PK30 · submitted-artifact contract review

Response-only · no execution or fetching

Product Contract Review Kit

Review one submitted deterministic product contract for schema, sample, limit, claim, privacy, provenance, and API/MCP consistency.

Tool and product maintainers preparing a deterministic contract for independent release review.

Review a submitted contract

Ready. Submitted JSON remains in this browser tab.

Deterministic review

{
  "ok": true,
  "schema_version": "utilito.product-kit.v1",
  "kit": {
    "id": "product-contract-review-kit",
    "version": "1.0.0"
  },
  "result": {
    "decision": "pass",
    "status": "review_complete",
    "certified": false,
    "release_approved": false,
    "schema_subset": "finite closed bounded Utilito contract subset v1",
    "samples": [
      {
        "id": "success-1",
        "class": "success",
        "actual": "accepted",
        "expected": "accepted",
        "passed": true
      },
      {
        "id": "failure-1",
        "class": "failure",
        "actual": "typed_error",
        "expected": "typed_error",
        "passed": true
      }
    ],
    "metadata": [
      {
        "surface": "api",
        "check": "IDENTITY",
        "status": "pass"
      },
      {
        "surface": "api",
        "check": "SCHEMA",
        "status": "pass"
      },
      {
        "surface": "api",
        "check": "TYPED_FAILURES",
        "status": "pass"
      },
      {
        "surface": "api",
        "check": "LIMIT",
        "status": "pass"
      },
      {
        "surface": "api",
        "check": "PIPELINE",
        "status": "pass"
      },
      {
        "surface": "mcp",
        "check": "IDENTITY",
        "status": "pass"
      },
      {
        "surface": "mcp",
        "check": "SCHEMA",
        "status": "pass"
      },
      {
        "surface": "mcp",
        "check": "TYPED_FAILURES",
        "status": "pass"
      },
      {
        "surface": "mcp",
        "check": "LIMIT",
        "status": "pass"
      },
      {
        "surface": "mcp",
        "check": "PIPELINE",
        "status": "pass"
      }
    ],
    "findings": [],
    "missing_boundaries": [],
    "machine_review_pack": {
      "schema_version": "utilito.product-contract-review-pack.v1",
      "product": {
        "id": "sample-tool",
        "version": "1.0.0"
      },
      "decision": "pass",
      "findings": [],
      "samples": [
        {
          "id": "success-1",
          "class": "success",
          "actual": "accepted",
          "expected": "accepted",
          "passed": true
        },
        {
          "id": "failure-1",
          "class": "failure",
          "actual": "typed_error",
          "expected": "typed_error",
          "passed": true
        }
      ],
      "metadata": [
        {
          "surface": "api",
          "check": "IDENTITY",
          "status": "pass"
        },
        {
          "surface": "api",
          "check": "SCHEMA",
          "status": "pass"
        },
        {
          "surface": "api",
          "check": "TYPED_FAILURES",
          "status": "pass"
        },
        {
          "surface": "api",
          "check": "LIMIT",
          "status": "pass"
        },
        {
          "surface": "api",
          "check": "PIPELINE",
          "status": "pass"
        },
        {
          "surface": "mcp",
          "check": "IDENTITY",
          "status": "pass"
        },
        {
          "surface": "mcp",
          "check": "SCHEMA",
          "status": "pass"
        },
        {
          "surface": "mcp",
          "check": "TYPED_FAILURES",
          "status": "pass"
        },
        {
          "surface": "mcp",
          "check": "LIMIT",
          "status": "pass"
        },
        {
          "surface": "mcp",
          "check": "PIPELINE",
          "status": "pass"
        }
      ],
      "missing_boundaries": [],
      "provenance": {
        "deterministic": true,
        "network_used": false,
        "storage_used": false,
        "caller_evidence_verified": false
      }
    },
    "report": {
      "format": "markdown",
      "mime_type": "text/markdown",
      "contains_sensitive_input": false,
      "content": "# Product contract review\nDecision: **pass**\n\nThis deterministic submitted-artifact review is not a certification or release approval.\n\n"
    }
  },
  "receipt": {
    "input_bytes": 2508,
    "output_bytes": 2988,
    "operations": 4,
    "findings": 0,
    "unknowns": 0
  },
  "provenance": {
    "deterministic": true,
    "model_used": false,
    "network_used": false,
    "storage_used": false,
    "telemetry_used": false,
    "submitted_artifacts_only": true,
    "submitted_code_executed": false,
    "registered_tools_invoked": false,
    "core_versions": {
      "product_contract_review_kit": "1.0.0",
      "contract_matrix": "1.0.0",
      "product_review_pack": "reused-contract",
      "product_review_report": "reused-contract",
      "deterministic_review_pack": "reused-contract",
      "deterministic_review_report": "reused-contract",
      "developer_validator": "reused-schema-contract"
    }
  },
  "error": null
}

Review boundary

  • Only the finite closed bounded supported schema subset is evaluated; references, combinators, execution, fetching, repository inspection, endpoints, deployments, and recursive registered-tool calls are unavailable.
  • Contradictions are stable blockers. Missing evidence stays unknown. A pass means only that the submitted bounded artifacts are internally consistent; it is not certification or release approval.
  • Credentials, secrets, authentication material, arbitrary origins, URI schemes, and filesystem paths are rejected before any report or pack is materialized.