about 160 on master).
> - #18237 added the provider pack `contractDigest`, which now guards
Runner source compatibility at the pack boundary.
> - This pull request changes the Copilot, Grok and Pi digests to
upstream release attestations, as the other providers already use.
> - It also binds the shared ACPX layer the same way for every ACPX
harness: the profile's `acpxVersion` and the pack `contractDigest`,
which now covers the Runner's ACPX patch.
> - The benefit is that Runner source changes no longer reset these
sessions or need new profile versions and fixtures.

## Linked Issues or Issue Description

Refs #18237, #18212, #17972.

**What happened?**

A Runner change that touched a bound source file changed the Copilot,
Grok or Pi `commandDigest`. The author had to advance the profile
version, regenerate an identity fixture and keep every old fixture. On
deploy, saved sessions for that provider failed the exact admission
check and started fresh.

**Expected behavior**

A provider's `commandDigest` changes only when its upstream release
changes: an upstream version, a platform closure, the ACPX patch or the
Grok launcher. Runner source compatibility is the job of the pack
`contractDigest`.

**Steps to reproduce**

1. On master, change a comment in `src/drivers/acpx/runtime-host.ts`.
2. Run `node packages/paperclip-runner/scripts/grok-profile-identity.mjs
--check`.
3. The check fails. The Grok profile must advance, and the next deploy
resets Grok sessions.

## What Changed

- Add `packages/paperclip-runner/scripts/acpx-release-attestations.mjs`.
It computes the release attestation for each provider:
- Copilot and Pi: a canonical-JSON hash of the profile version, upstream
package versions and the platform closure pins (Pi also binds its Node
version).
- Grok: the SHA-256 of `launcher.cjs`. Admission already hashes these
bytes.
- The attestation binds no Paperclip source, shared ACPX layer, absolute
path, pack manifest digest or install layout.
- Bind the shared ACPX layer once for every ACPX harness (Claude, Codex,
Copilot, Cursor, Grok, Pi, Antigravity):
- Add the Runner's ACPX patch (`patches/acpx@<runner acpx
version>.patch`) to the pack `contractDigest`. A patch change now
retires older image packs for every harness. Other packages' ACPX
patches are not read. A build context without the Runner's patch fails.
- Remove the ACPX patch hash from Cursor's release declaration
(`cursor-contract.json`) and advance Cursor once to profile 17. Copilot,
Pi and Cursor no longer bind ACPX in their own digests, like Claude,
Codex, Grok and Antigravity.
- Saved inputs for every harness already must match the current
`acpxVersion`.
  - Claude and Codex digests do not change.
- `generate-acpx-profiles.mjs` writes these digests to
`acpx-profiles.json`. `check:acpx-profiles` refuses a stale digest.
- Move the Copilot closure pins to `copilot-closure-pins.ts`, so that
the generator can import them. `copilot-installation.ts` re-exports
them.
- Advance each profile once and then freeze it: Copilot 92, Grok 20, Pi
37. A version change at the switch keeps the rollout on the same path as
every earlier profile bump.
- Replace the historical version lists in `profile-compatibility.ts`
with a range. Every revision from 1 through the current one decodes.
Claude and Codex still decode revisions 1 through 5. Launch and recovery
admission still require the exact current profile and digest.
- Delete:
- `scripts/copilot-profile-identity.mjs`,
`scripts/grok-profile-identity.mjs` and its test
  - the Grok launcher source stamp
- 159 Copilot, Grok and Pi identity fixtures, including three
unreferenced `copilot-mainline-v*` fixtures. The Cursor fixtures stay.
- Rewrite the affected tests as behaviour checks:
- Each provider admits only the exact current profile. Every earlier
version decodes and is refused at admission.
- The last source-bound digests, and a changed digest at the current
version, are refused by recovery and by the backend factory.
- The Rust Pi descriptor test uses the generated profile instead of
fixtures.
- New `acpx-release-attestations.test.mjs`: a relocated copy of the
inputs gives the same digests, each upstream input changes only its own
providers, and the generator refreshes and checks the manifest.
- Remove the fixture exceptions from `.dockerignore`. Add the
attestation script and the generator to the Daytona image content
inputs.
- Update the Pi install probe and the Rust integration constant for the
new Pi digest.
- Update the docs to describe the current attestation model:
`doc/grok-native-runner.md`, `doc/RUNNER-INTEGRATION-PLAYBOOK.md`,
`doc/observability.md`,
`packages/paperclip-runner/docs/durable-recovery.md`, and the Copilot,
Pi and rich ACP architecture reports. Each report now opens with the
current profile identity; earlier source-bound profiles remain as dated
chronology. No doc references a deleted file.

## Verification

- In `packages/paperclip-runner`:
- `node --test scripts/acpx-release-attestations.test.mjs
scripts/contracts/contract-fingerprints.test.mjs`: 19 tests pass,
including a Runner ACPX patch edit that changes the contract digest,
other patch edits (including `acpx@0.12.0` for `adapter-utils`) that do
not, and a build context without the patch that fails.
  - `node scripts/generate-acpx-profiles.mjs --check` passes.
- `vitest run src/drivers/acpx src/backends src/contracts`: 1647 tests
pass, 9 skipped.
  - `tsc -p tsconfig.json --noEmit` passes.
- From the repository root, `vitest run --config
tests/runner-e2e/vitest.config.ts
tests/runner-e2e/daytona-image.test.ts`: 11 tests pass.
- In `server`, the 8 test files that use ACPX profiles, pack digests or
`contractDigest`: 1617 tests pass.
- Not run locally: the Rust tests and `cargo fmt`, because this machine
has no Rust toolchain. CI runs them.
- Before this change, a synthetic upgrade check built two Runner
revisions that differ only in shared source. A Claude checkpoint saved
under the first revision rebinds under the second, and a changed Claude
`commandDigest` starts fresh. This confirms that the provider JSON has
no other build-dependent field.

## Risks

- **One reset at rollout.** The Copilot, Grok, Pi and Cursor digests and
versions change once. Saved sessions for these providers start fresh on
their next run, as after any earlier profile bump. After this change,
Runner source changes no longer cause this reset.
- **Lost "source changed, so requalify" signal.** The old digest forced
a new profile version when bound source changed. Nothing enforced
requalification: Copilot was last qualified at v47. Pack-boundary
contract changes are now caught by the pack `contractDigest`.
- **Image packs are retired once for every provider.** Adding the ACPX
patch changes the pack `contractDigest`, so the controller uploads its
bundled pack (about 16 s per remote start) until images are refreshed.
Claude and Codex sessions are not reset: their digests and versions do
not change.
- **Grok launcher and closure pins.** The Grok digest covers only the
launcher bytes. Grok's runtime version is still checked separately at
admission, as before.
- **Grok digest equals early Grok profiles.** The launcher bytes have
not changed since profile 1, so the new Grok digest equals the published
profile 1 digest. The profile version still separates them: launch,
recovery and the backend factory require profile 20. An image pack from
that period has no `contractDigest`, so the pack gate refuses it.
`remote-provider-pack-verification.test.ts` now covers this case.
- **Docker context checks** run `generate-acpx-profiles.mjs --check`,
which now imports `.ts` pin files through Node type stripping.
`materialize-pi-distribution.mjs` already relies on this on Node 24.

## Model Used

- Claude Opus 5.5 (`claude-opus-5-5`) in Claude Code, with tool use
(shell, file edits, local test runs).

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

.dockerignore

@@ -36,18 +36,6 @@ packages/paperclip-runner/scripts/*-smoke.mjs
 # on master failed its drift check — .github/docker-context-checks.Dockerfile
 # now guards this in PR CI.
 !packages/paperclip-runner/generated/**
-# ACPX generation verifies these immutable release attestations as build inputs.
-# Keep current declarations and historical identities while excluding other development fixtures.
-!packages/paperclip-runner/test
-packages/paperclip-runner/test/**
-!packages/paperclip-runner/test/fixtures
-packages/paperclip-runner/test/fixtures/**
-!packages/paperclip-runner/test/fixtures/*-profile-v*-identity.json
-!packages/paperclip-runner/test-fixtures
-packages/paperclip-runner/test-fixtures/**
-!packages/paperclip-runner/test-fixtures/pi-acp
-packages/paperclip-runner/test-fixtures/pi-acp/**
-!packages/paperclip-runner/test-fixtures/pi-acp/profile-v*-identity.json
 !packages/paperclip-runner/docs/capability-contract.md
 # check:runner-workflow-traceability access()es every regression test the
 # stress-traceability spec names — those are src/**/*.test.ts files, so
@@ -57,8 +45,6 @@ packages/paperclip-runner/test-fixtures/pi-acp/**
 
 packages/grok-acp/bin
 
-# The Copilot build-time identity gate reads these sanitized source declarations.
-# Grok's source identity is also an input to the image profile drift check.
 # Images build their pinned Copilot assets instead of copying host binaries.
 /packages/paperclip-runner/provider-assets/
 /server/provider-assets/

doc/DEVELOPING.md

@@ -2460,7 +2460,8 @@ The Runner's `src/live/provider-pack-contract.json` declares interface revisions
 bump only the affected interface when its runner/pack contract breaks. Image
 packs must also match the bundled pack's computed `contractDigest`
 (`scripts/contracts/contract-fingerprints.mjs`, over the `protocol/` and
-`generated/` JSON contracts and Rust shapes), so an unbumped contract change
+`generated/` JSON contracts, Rust shapes and the Runner's ACPX patch), so an
+unbumped contract or ACPX patch change
 still retires older image packs. Declare new runner/pack contracts in a schema
 and generate their TypeScript, so the digest covers them. Qualify
 and seal packs at image publication. The fast path requires root-owned,

doc/RUNNER-INTEGRATION-PLAYBOOK.md

@@ -346,9 +346,13 @@ admission override must never become the production installation recipe.
 
 Pass the actual registered profile through every execution-input parser, not only
 the runtime registry. Derive version types from one declaration so a new profile
-cannot be admitted by one layer and rejected by another. Generators must preserve
-historical identity fixtures; creating today's profile must not rewrite yesterday's
-digest. Also check generated catalogs against their authoring source.
+cannot be admitted by one layer and rejected by another. A provider's
+`commandDigest` attests only its own upstream release: upstream versions, platform
+closure pins and any launcher bytes. Never bind Paperclip source, the shared ACPX
+version or patch, absolute paths or the pack layout into it. Every harness gets
+the ACPX layer the same way: the profile's `acpxVersion` and the provider pack's
+`contractDigest`, which also covers the Runner's ACPX patch and Runner source
+compatibility. Also check generated catalogs against their authoring source.
 
 ### 6.3 Qualify the ordinary setup path as its own integration
 
@@ -680,7 +684,8 @@ Remote packaging has both a worker and a controller side. Verify that the normal
 controller package can locate the correct platform companion and provider-pack
 manifest using production resolution, without extracting it manually from a
 qualification image. Docker copy/include lists must include new declarations,
-patches, and the **active** identity fixture. Bind the manifest to the directory
+patches, and the release attestation inputs that `generate:acpx-profiles` reads.
+Bind the manifest to the directory
 the loader actually consumes; a valid manifest in another directory is not proof.
 
 For remote execution, build on an appropriate host, record an immutable OCI

doc/architecture/runner-copilot-capabilities.md

@@ -1,39 +1,22 @@
 # Copilot 1.0.88 rich ACP capability audit
 
-Current source declaration (2026-10-26): **Copilot profile v61** binds controller
-journal retirement and the historical profile decoder. Its digest is
-`sha256:956276ebee59f880249fa6955adc224af9ca7b6a9da59bcc5da4a8667550c5b3`.
-The v60 declaration remains unchanged and readable as history. This source
-identity update changes no Copilot executable, arguments, permission policy,
-tool receipts, or qualification flags. Offline compatibility checks supply no
-new live qualification; prior live outcomes retain their original identities.
+## Current profile identity
 
-Historical source declaration (2026-10-26): **Copilot profile v60** binds the shared
-sources that carry Codex's explicit hosted-search restriction. Its digest is
-`sha256:ca3c2b38ed5f6e25cf1c96c1f73781a86cc90c1c0add93f64716c66f28b3f3aa`.
-The v59 declaration remains unchanged and readable as history. Exact-current
-launch admission still applies. The Copilot executable, arguments, permissions,
-receipts, and qualification flags are unchanged. Copilot authentication probes
-do not carry the Codex-only setting. Offline compatibility checks do not supply
-new live qualification; prior live outcomes remain attached to their original
-source identities.
+Copilot runs as **profile 92** on `@github/copilot` 1.0.88. Its `commandDigest`
+attests the upstream release: the package version and the complete patched
+distribution closure for each qualified platform. It does not bind Paperclip
+source or the shared ACPX layer. Every ACPX harness binds the shared ACPX layer the same way: saved inputs must
+match the current ACPX version, and the provider pack's `contractDigest` binds
+the Runner's ACPX patch with the other Runner contracts. `generate:acpx-profiles` writes the digest to `acpx-profiles.json`,
+and `check:acpx-profiles` refuses drift. Launch and recovery admission require
+the exact current profile and digest. Saved inputs with an earlier profile
+version still decode, so recovery can refuse them.
 
-Historical integration (2026-10-17): **Copilot profile v21 remained pending** with
-digest `sha256:1dad3d26d91e66c6f911dbfa43e7963f36c0bbf0d7709f4bbb568029a8b4b46a`.
-It binds the shared provider completion contract, direct driver, production sidecar, and controller
-continuation resolver. Installation verification requires this generated v21
-identity. The permission policy, executable closure, and qualification gate are
-unchanged. This source declaration supplies no new paid qualification.
+## Profile chronology
 
-Historical integration (2026-10-15): **Copilot profile v20 remained pending** with
-digest `sha256:7fa710c697582b1b4d85cdf833178b1940656cb6efb44ac4d356b2f27e6b3d4b`.
-Its immutable declaration remains available for decoding historical checkpoints;
-it is no longer the current launch identity.
-
-Both profile v19 identities remain historical: upstream credential-observer
-`sha256:38abf359adeef43f1f19230245c6e2051c55fdd79571882ef6f00b7cb2958d93` and Muse
-`sha256:2fec061f29f9cac4f6aa70f9329e1b27ce0c9cf4825030fdbb78979ced9bc201`.
-Neither is the current launch identity.
+Until 2026-10-30, these digests hashed Paperclip source files, so each change
+to a bound file advanced the profile version. The dated sections below record
+that period; their profile versions and digests are not current.
 
 Historical integration (2026-10-10): **Copilot profile v18 remained pending** with
 digest `sha256:5e79c2b1a42b98a545bafe9e93f8c6b6c423bec1c18dc1f0a3cf48477b757389`.

doc/architecture/runner-cursor-capabilities.md

@@ -1,6 +1,23 @@
 # Cursor ACP capability inventory
 
-Current source (2026-10-06): **Cursor profile v14 combines the model-selection correction with mainline ACP resource-not-found handling**.
+## Current profile identity
+
+Cursor runs as **profile 17**. Its `commandDigest` attests the release
+declaration in `cursor-contract.json`: the vendor build, the native patch and
+the admitted mode, question, accounting and model-selection behaviour. It does
+not bind the shared ACPX layer. Every ACPX harness binds the shared ACPX layer the same way: saved inputs must
+match the current ACPX version, and the provider pack's `contractDigest` binds
+the Runner's ACPX patch with the other Runner contracts. Launch and recovery
+admission require the exact current profile and digest. Saved inputs with an
+earlier profile version still decode, so recovery can refuse them.
+
+## Profile chronology
+
+Until 2026-10-30, Cursor's release declaration also bound the ACPX patch. The
+dated sections below record earlier profiles; their versions and digests are not
+current.
+
+Historical source (2026-10-06): **Cursor profile v14 combines the model-selection correction with mainline ACP resource-not-found handling**.
 The bundled ACPX runtime forwards unlisted model IDs unchanged, verifies model
 selection responses, and reapplies a selected model when a loaded session reports
 another model. Its 14 package tests exercise startup and reconnect through a real

doc/architecture/runner-pi-capabilities.md

@@ -1,18 +1,24 @@
 # Pi rich ACP runtime
 
-## Current source integration — 2026-10-19
+## Current profile identity
 
-The composed Claude source declares **Pi profile 27**
-(`sha256:b1b75a1ae3ac498eb07b95b96bebf4da86227b83d09276076dd5c222e3964dba`)
-and **Copilot profile 23**, still pending qualification
-(`sha256:6ca1e2c9efa23887ba6f08d89980c91d13114640ac8a1a79f00f27aa8cd39d63`).
-These identities bind the shared Claude effort and lifecycle changes plus
-master's OpenRouter attribution. Copilot's shared bridge binding also includes
-Claude-only essential tool metadata; its own tool catalog is unchanged. Provider executable closures, model/effort
-options and qualification boundaries are unchanged. Current package and source
-checks remain separate from retained provider execution results, which keep
-their literal profile/source identities. Earlier immutable fixtures remain
-historical; they are not accepted as the current source identity.
+Pi runs as **profile 37** on `pi-acp` 0.0.33 and
+`@earendil-works/pi-coding-agent` 1.0.0. Its `commandDigest` attests the
+upstream release: the package versions, the Node version and the complete
+distribution closure for each qualified platform. The closure includes the
+patched wrapper, the runtime helper and the Paperclip extension, so a change to
+those files changes the closure pins and the digest. Other Paperclip source does
+not. Every ACPX harness binds the shared ACPX layer the same way: saved inputs must
+match the current ACPX version, and the provider pack's `contractDigest` binds
+the Runner's ACPX patch with the other Runner contracts. Launch and recovery admission require the exact current profile
+and digest. Saved inputs with an earlier profile version still decode, so
+recovery can refuse them.
+
+## Profile chronology
+
+Until 2026-10-30, these digests hashed Paperclip source files, so each change
+to a bound file advanced the profile version. The dated sections below record
+that period; their profile versions and digests are not current.
 
 ## Historical source integration — 2026-10-12
 
@@ -311,7 +317,7 @@ progress but cannot become a final answer. Missing or conflicting boundaries
 fail closed. Loaded history has a separate display-only identity. Retry,
 compaction, extension and command notices retain bounded, redacted severity and
 metadata on `paperclip/pi_notice`; they are never assistant final content.
-The [v8 declaration](../../packages/paperclip-runner/test-fixtures/pi-acp/profile-v8-identity.json)
+The v8 declaration
 also pins the shared ACPX parser and Pi host projections. Previous sessions must
 be reopened. No paid profile-v8 qualification has run.
 
@@ -356,7 +362,7 @@ was aggregated into the final item. Three runs settled across these two cells,
 all owned processes exited, and five later cells did not launch. The native
 message attribution defect is repaired in v8; authenticated v8 qualification
 remains pending. The canonical
-[v7 declaration](../../packages/paperclip-runner/test-fixtures/pi-acp/profile-v7-identity.json)
+v7 declaration
 binds the exact wrapper, helper, extension and three target closures.
 
 Credential-free regressions run the pinned SDK with synthetic model streams to

doc/architecture/runner-rich-acp-capabilities.md

@@ -1,18 +1,27 @@
 # Rich ACP integration and qualification report
 
-## Current source integration — 2026-10-19
+## Current profile identity
 
-The composed Claude source declares **Pi profile 27**
-(`sha256:b1b75a1ae3ac498eb07b95b96bebf4da86227b83d09276076dd5c222e3964dba`)
-and **Copilot profile 23**, still pending qualification
-(`sha256:6ca1e2c9efa23887ba6f08d89980c91d13114640ac8a1a79f00f27aa8cd39d63`).
-These identities bind the shared Claude effort and lifecycle changes plus
-master's OpenRouter attribution. Copilot's shared bridge binding also includes
-Claude-only essential tool metadata; its own tool catalog is unchanged. Provider executable closures, model/effort
-options and qualification boundaries are unchanged. Current package and source
-checks remain separate from retained provider execution results, which keep
-their literal profile/source identities. Earlier immutable fixtures remain
-historical; they are not accepted as the current source identity.
+Every ACPX provider's `commandDigest` attests only its own upstream release.
+Copilot (profile 92), Grok (20) and Pi (37) bind their upstream package
+versions, their platform closure pins and, for Grok, the launcher bytes.
+`scripts/acpx-release-attestations.mjs` computes these digests,
+`generate:acpx-profiles` writes them to `acpx-profiles.json`, and
+`check:acpx-profiles` refuses drift. Cursor (17) attests the release declaration
+in `cursor-contract.json`; Claude, Codex and Antigravity attest their upstream
+packages or distributions. Runner source changes do not change any of them.
+Every ACPX harness binds the shared ACPX layer the same way: saved inputs must
+match the current ACPX version, and the provider pack's `contractDigest` binds
+the Runner's ACPX patch with the other Runner contracts. Launch
+and recovery admission require the exact current profile and digest. Saved
+inputs with an earlier profile version still decode, so recovery can refuse
+them. A profile identity is not evidence of live qualification.
+
+## Profile chronology
+
+Until 2026-10-30, these digests hashed Paperclip source files, so each change
+to a bound file advanced the profile version. The dated sections below record
+that period; their profile versions and digests are not current.
 
 ## Historical source integration — 2026-10-14
 
@@ -25,13 +34,12 @@ profile/source identity. Copilot remains pending at profile 19. Current package
 and source controls are separate from those retained provider execution results.
 
 The actual Codex squash `adb69e8f09852c772d9901ae270e5b2d66e39c77`
-already owns Copilot profile 18 for the Grok descriptor schema. Its immutable
-fixture is retained. The combined Claude effort sources use profile 19
+already owns Copilot profile 18 for the Grok descriptor schema. The combined
+Claude effort sources use profile 19
 (`sha256:a4c7e955df18bf2448224ecce2120b43ede8054fe00e7b33b4044b8bd284b321`),
 with executable, permission policy and pending qualification unchanged. The
-prior unmerged Claude profile-18 attestation is retained separately as
-`copilot-profile-v18-claude-qualification-identity.json`; earlier evidence keeps
-its literal source. Pi profile 25 and its source digest remain unchanged by
+prior unmerged Claude profile-18 attestation was recorded separately; earlier
+evidence keeps its literal source. Pi profile 25 and its source digest remain unchanged by
 this reconciliation. Existing settings and effort/session admission still need
 final packaged and real-provider qualification on the composed Claude source.
 

doc/grok-native-runner.md

@@ -67,19 +67,15 @@ its native runtime identity is `native:grok` version 1.0.13. The historical
 `agentServerPackage`/`agentRuntimePackage` wire fields carry these identities,
 not npm dependencies. Existing npm-backed ACP bridges retain their package pins.
 
-Grok launch profile 7 binds the native effort, search, credential, sidecar, and
-Runner admission source, including Rust backend descriptor writes. An older
-installed pack with the same ACPX interface version cannot satisfy this profile.
-The controller stages its current verified
-pack instead. A generated source-identity comment in the launcher preserves the
-existing command byte-digest check; no installation guard is relaxed.
-App source changes alone still permit reuse when the selected
-Grok profile matches. Historical profile versions remain decodable, but they do
-not authorize a fresh launch. After changing a bound source, advance the profile
-and run `node packages/paperclip-runner/scripts/grok-profile-identity.mjs`.
-The normal `check:acpx-profiles` build gate verifies this source identity.
-The generator refuses to replace an existing versioned identity with different
-source. Advance the version and retain the previous version's recovery decoder.
+Grok runs as launch profile 20. Its `commandDigest` attests the upstream
+release: the SHA-256 of `launcher.cjs`, which admission hashes before launch. It
+changes only when the launcher bytes change. Runner source compatibility is
+guarded at the pack boundary by the provider pack's `contractDigest`, so the
+controller reuses an installed pack only when that digest matches and stages its
+current verified pack otherwise. Earlier profile versions decode for recovery,
+but they do not authorize a fresh launch. After changing the launcher, run
+`pnpm --filter @paperclipai/paperclip-runner generate:acpx-profiles`; the
+`check:acpx-profiles` build gate refuses a stale digest.
 
 Provision Grok Build 1.0.13 at
 `/opt/paperclip/providers/grok/1.0.13/grok` in the selected execution environment.

doc/observability.md

@@ -2109,9 +2109,6 @@ rank optimizations, deploy a compatible source set and inspect actual collector
 exports for parentage, concurrent ownership, widths and closed failure spans.
 Unit tests do not establish ingestion or a latency improvement.
 
