Add PCS Phase 2 runtime protocol producer and handoffs

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: fraware

.github/workflows/pcs.yml

@@ -53,8 +53,12 @@ jobs:
         run: python -m pcs_core.hash_vectors --verify
       - name: Strict pcs-core validate exported artifacts + committed goldens
         run: python examples/pcs_qc_release/scripts/ci_validate_pcs_exports.py
-      - name: Validate committed release fixtures (pcs-core)
+      - name: Validate committed release fixtures (pcs-core + registry)
         run: python examples/pcs_qc_release/scripts/ci_validate_release_fixtures.py
+      - name: Registry check Phase 2 handoff manifests
+        run: |
+          pcs registry check-artifact examples/pcs_qc_release/release/handoff_to_certifyedge.json
+          pcs registry check-artifact examples/pcs_qc_release/release/handoff_to_pf.json
       - name: Gate release fixtures against canonical pcs-core RC
         run: |
           python -m labtrust_gym.pcs.sync_pcs_core_rc \

docs/contracts/cli_contract.md

@@ -62,6 +62,10 @@ This document defines the contract for all LabTrust-Gym CLI commands: exit codes
 | attach-certificate | `--bundle <pending> --certificate trace_certificate.json --out certified.json` | 0 | Certified `ScienceClaimBundle.v0` | docs/pcs_export.md |
 | validate-pcs | `--run <dir>` or `--artifact <json>` | 0 | (stderr OK message) | pcs-core validation |
 | export-pcs-handoff | `--out handoff/`; optional `PCS_DETERMINISTIC=1` | 0 | `handoff/manifest.json`, `certifyedge/`, `provability_fabric/` | docs/pcs_handoff.md |
+| emit-handoff | `--kind runtime-to-certificate \| bundle-to-verifier`; `--trace` or `--bundle`; `--out <path>`; `--release-mode` | 0 | `HandoffManifest.v0` JSON | examples/pcs_qc_release/RUNBOOK.md |
+| emit-release-fragment | `--release-dir <dir>`; optional `--out` | 0 | `labtrust_release_fragment.json` (`ComponentReleaseFragment.v0`) | examples/pcs_qc_release/RUNBOOK.md |
+| verify-release-fixtures | `--release-dir <dir>`; optional `--pcs-core <dir>` | 0 | (stderr OK labels) | examples/pcs_qc_release/RUNBOOK.md |
+| regenerate-release-chain | `--out <release-dir>`; `--certifyedge-bin`; optional `--pcs-core`, `--certifyedge-spec` | 0 | Full `release/` chain from demo + CertifyEdge | examples/pcs_qc_release/RUNBOOK.md |
 
 **PCS CI scripts (not `labtrust` subcommands):** `examples/pcs_qc_release/scripts/run_pcs_ci_local.{sh,ps1}` runs `pytest tests/pcs` plus `ci_validate_pcs_exports.py` (matches `.github/workflows/pcs.yml`). `generate_golden.py` regenerates `expected/` in deterministic mode.
 

examples/pcs_qc_release/RUNBOOK.md

@@ -259,13 +259,47 @@ export PCS_DETERMINISTIC=1
 bash examples/pcs_qc_release/scripts/generate_release_candidate.sh
 ```
 
-Produces `trace.json`, `runtime_receipt.json`, `trace_certificate.json`, pending/certified bundles, and `manifest.json`.
+Produces `trace.json`, `runtime_receipt.json`, `trace_certificate.json`, pending/certified bundles,
+`handoff_to_certifyedge.json`, `handoff_to_pf.json`, `labtrust_release_fragment.json`, and `manifest.json`.
+
+**Phase 2 protocol producer (LabTrust-owned, not mirror-only):**
+
+```bash
+labtrust emit-handoff --kind runtime-to-certificate \
+  --trace examples/pcs_qc_release/release/trace.json \
+  --receipt examples/pcs_qc_release/release/runtime_receipt.json \
+  --out examples/pcs_qc_release/release/handoff_to_certifyedge.json
+
+labtrust emit-handoff --kind bundle-to-verifier \
+  --bundle examples/pcs_qc_release/release/science_claim_bundle.certified.json \
+  --out examples/pcs_qc_release/release/handoff_to_pf.json
+
+labtrust emit-release-fragment \
+  --release-dir examples/pcs_qc_release/release
+
+labtrust verify-release-fixtures \
+  --release-dir examples/pcs_qc_release/release \
+  --pcs-core ../pcs-core/examples/labtrust-release
+
+labtrust regenerate-release-chain \
+  --out examples/pcs_qc_release/release \
+  --certifyedge-bin certifyedge \
+  --pcs-core ../pcs-core/examples/labtrust-release
+```
+
+After pcs-core updates, re-align committed `release/` from canonical fixtures:
+
+```bash
+python -m labtrust_gym.pcs.sync_pcs_core_rc --pcs-core ../pcs-core/examples/labtrust-release
+```
 
 Validate:
 
