PK30 · submitted-artifact contract review
Response-only · no execution or fetchingProduct Contract Review Kit
Review one submitted deterministic product contract for schema, sample, limit, claim, privacy, provenance, and API/MCP consistency.
Tool and product maintainers preparing a deterministic contract for independent release review.
Deterministic review
{
"ok": true,
"schema_version": "utilito.product-kit.v1",
"kit": {
"id": "product-contract-review-kit",
"version": "1.0.0"
},
"result": {
"decision": "pass",
"status": "review_complete",
"certified": false,
"release_approved": false,
"schema_subset": "finite closed bounded Utilito contract subset v1",
"samples": [
{
"id": "success-1",
"class": "success",
"actual": "accepted",
"expected": "accepted",
"passed": true
},
{
"id": "failure-1",
"class": "failure",
"actual": "typed_error",
"expected": "typed_error",
"passed": true
}
],
"metadata": [
{
"surface": "api",
"check": "IDENTITY",
"status": "pass"
},
{
"surface": "api",
"check": "SCHEMA",
"status": "pass"
},
{
"surface": "api",
"check": "TYPED_FAILURES",
"status": "pass"
},
{
"surface": "api",
"check": "LIMIT",
"status": "pass"
},
{
"surface": "api",
"check": "PIPELINE",
"status": "pass"
},
{
"surface": "mcp",
"check": "IDENTITY",
"status": "pass"
},
{
"surface": "mcp",
"check": "SCHEMA",
"status": "pass"
},
{
"surface": "mcp",
"check": "TYPED_FAILURES",
"status": "pass"
},
{
"surface": "mcp",
"check": "LIMIT",
"status": "pass"
},
{
"surface": "mcp",
"check": "PIPELINE",
"status": "pass"
}
],
"findings": [],
"missing_boundaries": [],
"machine_review_pack": {
"schema_version": "utilito.product-contract-review-pack.v1",
"product": {
"id": "sample-tool",
"version": "1.0.0"
},
"decision": "pass",
"findings": [],
"samples": [
{
"id": "success-1",
"class": "success",
"actual": "accepted",
"expected": "accepted",
"passed": true
},
{
"id": "failure-1",
"class": "failure",
"actual": "typed_error",
"expected": "typed_error",
"passed": true
}
],
"metadata": [
{
"surface": "api",
"check": "IDENTITY",
"status": "pass"
},
{
"surface": "api",
"check": "SCHEMA",
"status": "pass"
},
{
"surface": "api",
"check": "TYPED_FAILURES",
"status": "pass"
},
{
"surface": "api",
"check": "LIMIT",
"status": "pass"
},
{
"surface": "api",
"check": "PIPELINE",
"status": "pass"
},
{
"surface": "mcp",
"check": "IDENTITY",
"status": "pass"
},
{
"surface": "mcp",
"check": "SCHEMA",
"status": "pass"
},
{
"surface": "mcp",
"check": "TYPED_FAILURES",
"status": "pass"
},
{
"surface": "mcp",
"check": "LIMIT",
"status": "pass"
},
{
"surface": "mcp",
"check": "PIPELINE",
"status": "pass"
}
],
"missing_boundaries": [],
"provenance": {
"deterministic": true,
"network_used": false,
"storage_used": false,
"caller_evidence_verified": false
}
},
"report": {
"format": "markdown",
"mime_type": "text/markdown",
"contains_sensitive_input": false,
"content": "# Product contract review\nDecision: **pass**\n\nThis deterministic submitted-artifact review is not a certification or release approval.\n\n"
}
},
"receipt": {
"input_bytes": 2508,
"output_bytes": 2988,
"operations": 4,
"findings": 0,
"unknowns": 0
},
"provenance": {
"deterministic": true,
"model_used": false,
"network_used": false,
"storage_used": false,
"telemetry_used": false,
"submitted_artifacts_only": true,
"submitted_code_executed": false,
"registered_tools_invoked": false,
"core_versions": {
"product_contract_review_kit": "1.0.0",
"contract_matrix": "1.0.0",
"product_review_pack": "reused-contract",
"product_review_report": "reused-contract",
"deterministic_review_pack": "reused-contract",
"deterministic_review_report": "reused-contract",
"developer_validator": "reused-schema-contract"
}
},
"error": null
}Review boundary
- Only the finite closed bounded supported schema subset is evaluated; references, combinators, execution, fetching, repository inspection, endpoints, deployments, and recursive registered-tool calls are unavailable.
- Contradictions are stable blockers. Missing evidence stays unknown. A pass means only that the submitted bounded artifacts are internally consistent; it is not certification or release approval.
- Credentials, secrets, authentication material, arbitrary origins, URI schemes, and filesystem paths are rejected before any report or pack is materialized.