Add protocol-native release producer and stable PCS CLI

Author: fraware

.github/workflows/pcs.yml

@@ -55,10 +55,17 @@ jobs:
         run: python examples/pcs_qc_release/scripts/ci_validate_pcs_exports.py
       - name: Validate committed release fixtures (pcs-core + registry)
         run: python examples/pcs_qc_release/scripts/ci_validate_release_fixtures.py
-      - name: Registry check Phase 2 handoff manifests
+      - name: Verify LabTrust release protocol package
+        run: |
+          labtrust verify-release-protocol \
+            --release-dir examples/pcs_qc_release/release \
+            --pcs-core pcs-core/examples/labtrust-release
+      - name: Registry check Phase 2 protocol artifacts
         run: |
           pcs registry check-artifact examples/pcs_qc_release/release/handoff_to_certifyedge.json
           pcs registry check-artifact examples/pcs_qc_release/release/handoff_to_pf.json
+          pcs validate examples/pcs_qc_release/release/labtrust_release_fragment.json
+          pcs registry check-artifact examples/pcs_qc_release/release/labtrust_release_fragment.json
       - name: Gate release fixtures against canonical pcs-core RC
         run: |
           python -m labtrust_gym.pcs.sync_pcs_core_rc \

docs/contracts/cli_contract.md

@@ -62,10 +62,14 @@ This document defines the contract for all LabTrust-Gym CLI commands: exit codes
 | attach-certificate | `--bundle <pending> --certificate trace_certificate.json --out certified.json` | 0 | Certified `ScienceClaimBundle.v0` | docs/pcs_export.md |
 | validate-pcs | `--run <dir>` or `--artifact <json>` | 0 | (stderr OK message) | pcs-core validation |
 | export-pcs-handoff | `--out handoff/`; optional `PCS_DETERMINISTIC=1` | 0 | `handoff/manifest.json`, `certifyedge/`, `provability_fabric/` | docs/pcs_handoff.md |
-| emit-handoff | `--kind runtime-to-certificate \| bundle-to-verifier`; `--trace` or `--bundle`; `--out <path>`; `--release-mode` | 0 | `HandoffManifest.v0` JSON | examples/pcs_qc_release/RUNBOOK.md |
+| emit-handoff-to-certifyedge | `--trace`; `--runtime-receipt`; `--property-id`; `--out`; `--release-mode` | 0 | `handoff_to_certifyedge.json` | examples/pcs_qc_release/RUNBOOK.md |
+| emit-handoff-to-pf | `--bundle`; `--out`; `--release-mode` | 0 | `handoff_to_pf.json` | examples/pcs_qc_release/RUNBOOK.md |
+| emit-handoff | `--kind …` (generic; prefer dedicated commands above) | 0 | `HandoffManifest.v0` JSON | examples/pcs_qc_release/RUNBOOK.md |
 | emit-release-fragment | `--release-dir <dir>`; optional `--out` | 0 | `labtrust_release_fragment.json` (`ComponentReleaseFragment.v0`) | examples/pcs_qc_release/RUNBOOK.md |
-| verify-release-fixtures | `--release-dir <dir>`; optional `--pcs-core <dir>` | 0 | (stderr OK labels) | examples/pcs_qc_release/RUNBOOK.md |
-| regenerate-release-chain | `--out <release-dir>`; `--certifyedge-bin`; optional `--pcs-core`, `--certifyedge-spec` | 0 | Full `release/` chain from demo + CertifyEdge | examples/pcs_qc_release/RUNBOOK.md |
+| verify-release-protocol | `--release-dir <dir>`; optional `--pcs-core <dir>` | 0 | (stderr OK labels) | examples/pcs_qc_release/RUNBOOK.md |
+| verify-release-fixtures | alias for `verify-release-protocol` | 0 | (stderr OK labels) | examples/pcs_qc_release/RUNBOOK.md |
+| regenerate-release-protocol | `--out <release-dir>`; `--certifyedge-bin`; optional `--pcs-core` | 0 | Full LabTrust protocol package from demo + CertifyEdge | examples/pcs_qc_release/RUNBOOK.md |
+| regenerate-release-chain | alias for `regenerate-release-protocol` | 0 | same as above | examples/pcs_qc_release/RUNBOOK.md |
 
 **PCS CI scripts (not `labtrust` subcommands):** `examples/pcs_qc_release/scripts/run_pcs_ci_local.{sh,ps1}` runs `pytest tests/pcs` plus `ci_validate_pcs_exports.py` (matches `.github/workflows/pcs.yml`). `generate_golden.py` regenerates `expected/` in deterministic mode.
 

examples/pcs_qc_release/RUNBOOK.md

@@ -262,29 +262,37 @@ bash examples/pcs_qc_release/scripts/generate_release_candidate.sh
 Produces `trace.json`, `runtime_receipt.json`, `trace_certificate.json`, pending/certified bundles,
 `handoff_to_certifyedge.json`, `handoff_to_pf.json`, `labtrust_release_fragment.json`, and `manifest.json`.
 
