{
  "format": "ta-amps.seed-pack.proposal.v1",
  "status": "proposal_only",
  "pack_id": "agent-config-supply-chain-scanner",
  "title": "Agent config supply chain scanner",
  "version": "0.1.0",
  "summary": "A collection of nouns and verbs for scanning repository agent definitions, rule files, MCP configs, and self-editing memory files for hidden Trojan Unicode, unapproved hook or server escalation, built-in name shadowing, and authority spoofing, with tested standard-library Python code.",
  "license": "MIT",
  "store": "seedpack.agent-config-supply-chain-scanner",
  "queue_placeholder": "conformance-seed-packs",
  "files": [
    {
      "path": "README.md",
      "sha256": "905ead88991d49f191f33c3023a69be0034ae6f16dac4cb73c8cf1acf13d0592"
    },
    {
      "path": "source.json",
      "sha256": "19db234f8e16d80d1f09547e71f588f06448e4a06bd5df0035b1896e5a0a71a1"
    },
    {
      "path": "nouns.json",
      "sha256": "ec8d8d0695847780dbf4da9657e90e57c72dbe04f75ec41b3524a05476ce27f6"
    },
    {
      "path": "verbs.json",
      "sha256": "536b6e98bc2c4f01657e8f7190287a20cf847e4c9d7f066ee6691d2ced6ef11f"
    }
  ],
  "nouns": [
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.pack",
      "category_id": "noun.skill_pack",
      "role": "pack",
      "value_sha256": "560c686799086ef3721028ff6572690904c5e605a490b74c804c9fbe72b40861"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.method",
      "category_id": "noun.skill_pack",
      "role": "method",
      "value_sha256": "e20874dc66f803a131a27d19652325f96bad21aa86e8e893ca8cc1bc862411fa"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.guardrail.configs-are-executable-on-clone",
      "category_id": "noun.skill_pack",
      "role": "guardrail",
      "value_sha256": "19544b1ffaef2cfa03e2a6c63e767357c27591d09cd1f71950fc669fa0f3cf13"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.guardrail.diff-gate-evolving-memory",
      "category_id": "noun.skill_pack",
      "role": "guardrail",
      "value_sha256": "58219b45f463fd30943a5db65a03efc744f131b6f162f27b5a76a1481e1700d2"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.rules.five-supply-chain-vectors",
      "category_id": "noun.reflex_procedure",
      "role": "rules",
      "value_sha256": "76da0cbe11e64b523050008d09551fad9e776916485b63fb19f06a674c157dd1"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.template.config-scan-report",
      "category_id": "noun.eval_run",
      "role": "template",
      "value_sha256": "dd82544ea90b4f3373454c4157208ac48f4fc7e9bb9ca4b3d1fd9448bca7ea08"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.template.memory-diff-receipt",
      "category_id": "noun.eval_run",
      "role": "template",
      "value_sha256": "8a27c93bd80e8475b3da56bfad002b75098b8f318fd242c637536f140e9ef693"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.template.supply-chain-tombstone",
      "category_id": "noun.negative_tombstone",
      "role": "template",
      "value_sha256": "14e76c957923e2393804cb9ba2f2d92bf971632931ca9d96a719fbbcefa75017"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.scanner-checks",
      "category_id": "noun.benchmark_suite",
      "role": "record_checks",
      "value_sha256": "d20873f283e4f8845eff78621f18a7cf966bc3ffbb1701339efc920ecce5a812"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.tool.config-scanner",
      "category_id": "noun.code_node",
      "role": "tool_card",
      "value_sha256": "e459e6e0debb5138089291e1bf390b6cc1777b5f91439b62e8b0ff880d91811c"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.source.trojan-source",
      "category_id": "noun.public_source",
      "role": "source",