-The shared ACPX instrumentation advances Grok source profile 13 to 14 and
-Copilot 84 to 85. Historical identities remain unchanged and decodable. Provider
-packages, models and permission defaults are unchanged; Pi's bound declaration
-is unchanged. These are source attestations, not evidence of fresh live provider
-qualification. Re-run compatibility qualification for the new identities before
-rollout.
+The shared ACPX instrumentation does not change any provider profile identity:
+Copilot, Grok and Pi digests attest their upstream releases, not Runner source.
+Provider packages, models and permission defaults are unchanged.

docker/daytona-runner/README.md

@@ -107,8 +107,9 @@ runner/pack boundary change, and qualify the new pack before publishing it.
 Bumping a revision also retires every older image pack.
 The pack build also records a `contractDigest`, computed by
 `scripts/contracts/contract-fingerprints.mjs` from the JSON contracts under
-`protocol/` and `generated/` and from Rust serde shapes, payload keys, match
-literals and env keys, rather than from source bytes. An image pack is reused
+`protocol/` and `generated/`, from Rust serde shapes, payload keys, match
+literals and env keys, and from the Runner's ACPX patch, rather than from
+source bytes. An image pack is reused
 only when its digest equals the controller's bundled pack; comments and
 refactors leave it unchanged, so a mismatch means a contract changed and the
 controller uploads its bundled pack. Packs without a digest are not reused.

packages/paperclip-runner/acpx-profiles.json

@@ -15,39 +15,39 @@
       "qualificationStatus": "pending"
     },
     "grok": {
-      "agentProfileVersion": 19,
+      "agentProfileVersion": 20,
       "agentServerPackage": "builtin:grok-acp",
       "agentServerVersion": "1",
       "agentRuntimePackage": "native:grok",
       "agentRuntimeVersion": "1.0.13",
-      "commandDigest": "sha256:5205c2197b94cfbd3e62fbeea027f2e80d092f736ca52656dda2f7044ba9a5ca",
+      "commandDigest": "sha256:f0b698395a3704ed2ffaf84ea19bdb20c36c8a0a70b7c629c7b6ffe144e59e55",
       "requiresProviderPolicy": false
     },
     "pi": {
-      "agentProfileVersion": 36,
+      "agentProfileVersion": 37,
       "agentServerPackage": "pi-acp",
       "agentServerVersion": "0.0.33",
       "agentRuntimePackage": "@earendil-works/pi-coding-agent",
       "agentRuntimeVersion": "1.0.0",
-      "commandDigest": "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc",
+      "commandDigest": "sha256:42e186b921f36accf3087cf64986a88346dcdb0bdf78c2ef44a2c4f8abd3453a",
       "requiresProviderPolicy": true
     },
     "cursor": {
-      "agentProfileVersion": 16,
+      "agentProfileVersion": 17,
       "agentServerPackage": "cursor-agent",
       "agentServerVersion": "2026.09.26-dd393fe",
       "agentRuntimePackage": null,
       "agentRuntimeVersion": null,
-      "commandDigest": "sha256:759e7415fea8ed2b6b0e6f362b57652b8768835f9d1fdae4a94c1b5eb3669301",
+      "commandDigest": "sha256:c2e39f931fdb89eb226ddee17bdcd16ad14c80fe4d311a41df89f2947d72103d",
       "requiresProviderPolicy": true
     },
     "copilot": {
-      "agentProfileVersion": 91,
+      "agentProfileVersion": 92,
       "agentServerPackage": "@github/copilot",
       "agentServerVersion": "1.0.88",
       "agentRuntimePackage": null,
       "agentRuntimeVersion": null,
-      "commandDigest": "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9",
+      "commandDigest": "sha256:4ec9c9d399e0f97d3addd9ac3333a69588a8103d5e534e206c02604432d89f9b",
       "requiresProviderPolicy": true
     },
     "claude": {

packages/paperclip-runner/cursor-contract.json

@@ -1,11 +1,10 @@
 {
   "schema": "paperclip.cursor.production-contract.v1",
-  "profileVersion": 16,
+  "profileVersion": 17,
   "sourceSnapshot": "22c78242a4e0c2369fecf0c2dc4e7600fbad6706",
   "base": "dd868ed125cd709506dd9b29fca640a44d580501",
   "vendor": "2026.09.26-dd393fe",
   "nativePatch": "paperclip-cursor-usage-v4",
-  "acpxPatchSha256": "1e7dae8c83bf8620f53f2bea13c175eeff95e7e955783f6f529bb1dcbdcdb6d2",
   "publicSetup": "paperclipai runtime setup cursor",
   "assets": "public-server-and-provider-pack",
   "modes": [
@@ -19,5 +18,5 @@
   "planAcceptance": "successful-run-open-task-explicit-continuation",
   "otherProviders": "mainline-gated",
   "modelSelection": "explicit-provider-verified-startup-and-reconnect",
-  "commandDigest": "sha256:759e7415fea8ed2b6b0e6f362b57652b8768835f9d1fdae4a94c1b5eb3669301"
+  "commandDigest": "sha256:c2e39f931fdb89eb226ddee17bdcd16ad14c80fe4d311a41df89f2947d72103d"
 }

packages/paperclip-runner/docs/durable-recovery.md

@@ -70,15 +70,20 @@ a scripted harness, removes the controller's launch files, then recovers the
 same process and provider session and completes another turn. This exercises the
 real transport; it does not qualify a hosted OpenCode or ACPX deployment.
 
-## Source-bound profile history
+## Profile identity
 
-Copilot profile v68 binds the merged hot-upgrade and current master transport.
-Published v66 and the earlier hot-upgrade v67 identity remain byte-for-byte
-historical records. The distinct development v66 identity is retained under
-`copilot-profile-v66-hot-upgrade-candidate-historical-identity.json`; it does not
-replace the published v66 fixture. Decoding historical versions does not grant
-fresh-launch permission. Installation still requires the exact current profile,
-package and digest. These records do not establish hosted harness qualification.
+Every ACPX provider's `commandDigest` attests only its own upstream release.
+For Copilot (profile 92), Grok (20) and Pi (37) it binds the upstream package
+versions, the platform closure pins and, for Grok, the launcher bytes.
+`scripts/acpx-release-attestations.mjs` computes these digests and
+`generate:acpx-profiles` writes them. Runner source changes do not change them.
+Every ACPX harness binds the shared ACPX layer the same way: saved inputs must
+match the current ACPX version, and the provider pack's `contractDigest` binds
+the Runner's ACPX patch with the other Runner contracts.
+Saved inputs with any profile version from 1 through the current one decode, so
+they reach recovery. Launch and recovery admission require the exact current
+profile and digest, and refuse the rest. A profile identity does not establish
+hosted harness qualification.
 
 ## External controller checkpoints
 

packages/paperclip-runner/package.json

@@ -85,7 +85,7 @@
     "typecheck:browser": "tsc -p tsconfig.browser.json --noEmit",
     "test": "pnpm run test:typescript && pnpm run test:rust",
     "test:typescript": "pnpm run test:typescript:prep && vitest run",
-    "test:typescript:prep": "pnpm run ensure:eval-build-deps && pnpm run build:rust && node ../../scripts/ci-profile/node-test.mjs test/protocol-contract.test.mjs test/acpx-sidecar-contract.test.mjs test/acpx-codex-package-contract.test.mjs test/acpx-model-selection-package-contract.test.mjs test/acpx-message-boundaries-package-contract.test.mjs test/acpx-rich-extensions-package-contract.test.mjs test/acpx-pi-receipt-package-contract.test.mjs test/acpx-response-delivery-package-contract.test.mjs scripts/candidate-provider-pack.test.mjs scripts/materialize-pi-distribution.test.mjs scripts/cursor-provisioner-layout.test.mjs scripts/release-provider-pack.test.mjs scripts/grok-profile-identity.test.mjs scripts/provider-pack-runtime-tree.test.mjs scripts/aws-agentcore-provisioning.test.mjs scripts/build-verified-provider-entrypoints.test.mjs scripts/local-provider-smoke-environment.test.mjs scripts/materialize-opencode-binary.test.mjs scripts/installed-package-pack.test.mjs scripts/runner-runtime-dependency-roots.test.mjs scripts/runner-package-executable.test.mjs scripts/stage-runner-binary.test.mjs scripts/build-inputs.test.mjs scripts/contracts/contract-fingerprints.test.mjs scripts/provider-pack-executable-shims.test.mjs scripts/controlled-evals/controller.test.mjs scripts/controlled-evals/portable.test.mjs && node --test scripts/build-copilot-distribution.test.mjs scripts/copilot-inner-distribution.test.mjs scripts/copilot-smoke-resources.test.mjs scripts/discover-copilot-acp.test.mjs scripts/materialize-copilot-binary.test.mjs scripts/install-copilot-assets.test.mjs scripts/probe-copilot-acp.test.mjs scripts/qualify-copilot-acp.test.mjs test/acpx-message-boundaries-package-contract.test.mjs",
+    "test:typescript:prep": "pnpm run ensure:eval-build-deps && pnpm run build:rust && node ../../scripts/ci-profile/node-test.mjs test/protocol-contract.test.mjs test/acpx-sidecar-contract.test.mjs test/acpx-codex-package-contract.test.mjs test/acpx-model-selection-package-contract.test.mjs test/acpx-message-boundaries-package-contract.test.mjs test/acpx-rich-extensions-package-contract.test.mjs test/acpx-pi-receipt-package-contract.test.mjs test/acpx-response-delivery-package-contract.test.mjs scripts/candidate-provider-pack.test.mjs scripts/materialize-pi-distribution.test.mjs scripts/cursor-provisioner-layout.test.mjs scripts/release-provider-pack.test.mjs scripts/acpx-release-attestations.test.mjs scripts/provider-pack-runtime-tree.test.mjs scripts/aws-agentcore-provisioning.test.mjs scripts/build-verified-provider-entrypoints.test.mjs scripts/local-provider-smoke-environment.test.mjs scripts/materialize-opencode-binary.test.mjs scripts/installed-package-pack.test.mjs scripts/runner-runtime-dependency-roots.test.mjs scripts/runner-package-executable.test.mjs scripts/stage-runner-binary.test.mjs scripts/build-inputs.test.mjs scripts/contracts/contract-fingerprints.test.mjs scripts/provider-pack-executable-shims.test.mjs scripts/controlled-evals/controller.test.mjs scripts/controlled-evals/portable.test.mjs && node --test scripts/build-copilot-distribution.test.mjs scripts/copilot-inner-distribution.test.mjs scripts/copilot-smoke-resources.test.mjs scripts/discover-copilot-acp.test.mjs scripts/materialize-copilot-binary.test.mjs scripts/install-copilot-assets.test.mjs scripts/probe-copilot-acp.test.mjs scripts/qualify-copilot-acp.test.mjs test/acpx-message-boundaries-package-contract.test.mjs",
     "test:typescript:vitest": "node ./scripts/run-pr-vitest-lane.mjs",
     "test:rust": "cargo test --release --manifest-path runner/Cargo.toml --locked --workspace",
     "test:codex": "cargo test --manifest-path runner/Cargo.toml --locked -p paperclip-runner-core --test codex_provider",

packages/paperclip-runner/runner/crates/runner-core/src/acpx_provider_backend.rs

@@ -3349,11 +3349,10 @@ mod tests {
     }
 
     #[test]
-    fn pi_profile_matches_published_identity_and_rejects_prior_profiles() {
-        let published: Value = serde_json::from_str(include_str!(
-            "../../../../test-fixtures/pi-acp/profile-v36-identity.json"
-        ))
-        .unwrap();
+    fn pi_profile_admits_its_release_attestation_and_rejects_the_prior_digest() {
+        let current_digest = crate::generated_acpx_profiles::acpx_release_profile("pi")
+            .unwrap()
+            .command_digest;
         let mut value = descriptor("codex");
         value["agent"] = json!("pi");
         value["model"] = json!("openrouter/deepseek/deepseek-v4-flash-0731");
@@ -3363,45 +3362,15 @@ mod tests {
         value["agentRuntimeVersion"] = json!("1.0.0");
         value["piThinkingLevel"] = json!("low");
         value["providerPolicy"] = json!({"readOnly": true});
-        value["commandDigest"] = published["commandDigest"].clone();
+        value["commandDigest"] = json!(current_digest);
         let current: AcpxProviderDescriptor = serde_json::from_value(value.clone()).unwrap();
         current.validate(&context()).unwrap();
 
-        for prior in [
-            include_str!("../../../../test-fixtures/pi-acp/profile-v35-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v34-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v33-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v32-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v31-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v29-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v28-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v24-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v23-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v15-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v16-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v17-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v18-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v19-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v20-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v21-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v22-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v23-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v24-identity.json"),
-            include_str!(
-                "../../../../test-fixtures/pi-acp/profile-v24-claude-historical-identity.json"
-            ),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v25-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v26-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v27-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v28-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v29-identity.json"),
-            include_str!("../../../../test-fixtures/pi-acp/profile-v30-identity.json"),
-        ] {
-            let prior: Value = serde_json::from_str(prior).unwrap();
-            value["commandDigest"] = prior["commandDigest"].clone();
-            let rejected: AcpxProviderDescriptor = serde_json::from_value(value.clone()).unwrap();
-            assert!(rejected.validate(&context()).is_err());
-        }
+        // The last source-bound Pi identity is refused.
+        value["commandDigest"] =
+            json!("sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc");
+        let rejected: AcpxProviderDescriptor = serde_json::from_value(value).unwrap();
+        assert!(rejected.validate(&context()).is_err());
     }
 
     #[test]

packages/paperclip-runner/runner/crates/runner-core/src/generated_acpx_profiles.rs

@@ -31,7 +31,7 @@ pub(crate) fn acpx_release_profile(agent: &str) -> Option<AcpxReleaseProfile> {
             agent_runtime_package: Some("native:grok"),
             agent_runtime_version: Some("1.0.13"),
             command_digest:
-                "sha256:5205c2197b94cfbd3e62fbeea027f2e80d092f736ca52656dda2f7044ba9a5ca",
+                "sha256:f0b698395a3704ed2ffaf84ea19bdb20c36c8a0a70b7c629c7b6ffe144e59e55",
             requires_provider_policy: false,
             qualification_pending: false,
         },
@@ -41,7 +41,7 @@ pub(crate) fn acpx_release_profile(agent: &str) -> Option<AcpxReleaseProfile> {
             agent_runtime_package: Some("@earendil-works/pi-coding-agent"),
             agent_runtime_version: Some("1.0.0"),
             command_digest:
-                "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc",
+                "sha256:42e186b921f36accf3087cf64986a88346dcdb0bdf78c2ef44a2c4f8abd3453a",
             requires_provider_policy: true,
             qualification_pending: false,
         },
@@ -51,7 +51,7 @@ pub(crate) fn acpx_release_profile(agent: &str) -> Option<AcpxReleaseProfile> {
             agent_runtime_package: None,
             agent_runtime_version: None,
             command_digest:
-                "sha256:759e7415fea8ed2b6b0e6f362b57652b8768835f9d1fdae4a94c1b5eb3669301",
+                "sha256:c2e39f931fdb89eb226ddee17bdcd16ad14c80fe4d311a41df89f2947d72103d",
             requires_provider_policy: true,
             qualification_pending: false,
         },
@@ -61,7 +61,7 @@ pub(crate) fn acpx_release_profile(agent: &str) -> Option<AcpxReleaseProfile> {
             agent_runtime_package: None,
             agent_runtime_version: None,
             command_digest:
-                "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9",
+                "sha256:4ec9c9d399e0f97d3addd9ac3333a69588a8103d5e534e206c02604432d89f9b",
             requires_provider_policy: true,
             qualification_pending: false,
         },

packages/paperclip-runner/runner/crates/runner-core/tests/native_provider_backend.rs

@@ -17,7 +17,7 @@ use sha2::{Digest, Sha256};
 const CODEX_ACPX_DIGEST: &str =
     "sha256:443491f4e814501a5dc47347e4510e84faeec9c9382e2d4e53bfe69386d5aabc";
 const PI_ACPX_DIGEST: &str =
-    "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc";
+    "sha256:42e186b921f36accf3087cf64986a88346dcdb0bdf78c2ef44a2c4f8abd3453a";
 
 fn temporary_directory(label: &str) -> PathBuf {
     let nonce = SystemTime::now()

packages/paperclip-runner/scripts/acpx-release-attestations.mjs

@@ -0,0 +1,44 @@
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+
+// Copilot, Grok and Pi profile identities attest upstream releases, like Claude,
+// Codex, Cursor and Antigravity. They bind upstream versions and the bytes a
+// repackager copies verbatim: complete platform closures and Grok's launcher.
+// Never bind Paperclip source, the shared ACPX layer, absolute paths, the
+// provider-pack manifest digest or install layout. The profile's acpxVersion and
+// the pack contract digest bind ACPX and Runner source for every harness alike.
+export const ATTESTED_ACPX_AGENTS = Object.freeze(["copilot", "grok", "pi"]);
+
+const sha256 = bytes => createHash("sha256").update(bytes).digest("hex");
+const canonicalJson = value => value && typeof value === "object"
+  ? Array.isArray(value) ? `[${value.map(canonicalJson).join(",")}]`
+    : `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(",")}}`
+  : JSON.stringify(value);
+
+/** The release attestation for one provider, computed from a runner package root. */
+export async function acpxReleaseAttestation(agent, packageRoot) {
+  const manifest = JSON.parse(readFileSync(resolve(packageRoot, "acpx-profiles.json"), "utf8"));
+  const profile = manifest.profiles[agent];
+  if (!ATTESTED_ACPX_AGENTS.includes(agent) || !profile) throw new Error(`No upstream release attestation for ${agent}`);
+  // Grok keeps its physical byte-digest contract: admission hashes the launcher.
+  if (agent === "grok") {
+    return { commandDigest: `sha256:${sha256(readFileSync(resolve(packageRoot, "src/providers/grok/launcher.cjs")))}` };
+  }
+  // Key each import on content so a process never reuses pins from edited bytes.
+  const pins = async file => {
+    const path = resolve(packageRoot, "src/drivers/acpx", file);
+    return import(`${pathToFileURL(path).href}?sha256=${sha256(readFileSync(path))}`);
+  };
+  const declaration = {
+    schema: "paperclip.acpx-release-attestation.v1", agent,
+    agentProfileVersion: profile.agentProfileVersion,
+    agentServerPackage: profile.agentServerPackage, agentServerVersion: profile.agentServerVersion,
+    agentRuntimePackage: profile.agentRuntimePackage, agentRuntimeVersion: profile.agentRuntimeVersion,
+    ...agent === "copilot"
+      ? { closure: (await pins("copilot-closure-pins.ts")).COPILOT_CLOSURE_SHA256 }
+      : { nodeVersion: (await pins("pi-node-pins.ts")).PI_NODE_VERSION, closure: (await pins("pi-closure-pins.ts")).PI_DISTRIBUTION_CLOSURE_SHA256 },
+  };
+  return { commandDigest: `sha256:${sha256(canonicalJson(declaration))}`, declaration };
+}

packages/paperclip-runner/scripts/acpx-release-attestations.test.mjs

@@ -0,0 +1,103 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { copyFileSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import { acpxReleaseAttestation, ATTESTED_ACPX_AGENTS } from "./acpx-release-attestations.mjs";
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const manifest = JSON.parse(readFileSync(join(packageRoot, "acpx-profiles.json"), "utf8"));
+const packageFiles = [
+  "acpx-profiles.json", "package.json", "cursor-distributions.json", "cursor-contract.json", "antigravity-distributions.json",
+  "scripts/acpx-release-attestations.mjs", "scripts/generate-acpx-profiles.mjs",
+  "src/providers/grok/launcher.cjs", "src/drivers/acpx/copilot-closure-pins.ts",
+  "src/drivers/acpx/pi-closure-pins.ts", "src/drivers/acpx/pi-node-pins.ts",
+  "src/drivers/acpx/generated-profiles.ts", "runner/crates/runner-core/src/generated_acpx_profiles.rs",
+];
+
+/** A relocated runner package containing only the attestation and generator
+ * inputs. It has no repository patches: the shared ACPX layer is bound by the
+ * profile's acpxVersion and the pack contract digest, never by one provider. */
+function relocatedPackage(t) {
+  const repository = mkdtempSync(join(tmpdir(), "acpx-attestation-relocated-"));
+  t.after(() => rmSync(repository, { recursive: true, force: true }));
+  const relocated = join(repository, "nested/elsewhere/packages/paperclip-runner");
+  for (const path of packageFiles) {
+    mkdirSync(dirname(join(relocated, path)), { recursive: true });
+    copyFileSync(join(packageRoot, path), join(relocated, path));
+  }
+  return relocated;
+}
+const generate = (root, ...args) => spawnSync(process.execPath, [join(root, "scripts/generate-acpx-profiles.mjs"), ...args],
+  { cwd: root, env: { PATH: process.env.PATH }, encoding: "utf8", timeout: 20_000 });
+
+test("the manifest carries each provider's current release attestation", async () => {
+  for (const agent of ATTESTED_ACPX_AGENTS) {
+    assert.equal(manifest.profiles[agent].commandDigest, (await acpxReleaseAttestation(agent, packageRoot)).commandDigest, agent);
+  }
+});
+
+test("a relocated copy of the provider inputs computes the same attestations", async t => {
+  const relocated = relocatedPackage(t);
+  for (const agent of ATTESTED_ACPX_AGENTS) {
+    const here = await acpxReleaseAttestation(agent, packageRoot);
+    const there = await acpxReleaseAttestation(agent, relocated);
+    assert.equal(there.commandDigest, here.commandDigest, agent);
+    assert.doesNotMatch(JSON.stringify(there), new RegExp(`${packageRoot}|${relocated}|tmp`), `${agent} must not bind a location`);
+  }
+  const checked = generate(relocated, "--check");
+  assert.equal(checked.status, 0, checked.stderr);
+});
+
+test("the attestations bind no Paperclip source beyond the Grok launcher", async () => {
+  for (const agent of ["copilot", "pi"]) {
+    const { declaration } = await acpxReleaseAttestation(agent, packageRoot);
+    assert.deepEqual(Object.keys(declaration).filter(key => /source/iu.test(key)), [], agent);
+    assert.deepEqual(Object.keys(declaration.closure).sort(), ["darwin-arm64", "darwin-x64", "linux-x64"]);
+  }
+});
+
+for (const [name, agents, edit] of [
+  ["an upstream server version", ["copilot"], root => {
+    const path = join(root, "acpx-profiles.json"); const value = JSON.parse(readFileSync(path, "utf8"));
+    value.profiles.copilot.agentServerVersion = "9.9.9"; writeFileSync(path, JSON.stringify(value));
+  }],
+  ["a Copilot platform closure", ["copilot"], root => {
+    const path = join(root, "src/drivers/acpx/copilot-closure-pins.ts");
+    writeFileSync(path, readFileSync(path, "utf8").replace(/"linux-x64": "[a-f0-9]{64}"/u, `"linux-x64": "${"0".repeat(64)}"`));
+  }],
+  ["a Pi platform closure", ["pi"], root => {
+    const path = join(root, "src/drivers/acpx/pi-closure-pins.ts");
+    writeFileSync(path, readFileSync(path, "utf8").replace(/"linux-x64": "[a-f0-9]{64}"/u, `"linux-x64": "${"0".repeat(64)}"`));
+  }],
+  ["the Grok launcher bytes", ["grok"], root => {
+    const path = join(root, "src/providers/grok/launcher.cjs");
+    writeFileSync(path, `${readFileSync(path, "utf8")}\n// changed\n`);
+  }],
+]) test(`changing ${name} changes only the affected attestations`, async t => {
+  const relocated = relocatedPackage(t);
+  const before = Object.fromEntries(await Promise.all(ATTESTED_ACPX_AGENTS.map(async agent => [agent, (await acpxReleaseAttestation(agent, relocated)).commandDigest])));
+  edit(relocated);
+  for (const agent of ATTESTED_ACPX_AGENTS) {
+    const after = (await acpxReleaseAttestation(agent, relocated)).commandDigest;
+    if (agents.includes(agent)) assert.notEqual(after, before[agent], agent);
+    else assert.equal(after, before[agent], agent);
+  }
+});
+
+test("the generator refuses a stale attestation in check mode and refreshes it otherwise", async t => {
+  const relocated = relocatedPackage(t);
+  const launcher = join(relocated, "src/providers/grok/launcher.cjs");
+  writeFileSync(launcher, `${readFileSync(launcher, "utf8")}\n// changed\n`);
+  const stale = generate(relocated, "--check");
+  assert.notEqual(stale.status, 0);
+  assert.match(stale.stderr, /grok release attestation is stale/u);
+  const refreshed = generate(relocated);
+  assert.equal(refreshed.status, 0, refreshed.stderr);
+  const written = JSON.parse(readFileSync(join(relocated, "acpx-profiles.json"), "utf8"));
+  assert.equal(written.profiles.grok.commandDigest, (await acpxReleaseAttestation("grok", relocated)).commandDigest);
+  assert.equal(written.profiles.grok.agentProfileVersion, manifest.profiles.grok.agentProfileVersion);
+  assert.equal(generate(relocated, "--check").status, 0);
+});

packages/paperclip-runner/scripts/contracts/contract-fingerprints.mjs

@@ -28,6 +28,14 @@ export const CONTRACTS = [
   ] } },
   // Reserved and forwarded runtime env keys are const lists in Rust.
   { id: "configured-environment", probes: [{ kind: "rust-consts", path: `${RUST}/configured_environment.rs` }] },
+  // The Runner's ACPX patch changes the wire behaviour every ACPX harness
+  // shares, so it binds the pack once for all providers. Other packages may pin
+  // other ACPX versions; only the Runner's own version is read, and it must exist.
+  { id: "acpx-patch", expand: { dirs: ["patches"], suffix: ".patch", required: true, aggregate: true, probes: [{ kind: "bytes" }],
+    include: readFile => {
+      const version = JSON.parse(readFile(`${R}/package.json`) ?? "{}").dependencies?.acpx;
+      return path => path === `patches/acpx@${version}.patch`;
+    } } },
 ];
 
 /** Every hand-registered file a probe reads. */
@@ -54,8 +62,10 @@ export function fingerprintContracts(readFile, listDir) {
       continue;
     }
     if (contract.expand) {
-      const { dirs, suffix, exclude, idPrefix, aggregate, probes } = contract.expand;
-      const candidates = dirs.flatMap(listDir).filter(p => p.endsWith(suffix) && !exclude?.test(p));
+      const { dirs, suffix, include, required, exclude, idPrefix, aggregate, probes } = contract.expand;
+      const included = include ? include(readFile) : () => true;
+      const candidates = dirs.flatMap(listDir).filter(p => p.endsWith(suffix) && included(p) && !exclude?.test(p));
+      if (required && candidates.length === 0) throw new Error(`Registered contract source is missing: ${contract.id}`);
       const testOnly = suffix === ".rs" ? rustTestOnlyFiles(candidates, readFile) : new Set();
       const sources = candidates.filter(p => !testOnly.has(p)).sort();
       // Env keys are often passed through `const NAME: &str = "KEY"` defined in
@@ -137,6 +147,7 @@ function probe(spec, readFile) {
 function probeUncached(spec, source) {
   switch (spec.kind) {
     case "json": return canonicalJson(JSON.parse(source), spec);
+    case "bytes": return [`${spec.path.split("/").pop()}:${digest(source)}`];
     case "rust-consts": return rustConsts(source);
     case "rust-serde": return rustSerde(source, spec.typeShapes ?? {});
     case "rust-json-keys": return rustJsonKeys(source);

packages/paperclip-runner/scripts/contracts/contract-fingerprints.test.mjs

@@ -123,6 +123,18 @@ test("a parser that reads another key changes the digest even when other code re
   assert.equal(digestWith(path, s => s.replaceAll("verify_open_response", "verify_session_open_response")), baseline);
 });
 