-**Phase 2 protocol producer (LabTrust-owned, not mirror-only):**
+**Phase 2 protocol producer (stable CLI — one command per artifact):**
 
 ```bash
-labtrust emit-handoff --kind runtime-to-certificate \
+labtrust emit-handoff-to-certifyedge \
   --trace examples/pcs_qc_release/release/trace.json \
-  --receipt examples/pcs_qc_release/release/runtime_receipt.json \
+  --runtime-receipt examples/pcs_qc_release/release/runtime_receipt.json \
+  --property-id hospital_lab.qc_release \
   --out examples/pcs_qc_release/release/handoff_to_certifyedge.json
 
-labtrust emit-handoff --kind bundle-to-verifier \
+labtrust emit-handoff-to-pf \
   --bundle examples/pcs_qc_release/release/science_claim_bundle.certified.json \
   --out examples/pcs_qc_release/release/handoff_to_pf.json
 
 labtrust emit-release-fragment \
-  --release-dir examples/pcs_qc_release/release
+  --release-dir examples/pcs_qc_release/release \
+  --out examples/pcs_qc_release/release/labtrust_release_fragment.json
 
-labtrust verify-release-fixtures \
+labtrust verify-release-protocol \
   --release-dir examples/pcs_qc_release/release \
-  --pcs-core ../pcs-core/examples/labtrust-release
+  --pcs-core ../pcs-core
 
-labtrust regenerate-release-chain \
-  --out examples/pcs_qc_release/release \
+labtrust regenerate-release-protocol \
+  --pcs-core ../pcs-core \
   --certifyedge-bin certifyedge \
-  --pcs-core ../pcs-core/examples/labtrust-release
+  --out examples/pcs_qc_release/release
+```
+
+One-shot shell wrapper (same as above, sets `PCS_DETERMINISTIC=1`):
+
+```bash
+bash examples/pcs_qc_release/scripts/generate_release_protocol.sh
 ```
 
 After pcs-core updates, re-align committed `release/` from canonical fixtures:

examples/pcs_qc_release/release/RELEASE_FIXTURE_MANIFEST.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "v0",
   "release_candidate": "pcs-v0.1.0-rc1",
-  "generated_at": "2026-05-17T22:23:22Z",
-  "pcs_core_commit": "b133c2ed32293b02c4e28971da7b3a7fffcedc2a",
+  "generated_at": "2026-05-17T22:32:01Z",
+  "pcs_core_commit": "a361fd2b388f88cdbc9e4e4691ae49dba714ab6c",
   "labtrust_gym_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "certifyedge_commit": "cb6848001e2e60a484e04eba5ad6be3fe2e4eccc",
   "provability_fabric_commit": "0f659b90c80c46a6bbfd51b0d37ea723b032fb9d",
-  "scientific_memory_commit": "226ad64eb61c085cfa6f6dcc7b4d0d752f615e5e",
+  "scientific_memory_commit": "c4259a4cb79fe7b195fd156feb346c08fc334d33",
   "artifacts": {
     "trace.json": "sha256:f99eb0a90cd2b9819816a25ec4e938663d26ae8d40868cd8188665e940f7ad5c",
     "runtime_receipt.json": "sha256:8e642b59657d70b408be354323006421b963bb0c9fc9514f6abc7aab305345b6",
@@ -15,6 +15,6 @@
     "science_claim_bundle.certified.json": "sha256:9b42d792199eb6f358d26f822699f0ed65bb4366eee306d4958d42121c656833",
     "verification_result.json": "sha256:3b4b1215b4be6a945c3b99bb548e33a08527981290e7be1ab1da52b67ad8ba14",
     "signed_science_claim_bundle.json": "sha256:d0ab55f964227c1350b29fe359dcaf61d04ad6b7dfcf1db351b717e1c47aab43",
-    "scientific_memory_import_report.json": "sha256:6a446318798084af70f0ebf62866b28a8b69716a483f3054c7f71bc3c8098fee"
+    "scientific_memory_import_report.json": "sha256:0c04ffde0926302aca32de7fc4425d457ee59e00481aa9b73e58dc5107c3cd6b"
   }
 }