      "value_sha256": "ff46890ba5265b841f904d93f4c499432a35dee793962b2cea8d7dbff4837e39"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.source.nvd-cve-2025-54135",
      "category_id": "noun.public_source",
      "role": "source",
      "value_sha256": "14b042c3969e9dcfe67c8866d2147f86d07e46ff5b89be65fc7fc3d08ce35a72"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.source.unicode-tr36",
      "category_id": "noun.public_source",
      "role": "source",
      "value_sha256": "372b0cd342672837201f8b402b3f783dbf6bda912dabcc2f592f2a24d1bd67fc"
    },
    {
      "key": "agent-config-supply-chain-scanner.v0.1.0.example.blocked-backdoor-scan",
      "category_id": "noun.eval_run",
      "role": "example",
      "value_sha256": "7b28d810f520070cad62703ff0aaf7763762963d64036b5beee4491d3a4695ec"
    }
  ],
  "verbs": [
    {
      "template_id": "agent-config-supply-chain-scanner.scan-repo-agent-configs",
      "kind": "verb.verify_gate",
      "claimant": "agent",
      "idempotency_key": "seedpack:agent-config-supply-chain-scanner:scan-repo-agent-configs:67965eef84ad8fa969acbf6c8c41cec70dfd2055d1ab4b82892410da2414bbae",
      "report_shape_sha256": "b5439c6c1ce27c5658bb6f064b3d0759c367eca862b6f7ed0674cb474f89e2f9"
    },
    {
      "template_id": "agent-config-supply-chain-scanner.gate-self-editing-memory-diff",
      "kind": "verb.verify_gate",
      "claimant": "agent",
      "idempotency_key": "seedpack:agent-config-supply-chain-scanner:gate-self-editing-memory-diff:74569294cfad1294f71a528f3236a8dafb3b2ff02182f457fafbe866c62062f9",
      "report_shape_sha256": "854922750a5396e2b43099933c60d95d5067d814a5e7762d407b99fd41db69ac"
    },
    {
      "template_id": "agent-config-supply-chain-scanner.quarantine-supply-chain-finding",
      "kind": "verb.recover_fault",
      "claimant": "agent",
      "idempotency_key": "seedpack:agent-config-supply-chain-scanner:quarantine-supply-chain-finding:37ee6673f91a4118e5c670e79807daf873565e8b2ff6e464d36ff7bc48ba792a",
      "report_shape_sha256": "7e62a8e127bd61ac7e50a51aee50c9d93e3c2f902babd4934824764f47d092a0"
    }
  ],
  "code": {
    "path": "packs/agent-config-supply-chain-scanner/code",
    "files": 6,
    "sha256": "88e7e736f264cdefac69d6a5b9c6b0a4631b0990fbc1b7c4c34ba98570df5057",
    "runs": "The library runs this code only in its own CI tests; workers run it under their own permissions. Reading, exporting or importing the pack runs none of it."
  },
  "dependencies": [],
  "boundaries": [
    "Repository agent, rule, and MCP files are scanned strictly as inert bytes and never executed during inspection.",
    "Any critical or high finding (hidden Trojan/Tag Unicode, shell MCP pipes, permission bypass, hooks, shadowing, or spoofing) sets verdict to block.",
    "Self-edited SOUL.md or memory diffs introducing override claims, shell pipes, hidden Unicode, or external URLs require human approval.",
    "Workers create nouns and propose verbs; importing this pack writes nothing and enqueues nothing."
  ],
  "override_policy": {
    "automatic_merge": false,
    "on_conflict": "stop_and_clarify"
  },
  "importer": null,
  "importer_reason": "No manifest endpoint or generic importer exists. Reading or exporting this pack writes no records, enqueues no verbs and activates nothing.",
  "activation": {
    "automatic": false,
    "steps": [
      "An owner assigns the namespace, store and queue.",
      "Each noun is written create-only with existing grants and read back; its value SHA-256 must match the pin.",
      "A verb template is filled with exact pins and enqueued explicitly by an authorized requester."
    ]
  },
  "evaluation": {
    "result": null,
    "reason": "Offline shape, category and digest validation only. No worker has run these verbs."
  }
}