+test("the Runner's ACPX patch binds the pack for every ACPX harness; other patches do not", () => {
+  const version = JSON.parse(sources.read(`${R}/package.json`)).dependencies.acpx;
+  const runnerPatch = `patches/acpx@${version}.patch`;
+  assert.notEqual(digestWith(runnerPatch, s => `${s}\n`), baseline);
+  const others = sources.list("patches").filter(path => path.endsWith(".patch") && path !== runnerPatch);
+  assert.ok(others.some(path => path.startsWith("patches/acpx@")), "another package pins another ACPX version");
+  for (const path of others) assert.equal(digestWith(path, s => `${s}\n`), baseline, path);
+  // A build context without the Runner's patch fails instead of dropping the contract.
+  assert.throws(() => packContractDigest(root, { read: p => p === runnerPatch ? null : sources.read(p),
+    list: dir => sources.list(dir).filter(p => p !== runnerPatch) }), /Registered contract source is missing: acpx-patch/);
+});
+
 test("recursive serde types resolve", () => {
   const path = `${RUST}/acpx_provider_checkpoint.rs`;
   const recursive = name => original => `${original}\n#[derive(Serialize)]\nstruct ${name} {\n    children: Vec<${name}>,\n}\n`;

packages/paperclip-runner/scripts/copilot-profile-identity.mjs

@@ -1,117 +0,0 @@
-// Regenerate after changing any bound implementation; live qualification must
-// restart whenever the resulting identity changes. Historical identities remain.
-import { createHash } from "node:crypto";
-import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { resolve, dirname } from "node:path";
-
-const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const fixture = resolve(root, "test/fixtures/copilot-profile-v91-identity.json");
-const historical = JSON.parse(readFileSync(resolve(root, "test/fixtures/copilot-profile-v12-identity.json"), "utf8"));
-const declaration = { ...historical.declaration, agentProfileVersion: 91 };
-delete declaration.permissionIdentitySourceSha256;
-const sources = {
-  displayEventSourceSha256: "src/drivers/acpx/copilot-events.ts",
-  displayProjectionSourceSha256: "src/drivers/acpx/copilot-extension-adapter.ts",
-  configuredEnvironmentSourceSha256: "src/configured-environment.ts",
-  configuredEnvironmentRustSourceSha256: "runner/crates/runner-core/src/configured_environment.rs",
-  profileActivitySourceSha256: "src/drivers/acpx/profile-activity.ts",
-  profileExtensionsSourceSha256: "src/drivers/acpx/profile-extensions.ts",
-  profileInstallationSourceSha256: "src/drivers/acpx/profile-installation.ts",
-  attachmentPolicySourceSha256: "runner/crates/runner-core/src/acpx_provider_capabilities.rs",
-  singleReadEvidenceSourceSha256: "src/drivers/acpx/single-read-evidence.ts",
-  nativeSessionRuntimeSourceSha256: "src/native-session-runtime.ts",
-  nativeRuntimeContextSourceSha256: "src/contracts/runtime-context.ts",
-  nativeRuntimeContextFieldsSourceSha256: "src/contracts/generated-runtime-context-contract.ts",
-  nativeRuntimePromptsSourceSha256: "src/contracts/runtime-context-prompts.ts",
-  nativeSessionContractSourceSha256: "src/contracts/native-session-backend.ts",
-  harnessSessionContractSourceSha256: "src/contracts/harness-driver.ts",
-  harnessBackendSourceSha256: "src/backends/harness-driver-backend.ts",
-  harnessSessionSourceSha256: "src/drivers/codex/codex-harness-session.ts",
-  transportContractSourceSha256: "src/drivers/codex/app-server-transport.ts",
-  nativeBackendSourceSha256: "src/backends/codex-native-backend.ts",
-  nativeBackendFactorySourceSha256: "src/backends/native-backend-factory.ts",
-  nativeInstructionsSourceSha256: "src/backends/runtime-context.ts",
-  providerLaunchSourceSha256: "src/live/runner-provider-launch.ts",
-  launchPreparationStoreSourceSha256: "src/live/runner-launch-preparation-store.ts",
-  runtimeRequestBridgeSourceSha256: "src/live/runnerd-codex-transport.ts",
-  runtimeRequestFacadeSourceSha256: "src/drivers/codex/codex-session-notifications.ts",
-  runtimeRequestNotificationSourceSha256: "src/drivers/codex/codex-thread-normalization.ts",
-  guardedInstallationSourceSha256: "src/drivers/acpx/installation-integrity.ts",
-  nativeExecutionSourceSha256: "src/contracts/native-execution.ts",
-  profileCompatibilitySourceSha256: "src/drivers/acpx/profile-compatibility.ts",
-  installationSourceSha256: "src/drivers/acpx/copilot-installation.ts",
-  assetOwnershipSourceSha256: "src/drivers/acpx/provider-assets-root.ts",
-  assetInstallerSourceSha256: "scripts/install-copilot-assets.mjs",
-  credentialBindingSourceSha256: "src/drivers/acpx/environment.ts",
-  admissionDiagnosticsSourceSha256: "src/drivers/acpx/admission-diagnostics.ts",
-  grokAdmissionSourceSha256: "src/drivers/acpx/grok-effort.ts",
-  sidecarErrorSourceSha256: "src/cli/acpx-sidecar-input.ts",
-  profileSourceSha256: "src/drivers/acpx/copilot-profile.ts",
-  metadataProbeSourceSha256: "src/drivers/copilot-metadata-probe.ts",
-  acpxPatchSha256: "../../patches/acpx@0.13.1.patch",
-  policySha256: "src/drivers/acpx/copilot-policy.ts",
-  distributionSourceSha256: "scripts/materialize-copilot-binary.mjs",
-  innerDistributionSourceSha256: "scripts/copilot-inner-distribution.mjs",
-  permissionContextSourceSha256: "src/drivers/acpx/copilot-permission-context.ts",
-  permissionAdapterSourceSha256: "src/drivers/acpx/acp-permission-adapter.ts",
-  permissionToolIdentitySourceSha256: "src/drivers/acpx/cursor-plan-tool-identity.ts",
-  permissionLocationsSourceSha256: "src/drivers/acpx/safe-locations.ts",
-  permissionRedactionSourceSha256: "src/semantic-tools/redaction.ts",
-  permissionClassifierSourceSha256: "src/drivers/acpx/generated-sidecar-contract.ts",
-  semanticReceiptSourceSha256: "src/drivers/semantic-tool-receipt.ts",
-  semanticBridgeSourceSha256: "src/drivers/runner-tool-bridge.ts",
-  toolEvidenceSourceSha256: "src/drivers/acpx/copilot-tool-evidence.ts",
-  semanticSidecarSourceSha256: "src/cli/acpx-runtime-sidecar.ts",
-  semanticContinuationSourceSha256: "src/drivers/completion-continuation.ts",
-  semanticDirectDriverSourceSha256: "src/drivers/acpx/codex-acpx-driver.ts",
-  semanticValidationSourceSha256: "src/protocol/replay-contract.ts",
-  semanticNormalizationSourceSha256: "src/protocol/result-normalization.ts",
-  semanticCompletionContractSourceSha256: "src/contracts/completion-result.ts",
-  semanticValidatorsSourceSha256: "src/protocol/generated/standalone-validators.ts",
-  semanticSchemaBundleSourceSha256: "src/protocol/generated/schema-bundle.ts",
-  semanticSidecarProtocolSourceSha256: "src/drivers/acpx/sidecar-protocol.ts",
-  preparedHarnessHomeSourceSha256: "src/drivers/preconfigured-home.ts",
-  runtimeHostSourceSha256: "src/drivers/acpx/runtime-host.ts",
-  runtimeAdapterSourceSha256: "src/drivers/acpx/codex-runtime-adapter.ts",
-  runtimeSandboxSourceSha256: "src/drivers/acpx/runtime-sandbox.ts",
-  cancellationSourceSha256: "src/drivers/acpx/turn-cancellation.ts",
-  agentFilesSourceSha256: "src/drivers/acpx/agent-files-binding.ts",
-  nativeDistributionSourceSha256: "src/drivers/acpx/native-distribution-integrity.ts",
-};
-for (const [field, path] of Object.entries(sources)) {
-  declaration[field] = createHash("sha256").update(readFileSync(resolve(root, path))).digest("hex");
-}
-const sorted = Object.fromEntries(Object.entries(declaration).sort(([a], [b]) => a.localeCompare(b)));
-const commandDigest = `sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`;
-const identity = `${JSON.stringify({ commandDigest, declaration }, null, 2)}\n`;
-if (!process.argv.includes("--check") && existsSync(fixture) && readFileSync(fixture, "utf8") !== identity) {
-  throw new Error("Copilot profile identity is immutable; advance its version before changing bound source");
-}
-// The shared manifest now generates both TypeScript and Rust admission. Update
-// only Copilot; other providers retain their upstream release attestations.
-const manifestPath = resolve(root, "acpx-profiles.json");
-const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-if (process.argv.includes("--check")) {
-  if (manifest.profiles.copilot.commandDigest !== commandDigest
-    || manifest.profiles.copilot.agentProfileVersion !== declaration.agentProfileVersion) {
-    throw new Error("Copilot identity is stale in acpx-profiles.json");
-  }
-} else {
-  manifest.profiles.copilot.commandDigest = commandDigest;
-  manifest.profiles.copilot.agentProfileVersion = declaration.agentProfileVersion;
-  writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
-}
-// The builder reads the active manifest; no duplicate digest literal is allowed.
-const distributionSource = readFileSync(resolve(root, "scripts/build-copilot-distribution.mjs"), "utf8");
-if (!distributionSource.includes("profiles.profiles.copilot.commandDigest")) {
-  throw new Error("Copilot distribution builder must use the active manifest identity");
-}
-// The shared generator validates this exact attestation before emitting admission.
-if (process.argv.includes("--check")) {
-  if (readFileSync(fixture, "utf8") !== identity) throw new Error("Copilot source identity is stale");
-} else writeFileSync(fixture, identity);
-execFileSync(process.execPath, [resolve(root, "scripts/generate-acpx-profiles.mjs"),
-  ...(process.argv.includes("--check") ? ["--check"] : [])], { stdio: "inherit" });
-console.log(commandDigest);

packages/paperclip-runner/scripts/generate-acpx-profiles.mjs

@@ -2,7 +2,7 @@ import assert from "node:assert/strict";
 import { createHash } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
-import { grokProfileIdentity, GROK_PROFILE_VERSION } from "./grok-profile-identity.mjs";
+import { acpxReleaseAttestation, ATTESTED_ACPX_AGENTS } from "./acpx-release-attestations.mjs";
 
 const root = new URL("../", import.meta.url);
 const readJson = async path => JSON.parse(await readFile(new URL(path, root), "utf8"));
@@ -13,11 +13,18 @@ const contract = await readJson("cursor-contract.json");
 const pkg = await readJson("package.json");
 assert.equal(manifest.schema, "paperclip.acpx-profiles.v1");
 assert.equal(manifest.acpxVersion, pkg.dependencies.acpx);
-const grokIdentity = grokProfileIdentity();
-assert.deepEqual(await readJson(`test/fixtures/grok-profile-v${GROK_PROFILE_VERSION}-identity.json`), grokIdentity, "Grok source identity is stale; advance the profile and regenerate its identity");
-assert.equal(manifest.profiles.grok.agentProfileVersion, GROK_PROFILE_VERSION);
-assert.equal(manifest.profiles.grok.commandDigest, grokIdentity.commandDigest);
-assert.equal(`sha256:${createHash("sha256").update(await readFile(new URL("src/providers/grok/launcher.cjs", root))).digest("hex")}`, grokIdentity.commandDigest, "Grok launcher source stamp is stale");
+// Copilot, Grok and Pi digests attest upstream releases; they change only when
+// an upstream version, a platform closure or the Grok launcher changes.
+const check = process.argv.includes("--check");
+let attestationsChanged = false;
+for (const agent of ATTESTED_ACPX_AGENTS) {
+  const { commandDigest } = await acpxReleaseAttestation(agent, fileURLToPath(root));
+  if (manifest.profiles[agent].commandDigest === commandDigest) continue;
+  assert.ok(!check, `${agent} release attestation is stale in acpx-profiles.json; run generate:acpx-profiles`);
+  manifest.profiles[agent].commandDigest = commandDigest;
+  attestationsChanged = true;
+}
+if (attestationsChanged) await writeFile(new URL("acpx-profiles.json", root), `${JSON.stringify(manifest, null, 2)}\n`);
 const entries = Object.entries(manifest.profiles);
 for (const [agent, profile] of entries) {
   assert.match(agent, /^[a-z]+$/);
@@ -46,17 +53,6 @@ assert.equal(manifest.profiles.antigravity.agentServerVersion, antigravityDistri
 assert.equal(manifest.profiles.antigravity.commandDigest, `sha256:${createHash("sha256").update(canonicalJson(antigravityDistributions)).digest("hex")}`, "Antigravity distribution identity is stale");
 const { commandDigest, ...attestation } = contract;
 assert.equal(commandDigest, `sha256:${createHash("sha256").update(canonicalJson(attestation)).digest("hex")}`);
-assert.equal(contract.acpxPatchSha256, createHash("sha256")
-  .update(await readFile(new URL("../../patches/acpx@0.13.1.patch", root))).digest("hex"));
-for (const [agent, path] of [["pi", `test-fixtures/pi-acp/profile-v${manifest.profiles.pi.agentProfileVersion}-identity.json`], ["copilot", `test/fixtures/copilot-profile-v${manifest.profiles.copilot.agentProfileVersion}-identity.json`]]) {
-  const identity = await readJson(path);
-  assert.equal(manifest.profiles[agent].agentProfileVersion, identity.declaration.agentProfileVersion);
-  assert.equal(manifest.profiles[agent].commandDigest, identity.commandDigest);
-  const serialized = agent === "pi" ? canonicalJson(identity.declaration)
-    : JSON.stringify(Object.fromEntries(Object.entries(identity.declaration).sort(([a], [b]) => a.localeCompare(b))));
-  assert.equal(identity.commandDigest, `sha256:${createHash("sha256").update(serialized).digest("hex")}`);
-  assert.equal(identity.declaration.acpxPatchSha256, contract.acpxPatchSha256);
-}
 for (const distribution of Object.values(distributions.platforms)) assert.match(distribution.closureSha256, /^[a-f0-9]{64}$/);
 
 const quote = JSON.stringify;
@@ -118,7 +114,7 @@ for (const [path, content] of [
   ["runner/crates/runner-core/src/generated_acpx_profiles.rs", rust],
 ]) {
   const url = new URL(path, root);
-  if (process.argv.includes("--check")) {
+  if (check) {
     assert.equal(await readFile(url, "utf8"), content, `Stale ACPX profiles: ${fileURLToPath(url)}; run generate:acpx-profiles`);
   } else await writeFile(url, content);
 }

packages/paperclip-runner/scripts/grok-profile-identity.mjs

@@ -1,84 +0,0 @@
-import assert from "node:assert/strict";
-import { createHash } from "node:crypto";
-import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const repositoryRoot = resolve(packageRoot, "../..");
-// Versions 1–18 remain decodable historical identities. Versioned fixtures are
-// immutable; advance this version before changing a versioned declaration.
-export const GROK_PROFILE_VERSION = 19;
-// Contract surfaces: ACPX wire patch; sidecar parsing and error translation;
-// native effort/search/credential admission; host/sandbox/tool-bridge execution;
-// launcher integrity and platform pins; Rust descriptor writes, session state,
-// and transport classification. This is an explicit boundary list, not the
-// sidecar's complete import graph.
-export const GROK_PROFILE_SOURCE_FILES = [
-  "patches/acpx@0.13.1.patch",
-  ...[
-    "src/cli/acpx-runtime-sidecar.ts", "src/cli/acpx-sidecar-input.ts",
-    "src/drivers/acpx/admission-diagnostics.ts", "src/drivers/acpx/grok-effort.ts",
-    "src/drivers/acpx/grok-web-search.ts", "src/drivers/acpx/grok-credentials.ts",
-    "src/drivers/acpx/codex-runtime-adapter.ts", "src/drivers/acpx/runtime-host.ts",
-    "src/drivers/preconfigured-home.ts",
-    "src/drivers/acpx/runtime-sandbox.ts", "src/drivers/acpx/sidecar-protocol.ts",
-    // The sidecar's session.open allowlist, generated from the sidecar schema.
-    "src/drivers/acpx/generated-sidecar-contract.ts",
-    "src/drivers/acpx/native-distribution-integrity.ts",
-    "src/providers/grok/launcher.cjs", "src/providers/grok/platforms.json",
-    "runner/crates/runner-core/src/acpx_provider_backend.rs",
-    "runner/crates/runner-core/src/acpx_provider_session.rs",
-    "runner/crates/runner-core/src/acpx_sidecar_transport.rs",
-  ].map(path => `packages/paperclip-runner/${path}`),
-];
-const canonical = value => value && typeof value === "object"
-  ? Array.isArray(value) ? `[${value.map(canonical).join(",")}]`
-    : `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`
-  : JSON.stringify(value);
-const sha = bytes => `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
-const launcherPath = "packages/paperclip-runner/src/providers/grok/launcher.cjs";
-const launcherBody = root => readFileSync(resolve(root, launcherPath), "utf8")
-  .replace(/^\/\/ Grok admission source identity: sha256:[a-f0-9]{64}\r?\n/u, "");
-const stampedLauncher = (root, sourceDigest) => `// Grok admission source identity: ${sourceDigest}\n${launcherBody(root)}`;
-
-export function grokProfileIdentity(root = repositoryRoot) {
-  const manifest = JSON.parse(readFileSync(resolve(root, "packages/paperclip-runner/acpx-profiles.json"), "utf8"));
-  const { commandDigest: _digest, ...profile } = manifest.profiles.grok;
-  const declaration = {
-    schema: "paperclip.grok-profile-identity.v1", agent: "grok",
-    ...profile, agentProfileVersion: GROK_PROFILE_VERSION, acpxVersion: manifest.acpxVersion,
-    sources: Object.fromEntries(GROK_PROFILE_SOURCE_FILES.map(path => [path,
-      sha(path === launcherPath ? launcherBody(root) : readFileSync(resolve(root, path)))])),
-  };
-  const sourceDigest = sha(canonical(declaration));
-  // Preserve the command's physical byte-digest contract. The source stamp
-  // changes those bytes when the Grok admission implementation changes.
-  return { commandDigest: sha(stampedLauncher(root, sourceDigest)), sourceDigest, declaration };
-}
-
-if (process.argv[1] && realpathSync(process.argv[1]) === fileURLToPath(import.meta.url)) {
-  const identity = grokProfileIdentity();
-  const manifestPath = resolve(packageRoot, "acpx-profiles.json");
-  const fixturePath = resolve(packageRoot, `test/fixtures/grok-profile-v${GROK_PROFILE_VERSION}-identity.json`);
-  const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-  if (process.argv.includes("--check")) {
-    assert.deepEqual(JSON.parse(readFileSync(fixturePath, "utf8")), identity, "Grok source identity is stale");
-    assert.equal(manifest.profiles.grok.commandDigest, identity.commandDigest);
-    assert.equal(manifest.profiles.grok.agentProfileVersion, GROK_PROFILE_VERSION);
-    assert.equal(readFileSync(resolve(repositoryRoot, launcherPath), "utf8"), stampedLauncher(repositoryRoot, identity.sourceDigest));
-  } else {
-    if (existsSync(fixturePath) && canonical(JSON.parse(readFileSync(fixturePath, "utf8"))) !== canonical(identity)) {
-      throw new Error(`Grok profile ${GROK_PROFILE_VERSION} identity is immutable; advance GROK_PROFILE_VERSION before changing bound source`);
-    }
-    writeFileSync(resolve(repositoryRoot, launcherPath), stampedLauncher(repositoryRoot, identity.sourceDigest));
-    manifest.profiles.grok.commandDigest = identity.commandDigest;
-    manifest.profiles.grok.agentProfileVersion = GROK_PROFILE_VERSION;
-    writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
-    writeFileSync(fixturePath, `${JSON.stringify(identity, null, 2)}\n`);
-  }
-  execFileSync(process.execPath, [resolve(packageRoot, "scripts/generate-acpx-profiles.mjs"),
-    ...(process.argv.includes("--check") ? ["--check"] : [])], { stdio: "inherit" });
-  console.log(identity.commandDigest);
-}

packages/paperclip-runner/scripts/grok-profile-identity.test.mjs

@@ -1,74 +0,0 @@
-import assert from "node:assert/strict";
-import { spawnSync } from "node:child_process";
-import { copyFileSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import test from "node:test";
-import { grokProfileIdentity, GROK_PROFILE_SOURCE_FILES, GROK_PROFILE_VERSION } from "./grok-profile-identity.mjs";
-
-const root = resolve(dirname(fileURLToPath(import.meta.url)), "../../..");
-test("the active Grok profile attests its exact admission source", () => {
-  const identity = grokProfileIdentity(root);
-  const manifest = JSON.parse(readFileSync(join(root, "packages/paperclip-runner/acpx-profiles.json"), "utf8"));
-  const fixture = JSON.parse(readFileSync(join(root, `packages/paperclip-runner/test/fixtures/grok-profile-v${GROK_PROFILE_VERSION}-identity.json`), "utf8"));
-  assert.deepEqual(identity, fixture);
-  assert.equal(manifest.profiles.grok.commandDigest, identity.commandDigest);
-  assert.equal(manifest.profiles.grok.agentProfileVersion, GROK_PROFILE_VERSION);
-});
-
-for (const contract of [
-  "src/drivers/acpx/generated-sidecar-contract.ts",
-  "runner/crates/runner-core/src/acpx_provider_backend.rs",
-]) test(`changing the Grok field in ${contract} invalidates the identity`, () => {
-  const copy = mkdtempSync(join(tmpdir(), "grok-profile-source-"));
-  try {
-    for (const path of ["packages/paperclip-runner/acpx-profiles.json", ...GROK_PROFILE_SOURCE_FILES,
-      `packages/paperclip-runner/${contract}`]) {
-      mkdirSync(dirname(join(copy, path)), { recursive: true });
-      copyFileSync(join(root, path), join(copy, path));
-    }
-    const before = grokProfileIdentity(copy);
-    const contractPath = join(copy, "packages/paperclip-runner", contract);
-    const source = readFileSync(contractPath, "utf8");
-    assert.ok(source.includes('"grokEffort"'));
-    writeFileSync(contractPath, source.replace('"grokEffort"', '"obsoleteGrokEffort"'));
-    assert.notEqual(grokProfileIdentity(copy).commandDigest, before.commandDigest);
-  } finally {
-    rmSync(copy, { recursive: true, force: true });
-  }
-});
-
-test("the generator cannot overwrite a versioned identity after source changes", () => {
-  const copy = mkdtempSync(join(tmpdir(), "grok-profile-immutable-"));
-  const prefix = "packages/paperclip-runner/";
-  const manifest = JSON.parse(readFileSync(join(root, prefix, "acpx-profiles.json"), "utf8"));
-  const fixture = `${prefix}test/fixtures/grok-profile-v${GROK_PROFILE_VERSION}-identity.json`;
-  const launcher = `${prefix}src/providers/grok/launcher.cjs`;
-  try {
-    for (const path of new Set([...GROK_PROFILE_SOURCE_FILES, ...[
-      "acpx-profiles.json", "cursor-distributions.json", "cursor-contract.json", "antigravity-distributions.json", "package.json",
-      "scripts/grok-profile-identity.mjs", "scripts/generate-acpx-profiles.mjs",
-      `test/fixtures/copilot-profile-v${manifest.profiles.copilot.agentProfileVersion}-identity.json`,
-      `test-fixtures/pi-acp/profile-v${manifest.profiles.pi.agentProfileVersion}-identity.json`,
-    ].map(path => prefix + path), fixture])) {
-      mkdirSync(dirname(join(copy, path)), { recursive: true });
-      copyFileSync(join(root, path), join(copy, path));
-    }
-    const protectedFiles = [fixture, launcher, `${prefix}acpx-profiles.json`];
-    const before = protectedFiles.map(path => readFileSync(join(copy, path), "utf8"));
-    const generate = () => spawnSync(process.execPath, [join(copy, prefix, "scripts/grok-profile-identity.mjs")],
-      { cwd: copy, env: { PATH: process.env.PATH }, encoding: "utf8", timeout: 10000 });
-    const unchanged = generate();
-    assert.equal(unchanged.status, 0, unchanged.stderr);
-    assert.deepEqual(protectedFiles.map(path => readFileSync(join(copy, path), "utf8")), before);
-    const sidecar = join(copy, prefix, "src/drivers/acpx/generated-sidecar-contract.ts");
-    writeFileSync(sidecar, readFileSync(sidecar, "utf8").replace('"grokEffort"', '"obsoleteGrokEffort"'));
-    const result = generate();
-    assert.deepEqual(protectedFiles.map(path => readFileSync(join(copy, path), "utf8")), before, "a changed identity must be refused before any write");
-    assert.notEqual(result.status, 0, "source changes must require a new profile version");
-    assert.match(result.stderr, /identity is immutable/);
-  } finally {
-    rmSync(copy, { recursive: true, force: true });
-  }
-});

packages/paperclip-runner/src/backends/native-backend-factory.test.ts

@@ -654,34 +654,23 @@ describe("native backend factory", () => {
     })).toThrow("ACPX candidate direct execution requires completed qualification");
   });
 
