Truthful inspector metadata and #592 acceptance reconciliation

[ScriptedAlchemy]

Problem

Schema provenance and #592 state/projection evidence mapping remain incomplete. Final #592 closure declared the umbrella complete without separately identifying proof for context/provider/state inspection and projection comparison.

Filed from GPT-6 Pro deep-dive on https://chatgpt.com/c/6a9b952d-e994-83ea-b7e3-03f9065dde07 (2026-09-06).

Acceptance checklist

• authoritative provenance for inspector metadata
• missing / conflicting / relocated provenance tests
• map each Meta-framework architecture: one application graph, capability-driven projections, one execution kernel #592 inspector/projection criterion to a file/test or an explicit deferral

Priority

P2

[ScriptedAlchemy]

Evidence map — no code

Reconciliation against main b435f7b917. Inspector metadata already comes from canonical agent-bundle.manifest.json / compile-evidence records. #592's inspector and projection criteria already have a production caller plus a runnable test. No new metadata database, no inspector abstraction, no PR.

The #592 closing map (b435f7b91) listed context/provider/state inspection and projection comparison as leftover under #600. Those surfaces landed on the same tip: route inspector Context / Providers / Projection tabs, stateDefinitionProjection + inspect --state, and per-host projection panels. This comment is the missing file/test map; it does not reopen product work.

Authoritative provenance (checklist 1–2)

What the inspector shows	Canonical record	Production reader	Runnable test
Output → source-input rows	compiler.provenance[] joined to compiler.project.sourceInputs	ArtifactInspectionService.#inspectReference (packages/agent-bundle/src/dev/artifacts/artifact-inspection-service.ts)	packages/agent-bundle/tests/artifact-inspection-service.test.ts (inspection.provenance equals manifest source inputs; epoch diff compares paths, not hashes)
Application tree / identity / hosts / routes	Manifest application, projections[], routes, executables	applicationExplorerFor → inspectArtifactRoot (reads only agent-bundle.manifest.json)	packages/agent-bundle/tests/application-explorer.test.ts; packages/agent-bundle/tests/inspect-artifact.test.ts (inspect --artifact --json / missing manifest AB7001)
Catalog state / providers / contracts	Compiled graph + conventional src/state.ts (same pass as build)	routeManifestFor / stateDefinitionProjection	packages/agent-bundle/tests/route-manifest-routes.test.ts; packages/agent-bundle/tests/inspect-state.test.ts (no invented runtime paths; malformed retention is AB4833, never silently defaulted)
Request context / provider timings	Invocation envelope (RequestContextProvenance)	Workbench RouteInspector	packages/workbench/tests/route-workspace.test.ts (unavailable axes name the reason; unobserved providers render —, not a fabricated 0 ms)
Schema / adapter pins	compiler.adapters[].schemas + host PROVENANCE.json	Manifest parse + adapter emit	packages/agent-bundle/tests/manifest-schema.test.ts; packages/agent-bundle/tests/host-adapters.test.ts
Compile-evidence join	agent-bundle.compile-evidence.json vs files[] (AB6039)	validateArtifact / compileEvidenceDiagnostics	packages/agent-bundle/tests/compile-evidence.test.ts; packages/agent-bundle/tests/prepack.test.ts; packages/agent-bundle/tests/build.test.ts (relocated artifact from the record alone)

Missing provenance — parse rejects it before inspect:

• undeclared compiler.provenance[].sourceInputs → packages/agent-bundle/tests/manifest.test.ts (rejects duplicate or unsorted arrays and cross-record inconsistencies)
• provenance path not in files[] → packages/agent-bundle/tests/manifest-schema.test.ts (compiler.provenance paths match files)
• no manifest at --artifact → inspect-artifact.test.ts (AB7001)
• install/doctor on missing/invalid/absent-host manifest → packages/agent-bundle/tests/install.test.ts

Conflicting provenance — one closed document, fail closed:

• compiler.provenance must exactly match files[]; adapters must exactly match projections[] (manifest.ts requireExactSortedKeys)
• emit refuses duplicate or missing output-provenance rows (packages/agent-bundle/src/build/emit.ts)
• installed bytes/mode drift → install.test.ts (AB7001); installed manifest drift → packages/agent-bundle/tests/host-install-proof.test.ts
• evidence vs file-table mismatch → AB6039 (compile-evidence.test.ts)

Relocated provenance — root-relative POSIX only; readers do not re-probe src/:

• packages/agent-bundle/tests/manifest-relocatable.test.ts
• packages/agent-bundle/tests/manifest-combined-proof.test.ts (revalidates and inspects a source-free relocated copy)
• packages/agent-bundle/tests/packed-small-plugin.test.ts (validate --artifact after rename)

validate-artifact.ts still joins host MCP documents to prove they agree with the manifest (AB6017). That is not inspector reconstruction: ArtifactInspectionService.#mcpServers / #hooks read manifest.executables + projections[].documents.