examples/pcs_qc_release/release/handoff/RELEASE_HANDOFF_MANIFEST.json

@@ -9,11 +9,11 @@
   "certificate_id": "cert-trace-886c95f0-5d63-42d6-aa13-5891c12c5a6a",
   "certified_bundle_id": "scb-pcs-qc-release-v0.1",
   "certifyedge_commit": "cb6848001e2e60a484e04eba5ad6be3fe2e4eccc",
-  "generated_at": "2026-05-17T22:23:22Z",
+  "generated_at": "2026-05-17T22:32:01Z",
   "generator": "labtrust_gym.pcs.sync_pcs_core_rc",
   "handoff_id": "labtrust-qc-release-v0.1-4c5439ae3587",
   "labtrust_gym_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
-  "pcs_core_commit": "b133c2ed32293b02c4e28971da7b3a7fffcedc2a",
+  "pcs_core_commit": "a361fd2b388f88cdbc9e4e4691ae49dba714ab6c",
   "schema_version": "v0",
   "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
 }

examples/pcs_qc_release/release/handoff/handoff_to_certifyedge.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T22:25:34Z",
+  "created_at": "2026-05-18T07:36:56Z",
   "expected_outputs": {
     "trace_certificate.json": {
       "artifact_type": "TraceCertificate.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:3f680b374888794ca04a42593ab3fd7865f429dc1893ebc364bc8d553a0e8425",
+  "signature_or_digest": "sha256:9bf325edd0ddcd610e9b2cc5daac1a7a9a87e11f6b6bf99ce6f379207614f382",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/handoff/handoff_to_pf.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T22:25:34Z",
+  "created_at": "2026-05-18T07:36:56Z",
   "expected_outputs": {
     "signed_science_claim_bundle.json": {
       "artifact_type": "SignedScienceClaimBundle.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:88521a3bf646fece794df9891dc01dc94cdf1506ea9fa05edfa4c50adeed4670",
+  "signature_or_digest": "sha256:e81b01d612ca9c2faec24fe45ee8e26ceb6b2aef6d3e0d4004b1eb4d8f8f1077",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/handoff_to_certifyedge.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T22:25:34Z",
+  "created_at": "2026-05-18T07:36:56Z",
   "expected_outputs": {
     "trace_certificate.json": {
       "artifact_type": "TraceCertificate.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:3f680b374888794ca04a42593ab3fd7865f429dc1893ebc364bc8d553a0e8425",
+  "signature_or_digest": "sha256:9bf325edd0ddcd610e9b2cc5daac1a7a9a87e11f6b6bf99ce6f379207614f382",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/handoff_to_pf.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T22:25:34Z",
+  "created_at": "2026-05-18T07:36:56Z",
   "expected_outputs": {
     "signed_science_claim_bundle.json": {
       "artifact_type": "SignedScienceClaimBundle.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:88521a3bf646fece794df9891dc01dc94cdf1506ea9fa05edfa4c50adeed4670",
+  "signature_or_digest": "sha256:e81b01d612ca9c2faec24fe45ee8e26ceb6b2aef6d3e0d4004b1eb4d8f8f1077",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/labtrust_release_fragment.json

@@ -2,11 +2,11 @@
   "artifacts": {
     "handoff_to_certifyedge.json": {
       "artifact_type": "HandoffManifest.v0",
-      "sha256": "sha256:5d3ebb93b160a6e0af358c67088209f2592c0d954825db82ed580f211868cc99"
+      "sha256": "sha256:9ab20126abfbd2c0c3a601ce94cd8c027b027d7009bf6560ce4e52a20cd13c6d"
     },
     "handoff_to_pf.json": {
       "artifact_type": "HandoffManifest.v0",
-      "sha256": "sha256:ffc53bcb458422f49d1885c1e6d4255a04ada28c6bb9cd727526ab746ed66856"
+      "sha256": "sha256:c1f08d9cf1e3ca9fb866073bc62795b0c9b76338dd4f9235a76bc444b0de9f9a"
     },
     "runtime_receipt.json": {
       "artifact_type": "RuntimeReceipt.v0",
@@ -27,7 +27,7 @@
   },
   "component": "LabTrust-Gym",
   "schema_version": "v0",
-  "signature_or_digest": "sha256:90d003e94159256fec4d088282f4a71d6abd7fd93f08e3620ad734efc8953762",
+  "signature_or_digest": "sha256:17769156365234a22969e11ba4ee3dd17bbc42afbfb752455463a40b1dae89fb",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym"
 }