+  // The last source-bound Copilot, Grok and Pi identities, and retained Cursor declarations.
   it.each([
+    ["copilot", { agentProfileVersion: 91, commandDigest: "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9" }],
+    ["grok", { agentProfileVersion: 19, commandDigest: "sha256:5205c2197b94cfbd3e62fbeea027f2e80d092f736ca52656dda2f7044ba9a5ca" }],
+    ["pi", { agentProfileVersion: 36, commandDigest: "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc" }],
     ["cursor", "../../test/fixtures/cursor-acp/profile-v7-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v74-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v75-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v76-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v77-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v78-identity.json"],
-    ["pi", "../../test-fixtures/pi-acp/profile-v32-identity.json"],
-    ["grok", "../../test/fixtures/grok-profile-v10-identity.json"],
-    ["cursor", "../../test/fixtures/cursor-acp/profile-v10-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v14-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v60-identity.json"],
-    ["pi", "../../test-fixtures/pi-acp/profile-v13-identity.json"],
-    ["pi", "../../test-fixtures/pi-acp/profile-v14-identity.json"],
-    ["pi", "../../test-fixtures/pi-acp/profile-v18-identity.json"],
     ["cursor", "../../test/fixtures/cursor-acp/profile-v9-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v7-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v9-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v10-identity.json"],
-    ["copilot", "../../test/fixtures/copilot-profile-v11-identity.json"],
-    ["pi", "../../test-fixtures/pi-acp/profile-v9-identity.json"],
-  ] as const)("rejects the exact historical %s identity before runtime startup", (agent, path) => {
-    const historical = JSON.parse(readFileSync(new URL(path, import.meta.url), "utf8"));
+    ["cursor", "../../test/fixtures/cursor-acp/profile-v10-identity.json"],
+  ] as const)("rejects the exact historical %s identity before runtime startup", (agent, source) => {
+    const historical = typeof source === "string"
+      ? (({ declaration, commandDigest }) => ({ agentProfileVersion: declaration.agentProfileVersion, commandDigest }))(JSON.parse(readFileSync(new URL(source, import.meta.url), "utf8")))
+      : source;
     const input = acpxExecution();
     if (input.provider.kind !== "acpx") throw new Error("invalid fixture");
     const current = resolveQualifiedAcpxProfile(agent, agent === "pi" ? "custom/explicit-test-model" : "explicit-fixture-model");
     Object.assign(input.provider, { agent, model: current.qualificationModel, profile: { ...current,
-      agentProfileVersion: historical.declaration.agentProfileVersion, commandDigest: historical.commandDigest } });
+      agentProfileVersion: historical.agentProfileVersion, commandDigest: historical.commandDigest } });
     expect(() => createNativeSessionBackend(input, { acpxRuntimeDirectory: "/runtime" }))
       .toThrow("does not match the qualified agentProfileVersion");
     input.provider.profile.agentProfileVersion = current.agentProfileVersion;

packages/paperclip-runner/src/contracts/native-execution.test.ts

@@ -1,5 +1,4 @@
 import { nativeTaskConstraints } from "../backends/runtime-context.js";
-import { readFileSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { QUALIFIED_ACPX_PROFILES } from "../drivers/acpx/qualified-profiles.js";
 import { describe, expect, it } from "vitest";
@@ -435,11 +434,14 @@ describe("NativeExecutionInputV1", () => {
     })).toThrow("does not match");
   });
 
-  it.each([17, 43, 44] as const)("decodes saved Copilot v%s input after the current source declaration advances", (version) => {
-    const historical = JSON.parse(readFileSync(new URL(`../../test/fixtures/copilot-profile-v${version}-identity.json`, import.meta.url), "utf8"));
+  // Old saved inputs decode with their own digest; admission refuses them later.
+  it.each([
+    [17, `sha256:${"1".repeat(64)}`],
+    [91, "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9"],
+  ] as const)("decodes saved Copilot v%s input after the current profile advances", (version, commandDigest) => {
     const { permissionPolicy, qualificationStatus: _status, ...currentProfile } = QUALIFIED_ACPX_PROFILES.copilot;
     const provider = { kind: "acpx", agent: "copilot", model: "explicit-provider-model", permissionPolicy,
-      profile: { ...currentProfile, agentProfileVersion: version, commandDigest: historical.commandDigest } };
+      profile: { ...currentProfile, agentProfileVersion: version, commandDigest } };
     const parsed = parseNativeExecutionInput({ ...input, session: { ...input.session, driverKind: "acpx_runtime" }, provider });
     expect(parsed.provider).toEqual(provider);
     expect(parseNativeExecutionInput(parsed)).toEqual(parsed);

packages/paperclip-runner/src/drivers/acpx/copilot-closure-pins.ts

@@ -0,0 +1,10 @@
+/**
+ * Complete patched Copilot distribution closures, one per qualified platform.
+ * Erasable TypeScript only: the ACPX profile generator imports these pins to
+ * compute Copilot's upstream release attestation.
+ */
+export const COPILOT_CLOSURE_SHA256 = Object.freeze({
+  "darwin-arm64": "362f2663e967fb9e34a814bac4619cbf89e6b23069c4051ab1f2f686852d0a32",
+  "darwin-x64": "c08b7c3dd4e7bcf9a3e16ec6eba29cfa10308e865d196c5f120a3a15f6b3116a",
+  "linux-x64": "a3d8f4367cfa1694d79e3f8b7930b6fbfe42a229c272b375b11951d631db8d07",
+});

packages/paperclip-runner/src/drivers/acpx/copilot-installation.test.ts

@@ -1,74 +1,13 @@
-import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
 import { describe, expect, it, vi } from "vitest";
-import { build } from "esbuild";
 import { verifyNativeAcpxInstallation } from "./installation-integrity.js";
 import { COPILOT_CLOSURE_SHA256, verifyCopilotInstallation } from "./copilot-installation.js";
-import { COPILOT_LAUNCH_ARGUMENTS, COPILOT_SYSTEM_INSTRUCTION_DELIVERY } from "./copilot-profile.js";
-import { COPILOT_PERMISSION_CONTEXT_CONTRACT } from "./copilot-permission-context.js";
+import { COPILOT_LAUNCH_ARGUMENTS } from "./copilot-profile.js";
 import { QUALIFIED_ACPX_PROFILES } from "./qualified-profiles.js";
 import { isSupportedAcpxProfileVersion } from "./profile-compatibility.js";
 
-const PERMISSION_POLICY_SOURCES = [
-  ["copilot-permission-context.ts", "permissionContextSourceSha256"],
-  ["acp-permission-adapter.ts", "permissionAdapterSourceSha256"],
-  ["cursor-plan-tool-identity.ts", "permissionToolIdentitySourceSha256"],
-  ["safe-locations.ts", "permissionLocationsSourceSha256"],
-  ["../../semantic-tools/redaction.ts", "permissionRedactionSourceSha256"],
-  ["generated-sidecar-contract.ts", "permissionClassifierSourceSha256"],
-] as const;
-
-const COPILOT_DISPLAY_SOURCES = [
-  ["copilot-events.ts", "displayEventSourceSha256"],
-  ["copilot-extension-adapter.ts", "displayProjectionSourceSha256"],
-] as const;
-
-const SEMANTIC_RECEIPT_SOURCES = [
-  ["../semantic-tool-receipt.ts", "semanticReceiptSourceSha256"],
-  ["../runner-tool-bridge.ts", "semanticBridgeSourceSha256"],
-  ["copilot-tool-evidence.ts", "toolEvidenceSourceSha256"],
-  ["../../cli/acpx-runtime-sidecar.ts", "semanticSidecarSourceSha256"],
-  ["sidecar-protocol.ts", "semanticSidecarProtocolSourceSha256"],
-  ["codex-acpx-driver.ts", "semanticDirectDriverSourceSha256"],
-  ["../completion-continuation.ts", "semanticContinuationSourceSha256"],
-  ["../../protocol/replay-contract.ts", "semanticValidationSourceSha256"],
-  ["../../protocol/result-normalization.ts", "semanticNormalizationSourceSha256"],
-  ["../../contracts/completion-result.ts", "semanticCompletionContractSourceSha256"],
-  ["../../contracts/native-execution.ts", "nativeExecutionSourceSha256"],
-  ["installation-integrity.ts", "guardedInstallationSourceSha256"],
-  ["../../live/runner-provider-launch.ts", "providerLaunchSourceSha256"],
-  ["../../live/runnerd-codex-transport.ts", "runtimeRequestBridgeSourceSha256"],
-  ["../codex/codex-session-notifications.ts", "runtimeRequestFacadeSourceSha256"],
-  ["../codex/codex-thread-normalization.ts", "runtimeRequestNotificationSourceSha256"],
-  ["../../protocol/generated/standalone-validators.ts", "semanticValidatorsSourceSha256"],
-  ["../../protocol/generated/schema-bundle.ts", "semanticSchemaBundleSourceSha256"],
-] as const;
-
-// Walk executable imports, not just the projector's immediate dependencies.
-async function permissionPolicyClosure(extraClassifierImport = false): Promise<Set<string>> {
-  const root = fileURLToPath(new URL(".", import.meta.url));
-  const result = await build({
-    absWorkingDir: root,
-    entryPoints: ["acp-permission-adapter.ts"],
-    bundle: true, write: false, metafile: true, platform: "node", treeShaking: false,
-    plugins: extraClassifierImport ? [{
-      name: "unbound-transitive-policy-negative-control",
-      setup(builder) {
-        builder.onResolve({ filter: /^unbound-policy$/ }, () => ({ path: "unbound-policy", namespace: "negative-control" }));
-        builder.onLoad({ filter: /.*/, namespace: "negative-control" }, () => ({ contents: "export const policy = true;", loader: "ts" }));
-        builder.onLoad({ filter: /generated-sidecar-contract\.ts$/ }, args => ({
-          contents: readFileSync(args.path, "utf8") + '\nimport "unbound-policy";',
-          loader: "ts", resolveDir: root,
-        }));
-      },
-    }] : [],
-  });
-  return new Set(Object.keys(result.metafile!.inputs).map(path => path.startsWith("negative-control:")
-    ? path : pathToFileURL(resolve(root, path)).href));
-}
-
 async function withCopilotTestPlatform<T>(arch: "x64" | "arm64", run: () => Promise<T>): Promise<T> {
   const platformDescriptor = Object.getOwnPropertyDescriptor(process, "platform");
   const archDescriptor = Object.getOwnPropertyDescriptor(process, "arch");
@@ -86,656 +25,14 @@ async function withCopilotTestPlatform<T>(arch: "x64" | "arm64", run: () => Prom
 vi.mock("./installation-integrity.js", () => ({ verifyNativeAcpxInstallation: vi.fn() }));
 
 describe("Copilot build-owned installation", () => {
-  it("preserves published v88 while binding managed launch policy in v91", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v88-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("81e5fbccf057c04e012f638dc7a02c5758bf6ca67f7c4ed0045f3f61525401c2");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v91-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(["agentProfileVersion", "configuredEnvironmentRustSourceSha256", "configuredEnvironmentSourceSha256", "credentialBindingSourceSha256", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256"]);
-    expect(isSupportedAcpxProfileVersion("copilot", 88)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 88, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("admits the current profile with environment launch preparation", () => {
-    expect(QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion).toBe(91);
+  it("decodes earlier profiles but admits only the exact current one", async () => {
+    const current = QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion;
     expect(QUALIFIED_ACPX_PROFILES.copilot.qualificationStatus).toBeUndefined();
-    expect(QUALIFIED_ACPX_PROFILES.copilot.commandDigest).toBe("sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9");
-  });
-
-it("preserves published v65 while binding retained-maintenance waits in v66", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v65-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("ca1d95c21b3f49c99b6d7c6bd3c2bf149715db3263927ad653cc0c6f33fb4462");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v66-sleep-maintenance-historical-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 65)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 65, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-it("preserves the historical sleep-maintenance v64 identity", async () => {
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v64-sleep-maintenance-historical-identity.json", import.meta.url), "utf8"));
-    for (const [name, checksum, changed] of [
-      ["copilot-profile-v63-identity.json", "4adb05bd642f0222a3bcc85cfefbeb2988de439f58125012e1c575caedd90798", ["agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256"]],
-      ["copilot-profile-v62-sleep-maintenance-historical-identity.json", "e0c93dd7210fbb0115e09b70887ec4ae40621fc5314bd1625e586caf2163c94e", ["agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256", "semanticCompletionContractSourceSha256", "semanticContinuationSourceSha256"]],
-    ] as const) {
-      const bytes = readFileSync(new URL(`../../../test/fixtures/${name}`, import.meta.url));
-      expect(createHash("sha256").update(bytes).digest("hex")).toBe(checksum);
-      const prior = JSON.parse(bytes.toString("utf8"));
-      expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(changed);
-      expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-      const sorted = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-      expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(prior.commandDigest);
-      expect(isSupportedAcpxProfileVersion("copilot", prior.declaration.agentProfileVersion)).toBe(true);
-      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-        agentProfileVersion: prior.declaration.agentProfileVersion, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
+    for (let prior = 1; prior < current; prior += 1) {
+      expect(isSupportedAcpxProfileVersion("copilot", prior)).toBe(true);
+      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot, agentProfileVersion: prior } as never)).rejects.toThrow("exact pinned");
     }
   });
-
-  it("preserves profile 78 while binding retained-session waits in profile 79", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v78-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("da2d7d33dbcdb900f3afb0ad0d0d1502c31f7638772a58009a3300f7e442fd1c");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v79-sleep-maintenance-historical-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 78)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 78, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-
-  it("preserves published profile 79 while binding retained cleanup in profile 80", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v79-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("92fb6b5f1a312933f78d650fdc037ded4876d112c472fcfd5c1116cdbb0dae44");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v80-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 79)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 79, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("retains the published profile 75 fixture while advancing the event contract", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v75-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("4178dad6cf43a6026c85f45a0606f30c72570549d517e49f705dbf8f9f41650b");
-    expect(isSupportedAcpxProfileVersion("copilot", 75)).toBe(true);
-    const prior = JSON.parse(bytes.toString("utf8"));
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 75, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v70 while binding historical Grok recovery decoding in v71", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v70-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("7ab63e2832f9d9c3273b5f799b25a02cba18718e956966c3b79052d74b4bd304");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v71-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort())
-      .toEqual(["agentProfileVersion", "profileCompatibilitySourceSha256"]);
-    expect(isSupportedAcpxProfileVersion("copilot", 70)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 70, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v69 while binding closed startup diagnostics in v70", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v69-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("a878caa5f40cfad517e852384507b50c1098e219f1dd6822335b1119b03eaea5");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v70-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "admissionDiagnosticsSourceSha256", "agentProfileVersion", "grokAdmissionSourceSha256",
-      "profileCompatibilitySourceSha256", "runtimeHostSourceSha256", "sidecarErrorSourceSha256",
-    ]);
-    for (const [name, field] of [["admission-diagnostics.ts", "admissionDiagnosticsSourceSha256"], ["grok-effort.ts", "grokAdmissionSourceSha256"]]) {
-      expect(current.declaration[field]).toBe(createHash("sha256").update(readFileSync(new URL(name!, import.meta.url))).digest("hex"));
-    }
-    expect(isSupportedAcpxProfileVersion("copilot", 69)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 69, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves published and candidate history while binding native Grok admission in v69", async () => {
-    const published = readFileSync(new URL("../../../test/fixtures/copilot-profile-v68-identity.json", import.meta.url));
-    const candidate = readFileSync(new URL("../../../test/fixtures/copilot-profile-v67-grok-native-effort-candidate-historical-identity.json", import.meta.url));
-    expect(createHash("sha256").update(published).digest("hex")).toBe("9692e8de4e75682c74f8e635e26b8de1f03f1d3e41966dafbb7314d35b75c3cf");
-    expect(createHash("sha256").update(candidate).digest("hex")).toBe("0a20ffe33c92d86f58013582b19c2371f96d93e7e4e0e8096fbf0e7236bd02f4");
-    const prior = JSON.parse(published.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v69-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeAdapterSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    for (const history of [prior, JSON.parse(candidate.toString("utf8"))]) {
-      expect(isSupportedAcpxProfileVersion("copilot", history.declaration.agentProfileVersion)).toBe(true);
-      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-        agentProfileVersion: history.declaration.agentProfileVersion, commandDigest: history.commandDigest })).rejects.toThrow("exact pinned");
-    }
-  });
-
-  it("preserves both lineages while binding the merged implementation in v68", async () => {
-    const published = readFileSync(new URL("../../../test/fixtures/copilot-profile-v66-identity.json", import.meta.url));
-    const candidate = readFileSync(new URL("../../../test/fixtures/copilot-profile-v67-identity.json", import.meta.url));
-    expect(createHash("sha256").update(published).digest("hex")).toBe("9eb0bfd31334210fd41ddb677a165ef7432a2951922e642dddff087e4db8b6bc");
-    expect(createHash("sha256").update(candidate).digest("hex")).toBe("6c818541933b97bea896ca29179ad54c887db9b7d563021da1676a8126f960dd");
-    const prior = JSON.parse(published.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v68-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    for (const history of [prior, JSON.parse(candidate.toString("utf8"))]) {
-      expect(isSupportedAcpxProfileVersion("copilot", history.declaration.agentProfileVersion)).toBe(true);
-      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-        agentProfileVersion: history.declaration.agentProfileVersion, commandDigest: history.commandDigest })).rejects.toThrow("exact pinned");
-    }
-  });
-
-  it("preserves published v65 while binding hot-upgrade adoption in v67", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v65-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("ca1d95c21b3f49c99b6d7c6bd3c2bf149715db3263927ad653cc0c6f33fb4462");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v67-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 65)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 65, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("retains candidate v66 identity when completion recovery changes in v67", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v66-hot-upgrade-candidate-historical-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("430f7a3bb4f51a22d6f18a515fb32eb4defa5bab60a6a4901f6750e59f2536c6");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v67-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 66)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 66, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("retains the hot-upgrade v59 development identity without replacing published history", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v59-hot-upgrade-candidate-historical-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("b61fe644383acbbaacd209836878243cb96b143807d90c521ef1fbee2a2fcb0c");
-    const prior = JSON.parse(bytes.toString("utf8"));
-    const sorted = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(prior.commandDigest);
-    expect(isSupportedAcpxProfileVersion("copilot", 59)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 59, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("retains v65 history while binding the shared native Grok effort transport in v66", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v65-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v66-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "harnessSessionContractSourceSha256", "nativeBackendSourceSha256", "nativeExecutionSourceSha256",
-      "nativeInstructionsSourceSha256", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256", "runtimeAdapterSourceSha256",
-      "runtimeHostSourceSha256", "runtimeRequestBridgeSourceSha256", "runtimeSandboxSourceSha256", "semanticDirectDriverSourceSha256", "semanticSchemaBundleSourceSha256",
-      "semanticSidecarProtocolSourceSha256", "semanticSidecarSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 65)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 65, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves published v64 while binding exhausted reconnect cancellation in v65", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v64-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("9ee015b4968d8df8d38364626d413f69f6c0e846de20fe1d5f72c7f1706837a9");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v65-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 64)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 64, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves the published startup cancellation candidate as historical v63 evidence", async () => {
-    const bytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v63-reconnect-candidate-historical-identity.json", import.meta.url));
-    expect(createHash("sha256").update(bytes).digest("hex")).toBe("1ed0ac81863a588f3a2ff997b0e3f3bf0b64440454eb19282bdcd05d35650207");
-    const candidate = JSON.parse(bytes.toString("utf8"));
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v62-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(candidate.declaration).filter(key => candidate.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    const sorted = Object.fromEntries(Object.entries(candidate.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(candidate.commandDigest);
-    expect(isSupportedAcpxProfileVersion("copilot", 63)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 63, commandDigest: candidate.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves published v63 while binding delegated connection guidance in v64", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v63-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("4adb05bd642f0222a3bcc85cfefbeb2988de439f58125012e1c575caedd90798");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v64-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:1412842a36a7211d84b6b98a3d1f69e3388bc4814e5825da890a774ae0e3460e");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeRuntimePromptsSourceSha256", "profileCompatibilitySourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 63)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 63, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves both published v62 identities while binding their merged source in v63", async () => {
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v63-identity.json", import.meta.url), "utf8"));
-    for (const [name, checksum, changed] of [
-      ["copilot-profile-v62-identity.json", "faa4d1b35267b54e134a8e0c84586fe1196d8fad5525cb53aa195aae53ca6e83", ["agentProfileVersion", "profileCompatibilitySourceSha256", "semanticCompletionContractSourceSha256", "semanticContinuationSourceSha256"]],
-      ["copilot-profile-v62-candidate-historical-identity.json", "da3f44a3cfda31cbff558d618e1e9cb1cfb80379b613ff1266e8b866ea666df8", ["agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256"]],
-    ] as const) {
-      const bytes = readFileSync(new URL(`../../../test/fixtures/${name}`, import.meta.url));
-      expect(createHash("sha256").update(bytes).digest("hex")).toBe(checksum);
-      const prior = JSON.parse(bytes.toString("utf8"));
-      expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(changed);
-      expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-      const sorted = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-      expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(prior.commandDigest);
-      expect(isSupportedAcpxProfileVersion("copilot", 62)).toBe(true);
-      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-        agentProfileVersion: 62, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-    }
-  });
-
-  it("preserves v61 while binding uncertain process checks and controller retirement in v62", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v61-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("ec3c8561bc123a599a01da356978b73e6d48ab030842af9f0d63d1f30413e1a5");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v62-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:956276ebee59f880249fa6955adc224af9ca7b6a9da59bcc5da4a8667550c5b3");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 61)).toBe(true);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 61, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v60 while binding controller journal retirement in v61", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v60-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("e3c45b0311517d05f06ed10f357db713ae157cfa87e4a8becf087c5b6dfa7003");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v61-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 60)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 60, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v59 while binding the Codex-only hosted search restriction in v60", async () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v59-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("a9116d0981cb0feebec31f61cd23d16b3a263fe6a797b1ba1436c6e41198538c");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v60-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeBackendSourceSha256", "nativeExecutionSourceSha256", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 59)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 59, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v58 while binding the separate remote process reconnect policy in v59", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v58-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v59-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "credentialBindingSourceSha256", "nativeInstructionsSourceSha256", "nativeSessionRuntimeSourceSha256", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256", "semanticBridgeSourceSha256", "semanticSidecarSourceSha256", "transportContractSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 58)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v57 while binding the shared Pi setup and launch repairs in v58", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v57-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v58-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "guardedInstallationSourceSha256", "nativeBackendSourceSha256", "profileCompatibilitySourceSha256", "profileInstallationSourceSha256", "providerLaunchSourceSha256", "runtimeHostSourceSha256", "runtimeRequestBridgeSourceSha256", "semanticBridgeSourceSha256", "semanticSidecarSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 57)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v56 while binding the extracted core prompts in v57", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v56-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v57-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeRuntimeContextSourceSha256", "nativeRuntimePromptsSourceSha256", "profileCompatibilitySourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 56)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v55 while binding reusable case workflow guidance in v56", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v55-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v56-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeRuntimeContextSourceSha256", "profileCompatibilitySourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 55)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v54 while binding current workspace continuation revalidation in v55", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v54-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v55-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:171d865b9b6ff2eda3926dc957caf2993cd7e1fa1b4359e8b60b83f589bd67fa");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256",
-      "semanticCompletionContractSourceSha256", "semanticContinuationSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 54)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v53 while binding repository setup completion guidance in v54", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v53-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v54-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:6441ff7f3fc664064bff9e7ae80252ddec7a39236f9a4b9d402785eb8b03b2c9");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "semanticCompletionContractSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 53)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v52 while binding the workspace continuation source in v53", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v52-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v53-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:3614db52d3ddcbc0153c79361a0db2c4324249475d3be490f152b64f916bdd53");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "semanticContinuationSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 52)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v51 when the setup transport contract changes", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v51-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:8c1cddce201eb0e3f2792cc5a8c79edf36b0ce823e728255c1897f95c74a3866");
-    expect(isSupportedAcpxProfileVersion("copilot", 51)).toBe(true);
-    expect(QUALIFIED_ACPX_PROFILES.copilot.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v49 while binding the extracted provider launch builder", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v49-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v50-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:37a8f6a540a7417bb12becbf283158df8cca925c5136ecc0db14597441fff702");
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "profileCompatibilitySourceSha256", "providerLaunchSourceSha256", "runtimeRequestBridgeSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 49)).toBe(true);
-  });
-
-  it("preserves qualified v48 while binding completion-proposal recovery in v49", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v48-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v49-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:49171cb881c43270e101a790a109752642870daedc38cd6e91aef08fd7aab038");
-    const sortedPrior = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sortedPrior)).digest("hex")}`).toBe(prior.commandDigest);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeSessionRuntimeSourceSha256", "profileCompatibilitySourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 48)).toBe(true);
-    vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 48, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-    expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();
-  });
-
-  it("preserves qualified v47 while binding the additive case contracts in v48", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v47-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v48-identity.json", import.meta.url), "utf8"));
-    expect(prior.commandDigest).toBe("sha256:55044aa235e88b3fe36ec8a556ee1e3382590870aab907e4462ef7d64af49cea");
-    const sortedPrior = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sortedPrior)).digest("hex")}`).toBe(prior.commandDigest);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeRuntimeContextSourceSha256", "profileCompatibilitySourceSha256",
-      "semanticCompletionContractSourceSha256", "semanticSchemaBundleSourceSha256", "semanticValidatorsSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 47)).toBe(true);
-    vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 47, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-    expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();
-  });
-
-  it("preserves v12 history and changes only the version and four shared source bindings", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v12-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v13-identity.json", import.meta.url), "utf8"));
-    const changed = Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort();
-    expect(changed).toEqual(["agentProfileVersion", "semanticDirectDriverSourceSha256", "semanticSchemaBundleSourceSha256", "semanticSidecarProtocolSourceSha256", "semanticSidecarSourceSha256"]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(prior.declaration.agentProfileVersion).toBe(12);
-    expect(current.declaration.agentProfileVersion).toBe(13);
-    const sortedPrior = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sortedPrior)).digest("hex")}`).toBe(prior.commandDigest);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v13 history while binding the shared live request snapshot", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v13-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v14-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(["agentProfileVersion", "semanticSidecarSourceSha256"]);
-  });
-
-  it("preserves v14 history while binding the corrected outbound ACPX delivery", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v14-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v15-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(["acpxPatchSha256", "agentProfileVersion"]);
-  });
-
-  it("preserves v17 history while binding the shared Grok descriptor schema", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v17-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v18-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(["agentProfileVersion", "semanticSchemaBundleSourceSha256"]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves the historical Muse v18 declaration without granting current launch", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v17-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v18-muse-historical-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "semanticSchemaBundleSourceSha256", "semanticValidatorsSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(prior.declaration.agentProfileVersion).toBe(17);
-    const sortedPrior = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sortedPrior)).digest("hex")}`).toBe(prior.commandDigest);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-    vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    for (const override of [
-      { commandDigest: prior.commandDigest },
-      { agentProfileVersion: prior.declaration.agentProfileVersion },
-      { commandDigest: prior.commandDigest, agentProfileVersion: prior.declaration.agentProfileVersion },
-    ]) {
-      await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot, ...override })).rejects.toThrow("exact pinned");
-    }
-    expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();
-  });
-
-  it("preserves the historical combined external-provider v19 declaration without granting current launch", async () => {
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v19-muse-historical-identity.json", import.meta.url), "utf8"));
-    expect(current.declaration.agentProfileVersion).toBe(19);
-    expect(isSupportedAcpxProfileVersion("copilot", 18)).toBe(true);
-    vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    for (const [name, changed] of [
-      ["copilot-profile-v18-identity.json", ["agentProfileVersion", "semanticSchemaBundleSourceSha256", "semanticValidatorsSourceSha256"]],
-      ["copilot-profile-v18-muse-historical-identity.json", ["agentProfileVersion", "semanticSchemaBundleSourceSha256"]],
-    ] as const) {
-      const prior = JSON.parse(readFileSync(new URL(`../../../test/fixtures/${name}`, import.meta.url), "utf8"));
-      expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(changed);
-      expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-      expect(current.commandDigest).not.toBe(prior.commandDigest);
-      for (const override of [
-        { commandDigest: prior.commandDigest },
-        { agentProfileVersion: prior.declaration.agentProfileVersion },
-        { commandDigest: prior.commandDigest, agentProfileVersion: prior.declaration.agentProfileVersion },
-      ]) {
-        await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot, ...override })).rejects.toThrow("exact pinned");
-      }
-    }
-    expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();
-  });
-
-  it("preserves v18 history while binding the credential update protocol sources", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v18-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v19-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort())
-      .toEqual(["agentProfileVersion", "semanticSchemaBundleSourceSha256", "semanticValidationSourceSha256", "semanticValidatorsSourceSha256"]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-  it("binds both immutable v19 histories in a new combined v20 declaration", async () => {
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v20-identity.json", import.meta.url), "utf8"));
-    expect(current.declaration.agentProfileVersion).toBe(20);
-    expect(isSupportedAcpxProfileVersion("copilot", 19)).toBe(true);
-    vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    for (const [name, changed] of [
-      ["copilot-profile-v19-identity.json", ["agentProfileVersion", "semanticSchemaBundleSourceSha256", "semanticValidatorsSourceSha256"]],
-      ["copilot-profile-v19-muse-historical-identity.json", ["agentProfileVersion", "semanticSchemaBundleSourceSha256", "semanticValidationSourceSha256", "semanticValidatorsSourceSha256"]],
-    ] as const) {
-      const prior = JSON.parse(readFileSync(new URL(`../../../test/fixtures/${name}`, import.meta.url), "utf8"));
-      expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual(changed);
-      expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-      const sortedPrior = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-      expect(`sha256:${createHash("sha256").update(JSON.stringify(sortedPrior)).digest("hex")}`).toBe(prior.commandDigest);
-      expect(current.commandDigest).not.toBe(prior.commandDigest);
-      for (const override of [
-        { commandDigest: prior.commandDigest },
-        { agentProfileVersion: prior.declaration.agentProfileVersion },
-        { commandDigest: prior.commandDigest, agentProfileVersion: prior.declaration.agentProfileVersion },
-      ]) {
-        await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot, ...override })).rejects.toThrow("exact pinned");
-      }
-    }
-    expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();
-  });
-
-  it("preserves v20 history while binding the controller-owned monitor continuation", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v20-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v21-mainline-monitor-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "semanticCompletionContractSourceSha256", "semanticContinuationSourceSha256", "semanticDirectDriverSourceSha256", "semanticSidecarSourceSha256",
-    ]);
-    expect(Object.keys(current.declaration).filter(key => !Object.hasOwn(prior.declaration, key))).toEqual(["semanticContinuationSourceSha256"]);
-    expect(Object.keys(prior.declaration).every(key => Object.hasOwn(current.declaration, key))).toBe(true);
-    expect(isSupportedAcpxProfileVersion("copilot", 20)).toBe(true);
-    const sorted = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(prior.commandDigest);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 20, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v22 history while binding the Claude-only preload metadata branch", async () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-mainline-v22-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-mainline-v23-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort())
-      .toEqual(["agentProfileVersion", "semanticBridgeSourceSha256"]);
-    expect(Object.keys(current.declaration).sort()).toEqual(Object.keys(prior.declaration).sort());
-    expect(isSupportedAcpxProfileVersion("copilot", 22)).toBe(true);
-    const sorted = Object.fromEntries(Object.entries(prior.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(prior.commandDigest);
-    await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot,
-      agentProfileVersion: 22, commandDigest: prior.commandDigest })).rejects.toThrow("exact pinned");
-  });
-
-  it("preserves v23 history while binding shared observability diagnostic redaction", () => {
-    const prior = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-mainline-v23-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-mainline-v24-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "semanticSidecarSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 23)).toBe(true);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves v85 while binding runtime activity delivery in v86", () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v85-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("15d2790d94d7cc46ac728119ed9b4d07ed2b682be039b3debc716600708d8c1a");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v86-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "nativeSessionRuntimeSourceSha256", "profileCompatibilitySourceSha256", "runtimeRequestBridgeSourceSha256", "runtimeRequestFacadeSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 85)).toBe(true);
-  });
-
-  it("preserves v86 while binding activity attachment settlement in v87", () => {
-    const priorBytes = readFileSync(new URL("../../../test/fixtures/copilot-profile-v86-identity.json", import.meta.url));
-    expect(createHash("sha256").update(priorBytes).digest("hex")).toBe("6baeb98adc7132b2afdce8b1d2da1df2f00356677eb4497c49c05aa9def79138");
-    const prior = JSON.parse(priorBytes.toString("utf8"));
-    const current = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-profile-v87-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => current.declaration[key] !== prior.declaration[key]).sort()).toEqual([
-      "agentProfileVersion", "harnessSessionSourceSha256", "profileCompatibilitySourceSha256", "runtimeRequestFacadeSourceSha256",
-    ]);
-    expect(isSupportedAcpxProfileVersion("copilot", 86)).toBe(true);
-  });
-
-  it("admits the current declaration and binds its source policy, receipts and patch hashes", () => {
-    const identity = JSON.parse(readFileSync(new URL(`../../../test/fixtures/copilot-profile-v${QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion}-identity.json`, import.meta.url), "utf8"));
-    expect(identity.declaration.systemInstructionDelivery).toBe(COPILOT_SYSTEM_INSTRUCTION_DELIVERY);
-    expect(identity.declaration.sharedRuntimeContract).toBe("paperclip.acpx-runtime-contract.v1");
-    expect(identity.declaration.permissionContextContract).toBe(COPILOT_PERMISSION_CONTEXT_CONTRACT);
-    expect(identity.declaration.semanticToolReceiptContract).toBe("paperclip.semantic_tool_receipt.v2");
-    expect(identity.declaration.semanticNormalizedInputContract).toBe("validated-forwarded-input-commit-v1");
-    expect(identity.declaration.semanticSidecarReceiptCommitContract).toBe("correlated-tool-resolve-v1");
-    expect(identity.declaration.messageIdentityContract).toBe("copilot-native-message-id-v1");
-    expect(identity.declaration.ownedDistributionDelivery).toBe("COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1");
-    const inventory = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-message-identity-distributions-1.0.88.json", import.meta.url), "utf8"));
-    expect(identity.declaration.upstreamAppSha256).toBe(inventory.upstreamAppSha256);
-    expect(identity.declaration.patchedAppSha256).toBe(inventory.patchedAppSha256);
-    expect(QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion).toBe(identity.declaration.agentProfileVersion);
-    expect(QUALIFIED_ACPX_PROFILES.copilot.commandDigest).toBe(identity.commandDigest);
-    const sorted = Object.fromEntries(Object.entries(identity.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).toBe(identity.commandDigest);
-    for (const [relative, field] of [...PERMISSION_POLICY_SOURCES, ...COPILOT_DISPLAY_SOURCES, ...SEMANTIC_RECEIPT_SOURCES, ["../../contracts/runtime-context.ts", "nativeRuntimeContextSourceSha256"], ["../../contracts/runtime-context-prompts.ts", "nativeRuntimePromptsSourceSha256"], ["copilot-policy.ts", "policySha256"], ["profile-compatibility.ts", "profileCompatibilitySourceSha256"], ["provider-assets-root.ts", "assetOwnershipSourceSha256"], ["../../../scripts/install-copilot-assets.mjs", "assetInstallerSourceSha256"], ["../../../scripts/materialize-copilot-binary.mjs", "distributionSourceSha256"], ["../../../scripts/copilot-inner-distribution.mjs", "innerDistributionSourceSha256"], ["../../../../../patches/acpx@0.13.1.patch", "acpxPatchSha256"]]) {
-      expect(createHash("sha256").update(readFileSync(new URL(relative!, import.meta.url))).digest("hex")).toBe(identity.declaration[field!]);
-    }
-    const manifest = JSON.parse(readFileSync(new URL("../../../acpx-profiles.json", import.meta.url), "utf8"));
-    expect(manifest.profiles.copilot.commandDigest).toBe(identity.commandDigest);
-    expect(readFileSync(new URL("../../../scripts/build-copilot-distribution.mjs", import.meta.url), "utf8")).toContain("profiles.profiles.copilot.commandDigest");
-    expect(readFileSync(new URL("../../../runner/crates/runner-core/src/generated_acpx_profiles.rs", import.meta.url), "utf8")).toContain(identity.commandDigest);
-  });
-  it("binds the complete executable permission-policy import closure", async () => {
-    expect(await permissionPolicyClosure()).toEqual(new Set(PERMISSION_POLICY_SOURCES.map(([path]) => new URL(path, import.meta.url).href)));
-  });
-  it("detects an added transitive dependency even when the projector is unchanged", async () => {
-    const closure = await permissionPolicyClosure(true);
-    const bound = new Set(PERMISSION_POLICY_SOURCES.map(([path]) => new URL(path, import.meta.url).href));
-    expect([...closure].filter(path => !bound.has(path))).toEqual(["negative-control:unbound-policy"]);
-  });
-  it.each([...PERMISSION_POLICY_SOURCES, ...COPILOT_DISPLAY_SOURCES, ...SEMANTIC_RECEIPT_SOURCES])("changing %s changes the candidate identity", (_path, field) => {
-    const identity = JSON.parse(readFileSync(new URL(`../../../test/fixtures/copilot-profile-v${QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion}-identity.json`, import.meta.url), "utf8"));
-    identity.declaration[field] = "0".repeat(64);
-    const sorted = Object.fromEntries(Object.entries(identity.declaration).sort(([a], [b]) => a.localeCompare(b)));
-    expect(`sha256:${createHash("sha256").update(JSON.stringify(sorted)).digest("hex")}`).not.toBe(identity.commandDigest);
-  });
   it("pins the unchanged executable plus complete patched distribution on every target platform", () => {
     const fixture = JSON.parse(readFileSync(new URL("../../../test/fixtures/copilot-message-identity-distributions-1.0.88.json", import.meta.url), "utf8"));
     const script = readFileSync(new URL("../../../scripts/materialize-copilot-binary.mjs", import.meta.url), "utf8");
@@ -777,7 +74,7 @@ it("preserves the historical sleep-maintenance v64 identity", async () => {
   }));
   it("rejects changed profile identities before native file access", async () => {
     vi.mocked(verifyNativeAcpxInstallation).mockClear();
-    for (const override of [{ agentServerVersion: "latest" }, { commandDigest: "sha256:untrusted" }, { commandDigest: "sha256:ed39259990cb0efda48d6105d2fa3599aac76873eb75cd80b4d0b179ce0579a6" }, { agent: "cursor" }, { agentProfileVersion: 1 }, { agentProfileVersion: 2 }, { agentProfileVersion: 3 }, { agentProfileVersion: 4 }, { agentProfileVersion: 5 }, { agentProfileVersion: 6 }, { agentProfileVersion: 7 }, { agentProfileVersion: 8 }, { agentProfileVersion: 9 }, { agentProfileVersion: 10 }, { agentProfileVersion: 17 }, { agentProfileVersion: 18 }, { agentProfileVersion: 19 }]) {
+    for (const override of [{ agentServerVersion: "latest" }, { commandDigest: "sha256:untrusted" }, { commandDigest: "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9" }, { agent: "cursor" }, { agentProfileVersion: 1 }, { agentProfileVersion: 2 }, { agentProfileVersion: 3 }, { agentProfileVersion: 4 }, { agentProfileVersion: 5 }, { agentProfileVersion: 6 }, { agentProfileVersion: 7 }, { agentProfileVersion: 8 }, { agentProfileVersion: 9 }, { agentProfileVersion: 10 }, { agentProfileVersion: 17 }, { agentProfileVersion: 18 }, { agentProfileVersion: 19 }]) {
       await expect(verifyCopilotInstallation({ ...QUALIFIED_ACPX_PROFILES.copilot, ...override } as never)).rejects.toThrow("exact pinned");
     }
     expect(verifyNativeAcpxInstallation).not.toHaveBeenCalled();

