Typed contract
The existing DOCX package exposes the exact seven A01 operations, format-owned locators, declared warnings/losses, archive budgets, deterministic execution, and Extension Kit composition; v1 exclusions are frozen in the brief.
PASSA01Implemented by@runstamp/docxAvailable
- Gates closed
- 7 of 7
- Verified by
- W02, independently of the builder
- Integrated at
ea5a695d- Category
- Native artifact extensions
Gate record
What each gate checked, in the verifier’s words.
These summaries were written when the gate closed and are stored with the release. They are not marketing copy and they are not regenerated.
Fixtures red before implementation
The focused suite was red before implementation because the controlled-document/Extension Kit surface was absent. Fourteen fixture descriptors now cover minimal, buyer-realistic, unrelated, boundary, hostile, known-bad, determinism, round-trip, and composition cases.
PASSFocused correctness
Focused A01 tests pass 11/11; the complete DOCX suite passes 1,080 tests with one existing skip; package build, typecheck, lint, static gate, bundle gate, and pack check pass.
PASSSemantic safety
Run-split body/header/footer/comment/footnote/endnote targets are deleted from underlying OOXML; tracked-change visibility and stale locators are enforced; encrypted, traversal, deep XML, malformed relationship, and archive-budget inputs fail closed; macro/OLE parts are never executed.
PASSDeterminism and declared loss
Two clean reference-gate processes emitted identical 6,374-byte DOCX artifacts with SHA-256 256edfe25c96d871dcf4ff5f42f998f5d208e0cde31d6c65670e4d9d8a4445f6. Opaque macro/OLE preservation is the only declared v1 loss.
PASSReference application validation
The redacted legal agreement passed validateDocxBuffer, @xarsh/ooxml-validator Microsoft365 profile, Microsoft Word 16.111.3 open/close-without-save from a read-only file, and LibreOffice Writer 26.2.2.2 conversion without repair.
PASSIndependent reproduction
W02 independently reproduced A01 from an offline frozen-lockfile install. The focused suite, complete DOCX suite, build/typecheck/lint/static/validator/bundle/pack gates, hostile and known-bad controls, Extension Kit composition, artifact hashes, two clean reference-gate processes, Microsoft Word 16.111.3, LibreOffice 26.2.2.2, and factory independent verification all passed.
PASSTyped invocation
One operation contract across API, SDK and MCP.
Every registered operation is reachable at the same URL shape, with the same envelope: the value, the loss ledger, the diagnostics and the provenance receipt.
curl https://runstamp.com/v1/{domain}/{verb} \
-H "Authorization: Bearer $RUNSTAMP_API_KEY" \
-H "Content-Type: application/json" \
-d '{ "input": ..., "options": { "lossPolicy": "collect" } }'
# GET https://runstamp.com/v1 lists every operation and its schema.Related capabilities
Compose the next part of the workflow.
A02XLSX structured-workflow
Available
Inspect capabilityA03PDF evidence-processing
Available
Inspect capabilityA04PPTX template round-trip
Available
Inspect capability