 ```bash
 pytest tests/pcs/test_release_fixtures.py -q   # skips if release/ not populated
 pytest tests/pcs/test_pcs_release_contract.py -q
+pytest tests/pcs/test_release_protocol_producer.py -q
+python examples/pcs_qc_release/scripts/ci_validate_release_fixtures.py
 python examples/pcs_qc_release/scripts/ci_validate_pcs_exports.py
 ```
 

examples/pcs_qc_release/release/RELEASE_FIXTURE_MANIFEST.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "v0",
   "release_candidate": "pcs-v0.1.0-rc1",
-  "generated_at": "2026-05-17T21:13:26Z",
-  "pcs_core_commit": "19c715455ac97bc50d7b091aec577b21dd19d930",
+  "generated_at": "2026-05-17T22:23:22Z",
+  "pcs_core_commit": "b133c2ed32293b02c4e28971da7b3a7fffcedc2a",
   "labtrust_gym_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "certifyedge_commit": "cb6848001e2e60a484e04eba5ad6be3fe2e4eccc",
   "provability_fabric_commit": "0f659b90c80c46a6bbfd51b0d37ea723b032fb9d",
-  "scientific_memory_commit": "9a74ba6f4a621e7000868b9283a01257350da9ea",
+  "scientific_memory_commit": "226ad64eb61c085cfa6f6dcc7b4d0d752f615e5e",
   "artifacts": {
     "trace.json": "sha256:f99eb0a90cd2b9819816a25ec4e938663d26ae8d40868cd8188665e940f7ad5c",
     "runtime_receipt.json": "sha256:8e642b59657d70b408be354323006421b963bb0c9fc9514f6abc7aab305345b6",
@@ -15,6 +15,6 @@
     "science_claim_bundle.certified.json": "sha256:9b42d792199eb6f358d26f822699f0ed65bb4366eee306d4958d42121c656833",
     "verification_result.json": "sha256:3b4b1215b4be6a945c3b99bb548e33a08527981290e7be1ab1da52b67ad8ba14",
     "signed_science_claim_bundle.json": "sha256:d0ab55f964227c1350b29fe359dcaf61d04ad6b7dfcf1db351b717e1c47aab43",
-    "scientific_memory_import_report.json": "sha256:95aa4cd87d09b896d5a2150fae7b9c5c945eb14d056c70e903d2847808e7cb5a"
+    "scientific_memory_import_report.json": "sha256:6a446318798084af70f0ebf62866b28a8b69716a483f3054c7f71bc3c8098fee"
   }
 }

examples/pcs_qc_release/release/handoff/RELEASE_HANDOFF_MANIFEST.json

@@ -9,11 +9,11 @@
   "certificate_id": "cert-trace-886c95f0-5d63-42d6-aa13-5891c12c5a6a",
   "certified_bundle_id": "scb-pcs-qc-release-v0.1",
   "certifyedge_commit": "cb6848001e2e60a484e04eba5ad6be3fe2e4eccc",
-  "generated_at": "2026-05-17T21:13:26Z",
+  "generated_at": "2026-05-17T22:23:22Z",
   "generator": "labtrust_gym.pcs.sync_pcs_core_rc",
   "handoff_id": "labtrust-qc-release-v0.1-4c5439ae3587",
   "labtrust_gym_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
-  "pcs_core_commit": "19c715455ac97bc50d7b091aec577b21dd19d930",
+  "pcs_core_commit": "b133c2ed32293b02c4e28971da7b3a7fffcedc2a",
   "schema_version": "v0",
   "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
 }

examples/pcs_qc_release/release/handoff/handoff_to_certifyedge.json

@@ -0,0 +1,31 @@
+{
+  "created_at": "2026-05-17T22:25:34Z",
+  "expected_outputs": {
+    "trace_certificate.json": {
+      "artifact_type": "TraceCertificate.v0"
+    }
+  },
+  "from_component": "LabTrust-Gym",
+  "handoff_id": "handoff-labtrust-runtime-to-certifyedge-rc",
+  "handoff_kind": "runtime_to_certificate",
+  "input_artifacts": {
+    "runtime_receipt.json": {
+      "artifact_type": "RuntimeReceipt.v0",
+      "sha256": "sha256:8e642b59657d70b408be354323006421b963bb0c9fc9514f6abc7aab305345b6"
+    },
+    "trace.json": {
+      "artifact_type": "LabTrust.Trace.v0",
+      "sha256": "sha256:f99eb0a90cd2b9819816a25ec4e938663d26ae8d40868cd8188665e940f7ad5c"
+    }
+  },
+  "invariants": {
+    "property_id": "hospital_lab.qc_release",
+    "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
+  },
+  "schema_version": "v0",
+  "signature_or_digest": "sha256:3f680b374888794ca04a42593ab3fd7865f429dc1893ebc364bc8d553a0e8425",
+  "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