packages/paperclip-runner/src/drivers/acpx/copilot-installation.ts

@@ -3,12 +3,9 @@ import { resolveRunnerProviderAssetsRoot } from "./provider-assets-root.js";
 import { verifyNativeAcpxInstallation, type VerifiedAcpxInstallation } from "./installation-integrity.js";
 import { COPILOT_LAUNCH_ARGUMENTS, COPILOT_VERSION } from "./copilot-profile.js";
 import { QUALIFIED_ACPX_PROFILES, type AcpxReleaseProfile } from "./qualified-profiles.js";
+import { COPILOT_CLOSURE_SHA256 } from "./copilot-closure-pins.js";
 
-export const COPILOT_CLOSURE_SHA256 = Object.freeze({
-  "darwin-arm64": "362f2663e967fb9e34a814bac4619cbf89e6b23069c4051ab1f2f686852d0a32",
-  "darwin-x64": "c08b7c3dd4e7bcf9a3e16ec6eba29cfa10308e865d196c5f120a3a15f6b3116a",
-  "linux-x64": "a3d8f4367cfa1694d79e3f8b7930b6fbfe42a229c272b375b11951d631db8d07",
-});
+export { COPILOT_CLOSURE_SHA256 };
 
 /** Admission primitive only. Pending candidates remain gated by qualification. */
 export async function verifyCopilotInstallation(profile: AcpxReleaseProfile): Promise<VerifiedAcpxInstallation> {

packages/paperclip-runner/src/drivers/acpx/generated-profiles.ts

@@ -23,12 +23,12 @@ export const QUALIFIED_ACPX_PROFILE_DATA = {
     "protocolVersion": 1,
     "acpxVersion": "0.13.1",
     "agent": "grok",
-    "agentProfileVersion": 19,
+    "agentProfileVersion": 20,
     "agentServerPackage": "builtin:grok-acp",
     "agentServerVersion": "1",
     "agentRuntimePackage": "native:grok",
     "agentRuntimeVersion": "1.0.13",
-    "commandDigest": "sha256:5205c2197b94cfbd3e62fbeea027f2e80d092f736ca52656dda2f7044ba9a5ca",
+    "commandDigest": "sha256:f0b698395a3704ed2ffaf84ea19bdb20c36c8a0a70b7c629c7b6ffe144e59e55",
     "permissionPolicy": "interactive"
   },
   "pi": {
@@ -36,12 +36,12 @@ export const QUALIFIED_ACPX_PROFILE_DATA = {
     "protocolVersion": 1,
     "acpxVersion": "0.13.1",
     "agent": "pi",
-    "agentProfileVersion": 36,
+    "agentProfileVersion": 37,
     "agentServerPackage": "pi-acp",
     "agentServerVersion": "0.0.33",
     "agentRuntimePackage": "@earendil-works/pi-coding-agent",
     "agentRuntimeVersion": "1.0.0",
-    "commandDigest": "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc",
+    "commandDigest": "sha256:42e186b921f36accf3087cf64986a88346dcdb0bdf78c2ef44a2c4f8abd3453a",
     "permissionPolicy": "interactive"
   },
   "cursor": {
@@ -49,12 +49,12 @@ export const QUALIFIED_ACPX_PROFILE_DATA = {
     "protocolVersion": 1,
     "acpxVersion": "0.13.1",
     "agent": "cursor",
-    "agentProfileVersion": 16,
+    "agentProfileVersion": 17,
     "agentServerPackage": "cursor-agent",
     "agentServerVersion": "2026.09.26-dd393fe",
     "agentRuntimePackage": null,
     "agentRuntimeVersion": null,
-    "commandDigest": "sha256:759e7415fea8ed2b6b0e6f362b57652b8768835f9d1fdae4a94c1b5eb3669301",
+    "commandDigest": "sha256:c2e39f931fdb89eb226ddee17bdcd16ad14c80fe4d311a41df89f2947d72103d",
     "permissionPolicy": "interactive"
   },
   "copilot": {
@@ -62,12 +62,12 @@ export const QUALIFIED_ACPX_PROFILE_DATA = {
     "protocolVersion": 1,
     "acpxVersion": "0.13.1",
     "agent": "copilot",
-    "agentProfileVersion": 91,
+    "agentProfileVersion": 92,
     "agentServerPackage": "@github/copilot",
     "agentServerVersion": "1.0.88",
     "agentRuntimePackage": null,
     "agentRuntimeVersion": null,
-    "commandDigest": "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9",
+    "commandDigest": "sha256:4ec9c9d399e0f97d3addd9ac3333a69588a8103d5e534e206c02604432d89f9b",
     "permissionPolicy": "interactive"
   },
   "claude": {

packages/paperclip-runner/src/drivers/acpx/pi-installation.test.ts

@@ -7,7 +7,6 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import { PI_DISTRIBUTION_CLOSURE_SHA256 } from "./pi-closure-pins.js";
-import { PI_NODE_VERSION } from "./pi-node-pins.js";
 import { assertPiInstallationProfile, verifyPiInstallation } from "./pi-installation.js";
 import { QUALIFIED_ACPX_PROFILES, type AcpxReleaseProfile } from "./qualified-profiles.js";
 import { isSupportedAcpxProfileVersion } from "./profile-compatibility.js";
@@ -41,207 +40,24 @@ async function fixture() {
 }
 
 describe("Pi installation factory", () => {
-  it("preserves v35 decoding while binding managed command controls in v36", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v35-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v36-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256"]);
-    expect(isSupportedAcpxProfileVersion("pi", 35)).toBe(true);
-  });
-
-  it("preserves profile 13 and changes only the version and corrected ACPX patch binding", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v13-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v14-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort()).toEqual(["acpxPatchSha256", "agentProfileVersion"]);
-  });
-
-  it("preserves profile 14 and binds the method-specific question extension in profile 15", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v14-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v15-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "closure", "extensionSha256", "nativeQuestions"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 16 and changes only the provider credential policy in profile 17", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v16-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v17-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "providerConfigurationSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 17 and binds acknowledged cancellation in profile 18", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v17-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v18-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "closure", "helperSha256", "nativeCancellation", "wrapperSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 18 and binds root question field types in profile 19", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v18-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v19-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "closure", "extensionSha256", "nativeQuestions"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("revises only the shared Codex environment attestation while preserving Pi runtime bytes", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(19), current = await read(20);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "runtimeSandboxSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 20 and binds only the configured environment and fixed dependency payload", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(20), current = await read(21);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "closure", "credentialEnvironmentSourceSha256", "dependencySecurityPatchSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 21 and binds the restriction on general IAM credentials", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(21), current = await read(22);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256", "providerConfigurationSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 22 and revises only shared preconfigured-home source attestations", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(22), current = await read(23);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256", "recoveryIdentitySourceSha256", "runtimeSandboxSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 23 and binds OpenRouter attribution without changing Pi runtime bytes", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(23), current = await read(24);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256", "openRouterAttributionSourceSha256", "providerConfigurationSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("retains master profile 23 and binds the combined Claude effort sources in profile 26", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(23), current = await read(26);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "recoveryIdentitySourceSha256", "runtimeSandboxSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("retains both independently authored profile 24 declarations", async () => {
-    const read = async (name: string) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/${name}`, import.meta.url), "utf8"));
-    const published = await read("profile-v24-identity.json"), historical = await read("profile-v24-claude-historical-identity.json");
-    expect(published.declaration.agentProfileVersion).toBe(24);
-    expect(historical.declaration.agentProfileVersion).toBe(24);
-    expect(published.commandDigest).not.toBe(historical.commandDigest);
-  });
-
-  it("combines master OpenRouter attribution with the retained Claude source attestations in profile 27", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const current = await read(27);
-    for (const [version, expected] of [
-      [24, ["agentProfileVersion", "recoveryIdentitySourceSha256", "runtimeSandboxSourceSha256"]],
-      [26, ["agentProfileVersion", "credentialEnvironmentSourceSha256", "openRouterAttributionSourceSha256", "providerConfigurationSourceSha256"]],
-    ] as const) {
-      const prior = await read(version);
-      expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort()).toEqual(expected);
-      expect(current.commandDigest).not.toBe(prior.commandDigest);
-    }
-  });
-
-  it("preserves profile 27 and binds shared observability handling without changing Pi runtime bytes", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(27), current = await read(28);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256", "runtimeSandboxSourceSha256"]);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("preserves profile 28 while binding the Claude-only explicit MCP client budget source in profile 29", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(28), current = await read(29);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256"]);
-    expect(current.declaration.closure).toEqual(prior.declaration.closure);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-  });
-
-  it("retains profile 29 while binding Grok effort recovery identity in profile 30", async () => {
-    const read = async (version: number) => JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${version}-identity.json`, import.meta.url), "utf8"));
-    const prior = await read(29), current = await read(30);
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "recoveryIdentitySourceSha256", "runtimeSandboxSourceSha256"]);
-    expect(current.declaration.closure).toEqual(prior.declaration.closure);
-    expect(current.commandDigest).not.toBe(prior.commandDigest);
-    expect(isSupportedAcpxProfileVersion("pi", 29)).toBe(true);
-  });
-
-  it("preserves profile 33 while binding host-owned notification discovery in 34", async () => {
-    const prior = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v33-identity.json", import.meta.url), "utf8"));
-    const current = JSON.parse(await readFile(new URL("../../../test-fixtures/pi-acp/profile-v34-identity.json", import.meta.url), "utf8"));
-    expect(Object.keys(current.declaration).filter(key => JSON.stringify(current.declaration[key]) !== JSON.stringify(prior.declaration[key])).sort())
-      .toEqual(["agentProfileVersion", "credentialEnvironmentSourceSha256"]);
-    expect(isSupportedAcpxProfileVersion("pi", 33)).toBe(true);
-  });
-
-  it("binds the profile declaration to the reviewed patch and platform closure pins", async () => {
+  it("pins the reviewed wrapper patch and runtime helper that its closure was built from", async () => {
     const hash = (bytes: string | Uint8Array) => createHash("sha256").update(bytes).digest("hex");
-    const canonical = (value: any): string => Array.isArray(value) ? `[${value.map(canonical).join(",")}]`
-      : value && typeof value === "object" ? `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}` : JSON.stringify(value);
-    const identity = JSON.parse(await readFile(new URL(`../../../test-fixtures/pi-acp/profile-v${QUALIFIED_ACPX_PROFILES.pi.agentProfileVersion}-identity.json`, import.meta.url), "utf8"));
-    const declaration = identity.declaration;
-    expect(declaration.sharedRuntimeContract).toBe("paperclip.acpx-runtime-contract.v1");
-    expect(identity.commandDigest).toBe(`sha256:${hash(canonical(declaration))}`);
-    expect(QUALIFIED_ACPX_PROFILES.pi.commandDigest).toBe(identity.commandDigest);
-    for (const key of ["agent", "agentProfileVersion", "acpxVersion", "agentServerVersion", "agentRuntimeVersion"] as const) {
-      expect(declaration[key]).toBe(QUALIFIED_ACPX_PROFILES.pi[key]);
-    }
-    expect(declaration.closure).toEqual(PI_DISTRIBUTION_CLOSURE_SHA256);
-    expect(hash(await readFile(new URL("../../../../../patches/brace-expansion@5.0.9.patch", import.meta.url)))).toBe(declaration.dependencySecurityPatchSha256);
-    expect(declaration.nodeVersion).toBe(PI_NODE_VERSION);
-    for (const [path, field] of [["../openrouter-attribution.ts", "openRouterAttributionSourceSha256"], ["pi-provider-config.ts", "providerConfigurationSourceSha256"], ["environment.ts", "credentialEnvironmentSourceSha256"], ["runtime-sandbox.ts", "runtimeSandboxSourceSha256"], ["recovery-identity.ts", "recoveryIdentitySourceSha256"], ["../preconfigured-home.ts", "preparedHarnessHomeSourceSha256"]]) {
-      expect(hash(await readFile(new URL(`./${path}`, import.meta.url)))).toBe(declaration[field!]);
-    }
-    expect(hash(await readFile(new URL("../../../../../patches/acpx@0.13.1.patch", import.meta.url)))).toBe(declaration.acpxPatchSha256);
-    expect(hash(await readFile(new URL("./pi-message-projection.ts", import.meta.url)))).toBe(declaration.messageProjectionSha256);
-    expect(hash(await readFile(new URL("./pi-extension-adapter.ts", import.meta.url)))).toBe(declaration.noticeProjectionSha256);
     const helper = stripTypeScriptTypes(await readFile(new URL("./pi-acp-runtime.ts", import.meta.url), "utf8")).split("\n").map(line => line.trimEnd()).join("\n");
-    const extension = stripTypeScriptTypes(await readFile(new URL("./pi-runtime-extension.ts", import.meta.url), "utf8")).replace('from "./pi-acp-runtime.js"', 'from "../node_modules/pi-acp/dist/paperclip-runtime.js"');
-    expect(hash(helper)).toBe(declaration.helperSha256);
-    expect(hash(extension)).toBe(declaration.extensionSha256);
     const materializer = await readFile(new URL("../../../scripts/materialize-pi-distribution.mjs", import.meta.url), "utf8");
-    expect(materializer).toContain(`wrapperSha256: "${declaration.wrapperSha256}"`);
-    expect(materializer).toContain(`helperSha256: "${declaration.helperSha256}"`);
-    // This exact patch produced the reviewed current wrapper/closure.
-    // Pin it separately so wrapper-only edits cannot keep an unchanged declaration.
+    expect(materializer).toContain(`helperSha256: "${hash(helper)}"`);
     expect(hash(await readFile(new URL("../../../../../patches/pi-acp@0.0.33.patch", import.meta.url)))).toBe("a7c63900b513490cceed9e41bc3bd06f03f2cd56265f434aa2c5dc7925fa76b4");
   });
 
