Add failure gate fixtures to router proof

Author: nshkrdotcom

contract_artifacts.yml

@@ -9,7 +9,7 @@ artifacts:
     producer_repo_ref: repo://nshkrdotcom/ground_plane
     producer_path: /home/home/p/g/n/ground_plane
     source_ref: main
-    source_sha: aab153c1b48b06281d5f13487cdcb3dac39e5cb8
+    source_sha: e47d4b47c711f5196303dc0e98e40162098bb63d
     build_command: mix ci
     status: deprecated
     successor: ground_plane_contracts
@@ -37,7 +37,7 @@ artifacts:
     producer_repo_ref: repo://nshkrdotcom/ground_plane
     producer_path: /home/home/p/g/n/ground_plane
     source_ref: main
-    source_sha: aab153c1b48b06281d5f13487cdcb3dac39e5cb8
+    source_sha: e47d4b47c711f5196303dc0e98e40162098bb63d
     build_command: mix ci
     status: stable
     consumers:

examples/context_abi_roundtrip/lib/stack_lab/examples/context_abi_roundtrip.ex

@@ -85,17 +85,17 @@ defmodule StackLab.Examples.ContextABIRoundtrip do
          {:ok, aitrace_facts} <-
            aitrace_facts(packet, grant, route_decision, model_receipt, projections),
          {:ok, scanner_receipts} <-
-           scanner_receipts(
-             packet,
-             compile_receipt,
-             grant,
-             admission_receipt,
-             route_decision,
-             render_result,
-             model_receipt,
-             projections,
-             aitrace_facts
-           ) do
+           scanner_receipts(%{
+             packet: packet,
+             compile_receipt: compile_receipt,
+             grant: grant,
+             admission_receipt: admission_receipt,
+             route_decision: route_decision,
+             render_result: render_result,
+             model_receipt: model_receipt,
+             projections: projections,
+             aitrace_facts: aitrace_facts
+           }) do
       {:ok,
        %Receipt{
          receipt_ref: receipt_ref(packet, model_receipt),
@@ -381,17 +381,17 @@ defmodule StackLab.Examples.ContextABIRoundtrip do
     end
   end
 
-  defp scanner_receipts(
-         packet,
-         compile_receipt,
-         grant,
-         admission_receipt,
-         route_decision,
-         render_result,
-         model_receipt,
-         projections,
-         aitrace_facts
-       ) do
+  defp scanner_receipts(%{
+         packet: packet,
+         compile_receipt: compile_receipt,
+         grant: grant,
+         admission_receipt: admission_receipt,
+         route_decision: route_decision,
+         render_result: render_result,
+         model_receipt: model_receipt,
+         projections: projections,
+         aitrace_facts: aitrace_facts
+       }) do
     with {:ok, context_scan} <-
            ContextABIScanner.scan(%{
              owner_repo: "stack_lab",

examples/nshkr_router_fabric_roundtrip/README.md

@@ -3,7 +3,8 @@
 `stack_lab_nshkr_router_fabric_roundtrip` proves the first NSHKR router MVP:
 an admitted Context ABI packet is routed through
 `Trinity.MezzanineRouterAdapter`, rendered through OuterBrain, invoked through
-the Jido fake runtime, recorded in AITrace, and projected through AppKit.
+the Jido fake runtime, recorded in AITrace, projected through AppKit, and
+checked with a bounded eval-failure receipt fixture.
 
 The proof is deterministic and provider-free. It does not prove live-provider
 quality, distributed placement, GEPA optimization, or production persistence.

examples/nshkr_router_fabric_roundtrip/lib/stack_lab/examples/nshkr_router_fabric_roundtrip.ex

@@ -20,6 +20,8 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip.Receipt do
     :model_receipt_ref,
     :appkit_projection_refs,
     :scanner_receipts,
+    :failure_receipts,
+    :failure_projection_refs,
     :aitrace_facts,
     :trace_refs,
     :does_not_prove
@@ -35,6 +37,7 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
 