#592 inspector / projection criteria (checklist 3)

#592 criterion	Source	Runnable test	Disposition
§14 graph inspection	applicationExplorerFor / applicationTreeFor / Application tree column	application-explorer.test.ts; packages/workbench/tests/application-tree-model.test.ts; packages/workbench/tests/examples-real.e2e.test.ts (renders the flagship compiled Application tree…)	Proven
§14 route invocation	Route workspaces + invocation API	packages/workbench/tests/route-workspace.test.ts; packages/workbench/tests/invocation-client.test.ts	Proven
§14 context inspection	RouteInspector Context tab / requestContextRows	route-workspace.test.ts (stays closed… evidence tabs; derives one row per request-context axis)	Proven (landed after the #600 leftover note)
§14 provider inspection	RouteInspector Providers tab	route-workspace.test.ts (unobserved providers without a fabricated 0 ms duration); invocation-client.test.ts	Proven
§14 state inspection	stateDefinitionProjection + inspect --state + catalog RouteManifest.state	inspect-state.test.ts; route-manifest-routes.test.ts	Proven
§14 event tracing	TraceHub / Trace page	packages/workbench/tests/trace-page.test.ts; trace-model.test.ts; trace-client.test.ts; route-workspace.test.ts (correlation filter)	Proven
§14 projection comparison	Per-host static panel (Host projections); invocation Projection tab (MCP / CLI / host lowering); Artifacts projection selector + epoch diff	examples-real.e2e.test.ts (Host projections); route-workspace.test.ts (Projection tab); packages/workbench/tests/artifacts-model.test.ts; artifact-inspection-service.test.ts (diff)	Proven (same leftover; no second comparison UI)
§14 App / browser preview	MCP App preview workspace	route-workspace.test.ts (mounts the App preview workspace for an app leaf); packages/workbench/tests/runtime-contract-compile.test.ts	Proven
§14 diagnostics	Problems + host diagnostics + artifact validation alert	packages/workbench/tests/problems-page.test.ts; packages/workbench/tests/artifacts-page.test.ts	Proven
§14 generated artifact inspection	Advanced → Artifact; inspect --artifact; ArtifactInspectionService	artifacts-page.test.ts; artifacts-model.test.ts; inspect-artifact.test.ts; artifact-inspection-service.test.ts	Proven
§14 no separate Workbench semantic model	Tree / inspect / invocations read manifest + production execution envelope	inspect-artifact.ts (one-file read); application-tree-model.ts; #643 provenance envelope in route-workspace.test.ts	Proven
§11 / acceptance: manifest is the compiled database; no path probing	readArtifactManifest / inspectArtifactRoot / install / doctor	inspect-artifact.test.ts; install.test.ts (reads application identity from the manifest instead of the host plugin document); install-surface.test.ts; manifest-relocatable.test.ts	Proven
§2–3 / acceptance: adapters emit Projection IR; targets select projections	adapters/*.plan() → composeProjections → projections[]	packages/agent-bundle/tests/host-adapters.test.ts; packages/agent-bundle/tests/build-compose.test.ts; manifest-schema.test.ts (compiler.adapters hosts must exactly match projections)	Proven
§3 / acceptance: capability-driven host selection	requires → capability table → projection	packages/agent-bundle #679 on this tip (b435f7b917)	Proven
Live Claude Code / Codex tool+hook sessions through Workbench	PTY host sessions (#675) are fake-host	—	Deferred → #683 (needs logged-in host credentials; not a provenance gap)

Not a gap

• provenanceByPath.get(file.path) ?? [] is unreachable after parse (compiler.provenance paths must exactly match files[]).
• Catalog state source 'src/state.ts' is the conventional identity (state: false is the only other option); inspect --state reports the real definition.source.
• No second evidence store. Compile evidence stays in agent-bundle.compile-evidence.json and is joined by digest (AB6039), per the Meta-framework architecture: one application graph, capability-driven projections, one execution kernel #592 step-3 hand-off.

Closing as already proven.

[ScriptedAlchemy]

Closing: already proven on main b435f7b917. Evidence map: #682 (comment). Only leftover that needs live host credentials is #683.