-  it("rejects legacy profiles and tampered executable identities", () => {
+  it("admits only the exact current profile", () => {
+    const current = QUALIFIED_ACPX_PROFILES.pi.agentProfileVersion;
     expect(() => assertPiInstallationProfile(candidate())).not.toThrow();
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 1 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 2 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 3 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 4 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 5 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 6 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 7 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 8 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 9 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 10 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 11 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 12 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 13 })).toThrow("version 36");
-    expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: 14 })).toThrow("version 36");
-    for (const priorVersion of [15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35]) expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: priorVersion })).toThrow("version 36");
-    for (const changed of [{ agentServerVersion: "latest" }, { commandDigest: `sha256:${"0".repeat(64)}` }, { agentRuntimePackage: "ambient-pi" }]) {
+    for (let prior = 1; prior < current; prior += 1) {
+      expect(isSupportedAcpxProfileVersion("pi", prior)).toBe(true);
+      expect(() => assertPiInstallationProfile({ ...candidate(), agentProfileVersion: prior })).toThrow(`version ${current}`);
+    }
+    for (const changed of [{ agentServerVersion: "latest" }, { commandDigest: `sha256:${"0".repeat(64)}` },
+      // The last source-bound Pi identity.
+      { commandDigest: "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc" }, { agentRuntimePackage: "ambient-pi" }]) {
       expect(() => assertPiInstallationProfile({ ...candidate(), ...changed })).toThrow("trusted declaration");
     }
   });

packages/paperclip-runner/src/drivers/acpx/profile-compatibility.test.ts

@@ -1,78 +1,29 @@
-import { readdirSync, readFileSync } from "node:fs";
 import { describe, expect, it } from "vitest";
 import { QUALIFIED_ACPX_PROFILE_DATA } from "./generated-profiles.js";
 import { isSupportedAcpxProfileVersion } from "./profile-compatibility.js";
 
 describe("historical ACPX profile decoding", () => {
-  it("retains each provider's existing revision boundary", () => {
-    expect(isSupportedAcpxProfileVersion("grok", 7)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", 30)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("copilot", 71)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("copilot", 17)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", 17)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", 18)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", 23)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("cursor", 15)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("cursor", 16)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("cursor", 17)).toBe(false);
-    for (const agent of ["pi", "copilot"]) {
-      expect(isSupportedAcpxProfileVersion(agent, 16)).toBe(true);
-      const current = QUALIFIED_ACPX_PROFILE_DATA[agent as "pi" | "copilot"].agentProfileVersion;
-      expect(isSupportedAcpxProfileVersion(agent, current)).toBe(true);
-      expect(isSupportedAcpxProfileVersion(agent, Math.max(16, current) + 1)).toBe(false);
+  it("decodes every revision from 1 through the current one so saved runs reach recovery", () => {
+    for (const [agent, current] of Object.entries(QUALIFIED_ACPX_PROFILE_DATA)) {
+      for (let version = 1; version <= current.agentProfileVersion; version += 1) {
+        expect(isSupportedAcpxProfileVersion(agent, version), `${agent} v${version}`).toBe(true);
+      }
     }
+  });
+  it("does not decode a revision newer than the current one", () => {
+    for (const agent of ["copilot", "grok", "pi", "cursor", "antigravity"] as const) {
+      expect(isSupportedAcpxProfileVersion(agent, QUALIFIED_ACPX_PROFILE_DATA[agent].agentProfileVersion + 1)).toBe(false);
+    }
+  });
+  it("keeps Claude and Codex revisions 1 through 5 decodable", () => {
     for (const agent of ["claude", "codex"]) {
       expect(isSupportedAcpxProfileVersion(agent, 5)).toBe(true);
       expect(isSupportedAcpxProfileVersion(agent, 6)).toBe(false);
     }
-    for (const version of [1, 2, 3, 4, 5, QUALIFIED_ACPX_PROFILE_DATA.grok.agentProfileVersion]) {
-      expect(isSupportedAcpxProfileVersion("grok", version)).toBe(true);
-    }
-    expect(isSupportedAcpxProfileVersion("grok", QUALIFIED_ACPX_PROFILE_DATA.grok.agentProfileVersion + 1)).toBe(false);
   });
-  it("decodes retained Copilot revisions and the current profile without widening other providers", () => {
-    for (const version of [1, 5, 6, 12, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40]) {
-      expect(isSupportedAcpxProfileVersion("copilot", version)).toBe(true);
-    }
-    expect(isSupportedAcpxProfileVersion("copilot", QUALIFIED_ACPX_PROFILE_DATA.copilot.agentProfileVersion + 1)).toBe(false);
-    // Preserve Pi history and its current mainline release without admitting the next profile.
-    expect(isSupportedAcpxProfileVersion("pi", 23)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", QUALIFIED_ACPX_PROFILE_DATA.pi.agentProfileVersion)).toBe(true);
-    expect(isSupportedAcpxProfileVersion("pi", QUALIFIED_ACPX_PROFILE_DATA.pi.agentProfileVersion + 1)).toBe(false);
-    for (const agent of ["cursor", "claude", "codex", "grok"]) {
-      expect(isSupportedAcpxProfileVersion(agent, 23)).toBe(false);
-      expect(isSupportedAcpxProfileVersion(agent, 24)).toBe(false);
-      expect(isSupportedAcpxProfileVersion(agent, 25)).toBe(false);
-      expect(isSupportedAcpxProfileVersion(agent, 26)).toBe(false);
-      expect(isSupportedAcpxProfileVersion(agent, 27)).toBe(false);
-    }
-  });
-  it("decodes every retained Copilot identity so saved runs can reach recovery", () => {
-    const root = new URL("../../../test/fixtures/", import.meta.url);
-    const files = readdirSync(root).filter(name => /^copilot-profile-v\d+.*-identity\.json$/u.test(name));
-    expect(files.length).toBeGreaterThan(30);
-    for (const file of files) {
-      const identity = JSON.parse(readFileSync(new URL(file, root), "utf8"));
-      expect(isSupportedAcpxProfileVersion("copilot", identity.declaration.agentProfileVersion), file).toBe(true);
-    }
-  });
-  it("decodes every retained Grok identity so saved runs can reach recovery", () => {
-    const root = new URL("../../../test/fixtures/", import.meta.url);
-    const files = readdirSync(root).filter(name => /^grok-profile-v\d+-identity\.json$/u.test(name));
-    expect(files.length).toBeGreaterThan(0);
-    for (const file of files) {
-      const identity = JSON.parse(readFileSync(new URL(file, root), "utf8"));
-      expect(isSupportedAcpxProfileVersion("grok", identity.declaration.agentProfileVersion), file).toBe(true);
-    }
-  });
-  it.each([0, 1.5, "11", null, undefined, NaN])("rejects invalid revisions: %s", version => {
+  it.each([0, -1, 1.5, "11", null, undefined, NaN, Number.MAX_SAFE_INTEGER + 1])("rejects invalid revisions: %s", version => {
     expect(isSupportedAcpxProfileVersion("cursor", version)).toBe(false);
   });
-  it("decodes every current release while retaining exact launch admission separately", () => {
-    for (const [agent, current] of Object.entries(QUALIFIED_ACPX_PROFILE_DATA)) {
-      expect(isSupportedAcpxProfileVersion(agent, current.agentProfileVersion)).toBe(true);
-    }
-  });
   it.each(["unknown", "toString", "__proto__"])("rejects unregistered providers: %s", agent => {
     expect(isSupportedAcpxProfileVersion(agent, 1)).toBe(false);
   });

packages/paperclip-runner/src/drivers/acpx/profile-compatibility.ts

@@ -1,20 +1,17 @@
 import { QUALIFIED_ACPX_PROFILE_DATA } from "./generated-profiles.js";
 
-/** Decodable historical profile revisions, not permission to launch them.
- * Exact current profile/package/digest admission is checked separately. */
-type HistoricalAcpxProfileVersion = 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90;
-type CurrentAcpxProfileVersion = typeof QUALIFIED_ACPX_PROFILE_DATA[keyof typeof QUALIFIED_ACPX_PROFILE_DATA]["agentProfileVersion"];
-export type AcpxProfileVersion = HistoricalAcpxProfileVersion | CurrentAcpxProfileVersion;
+/** Decodable profile revisions, not permission to launch them.
+ * Exact current profile/package/digest admission is checked separately.
+ * Every revision from 1 through the current one decodes, so saved runs reach
+ * recovery and are refused there. Claude and Codex already retained revisions
+ * 1 through 5 above their current revision 1. */
+const RETAINED_THROUGH: Readonly<Record<string, number>> = { claude: 5, codex: 5 };
 
-const historicalVersions: Readonly<Record<string, readonly HistoricalAcpxProfileVersion[]>> = {
-  pi: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35], claude: [1, 2, 3, 4, 5], codex: [1, 2, 3, 4, 5],
-  grok: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18], copilot: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90],
-  cursor: [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15],
-};
+export type AcpxProfileVersion = number;
 
 export function isSupportedAcpxProfileVersion(agent: string, value: unknown): value is AcpxProfileVersion {
-  if (!Object.hasOwn(QUALIFIED_ACPX_PROFILE_DATA, agent)) return false;
-  const current = QUALIFIED_ACPX_PROFILE_DATA[agent as keyof typeof QUALIFIED_ACPX_PROFILE_DATA];
-  return value === current.agentProfileVersion
-    || historicalVersions[agent]?.includes(value as HistoricalAcpxProfileVersion) === true;
+  if (!Object.hasOwn(QUALIFIED_ACPX_PROFILE_DATA, agent) || !Number.isSafeInteger(value)) return false;
+  const current = QUALIFIED_ACPX_PROFILE_DATA[agent as keyof typeof QUALIFIED_ACPX_PROFILE_DATA].agentProfileVersion;
+  const latest = Math.max(current, Object.hasOwn(RETAINED_THROUGH, agent) ? RETAINED_THROUGH[agent]! : 0);
+  return (value as number) >= 1 && (value as number) <= latest;
 }

packages/paperclip-runner/src/drivers/acpx/recovery-identity.test.ts

@@ -5,7 +5,7 @@ import { join, parse } from "node:path";
 
 import { afterEach, describe, expect, it } from "vitest";
 
-import { resolveQualifiedAcpxProfile } from "./qualified-profiles.js";
+import { QUALIFIED_ACPX_PROFILES, resolveQualifiedAcpxProfile } from "./qualified-profiles.js";
 import {
   ACPX_IDENTITY_RECORD_SCHEMA,
   acpxRuntimeSessionDirectoryName,
@@ -26,42 +26,30 @@ afterEach(async () => {
 });
 
 describe("ACPX recovery identity", () => {
+  // The last source-bound identities, the current versions with a changed
+  // upstream release digest, and retained Cursor declarations.
+  const changedDigest = `sha256:${"1".repeat(64)}`;
   it.each([
-    ["copilot", "../../../test/fixtures/copilot-profile-v74-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v75-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v76-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v77-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v78-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v79-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v80-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v32-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v33-identity.json"],
-    ["grok", "../../../test/fixtures/grok-profile-v10-identity.json"],
-    ["grok", "../../../test/fixtures/grok-profile-v11-identity.json"],
+    ["copilot", { agentProfileVersion: 91, commandDigest: "sha256:e4383c48ad21898dfe38609fdc8c0fa9a76dfcb8582a64b5415f107846904aa9" }],
+    ["grok", { agentProfileVersion: 19, commandDigest: "sha256:5205c2197b94cfbd3e62fbeea027f2e80d092f736ca52656dda2f7044ba9a5ca" }],
+    ["pi", { agentProfileVersion: 36, commandDigest: "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc" }],
+    ["copilot", { agentProfileVersion: QUALIFIED_ACPX_PROFILES.copilot.agentProfileVersion, commandDigest: changedDigest }],
+    ["grok", { agentProfileVersion: QUALIFIED_ACPX_PROFILES.grok.agentProfileVersion, commandDigest: changedDigest }],
+    ["pi", { agentProfileVersion: QUALIFIED_ACPX_PROFILES.pi.agentProfileVersion, commandDigest: changedDigest }],
     ["cursor", "../../../test/fixtures/cursor-acp/profile-v10-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v14-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v13-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v14-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v22-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v23-identity.json"],
     ["cursor", "../../../test/fixtures/cursor-acp/profile-v7-identity.json"],
     ["cursor", "../../../test/fixtures/cursor-acp/profile-v8-identity.json"],
     ["cursor", "../../../test/fixtures/cursor-acp/profile-v9-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v7-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v8-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v9-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v10-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v11-identity.json"],
-    ["copilot", "../../../test/fixtures/copilot-profile-v12-identity.json"],
-    ["pi", "../../../test-fixtures/pi-acp/profile-v9-identity.json"],
-  ] as const)("rejects retained %s sessions after the execution identity changes", async (agent, path) => {
+  ] as const)("rejects retained %s sessions after the execution identity changes", async (agent, source) => {
     const fixture = await recoveryFixture();
-    const historical = JSON.parse(await readFile(new URL(path, import.meta.url), "utf8"));
+    const historical = typeof source === "string"
+      ? (({ declaration, commandDigest }) => ({ agentProfileVersion: declaration.agentProfileVersion, commandDigest }))(JSON.parse(await readFile(new URL(source, import.meta.url), "utf8")))
+      : source;
     const current = resolveQualifiedAcpxProfile(agent, agent === "pi" ? "openrouter/deepseek/deepseek-v4-flash-0731" : fixture.input.requestedModel);
     const input = { ...fixture.input, requestedModel: current.qualificationModel, profile: current, ...(agent === "pi" ? { piThinkingLevel: "low" as const } : {}), ...(agent === "cursor" ? { mode: "agent" } : {}) };
     const next = await createAcpxRecoveryBinding(input);
     const prior = await createAcpxRecoveryBinding({ ...input, profile: { ...current,
-      agentProfileVersion: historical.declaration.agentProfileVersion, commandDigest: historical.commandDigest } });
+      agentProfileVersion: historical.agentProfileVersion, commandDigest: historical.commandDigest } });
     const priorExpected = { ...fixture.expected, profileDigest: prior.commandDigest,
       requestedModel: prior.requestedModel, effectiveModel: prior.effectiveModel,
       ...(agent === "cursor" ? { mode: "agent" as const } : {}), ...(agent === "pi" ? { piThinkingLevel: "low" as const } : {}) };

packages/paperclip-runner/src/providers/grok/launcher.cjs

@@ -1,4 +1,3 @@
-// Grok admission source identity: sha256:5abf25aa2d101b7d58745c8d8b362c95033713a137a7b27204439a98d130036c
 // This launcher is admitted by digest and receives a verified native executable.
 // Never resolve an executable through PATH or accept command-line overrides.
 const { isAbsolute, join } = require("node:path");

packages/paperclip-runner/test-fixtures/pi-acp/profile-v10-identity.json

@@ -1,30 +0,0 @@
-{
-  "commandDigest": "sha256:5e1a4357fc108fa79a66111413f85f6353b3dd3ab802ddfb80fc66719bc12571",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 10,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "0.84.2",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "0187153354338cf4919d213dd2977e1be1073ad3941c7b9b5c8a09c5b32828e4",
-      "darwin-x64": "22c593576e78edb27bbe6234aabd31a7d65f6be7503683f568d0730ebe6c75a0",
-      "linux-x64": "016ce3653bdfc1c7269e3bf7d4bf26e48b0d0b7d409fd153f3f1b882e986654d"
-    },
-    "wrapperSha256": "9fd9a685fb79b4f73a8dac08cbe360a6de87ffcb596cdaff1191e3ac57c24f56",
-    "helperSha256": "a19087c0af8fb3896fe3290280695f8f936574013bc4acde650f11f023f0f03b",
-    "extensionSha256": "2b74a4a2e6a42def3d9918a46732e0e1b8c618791d2b22970cfb3e9d285e55ad",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "nativeAssistantMessages": "sdk-boundaries-v1",
-    "nativeNotices": "session-extension-v1",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "c619080ec72a577889c382d44ea9024b10efdb9d83e933c03bfdd8da79ede591",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v11-identity.json

@@ -1,32 +0,0 @@
-{
-  "commandDigest": "sha256:5e276f48c8a87b3e6165369faac62d3925282c84b98934575b1b7b97ad50b309",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 11,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "a3e43c23f9603983a59fd256ca1dcf8bbd5cc2728dad095f7bcd3b3e62278597",
-      "darwin-x64": "8c6e7802d47da9410af56e367f6cf7af572fcbf3e361627cee026e8cffc9bdd3",
-      "linux-x64": "40e186c53db60d1ab5673ba34f33002e93cea518725a93395d241393b984caef"
-    },
-    "wrapperSha256": "f881b0461d706780953919b791aeb9614921c3be2d7cc41477f2a9afa2cbfb69",
-    "helperSha256": "a9f9d489ca0f14765ac1c4ab80c6bd0bd3fef46a8f41b8899ed2d9e78c115aba",
-    "extensionSha256": "8f9b538dbe924a314099f9597ee3876f7ccd88211c4f4b2e52f46b6c7ffa76ba",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "nativeAssistantMessages": "sdk-boundaries-v2-system-structural",
-    "nativeNotices": "session-extension-v1",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "c619080ec72a577889c382d44ea9024b10efdb9d83e933c03bfdd8da79ede591",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v12-identity.json

@@ -1,32 +0,0 @@
-{
-  "commandDigest": "sha256:47306e6d2a9b59e8f9189f725ebb7a0a7f91826044d1739e1a35ab31f228ba1f",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 12,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "e17be4d27c589b8f8b5de7d00686c39873fe6f902a3f133bdaf1a9f94dee00a2",
-      "darwin-x64": "03351f4a250a8db0e79411a9079b43a0ff05f72a2aff41fae17f1fc2de24bd41",
-      "linux-x64": "29dfc829700c57392f1d56373078dcfc80674cbd50f65674ec64fced81dffb68"
-    },
-    "wrapperSha256": "c41750802680543d72a5a43e21eaf91c31ca8cec833bbf5f27330614936810fe",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "8f9b538dbe924a314099f9597ee3876f7ccd88211c4f4b2e52f46b6c7ffa76ba",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v13-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:fe1e6da01b2a9e4c691ca27cf689d2d6de846a93be6b23fc1e103c9addd7b177",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 13,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "f6538a35e08f1c1816e738277a1843acfa1ce4522bbaa3340dbddd859dc7dd04",
-      "darwin-x64": "4728e5a4e7fc1ba602c3e219824fb84884b05a06cdd19dd3e521ee312e1b373a",
-      "linux-x64": "2957c0ec20ca1ace64d1a2b10c4a99f47f59e0c5c33a89161c1d5b48341c2b25"
-    },
-    "wrapperSha256": "8ef777e9e6a3cef37775bab2b800e4931330c23a0b151ce07fdc5b943f28435d",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "8f9b538dbe924a314099f9597ee3876f7ccd88211c4f4b2e52f46b6c7ffa76ba",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    }
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v14-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:f35145437eeb355ed37bc5a4fa93d7ede561d9c45daf311979b46890b808ddd4",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 14,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "f6538a35e08f1c1816e738277a1843acfa1ce4522bbaa3340dbddd859dc7dd04",
-      "darwin-x64": "4728e5a4e7fc1ba602c3e219824fb84884b05a06cdd19dd3e521ee312e1b373a",
-      "linux-x64": "2957c0ec20ca1ace64d1a2b10c4a99f47f59e0c5c33a89161c1d5b48341c2b25"
-    },
-    "wrapperSha256": "8ef777e9e6a3cef37775bab2b800e4931330c23a0b151ce07fdc5b943f28435d",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "8f9b538dbe924a314099f9597ee3876f7ccd88211c4f4b2e52f46b6c7ffa76ba",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "c0139d0b3af085ec5272a7812c9f89aff0e8618d1d44d9c9e9a59525d1972436",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    }
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v15-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:790f8b954be995ef63aef0ebdb0e06215e4c0d1416d40d605b33966a3d6ba053",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 15,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "729947513854dadc2d596a34186f7f19beaffead0fc97698d8eeac96b8479533",
-      "darwin-x64": "80de2913634f83e958792ddebc17e94f6dbbe5aa9aed3cea3ff5b40f44c90a59",
-      "linux-x64": "5fedea5f04f4f76d0e2ead0637b00322583d6c859f9df4f4dc8b332aca416eda"
-    },
-    "wrapperSha256": "8ef777e9e6a3cef37775bab2b800e4931330c23a0b151ce07fdc5b943f28435d",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "71a85bf2e736d4108ea88a4aed01df3f547e8e4ccdeadea8251220e40cb05394",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v3-method-specific-fields",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "c0139d0b3af085ec5272a7812c9f89aff0e8618d1d44d9c9e9a59525d1972436",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    }
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v16-identity.json

@@ -1,48 +0,0 @@
-{
-  "commandDigest": "sha256:28eefeccb2556d2668e20aee2f12a90d1fef50b9be954d5f6dd97c757e2e945e",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 16,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "729947513854dadc2d596a34186f7f19beaffead0fc97698d8eeac96b8479533",
-      "darwin-x64": "80de2913634f83e958792ddebc17e94f6dbbe5aa9aed3cea3ff5b40f44c90a59",
-      "linux-x64": "5fedea5f04f4f76d0e2ead0637b00322583d6c859f9df4f4dc8b332aca416eda"
-    },
-    "wrapperSha256": "8ef777e9e6a3cef37775bab2b800e4931330c23a0b151ce07fdc5b943f28435d",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "71a85bf2e736d4108ea88a4aed01df3f547e8e4ccdeadea8251220e40cb05394",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v3-method-specific-fields",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "e04480cc8d1272a3421313ddf9f973325e8c5c83bd29b84cff589fd734e780c2",
-    "credentialEnvironmentSourceSha256": "4ee0e9ac56fab8889a4d06b98634bb1797aeda64fcb31e0a404829018c7a12cb",
-    "runtimeSandboxSourceSha256": "21e1ed2d132886260cf17f956dc21824948bd428b8a0aa05518c508017e66213",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v17-identity.json

@@ -1,48 +0,0 @@
-{
-  "commandDigest": "sha256:a1d976c437cb736c9cce8ebe8b8baf59e571761a8d00e8b1885e72dd906d8f21",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 17,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "729947513854dadc2d596a34186f7f19beaffead0fc97698d8eeac96b8479533",
-      "darwin-x64": "80de2913634f83e958792ddebc17e94f6dbbe5aa9aed3cea3ff5b40f44c90a59",
-      "linux-x64": "5fedea5f04f4f76d0e2ead0637b00322583d6c859f9df4f4dc8b332aca416eda"
-    },
-    "wrapperSha256": "8ef777e9e6a3cef37775bab2b800e4931330c23a0b151ce07fdc5b943f28435d",
-    "helperSha256": "2191b1e5f281d24508ec7eaff39011ee863a8a70bf54f4aa0490ad0172b323da",
-    "extensionSha256": "71a85bf2e736d4108ea88a4aed01df3f547e8e4ccdeadea8251220e40cb05394",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v3-method-specific-fields",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "2735ec4b46929f4f59c26cea42e623dfc81016aa7da7bd8399a24caa68a75d6b",
-    "credentialEnvironmentSourceSha256": "4ee0e9ac56fab8889a4d06b98634bb1797aeda64fcb31e0a404829018c7a12cb",
-    "runtimeSandboxSourceSha256": "21e1ed2d132886260cf17f956dc21824948bd428b8a0aa05518c508017e66213",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v18-identity.json

@@ -1,49 +0,0 @@
-{
-  "commandDigest": "sha256:9d3e7d8269f1a0af94616552dfc69671932688b81dbbd5bab9ef356b3a9cbccb",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 18,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "8b85caad950fc720eabd80d7b67146b5b2106c66aecf1797993b90a3568ddc7f",
-      "darwin-x64": "c66bfff68705627b3c5589e038080b284a04027a0a0a3371a54a657a80787789",
-      "linux-x64": "a1b2797c5ca8245b441b0cc0e18f09463d9d896bd52631874320d77a09a4736d"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "71a85bf2e736d4108ea88a4aed01df3f547e8e4ccdeadea8251220e40cb05394",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v3-method-specific-fields",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "2735ec4b46929f4f59c26cea42e623dfc81016aa7da7bd8399a24caa68a75d6b",
-    "credentialEnvironmentSourceSha256": "4ee0e9ac56fab8889a4d06b98634bb1797aeda64fcb31e0a404829018c7a12cb",
-    "runtimeSandboxSourceSha256": "21e1ed2d132886260cf17f956dc21824948bd428b8a0aa05518c508017e66213",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v19-identity.json

@@ -1,49 +0,0 @@
-{
-  "commandDigest": "sha256:b7647ebf97f802ca053ec3384c912bf0e8d18eba308d27397bb1d95a37220825",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 19,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "e076276c674dfffccbb488883e18571d77d7225d801fabf5c8391773ddbbfc6c",
-      "darwin-x64": "eafd44e672dec4966ef6f038620f003e5d492c889d475886cd66be2e9c2bff1d",
-      "linux-x64": "f493df174cfecba3c31c524aa486ae37663cd68f8fcc0d9556e3f615c4a40ce9"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "2735ec4b46929f4f59c26cea42e623dfc81016aa7da7bd8399a24caa68a75d6b",
-    "credentialEnvironmentSourceSha256": "4ee0e9ac56fab8889a4d06b98634bb1797aeda64fcb31e0a404829018c7a12cb",
-    "runtimeSandboxSourceSha256": "21e1ed2d132886260cf17f956dc21824948bd428b8a0aa05518c508017e66213",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v20-identity.json