   alias AITrace.AIPlatform
   alias AppKit.ContextSurface
+  alias AppKit.EvalSurface
   alias Citadel.ContextAuthority
   alias Citadel.ContextAuthority.AuthorityRequest
   alias Jido.Integration.InferenceRuntime
@@ -43,6 +46,7 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
   alias Mezzanine.AIExecution
   alias Mezzanine.AIExecution.RuntimeDeps
   alias Mezzanine.ContextPacketEngine
+  alias Mezzanine.EvalEngine
   alias OuterBrain.ContextABI
   alias StackLab.ContextABIScanner
   alias StackLab.CoordinationFabricScanner
@@ -76,19 +80,21 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
            appkit_projections(packet, admission_receipt, grant, route_decision, model_receipt),
          {:ok, aitrace_facts} <-
            aitrace_facts(packet, grant, route_decision, model_receipt, projections),
+         {:ok, failure_fixtures} <- failure_fixtures(packet),
          {:ok, scanner_receipts} <-
-           scanner_receipts(
-             packet,
-             compile_receipt,
-             grant,
-             admission_receipt,
-             route_request,
-             route_decision,
-             render_result,
-             model_receipt,
-             projections,
-             aitrace_facts
-           ) do
+           scanner_receipts(%{
+             packet: packet,
+             compile_receipt: compile_receipt,
+             grant: grant,
+             admission_receipt: admission_receipt,
+             route_request: route_request,
+             route_decision: route_decision,
+             render_result: render_result,
+             model_receipt: model_receipt,
+             projections: projections,
+             failure_fixtures: failure_fixtures,
+             aitrace_facts: aitrace_facts
+           }) do
       {:ok,
        %Receipt{
          receipt_ref: receipt_ref(packet, route_decision),
@@ -110,6 +116,8 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
          model_receipt_ref: model_receipt.receipt_ref,
          appkit_projection_refs: appkit_projection_refs(projections),
          scanner_receipts: scanner_receipts,
+         failure_receipts: [failure_fixtures.failure_receipt],
+         failure_projection_refs: [failure_fixtures.failure_projection.failure_ref],
          aitrace_facts: aitrace_facts,
          trace_refs: [@trace_ref, model_receipt.trace_ref],
          does_not_prove: [
@@ -370,18 +378,40 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
     end
   end
 
-  defp scanner_receipts(
-         packet,
-         compile_receipt,
-         grant,
-         admission_receipt,
-         route_request,
-         route_decision,
-         render_result,
-         model_receipt,
-         projections,
-         aitrace_facts
-       ) do
+  defp failure_fixtures(packet) do
+    with {:ok, failure} <-
+           EvalEngine.failure_from_reason(:eval_parent_budget_exceeded,
+             trace_ref: "trace://router-fabric/demo/eval-failure"
+           ),
+         {:ok, failure_receipt} <-
+           AIExecution.failure_receipt(failure,
+             tenant_ref: packet.tenant_ref,
+             workflow_ref: @workflow_ref,
+             stage: :eval,
+             trace_ref: "trace://router-fabric/demo/eval-failure"
+           ),
+         {:ok, failure_projection} <- EvalSurface.failure_projection(failure) do
+      {:ok,
+       %{
+         failure_receipt: failure_receipt,
+         failure_projection: failure_projection
+       }}
+    end
+  end
+
+  defp scanner_receipts(%{
+         packet: packet,
+         compile_receipt: compile_receipt,
+         grant: grant,
+         admission_receipt: admission_receipt,
+         route_request: route_request,
+         route_decision: route_decision,
+         render_result: render_result,
+         model_receipt: model_receipt,
+         projections: projections,
+         failure_fixtures: failure_fixtures,
+         aitrace_facts: aitrace_facts
+       }) do
     with {:ok, context_scan} <-
            ContextABIScanner.scan(%{
              owner_repo: "stack_lab",
@@ -393,7 +423,8 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
              route_decisions: [route_decision],
              render_results: [render_result],
              model_invocation_receipts: [model_receipt],
-             appkit_projections: Map.values(projections),
+             failure_receipts: [failure_fixtures.failure_receipt],
+             appkit_projections: Map.values(projections) ++ [failure_fixtures.failure_projection],
              aitrace_facts: aitrace_facts
            }),
          {:ok, router_scan} <-
@@ -534,6 +565,7 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtrip do
     do: Map.new(value, fn {k, v} -> {to_string(k), json_safe(v)} end)
 
   defp json_safe(values) when is_list(values), do: Enum.map(values, &json_safe/1)
+  defp json_safe(value) when is_boolean(value), do: value
   defp json_safe(value) when is_atom(value), do: Atom.to_string(value)
   defp json_safe(value), do: value
 end