+  "source_repo": "https://github.com/fraware/LabTrust-Gym",
+  "status": "Validated",
+  "to_component": "CertifyEdge"
+}

examples/pcs_qc_release/release/handoff/handoff_to_pf.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T21:22:22Z",
+  "created_at": "2026-05-17T22:25:34Z",
   "expected_outputs": {
     "signed_science_claim_bundle.json": {
       "artifact_type": "SignedScienceClaimBundle.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:21421c76e5307b056f6f8b6f4ad39abdd1bbddeeba6263dd9790f6da3074adf1",
+  "signature_or_digest": "sha256:88521a3bf646fece794df9891dc01dc94cdf1506ea9fa05edfa4c50adeed4670",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/handoff_to_certifyedge.json

@@ -0,0 +1,31 @@
+{
+  "created_at": "2026-05-17T22:25:34Z",
+  "expected_outputs": {
+    "trace_certificate.json": {
+      "artifact_type": "TraceCertificate.v0"
+    }
+  },
+  "from_component": "LabTrust-Gym",
+  "handoff_id": "handoff-labtrust-runtime-to-certifyedge-rc",
+  "handoff_kind": "runtime_to_certificate",
+  "input_artifacts": {
+    "runtime_receipt.json": {
+      "artifact_type": "RuntimeReceipt.v0",
+      "sha256": "sha256:8e642b59657d70b408be354323006421b963bb0c9fc9514f6abc7aab305345b6"
+    },
+    "trace.json": {
+      "artifact_type": "LabTrust.Trace.v0",
+      "sha256": "sha256:f99eb0a90cd2b9819816a25ec4e938663d26ae8d40868cd8188665e940f7ad5c"
+    }
+  },
+  "invariants": {
+    "property_id": "hospital_lab.qc_release",
+    "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
+  },
+  "schema_version": "v0",
+  "signature_or_digest": "sha256:3f680b374888794ca04a42593ab3fd7865f429dc1893ebc364bc8d553a0e8425",
+  "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
+  "source_repo": "https://github.com/fraware/LabTrust-Gym",
+  "status": "Validated",
+  "to_component": "CertifyEdge"
+}

examples/pcs_qc_release/release/handoff_to_pf.json

@@ -1,5 +1,5 @@
 {
-  "created_at": "2026-05-17T21:17:59Z",
+  "created_at": "2026-05-17T22:25:34Z",
   "expected_outputs": {
     "signed_science_claim_bundle.json": {
       "artifact_type": "SignedScienceClaimBundle.v0"
@@ -23,7 +23,7 @@
     "trace_hash": "sha256:c3e8a3dc4ad86d533de1dfa4ae7fe2a338c2cff3c945404c96a75216524d58cd"
   },
   "schema_version": "v0",
-  "signature_or_digest": "sha256:af5e17ba7c1491acefe9aa1625cd16c5778e48c09d0114411363f25511a449db",
+  "signature_or_digest": "sha256:88521a3bf646fece794df9891dc01dc94cdf1506ea9fa05edfa4c50adeed4670",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym",
   "status": "Validated",

examples/pcs_qc_release/release/labtrust_release_fragment.json

@@ -1,8 +1,12 @@
 {
   "artifacts": {
+    "handoff_to_certifyedge.json": {
+      "artifact_type": "HandoffManifest.v0",
+      "sha256": "sha256:5d3ebb93b160a6e0af358c67088209f2592c0d954825db82ed580f211868cc99"
+    },
     "handoff_to_pf.json": {
       "artifact_type": "HandoffManifest.v0",
-      "sha256": "sha256:6988711c6d97eb992cc9862a691a25e699cae1dd65b578cce1cb842cced2ffc4"
+      "sha256": "sha256:ffc53bcb458422f49d1885c1e6d4255a04ada28c6bb9cd727526ab746ed66856"
     },
     "runtime_receipt.json": {
       "artifact_type": "RuntimeReceipt.v0",
@@ -17,12 +21,13 @@
       "sha256": "sha256:677e0171743c4c129ad4b1931c62ba3fa0323f10c7d6d8d76290f8a4aabae45e"
     },
     "trace.json": {
-      "artifact_type": "Trace",
+      "artifact_type": "LabTrust.Trace.v0",
       "sha256": "sha256:f99eb0a90cd2b9819816a25ec4e938663d26ae8d40868cd8188665e940f7ad5c"
     }
   },
   "component": "LabTrust-Gym",
   "schema_version": "v0",
+  "signature_or_digest": "sha256:90d003e94159256fec4d088282f4a71d6abd7fd93f08e3620ad734efc8953762",
   "source_commit": "4c5439ae358733f9a4c4a58e33fdaed1ab0d29de",
   "source_repo": "https://github.com/fraware/LabTrust-Gym"
 }