@@ -1,49 +0,0 @@
-{
-  "commandDigest": "sha256:465ae72460f05cae961873f09cd7cd3652dc3a6949930b7ee16303925cd3dd0e",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 20,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "e076276c674dfffccbb488883e18571d77d7225d801fabf5c8391773ddbbfc6c",
-      "darwin-x64": "eafd44e672dec4966ef6f038620f003e5d492c889d475886cd66be2e9c2bff1d",
-      "linux-x64": "f493df174cfecba3c31c524aa486ae37663cd68f8fcc0d9556e3f615c4a40ce9"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "2735ec4b46929f4f59c26cea42e623dfc81016aa7da7bd8399a24caa68a75d6b",
-    "credentialEnvironmentSourceSha256": "4ee0e9ac56fab8889a4d06b98634bb1797aeda64fcb31e0a404829018c7a12cb",
-    "runtimeSandboxSourceSha256": "1c1ddb0b24c3417250ce161cda897ba59b1adce7c7609ed553be298464e6c1c4",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v21-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:514cbf86e70c1eaedebdf924bc0f3de4753c7a9e0313a0bb38614b6b9481a9a1",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 21,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "2735ec4b46929f4f59c26cea42e623dfc81016aa7da7bd8399a24caa68a75d6b",
-    "credentialEnvironmentSourceSha256": "c49186bd73da7f1c9401d8ab10fe581ccccad294efe5da8621dd03adb91dc094",
-    "runtimeSandboxSourceSha256": "1c1ddb0b24c3417250ce161cda897ba59b1adce7c7609ed553be298464e6c1c4",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v22-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:e92078bee3c23bec4100aa589013a44613d054cd686826534025d8019e9f39a9",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 22,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "f8dc40ea1aa894bd44754a35a8f65fbcaa2f4c7ffc88cc5fdaa965e0d378d9bc",
-    "runtimeSandboxSourceSha256": "1c1ddb0b24c3417250ce161cda897ba59b1adce7c7609ed553be298464e6c1c4",
-    "recoveryIdentitySourceSha256": "f333a24b19ef1b5b5d23ea9778e753f7051690e835ef9e4476a962d8a231c375",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v23-claude-qualification-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:eba77e17e5e874d0dc80585abbf0266f3005c6d6fb746dda29cafad95657f6c6",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 23,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "f8dc40ea1aa894bd44754a35a8f65fbcaa2f4c7ffc88cc5fdaa965e0d378d9bc",
-    "runtimeSandboxSourceSha256": "8767456c125b53b1e85fbfce84245c9b213f9ef27a58970cf73dbc2ff82005d8",
-    "recoveryIdentitySourceSha256": "8479e04da1ae2f7742e34f045b0270b99e9c3ae39a5b8fb9f164e5776d83224c",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v23-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:18f0f91f179745db6f63aa0d2c710018b884759fa78440d7b0d3cd18b785b4d9",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 23,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "c9c3650b6415430b045533eea2d7cddfe87302e03817f40ae83f7447ef0ae957",
-    "runtimeSandboxSourceSha256": "4c0e8b3dca5ecaf60edbf5db26bb55a00bdf800f4523a072c69ed8a92d67f8ca",
-    "recoveryIdentitySourceSha256": "61eed640ede944fcd07b25b8a2c48adb30d0e881043ca5549ce2f846ac8652ae",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v24-claude-historical-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:d25d674cda9a0853bdbf0521025099f1424c573d2f533630cb67d90e1bfcda3b",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 24,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "f8dc40ea1aa894bd44754a35a8f65fbcaa2f4c7ffc88cc5fdaa965e0d378d9bc",
-    "runtimeSandboxSourceSha256": "1119cd01f131d814d5bdb77bcb38af359b9328876ff8537894d19ec2eac35e7f",
-    "recoveryIdentitySourceSha256": "8479e04da1ae2f7742e34f045b0270b99e9c3ae39a5b8fb9f164e5776d83224c",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v24-identity.json

@@ -1,51 +0,0 @@
-{
-  "commandDigest": "sha256:347feab6eed4bc0f4ab099aae3292694e73d08e05148483ac612b0db958b0e39",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 24,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "b29464dd2fcbd1bff3a9cdb4ba97a00d9c4a07a6cdd878f1baaa8a4948d020ca",
-    "runtimeSandboxSourceSha256": "4c0e8b3dca5ecaf60edbf5db26bb55a00bdf800f4523a072c69ed8a92d67f8ca",
-    "recoveryIdentitySourceSha256": "61eed640ede944fcd07b25b8a2c48adb30d0e881043ca5549ce2f846ac8652ae",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v25-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:dd67387487dadb08da76534c057dc0aa059f7698d1779cbd5fc452813828167a",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 25,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "f8dc40ea1aa894bd44754a35a8f65fbcaa2f4c7ffc88cc5fdaa965e0d378d9bc",
-    "runtimeSandboxSourceSha256": "144d62b3415cfedf272b5b052e14af1e41fe50a644af84247fc9c20c7ef7edde",
-    "recoveryIdentitySourceSha256": "8479e04da1ae2f7742e34f045b0270b99e9c3ae39a5b8fb9f164e5776d83224c",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v26-identity.json

@@ -1,50 +0,0 @@
-{
-  "commandDigest": "sha256:cbf43cd25d8e8523507ce4af82b042eddc8641a7c24627556263940ffccf8a5b",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 26,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "d5b4c1a426afc85f040c9b55358d1d645299586dc8cec72d1be2509187ca3865",
-    "credentialEnvironmentSourceSha256": "c9c3650b6415430b045533eea2d7cddfe87302e03817f40ae83f7447ef0ae957",
-    "runtimeSandboxSourceSha256": "e5a034b2e4008b56b33e654a8c299bd3b329a9d8940bdb1eafdbffe3574e9372",
-    "recoveryIdentitySourceSha256": "d2c9fc161fcc135fb9760110bfa3d984ee2bb38d87fa5ce7cb7418a49dd89e66",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v27-identity.json

@@ -1,51 +0,0 @@
-{
-  "commandDigest": "sha256:b1b75a1ae3ac498eb07b95b96bebf4da86227b83d09276076dd5c222e3964dba",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 27,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "b29464dd2fcbd1bff3a9cdb4ba97a00d9c4a07a6cdd878f1baaa8a4948d020ca",
-    "runtimeSandboxSourceSha256": "e5a034b2e4008b56b33e654a8c299bd3b329a9d8940bdb1eafdbffe3574e9372",
-    "recoveryIdentitySourceSha256": "d2c9fc161fcc135fb9760110bfa3d984ee2bb38d87fa5ce7cb7418a49dd89e66",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v28-identity.json

@@ -1,51 +0,0 @@
-{
-  "commandDigest": "sha256:4918a4d5472d66b22b1ec642b68b5c60a8092a39c84ec1ab1c9ad0289cb8c68c",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 28,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "54fd09ad430dac04df98d829061f6701e73b5bf2a0f4de836d2ac36ee511009f",
-    "runtimeSandboxSourceSha256": "92dfa53f5a3ed0062913ae417eeccec243b430d444495efde2a8e9c4c02e78ea",
-    "recoveryIdentitySourceSha256": "d2c9fc161fcc135fb9760110bfa3d984ee2bb38d87fa5ce7cb7418a49dd89e66",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v29-identity.json

@@ -1,51 +0,0 @@
-{
-  "commandDigest": "sha256:e80c6dc7bde12790371345ee5a12f0201d30941d26f1a780aec3d090545b2a06",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 29,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "7586d44b47c83395498dc8806287cd3538ef58177ba7c5949f5766ed105a0161",
-    "runtimeSandboxSourceSha256": "92dfa53f5a3ed0062913ae417eeccec243b430d444495efde2a8e9c4c02e78ea",
-    "recoveryIdentitySourceSha256": "d2c9fc161fcc135fb9760110bfa3d984ee2bb38d87fa5ce7cb7418a49dd89e66",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v30-identity.json

@@ -1,51 +0,0 @@
-{
-  "commandDigest": "sha256:4517ab123dd89140ef462fc1905ac7a16a0dfcbaf21d67299a3c62de29c08a4d",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 30,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "7586d44b47c83395498dc8806287cd3538ef58177ba7c5949f5766ed105a0161",
-    "runtimeSandboxSourceSha256": "981449a4c6d10f682ecf86d834eed07faca30a7d9b419fb8db4973a442a343ec",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v31-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:29ac71abce61457089185f14a416eb21d93298e9ca25c73cc4a1f955c413274d",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 31,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "c82c0e586d9b10868887a8805e8e52295f8ba610c40014b6ae9562b3c3b44cc9",
-    "runtimeSandboxSourceSha256": "04a49a24e3828ce8fca908de15e31ae932b8b1b4f7ecec0308627f6a8da9ba20",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "c4edb57b63c01c7c8a07dcd25d625cb2528fddd7e0126fe12bd934edf1339a5c"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v32-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:ce13b75699331c813f8a42f2803c3e0e0fb1e6d24847452cb12b50d6ed2d0baf",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 32,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "3a93267146bfc3c489f43262386d6dcb05ec4e3a8b1765414cd43d80d0c64d4a",
-    "runtimeSandboxSourceSha256": "04a49a24e3828ce8fca908de15e31ae932b8b1b4f7ecec0308627f6a8da9ba20",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "bb286f7ddc6e9597c56d46bf7ff6e3b556c5b680d7e147fd46518724432b083e"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v33-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:0260d5810e9247986800ad46c1f9b3511a5abd06cb8f142405d5caacbc3960fc",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 33,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "1e7dae8c83bf8620f53f2bea13c175eeff95e7e955783f6f529bb1dcbdcdb6d2",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "3a93267146bfc3c489f43262386d6dcb05ec4e3a8b1765414cd43d80d0c64d4a",
-    "runtimeSandboxSourceSha256": "04a49a24e3828ce8fca908de15e31ae932b8b1b4f7ecec0308627f6a8da9ba20",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "bb286f7ddc6e9597c56d46bf7ff6e3b556c5b680d7e147fd46518724432b083e"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v34-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:ed4b32cc8fbf36309d38b3bd378f41f8e7b9e96a2405d275cc55e89042d94c7f",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 34,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "1e7dae8c83bf8620f53f2bea13c175eeff95e7e955783f6f529bb1dcbdcdb6d2",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "fbc9fc037dab8134d090ac7c3eb23f80026cd84085d56a9704fcf9ceb0478926",
-    "runtimeSandboxSourceSha256": "04a49a24e3828ce8fca908de15e31ae932b8b1b4f7ecec0308627f6a8da9ba20",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "bb286f7ddc6e9597c56d46bf7ff6e3b556c5b680d7e147fd46518724432b083e"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v35-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:9473de6ef4baf2bd82fe8b6757239bdc160960b0a78ae6f47fa9e0996544226c",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 35,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "1e7dae8c83bf8620f53f2bea13c175eeff95e7e955783f6f529bb1dcbdcdb6d2",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "2ed68b9aed9756fdd682721833eb2aeaa58f30f1dc8825c88886cc8e7ee92abe",
-    "runtimeSandboxSourceSha256": "b9f05e522f92b6bade51c7a17f8d28bf31ab9db26510b8d5ddce8519d563a875",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "bb286f7ddc6e9597c56d46bf7ff6e3b556c5b680d7e147fd46518724432b083e"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v36-identity.json

@@ -1,52 +0,0 @@
-{
-  "commandDigest": "sha256:faafb66c09c1efc7eb4eda6baaa5813c975e8a992f9cd333687695aa5522d7dc",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 36,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "1.0.0",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "282022db10150c6632b3444df421342e7d534bdf5d5fb1097a2e79d0625a2bcf",
-      "darwin-x64": "64e251e19009f755c0b04f73ce2138246faab71a961b0f13d75ebfcc34bef12e",
-      "linux-x64": "713b1fdff42fb56a1518bdc084f181d70bee8ebadc3e4b1d76321ed9108c8410"
-    },
-    "wrapperSha256": "9d129b3d38772e93e97080aa6c4e574ac5df4e47ce5bc331a484a9fbf8188b36",
-    "helperSha256": "41e0490b617da0d60e0c8ec58ef311236f945129d99f816cff6897f78da7f91d",
-    "extensionSha256": "f5818573a355702388072b28926897db546a5cf346b5171f646582ce5f9102a4",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v4-root-field-types",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "1e7dae8c83bf8620f53f2bea13c175eeff95e7e955783f6f529bb1dcbdcdb6d2",
-    "nativeAssistantMessages": "pi1-rpc-deltas-v3-bound-message-and-tool-receipts",
-    "nativeNotices": "session-extension-v2-bounded-runtime-failure",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "014485adc690998e395d334ea3ae67f72be6060a2fc78a1185df7b8d1da28fbf",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "nativeInputDisposition": "queued-only-v1",
-    "cacheWarming": "disabled-owned-decision-v1",
-    "thinkingLevel": {
-      "supported": [
-        "off",
-        "low",
-        "high",
-        "max"
-      ],
-      "newConfigurationDefault": "low",
-      "admission": "explicit-native-effective-before-prompt-v1",
-      "recovery": "mode-bound-v1"
-    },
-    "modelSelection": "caller-selected-native-verified-v1",
-    "providerConfigurationSourceSha256": "75a9a13f13f224dc092bd8ebf49e8747162172943761e44476c8eb18d80c52d4",
-    "credentialEnvironmentSourceSha256": "7b1dc57c41b0c77bae759e414e486914f9cde9b1ef0802965de2982fb82cf7d2",
-    "runtimeSandboxSourceSha256": "b9f05e522f92b6bade51c7a17f8d28bf31ab9db26510b8d5ddce8519d563a875",
-    "recoveryIdentitySourceSha256": "f74d061cc07b0c7ca04df62ca991d940a733d9ef6594b3362451769fc10030b8",
-    "nativeCancellation": "acknowledged-cancelled-terminal-preserves-usage-v1",
-    "dependencySecurityPatchSha256": "5273a195b952f233336122842faaf650193c04f36b9359d20d4d63079b0ce814",
-    "openRouterAttributionSourceSha256": "1211191529d6073b733b311c3d69cada4973eede0f3e540c46e261f78e0b90f9",
-    "preparedHarnessHomeSourceSha256": "bb286f7ddc6e9597c56d46bf7ff6e3b556c5b680d7e147fd46518724432b083e"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v6-identity.json

@@ -1,23 +0,0 @@
-{
-  "commandDigest": "sha256:d2b470e940115a1cd8a31cd5d2ddde2837912e965d3475deede09d67bff6346f",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 6,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "0.84.2",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "b2ce6bb2d9b93c4265b2c363cbf1433e06bb3349327f59b6f8eb3fdbd1b03d6a",
-      "darwin-x64": "a9269f6e0675ad1b50b24e76d47b971d4238ff25ddd57074b707db2a9bc83a74",
-      "linux-x64": "05eb422d9ce9e32b081cb2d2a3433dc113d66a55f993125b74b1666002cf3b67"
-    },
-    "wrapperSha256": "dc4786faff30942e82106c87a8984a75fb979a925ff1d62648500a642b920cac",
-    "helperSha256": "2df24aee67ca6a5cc813e1f87324f51a72f6a104757daed97a09cbbcb63626d4",
-    "extensionSha256": "d479d4f510295077b8904645e161a527531233a688760a80cca8db9ae01f3b02",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v1",
-    "pathPolicy": "sdk-normalization-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v7-identity.json

@@ -1,24 +0,0 @@
-{
-  "commandDigest": "sha256:fec5b1448f4135710887133a9192747c476a825a56c255b52b17b1780ccb3761",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 7,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "0.84.2",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "3703361965d4e0b641fcd5eac4079e9b6c0de47b4b245a5b31b7da7b52c94128",
-      "darwin-x64": "885d9fde187bd1a877838ac309aa68df4b928e0727ca341b3b8f3b1e7467ad12",
-      "linux-x64": "425afafe8a1419c86333a6eaa93bf56f0e78a4dc919dcef491f13e451550c5e2"
-    },
-    "wrapperSha256": "2b590e8e12133a77ee71cba2a688bf1e2bc73cfb771235a823ed9cdc3cd8c095",
-    "helperSha256": "153caaa32b93313a81636a28af32ca8dcce295c200853f5897e0387f79a0d92d",
-    "extensionSha256": "2b74a4a2e6a42def3d9918a46732e0e1b8c618791d2b22970cfb3e9d285e55ad",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v8-identity.json

@@ -1,29 +0,0 @@
-{
-  "commandDigest": "sha256:843d30e419914529755c9827d9151a306da1b50b643be7eab1abe797641a37ce",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 8,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "0.84.2",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "0187153354338cf4919d213dd2977e1be1073ad3941c7b9b5c8a09c5b32828e4",
-      "darwin-x64": "22c593576e78edb27bbe6234aabd31a7d65f6be7503683f568d0730ebe6c75a0",
-      "linux-x64": "016ce3653bdfc1c7269e3bf7d4bf26e48b0d0b7d409fd153f3f1b882e986654d"
-    },
-    "wrapperSha256": "9fd9a685fb79b4f73a8dac08cbe360a6de87ffcb596cdaff1191e3ac57c24f56",
-    "helperSha256": "a19087c0af8fb3896fe3290280695f8f936574013bc4acde650f11f023f0f03b",
-    "extensionSha256": "2b74a4a2e6a42def3d9918a46732e0e1b8c618791d2b22970cfb3e9d285e55ad",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "79aad2d688b03362e8cfcbf7a08f78a8383869f6882a9c9ed66f1d18efb94f2b",
-    "nativeAssistantMessages": "sdk-boundaries-v1",
-    "nativeNotices": "session-extension-v1",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "c619080ec72a577889c382d44ea9024b10efdb9d83e933c03bfdd8da79ede591"
-  }
-}

packages/paperclip-runner/test-fixtures/pi-acp/profile-v9-identity.json

@@ -1,30 +0,0 @@
-{
-  "commandDigest": "sha256:edf058835ee84de3869c4a8e8bdb71a934ffdb9f34daa37ae6faeb92371d1cdf",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "pi",
-    "agentProfileVersion": 9,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "0.0.33",
-    "agentRuntimeVersion": "0.84.2",
-    "nodeVersion": "24.21.0",
-    "closure": {
-      "darwin-arm64": "0187153354338cf4919d213dd2977e1be1073ad3941c7b9b5c8a09c5b32828e4",
-      "darwin-x64": "22c593576e78edb27bbe6234aabd31a7d65f6be7503683f568d0730ebe6c75a0",
-      "linux-x64": "016ce3653bdfc1c7269e3bf7d4bf26e48b0d0b7d409fd153f3f1b882e986654d"
-    },
-    "wrapperSha256": "9fd9a685fb79b4f73a8dac08cbe360a6de87ffcb596cdaff1191e3ac57c24f56",
-    "helperSha256": "a19087c0af8fb3896fe3290280695f8f936574013bc4acde650f11f023f0f03b",
-    "extensionSha256": "2b74a4a2e6a42def3d9918a46732e0e1b8c618791d2b22970cfb3e9d285e55ad",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "nativeQuestions": "select-confirm-input-editor-v2",
-    "pathPolicy": "sdk-normalization-v1",
-    "mcpToolNames": "provider-safe-exact-source-v1",
-    "acpxPatchSha256": "79aad2d688b03362e8cfcbf7a08f78a8383869f6882a9c9ed66f1d18efb94f2b",
-    "nativeAssistantMessages": "sdk-boundaries-v1",
-    "nativeNotices": "session-extension-v1",
-    "messageProjectionSha256": "17d1e91b948dfa6a56e1905645add52b502041ad843c8d50a13b07956f22aadd",
-    "noticeProjectionSha256": "c619080ec72a577889c382d44ea9024b10efdb9d83e933c03bfdd8da79ede591",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-mainline-v22-identity.json

@@ -1,44 +0,0 @@
-{
-  "commandDigest": "sha256:9027ee2bdf9180e3267b7d05b56b0703943251a29713c393f7a3f2ef1072efd2",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 22,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "ddd98aabe20f4d40b04bb58126bda548a9d85b8234a3f9ea84b6db414e9b4814",
-    "semanticDirectDriverSourceSha256": "72d5134a9567ced685bc942adf14ec5dfba04bcd6b0eeabe77eac0cec5c434c3",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "a104278d4d0e063a69bb464938db117dc27691b5bd4590c5a359e11f4917f623",
-    "semanticValidatorsSourceSha256": "38ae5379d47df633564730ec1359a16d21c0d0a68addb5e488b58c697f13362c",
-    "semanticSchemaBundleSourceSha256": "5e957fe0f0ba164441d6a5b8a276e52cf6f2ffaf99741faca99cff05e539221c",
-    "semanticSidecarProtocolSourceSha256": "03c0c95b900f9dc18f29f6be27b8c79bc0bcab29780190d46a74e95328081236",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "semanticContinuationSourceSha256": "eb877719ef32a935afa4ec93f0f1c43d58d55bc4e1042965febcac4c45ed851c"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-mainline-v23-identity.json

@@ -1,44 +0,0 @@
-{
-  "commandDigest": "sha256:6ca1e2c9efa23887ba6f08d89980c91d13114640ac8a1a79f00f27aa8cd39d63",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 23,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "89e3dde25ff35bfd4d7f520fd9d14af3cb9027f182a2d51431d298f1015be580",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "ddd98aabe20f4d40b04bb58126bda548a9d85b8234a3f9ea84b6db414e9b4814",
-    "semanticDirectDriverSourceSha256": "72d5134a9567ced685bc942adf14ec5dfba04bcd6b0eeabe77eac0cec5c434c3",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "a104278d4d0e063a69bb464938db117dc27691b5bd4590c5a359e11f4917f623",
-    "semanticValidatorsSourceSha256": "38ae5379d47df633564730ec1359a16d21c0d0a68addb5e488b58c697f13362c",
-    "semanticSchemaBundleSourceSha256": "5e957fe0f0ba164441d6a5b8a276e52cf6f2ffaf99741faca99cff05e539221c",
-    "semanticSidecarProtocolSourceSha256": "03c0c95b900f9dc18f29f6be27b8c79bc0bcab29780190d46a74e95328081236",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "semanticContinuationSourceSha256": "eb877719ef32a935afa4ec93f0f1c43d58d55bc4e1042965febcac4c45ed851c"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-mainline-v24-identity.json

@@ -1,44 +0,0 @@
-{
-  "commandDigest": "sha256:87e275270e50b42290d10ecec9dfce86ffca2b7a7519cb60c584004adfc86437",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 24,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "89e3dde25ff35bfd4d7f520fd9d14af3cb9027f182a2d51431d298f1015be580",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "6fc6ceb1222cec5586952cf51e2df045ecf751adfc937f5125550a311f5d3896",
-    "semanticDirectDriverSourceSha256": "72d5134a9567ced685bc942adf14ec5dfba04bcd6b0eeabe77eac0cec5c434c3",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "a104278d4d0e063a69bb464938db117dc27691b5bd4590c5a359e11f4917f623",
-    "semanticValidatorsSourceSha256": "38ae5379d47df633564730ec1359a16d21c0d0a68addb5e488b58c697f13362c",
-    "semanticSchemaBundleSourceSha256": "5e957fe0f0ba164441d6a5b8a276e52cf6f2ffaf99741faca99cff05e539221c",
-    "semanticSidecarProtocolSourceSha256": "03c0c95b900f9dc18f29f6be27b8c79bc0bcab29780190d46a74e95328081236",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "semanticContinuationSourceSha256": "eb877719ef32a935afa4ec93f0f1c43d58d55bc4e1042965febcac4c45ed851c"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v10-identity.json

@@ -1,33 +0,0 @@
-{
-  "commandDigest": "sha256:c6741d7e49cd1af4ecad9e07181ef96305bde48b56dce2958547f2f066666231",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 10,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v1",
-    "semanticReceiptSourceSha256": "3d3d0fe5ce0e4dbfc78cf95b1bfcff4d4b3760c548e74c6c12db5bcacdd46ae2",
-    "semanticBridgeSourceSha256": "ab8f872344b2beb50e3f9970e0631c451a5493e66d259582ecc9a214624269b5",
-    "toolEvidenceSourceSha256": "f0a93aab9940051972028d6f2610b4018a5a0d6b2326b7c61b767b38442629ca"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v11-identity.json

@@ -1,42 +0,0 @@
-{
-  "commandDigest": "sha256:d56589c43437277b527ed61155de7d882e3ae5316d67502d8b98a0d435f69f99",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 11,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "a261497560840da66613a5f4a3dafeba05e53d3a8647c180c9604b3cf983dc23",
-    "semanticDirectDriverSourceSha256": "31e36917ee3592fa6d8f4b86632129fdffae20c45aed2e0e367ccf523e064f88",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "bb55e18c5563bf5ec226e301c3399229304f295e986865e96554f193535368f2",
-    "semanticSidecarProtocolSourceSha256": "165cad76f224d60f0dc7928736d47a16787eaa8ab9e4c2222488da5fc8ad632e"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v12-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:48cecd8dc77a5533240fcf2f29d19be05380da4a79f8e5061480f94241db75a8",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 12,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "d58076d59ec23fe2261cba3aa0dca3e9f189105f0a5fa7ca3eeaac05cb338f31",
-    "semanticDirectDriverSourceSha256": "31e36917ee3592fa6d8f4b86632129fdffae20c45aed2e0e367ccf523e064f88",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "bb55e18c5563bf5ec226e301c3399229304f295e986865e96554f193535368f2",
-    "semanticSidecarProtocolSourceSha256": "165cad76f224d60f0dc7928736d47a16787eaa8ab9e4c2222488da5fc8ad632e",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v13-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:3ff08fbe76fe4549c9eb01e8794428d8909c65c151d775220f2ec111d9e6f7c1",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 13,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "560010031c58cf6d492784f62fadc96f33bec9c1d12e67fece48b4dfcee518ed",
-    "semanticDirectDriverSourceSha256": "2db465e56ba41f06b406e039e566d9e3aea0a014fc6a47a6a54d5bc682dabcab",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "72d9800603a652d6580084bb3b5dac4d4dd6d644324b0d15d293d7c198fd6b55",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v14-candidate-historical-identity.json