examples/nshkr_router_fabric_roundtrip/mix.exs

@@ -27,6 +27,7 @@ defmodule StackLab.NSHKRRouterFabricRoundtrip.MixProject do
   defp deps do
     [
       {:app_kit_context_surface, path: "../../../app_kit/core/context_surface"},
+      {:app_kit_eval_surface, path: "../../../app_kit/core/eval_surface"},
       {:outer_brain_context_abi, path: "../../../outer_brain/core/context_abi", override: true},
       {:outer_brain_prompting,
        path: "../../../outer_brain/core/outer_brain_prompting", override: true},
@@ -36,6 +37,7 @@ defmodule StackLab.NSHKRRouterFabricRoundtrip.MixProject do
        path: "../../../mezzanine/core/context_packet_engine", override: true},
       {:mezzanine_ai_execution_engine,
        path: "../../../mezzanine/core/ai_execution_engine", override: true},
+      {:mezzanine_eval_engine, path: "../../../mezzanine/core/eval_engine"},
       {:jido_model_invocation_contracts,
        path: "../../../jido_integration/core/model_invocation_contracts", override: true},
       {:jido_inference_runtime, path: "../../../jido_integration/core/inference_runtime"},

examples/nshkr_router_fabric_roundtrip/test/stack_lab/examples/nshkr_router_fabric_roundtrip_test.exs

@@ -14,6 +14,11 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtripTest do
     assert receipt.selected_route_kind == :trinity_coordinated
     assert receipt.selected_model_profile_ref == "model-profile://fixture/worker"
     assert receipt.trinity_selected_role_ref == "role://router-fabric/worker"
+
+    assert [%{failure_family: :eval, safe_action: :review_eval_evidence}] =
+             receipt.failure_receipts
+
+    assert ["failure://mezzanine/" <> _] = receipt.failure_projection_refs
     assert receipt.scanner_receipts.context_abi.status == :pass
     assert receipt.scanner_receipts.router_fabric.status == :pass
     assert receipt.scanner_receipts.coordination_fabric.status == :pass
@@ -27,6 +32,9 @@ defmodule StackLab.Examples.NSHKRRouterFabricRoundtripTest do
 
     assert json =~ "\"status\": \"pass\""
     assert json =~ "\"selected_route_kind\": \"trinity_coordinated\""
+    assert json =~ "\"failure_family\": \"eval\""
+    assert json =~ "\"failure_projection_refs\""
+    assert json =~ "\"retryable?\": false"
     assert json =~ "Trinity.MezzanineRouterAdapter" or json =~ "router_fabric"
     refute json =~ "raw_prompt"
     refute json =~ "provider_payload\":"

examples/trinity_platform_roundtrip/lib/stack_lab/examples/trinity_platform_roundtrip.ex

@@ -96,7 +96,7 @@ defmodule StackLab.Examples.TRINITYPlatformRoundtrip do
           budget_ref: "budget/role/worker",
           context_budget_ref: "context/role/worker",
           handoff_policy_ref: "handoff/role/worker",
-          appkit_projection_ref: "appkit/coordination/worker",
+          projection_ref: "appkit/coordination/worker",
           gepa_target_refs: ["gepa/target/role_prompt"]
         }
       ],

proof_matrix.yml

@@ -451,6 +451,7 @@ proofs:
       - admitted Context ABI packet is routed through the concrete TRINITY Mezzanine router adapter
       - Mezzanine route decision carries route policy, authority, selected model profile, verifier, fallback plan, and TRINITY route-plan refs
       - OuterBrain render refs are carried into Jido Integration fake model invocation without raw prompt or provider payload leakage
+      - Mezzanine eval failure reasons are mapped to bounded owner-local failure receipts and AppKit safe projections
       - AppKit projects context packet, route decision, model invocation, and eval verdict refs through product-safe DTOs
       - AITrace emits bounded context, route, model, and eval facts
       - StackLab context ABI, router fabric, coordination fabric, and model inference scanners pass on the assembled receipt

support/context_abi_scanner/README.md

@@ -3,8 +3,9 @@
 Scanner receipts for the fugu Context ABI path.
 
 This package validates that context packets, authority grants, Mezzanine
-admission receipts, render handoffs, model invocation receipts, AppKit
-projections, and AITrace facts stay ref-only and tenant-consistent.
+admission receipts, render handoffs, model invocation receipts, optional
+owner-local failure receipts, AppKit projections, and AITrace facts stay
+ref-only and tenant-consistent.
 
 It is a StackLab proof package. It does not own Context ABI semantics; those
 remain in OuterBrain, Citadel, Mezzanine, Jido Integration, AppKit, and