Wire evidence
wire-witness
Capture provider traffic as evidence, with limits separate from acceptance.
Observed 2026-10-03 · Producer spec-spine 0.28.0
9e8c647676f1898643c7cd2c301f6bb339db1bd5 ↗13 specifications. Verification and deployment qualification are unknown in this export.
Bootstrap spec system
Foundational contract: authored truth lives only in markdown (+ YAML frontmatter); machine-consumable truth is compiler-emitted JSON only; every artifact is a deterministic function of (config, file contents); a typed authority graph governs who-owns-what.
Boundaries, authority, and dependency layout
Defines wire-witness as a library plus isolated hosts that capture provider wire exchanges and produce testimony without granting authority. Assigns ecosystem responsibilities, fixes the three-crate dependency layout, and reserves captured-output training, hosting, and publication to the owner.
Exchange record and provider normalization
Defines wire-witness.exchange/1, the canonical testimony produced from one observed provider exchange, and lossless normalization rules for Anthropic and OpenAI request, response, streaming, identity, usage, and cost fields.
Redaction, custody, and retention
Defines metadata-only default retention, explicit content capture, mandatory credential removal before durable writes, per-attempt custody, 0600 outputs, and a fresh memory-only CA private key for every capture attempt.
Allowlisted capture proxy and transparent streams
Defines the per-attempt proxy that intercepts only explicitly allowlisted provider hosts, tunnels authentication endpoints and every other host without inspection, and transparently handles CONNECT, TLS, HTTP/1.1, HTTP/2, SSE, and WebSocket traffic with bounded parsing and backpressure.
Attempt binding and stdio sidecar protocol
Defines the immutable AttemptBinding supplied by Statecraft, the versioned stdio protocol for one sidecar per attempt, capture-digest closure of the bracketed effect, and statecraft/wire-exchange/v1 testimony for admission by the host rather than by the witness.
Standalone host and per-process environment
Defines the standalone CLI, unsupervised session identity, child-only proxy and trust environment, additive JSON output, and the prohibition on global proxy, certificate, shell, browser, or operating-system trust mutation.
Repository constitution principles
Proposes six wire-witness-specific constitution principles covering testimony, secret custody, ambient-system mutation, exact supervised binding, lifecycle claims, and explicit incomplete or residual-risk states. The principles remain inactive until owner approval and the governed standing-constitution edit.
Instruction delivery observation
Defines a content-gated, offline comparison that reports whether exact operator-supplied instruction bytes were observed in a complete outbound provider request, without turning one observation into adapter qualification, policy, or authority.
Usage and cost summaries
Defines a deterministic binding-level summary of observed request counts, provider-attributed usage, reported cost, labeled estimates, identity variation, completeness, and gaps without converting testimony into a charge, quota decision, budget, or provider qualification.
Policy-bounded corpus export
Defines an immutable, bounded export manifest for policy-permitted wire testimony, preserving binding, retention, completeness, redaction, and artifact identity without granting permission to retain, disclose, replay, train on, admit, or evaluate the captured material.
Agent attribution is refused and ratification is owner-gated
Refuses agent attribution and known agent commit identities, suppresses provider attribution at its source, and adopts the two-flow Statecraft profile in which implementation and owner ratification remain separate.
Profile 13 uses the repository-local engine in .bin
Adopts Statecraft profile revision 13 with the existing exact engine pin, and replaces revision 12 acceptance with the recorded revision 13 identity.