@@ -1,53 +0,0 @@
-{
-  "commandDigest": "sha256:9e11997fe602749000ebef97a9933c976afe1783be884871488c1e0d3e7d7b34",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 14,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "5cf0ad62e06071f59eb27cedd7aa5d5852826ab1dfb96dbda846adc1535a9eee",
-    "semanticDirectDriverSourceSha256": "0cb9b66ad41e643c9e018eeb6d6468eb306d0b1ad7d2776ffa9dd11d2b28abca",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "b74133bd72f92d6bd0652c1772a45227f6a549232554528fef2761b17b8f02e7",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "7dc408a9c5114e7eb28f46fbab5d4cac23789095ab2e37725a3e15518f88232a",
-    "runtimeSandboxSourceSha256": "d78b859d170b931b8fc310577e6d1d01a1c20f168ad48c5de84bca2ea325aad9",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "f5e825c368ebd739afa51711bfbbc72ac4d19a9d23bcafd9738ff0e337f55eaf"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v14-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:5e5955c57917a7e7c25703b3ed9e420cd72105eab033b611508dc37fdba3858b",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 14,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "b83898b2453d0f425275d3bc58140675fc8f14505703103079094093f16be43f",
-    "semanticDirectDriverSourceSha256": "2db465e56ba41f06b406e039e566d9e3aea0a014fc6a47a6a54d5bc682dabcab",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "72d9800603a652d6580084bb3b5dac4d4dd6d644324b0d15d293d7c198fd6b55",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v14-mainline-pi-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:5e5955c57917a7e7c25703b3ed9e420cd72105eab033b611508dc37fdba3858b",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 14,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "bd5393058a218040d217fa85449d59a6f30507de54cd645bf0ef21422823f85e",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "b83898b2453d0f425275d3bc58140675fc8f14505703103079094093f16be43f",
-    "semanticDirectDriverSourceSha256": "2db465e56ba41f06b406e039e566d9e3aea0a014fc6a47a6a54d5bc682dabcab",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "72d9800603a652d6580084bb3b5dac4d4dd6d644324b0d15d293d7c198fd6b55",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v15-candidate-historical-identity.json

@@ -1,53 +0,0 @@
-{
-  "commandDigest": "sha256:3ad622b836afef0849a53ed4d9ae7b00dfd91d290bb8b62ce6390357f26c0456",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 15,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "5cf0ad62e06071f59eb27cedd7aa5d5852826ab1dfb96dbda846adc1535a9eee",
-    "semanticDirectDriverSourceSha256": "0cb9b66ad41e643c9e018eeb6d6468eb306d0b1ad7d2776ffa9dd11d2b28abca",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "7dc408a9c5114e7eb28f46fbab5d4cac23789095ab2e37725a3e15518f88232a",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "f5e825c368ebd739afa51711bfbbc72ac4d19a9d23bcafd9738ff0e337f55eaf"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v15-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:8faf47520f156c62c79ea6ca7d1d90a85ddc9a6621f798bd14e87bc6c643bd04",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 15,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "c0139d0b3af085ec5272a7812c9f89aff0e8618d1d44d9c9e9a59525d1972436",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "b83898b2453d0f425275d3bc58140675fc8f14505703103079094093f16be43f",
-    "semanticDirectDriverSourceSha256": "2db465e56ba41f06b406e039e566d9e3aea0a014fc6a47a6a54d5bc682dabcab",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "72d9800603a652d6580084bb3b5dac4d4dd6d644324b0d15d293d7c198fd6b55",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v15-mainline-pi-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:8faf47520f156c62c79ea6ca7d1d90a85ddc9a6621f798bd14e87bc6c643bd04",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 15,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "c0139d0b3af085ec5272a7812c9f89aff0e8618d1d44d9c9e9a59525d1972436",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "687270d7bbe3dccce6c2fed8664e76cda724b43e545cb153b9f54b018de52927",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "8a43ebafb7a85dd1714ed6945670472666dcb63e8af32b4a74644163fa0e370d",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "b83898b2453d0f425275d3bc58140675fc8f14505703103079094093f16be43f",
-    "semanticDirectDriverSourceSha256": "2db465e56ba41f06b406e039e566d9e3aea0a014fc6a47a6a54d5bc682dabcab",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "00a684f9aea87f68eabf0974681c52461bc308631a1252a89c4ed087d7158b28",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "72d9800603a652d6580084bb3b5dac4d4dd6d644324b0d15d293d7c198fd6b55",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v16-candidate-historical-identity.json

@@ -1,53 +0,0 @@
-{
-  "commandDigest": "sha256:2d826980ee935f9f32108ef3528657a9b0b658dfe9a8ff5bfd499f17aa908fb6",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 16,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "f5e825c368ebd739afa51711bfbbc72ac4d19a9d23bcafd9738ff0e337f55eaf"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v16-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:8591f9a78a16aac4cf558733cd512f09def483fc11c673504bf93be7476d994c",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 16,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "eec0e3740173ea377e73f54da1260a9063606e0dcbc3f08ddb01942a50085f56",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v16-mainline-pi-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:8591f9a78a16aac4cf558733cd512f09def483fc11c673504bf93be7476d994c",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 16,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "eec0e3740173ea377e73f54da1260a9063606e0dcbc3f08ddb01942a50085f56",
-    "semanticValidatorsSourceSha256": "950b49b233d8dd62ff858398becfc55f0a181160cb8a434d9221b5c17816867c",
-    "semanticSchemaBundleSourceSha256": "2974c75590f816fbdbc7806f531698fdc8d62a99601a17625b81de0f074d6383",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v17-candidate-historical-identity.json

@@ -1,54 +0,0 @@
-{
-  "commandDigest": "sha256:bb7c8cdd1ee01065015b0c88e32fac953d5fbe2b2bb224781df57ca87c820a47",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 17,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "nativeExecutionSourceSha256": "98aad5290e0ffef0628e5f6ef2e5e9589efc55b7fe29c5009681001f123c54f0",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "f5e825c368ebd739afa51711bfbbc72ac4d19a9d23bcafd9738ff0e337f55eaf"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v17-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:481d0852ae8272a90f9912723d540518a874a0da65a9070e33b52ea1a14cbd7f",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 17,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "4f0219ed00938c5d8bc1b11532ecab9c13230012b23bfd6b7dd6b992e58e98d5",
-    "semanticSchemaBundleSourceSha256": "fe82ac2cbf194d31ac801de6a3cacfb165cb34146c5c26557f283b8c87a5f01e",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v17-mainline-pi-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:481d0852ae8272a90f9912723d540518a874a0da65a9070e33b52ea1a14cbd7f",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 17,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "4f0219ed00938c5d8bc1b11532ecab9c13230012b23bfd6b7dd6b992e58e98d5",
-    "semanticSchemaBundleSourceSha256": "fe82ac2cbf194d31ac801de6a3cacfb165cb34146c5c26557f283b8c87a5f01e",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v18-candidate-historical-identity.json

@@ -1,55 +0,0 @@
-{
-  "commandDigest": "sha256:8fb78eb902e7b162045d887b21c4738a4cd18326015c523c762601fd45f9c8e7",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 18,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "guardedInstallationSourceSha256": "be0271e809639a4e6e0ecb21f3f04e6d7f17b2374682930a8b85798c1eb70e71",
-    "nativeExecutionSourceSha256": "f34b5e28109ed183d922fdd9d6c15acc4a1e57dcda118ca9a114c8905dd0a3d0",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "9bbe8329064ee88418528394f8e1cdc716a0b2b35092dc70729b8850e46b7a68"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v18-claude-qualification-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:bc0827bd362d01b5595738515f0ca1adcd6961ec622034cbda4633b0f5ec4701",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 18,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "d2777bfc3e15ee7861ce57a069ffb55d3dc266364adf7915845bfbad5aa2e402",
-    "semanticDirectDriverSourceSha256": "187772a17e5d4f854ec10f37abfcd294cf4f1db58a91d18e7645f4a8c617f329",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "4f0219ed00938c5d8bc1b11532ecab9c13230012b23bfd6b7dd6b992e58e98d5",
-    "semanticSchemaBundleSourceSha256": "fb4a232460dc9e6c7e7221cb4ddd66d7cb82fa0b35e1b3eb04f2d1ee5ee18c86",
-    "semanticSidecarProtocolSourceSha256": "03c0c95b900f9dc18f29f6be27b8c79bc0bcab29780190d46a74e95328081236",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v18-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:2ec904f44218f51058fa83d7437b26c4551e1c65e6f2c55f5a6386fa4061e96d",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 18,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "4f0219ed00938c5d8bc1b11532ecab9c13230012b23bfd6b7dd6b992e58e98d5",
-    "semanticSchemaBundleSourceSha256": "969c1c47bc538422210e3789bd53249ebf0f6be335a38c7997d201f0783dfd6b",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v18-muse-historical-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:5e79c2b1a42b98a545bafe9e93f8c6b6c423bec1c18dc1f0a3cf48477b757389",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 18,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "2232194f5da2efb3681a5727d93af5253fe7416fdea41bc4fc98ca5deeb0e4b8",
-    "semanticSchemaBundleSourceSha256": "1e2b5d573a929c34a7104efe6dea9621218fb7fe7eac3851a24c41d8284c8dd4",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v19-candidate-historical-identity.json

@@ -1,58 +0,0 @@
-{
-  "commandDigest": "sha256:c2825f706f839071ce5aa9ddc2a058d785a55644964ff9c2ba878ac9ccc66fef",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 19,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "runtimeRequestBridgeSourceSha256": "646c01cc073e62f577ecebb6554d785b08edb3fd6e2fcb4db402e17974edd25b",
-    "runtimeRequestFacadeSourceSha256": "773b860fb7a1444bc769569fbc8a3b67bd08d7ade3e7a843358e4c707f182b72",
-    "runtimeRequestNotificationSourceSha256": "6196c6175f11c69295dc00fc773201f4fdeca26c500653870253c43b81e65211",
-    "guardedInstallationSourceSha256": "be0271e809639a4e6e0ecb21f3f04e6d7f17b2374682930a8b85798c1eb70e71",
-    "nativeExecutionSourceSha256": "f290d8307f57803aac861a1ba6f847774d38c89e62f32293d69effd289d5c0c4",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "9bbe8329064ee88418528394f8e1cdc716a0b2b35092dc70729b8850e46b7a68"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v19-claude-qualification-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:a4c7e955df18bf2448224ecce2120b43ede8054fe00e7b33b4044b8bd284b321",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 19,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "d2777bfc3e15ee7861ce57a069ffb55d3dc266364adf7915845bfbad5aa2e402",
-    "semanticDirectDriverSourceSha256": "187772a17e5d4f854ec10f37abfcd294cf4f1db58a91d18e7645f4a8c617f329",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "4f0219ed00938c5d8bc1b11532ecab9c13230012b23bfd6b7dd6b992e58e98d5",
-    "semanticSchemaBundleSourceSha256": "e9ca8d1a7449fe28b63dcd0f858bfc233f1ec791e159cdd8436d6ea34a3089fe",
-    "semanticSidecarProtocolSourceSha256": "03c0c95b900f9dc18f29f6be27b8c79bc0bcab29780190d46a74e95328081236",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v19-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:38abf359adeef43f1f19230245c6e2051c55fdd79571882ef6f00b7cb2958d93",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 19,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "0703401404effcd5d431b5178bde78e9f63f797a39389add22add7c33986f75c",
-    "semanticSchemaBundleSourceSha256": "95551282468ec16bec4c3ddd0a77a9b2b0e044d7ff018354d4229c3f26e3e228",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v19-muse-historical-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:2fec061f29f9cac4f6aa70f9329e1b27ce0c9cf4825030fdbb78979ced9bc201",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 19,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "3b0ac8d3f3cb92747d0bcea472ab0419a140e1cfdc43047e2c22542acc2d105f",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "2232194f5da2efb3681a5727d93af5253fe7416fdea41bc4fc98ca5deeb0e4b8",
-    "semanticSchemaBundleSourceSha256": "559bde5f5e6433080fc5afd54ea35dc51a378f395b2c45728261b328b7d4d3fc",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v20-candidate-historical-identity.json

@@ -1,68 +0,0 @@
-{
-  "commandDigest": "sha256:6ab53285d7cb0eaf79fafec9e0bf0f1a42044761b4b0cf129e0159c8c2fad539",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 20,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "nativeSessionRuntimeSourceSha256": "882ca4304ff32077e0e16eb7366512d10f9c08d75d3f1204e6a7f6c60dbea03e",
-    "nativeRuntimeContextSourceSha256": "b61065b993d79a8cb6525fe6b398049150d8c9c19dac18dd1d0ce57ae38e1f99",
-    "nativeSessionContractSourceSha256": "0262d1bc0b43894473bde2f05064455ebf73fbb1cd1c0cfa5f42e19596ef80fb",
-    "harnessSessionContractSourceSha256": "ffc9e67b4e864ab310f22d94edc4e0898222a4e576ffc6baa422d505909a6868",
-    "harnessBackendSourceSha256": "31a1da9cb93fcf9eef65162217ef0e35199557b06d8d232b1265a2af3f3072d7",
-    "harnessSessionSourceSha256": "a9d748b8530544342bbc9f59968816664872782a0865db76ca15f28a1705697b",
-    "transportContractSourceSha256": "d0e7fd07ae41623ec19160b1e1c6895b1ebc3de53bb6aafc79efae6c1e32bcdb",
-    "nativeBackendSourceSha256": "b408aed94ed9125c62ca8cae030f79add2dc511f3c109063710eb978e7e4c65e",
-    "nativeBackendFactorySourceSha256": "4c8435dc9930b9823268625387e29e1a92d95696e9ebeb4a7127ec467909b283",
-    "nativeInstructionsSourceSha256": "e7c46e81cc9c93f9a4f805b5091ef08c59ea70c62f208cfda70d6edeed363898",
-    "runtimeRequestBridgeSourceSha256": "0d371a09048a592495ae5a0531ad9e9d619e26018318897fabb5b45a10c05837",
-    "runtimeRequestFacadeSourceSha256": "773b860fb7a1444bc769569fbc8a3b67bd08d7ade3e7a843358e4c707f182b72",
-    "runtimeRequestNotificationSourceSha256": "6196c6175f11c69295dc00fc773201f4fdeca26c500653870253c43b81e65211",
-    "guardedInstallationSourceSha256": "be0271e809639a4e6e0ecb21f3f04e6d7f17b2374682930a8b85798c1eb70e71",
-    "nativeExecutionSourceSha256": "c55bdafb9a5ed97c09117c168ecd0e496ea8ae8b6e84200d90c375a143892fdc",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "9bbe8329064ee88418528394f8e1cdc716a0b2b35092dc70729b8850e46b7a68"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v20-identity.json

@@ -1,43 +0,0 @@
-{
-  "commandDigest": "sha256:7fa710c697582b1b4d85cdf833178b1940656cb6efb44ac4d356b2f27e6b3d4b",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 20,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "91629734a80f0d32295cbce2c573b32af9e345f45302ff4525c269f66811aa06",
-    "semanticDirectDriverSourceSha256": "2b7b7eaadee658312816ecdcbcb311ce491521fedf39e2ecb571036c36ff7b8e",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "fa2b0c81cb9a62965839c905db81b930794774d8d557a01bce077dae5830b594",
-    "semanticValidatorsSourceSha256": "38ae5379d47df633564730ec1359a16d21c0d0a68addb5e488b58c697f13362c",
-    "semanticSchemaBundleSourceSha256": "36ad8a83a17111167d3cc4ef4123b36fa648a1825acd59bd90b3f8b566a4d335",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v21-identity.json

@@ -1,70 +0,0 @@
-{
-  "commandDigest": "sha256:3bd433d9835ab6998ee712da41cad724006bb85d444f0cf96550708565605b7d",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 21,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "55a912125cd9cb71c80aafb7dc013aabf88002b7a8c95b3c74c3201ebc8ef527",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "6f872180254a747262c3b4a084012704676d7d0b9d9ceb9837709a0bd9c75f70",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "4b517eed447615b3cc820af348ccc360978175149caa0bbc838d1f78332abe75",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "f65b3d667c7d2657384284aba14557e8ea736fef2ae458bacc98d64f280232dd",
-    "semanticDirectDriverSourceSha256": "5012d883c2dd192fff20308a87e0b4001fa4b258a774cec4751728bfe781185d",
-    "semanticValidationSourceSha256": "039fca52266fe21ba74ca64660d21228314d8ed737b19ba67941bfb25086e4d5",
-    "semanticNormalizationSourceSha256": "b1ce59251bf9c671f66e0e5173646190b9a2d1bfc5bdb7fb123824213986b92b",
-    "semanticCompletionContractSourceSha256": "bd4bb79d2be5c4ee3765df67dfb4da98ef95bc532cac872be40cb41a6bff6cda",
-    "semanticValidatorsSourceSha256": "c3e7328c0d27feb8ee2ca53b1e1c6963c204939ed22b875add748de77c99b52b",
-    "semanticSchemaBundleSourceSha256": "619f2149a89f952253f8e178645ce4bf986215884b04ce0b7c5ae2ac940849f7",
-    "semanticSidecarProtocolSourceSha256": "66f717653936a80ef3897348adead666c842b6e56278521f4f2541d0a430b51b",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "nativeSessionRuntimeSourceSha256": "882ca4304ff32077e0e16eb7366512d10f9c08d75d3f1204e6a7f6c60dbea03e",
-    "nativeRuntimeContextSourceSha256": "b61065b993d79a8cb6525fe6b398049150d8c9c19dac18dd1d0ce57ae38e1f99",
-    "nativeSessionContractSourceSha256": "0262d1bc0b43894473bde2f05064455ebf73fbb1cd1c0cfa5f42e19596ef80fb",
-    "harnessSessionContractSourceSha256": "ffc9e67b4e864ab310f22d94edc4e0898222a4e576ffc6baa422d505909a6868",
-    "harnessBackendSourceSha256": "31a1da9cb93fcf9eef65162217ef0e35199557b06d8d232b1265a2af3f3072d7",
-    "harnessSessionSourceSha256": "a9d748b8530544342bbc9f59968816664872782a0865db76ca15f28a1705697b",
-    "transportContractSourceSha256": "d0e7fd07ae41623ec19160b1e1c6895b1ebc3de53bb6aafc79efae6c1e32bcdb",
-    "nativeBackendSourceSha256": "cf953a154f89e19597504e9426a390ca16c85b41630d5df3f0f28c145a0eafcf",
-    "nativeBackendFactorySourceSha256": "ae91eaa54e2fb4bc58c445e41d6453ecc73864d07f1240dff5936af9987bcaef",
-    "nativeInstructionsSourceSha256": "bbdab79c5b1bd57c4ddbc44edfe745b40eb694aa28a465452964109aedd6104b",
-    "runtimeRequestBridgeSourceSha256": "0d371a09048a592495ae5a0531ad9e9d619e26018318897fabb5b45a10c05837",
-    "runtimeRequestFacadeSourceSha256": "773b860fb7a1444bc769569fbc8a3b67bd08d7ade3e7a843358e4c707f182b72",
-    "runtimeRequestNotificationSourceSha256": "6196c6175f11c69295dc00fc773201f4fdeca26c500653870253c43b81e65211",
-    "guardedInstallationSourceSha256": "be0271e809639a4e6e0ecb21f3f04e6d7f17b2374682930a8b85798c1eb70e71",
-    "nativeExecutionSourceSha256": "60dd195863bc31b29e7da51be4b90bf84390d3c9da27efe71cd43b45db68d610",
-    "installationSourceSha256": "9934653d6983905930099b1691b1f0c05461e04e950bb27dd0f92e64fc8e28e1",
-    "assetOwnershipSourceSha256": "3c03535df58d6f8d746ce3513a7e1c195f0145e622448ebb10f7d19b6a603aca",
-    "assetInstallerSourceSha256": "d3bd9514e5920d0cc3567aa50487fb534c57a6f66b8da0d3f22c5f6e499c841f",
-    "credentialBindingSourceSha256": "d54e5f125225921e8e69d83343c7457448ed79fb1543a50e5d8554f37d2207da",
-    "sidecarErrorSourceSha256": "bfc8da59815a8c31cb79d2560b04492ee93736188ac629009e69a4e0a7a1829c",
-    "profileSourceSha256": "1572b19f84410959ecccbfcb5ffc168ddd85d1a4f8238fabeaaf662f6289fe25",
-    "metadataProbeSourceSha256": "e8bdefca57b9678d2b5d99b0bc604301d12993b9c9cc4ecb4b5d3df0b83cec3f",
-    "runtimeHostSourceSha256": "7a43934ef7ff7ecd9c6f2da729c439efd636e3453022cd44ad035d0b596c4eeb",
-    "runtimeAdapterSourceSha256": "5a056b64e0c187bd74aa7d04265a9b1db20e2f0d9d93880e0d628b4d25a55fc7",
-    "runtimeSandboxSourceSha256": "e56b7afda01cd4d3b16559c3a76939a967ab2993aa73848588bc6ab3aa223c4b",
-    "cancellationSourceSha256": "a07d1a9e982dec0ae130c1ad1efa5bc75c6a39e013b730ba3ee45256f09ceeca",
-    "agentFilesSourceSha256": "fb32f6badc13dfa22f231479509b631b2f0eba0c99b1ab9f3cd5c0c601aa03ba",
-    "nativeDistributionSourceSha256": "9bbe8329064ee88418528394f8e1cdc716a0b2b35092dc70729b8850e46b7a68"
-  }
-}

packages/paperclip-runner/test/fixtures/copilot-profile-v21-mainline-monitor-identity.json

@@ -1,44 +0,0 @@
-{
-  "commandDigest": "sha256:1dad3d26d91e66c6f911dbfa43e7963f36c0bbf0d7709f4bbb568029a8b4b46a",
-  "declaration": {
-    "schema": "paperclip.acpx_profile_declaration.v1",
-    "agent": "copilot",
-    "agentProfileVersion": 21,
-    "acpxVersion": "0.13.1",
-    "agentServerVersion": "1.0.88",
-    "protocolPolicyRevision": "copilot-agent-manual-v1",
-    "acpxPatchSha256": "00d6af17216cb0cad902b48633eb19bf0ec6b05837a984cb24661fca593f09c1",
-    "policySha256": "a4be69be43db84052560420a3ca546a665c9165573c24d543eb33d144ba138a3",
-    "distributionSourceSha256": "c0a65e247fc47b263bd369a3d5ab505c4b323d4e6493be8a9ecbeb0e9dbb9107",
-    "agentFilesBinding": "registered-runtime-context-v1",
-    "systemInstructionDelivery": "COPILOT_HOME/copilot-instructions.md:replace-under-lifetime-lease-before-launch:v1",
-    "sharedRuntimeContract": "paperclip.acpx-runtime-contract.v1",
-    "innerDistributionSourceSha256": "9bb08347eed01f1ab44e065c8b06ead9be3a25973d6e6329dc4c0a099096279a",
-    "upstreamAppSha256": "7b48282a19b5b0814a0c96ad5e3a125173d792cc55f9525b2effea962f6063c0",
-    "patchedAppSha256": "61f8eebe0c30cc03b311c6818b2acb158a6d16ca58c8bfac5ebd42db095c2679",
-    "messageIdentityContract": "copilot-native-message-id-v1",
-    "ownedDistributionDelivery": "COPILOT_CLI_DIST_DIR:lease-owned-guarded-inner-distribution:v1",
-    "permissionContextContract": "copilot-edit-permission-context-v1",
-    "permissionContextSourceSha256": "fe1bb611bea289d81b1c7c973fbb01b93de133a7caa8fe78b7ff4ee1f485b224",
-    "permissionAdapterSourceSha256": "49421a779c76e286ce65d75052026eab9630b1995af9ccf045a2d43d284633ce",
-    "permissionLocationsSourceSha256": "f39a81da395b6e23aa2a1a45572a28846e5e81bfd3d764d9a456f74a79c752e9",
-    "permissionRedactionSourceSha256": "ad6770c69269087951790e2e87e22ac088e3d432769adf17ebc865ed512e6c4f",
-    "permissionClassifierSourceSha256": "1161eabd82e26133e3b3db3ab567f65d52808b03f176e93497e02c8330349fb4",
-    "permissionIdentitySourceSha256": "770b47305e571a81f344883057d0e4a482a1cd59ac77d045836593a8e739deb1",
-    "semanticToolReceiptContract": "paperclip.semantic_tool_receipt.v2",
-    "semanticReceiptSourceSha256": "b2795726b2234a663fec1a6ca11f0551ae69882fe9e82aa39686e952d036e791",
-    "semanticBridgeSourceSha256": "cf136da18e2cdbefae8e01d23d2c93f64eb7aebccaec938e84c2887c888f87ee",
-    "toolEvidenceSourceSha256": "49d7d09eb6957e596a173b0afd763544afe582f0c1f05cc0992fe51916a8fdb3",
-    "semanticNormalizedInputContract": "validated-forwarded-input-commit-v1",
-    "semanticSidecarSourceSha256": "17371b10bef0acfe7a5980e20fd575165f3e28c91608d38590fdca67d58c4edf",
-    "semanticDirectDriverSourceSha256": "9c27a6ef55d65190af11b597ee2214ba836b4d992cb75d2eccf9c3ea3311d07c",
-    "semanticValidationSourceSha256": "02fbb92681c78c5de5d2f1aae25aabc25a0e5df6b0ff4baccac652192a8da975",
-    "semanticNormalizationSourceSha256": "8b628b82e8eacc91cdcc6fdca2210ba4cf282f01e9c6f74e95ff271655b5047e",
-    "semanticCompletionContractSourceSha256": "a104278d4d0e063a69bb464938db117dc27691b5bd4590c5a359e11f4917f623",
-    "semanticValidatorsSourceSha256": "38ae5379d47df633564730ec1359a16d21c0d0a68addb5e488b58c697f13362c",
-    "semanticSchemaBundleSourceSha256": "36ad8a83a17111167d3cc4ef4123b36fa648a1825acd59bd90b3f8b566a4d335",
-    "semanticSidecarProtocolSourceSha256": "334b67857bd81e9924186890258cb2ad41f92b1ef68ec60fa5c5d9fbb277673c",
-    "semanticSidecarReceiptCommitContract": "correlated-tool-resolve-v1",
-    "semanticContinuationSourceSha256": "eb877719ef32a935afa4ec93f0f1c43d58d55bc4e1042965febcac4c45ed851c"
-  }
-}