Typed contract
The frozen A03 API exposes inspect, extract, render, OCR-route, find, preview-redaction, redact, export, and verify with PDF-owned SHA-bound geometry locators and explicit v1 exclusions.
PASSA03Implemented by@runstamp/pdfAvailable
- Gates closed
- 6 of 6
- Verified by
- W04, independently of the builder
- Integrated at
a1d4e205- Category
- Native artifact extensions
Gate record
What each gate checked, in the verifier’s words.
These summaries were written when the gate closed and are stored with the release. They are not marketing copy and they are not regenerated.
Fixtures red before implementation
Thirteen fixture classes cover native, mixed/scanned, table, forms/annotations/signatures, protected/active/malformed/huge/unsupported input, overlay known-bad, determinism, round trip, and Extension Kit composition. The pre-implementation suite exited 1; the implemented overlay verifier returns FAIL while qpdf syntax alone passes.
PASSFocused correctness
Package typecheck, build, lint, 13 focused A03 tests, and the full 369-pass json-to-pdf test suite pass. The additional packed-artifact entitlement check still exposes its pre-existing free PdfEngine.validate contract contradiction; exact baseline evidence is recorded and A03 does not touch that code.
PASSSemantic safety
ToUnicode text extraction preserves reading order and stable geometry; table/form/annotation/metadata/signature inventory is conservative; protected, JavaScript, malformed, resource-overrun, stale-locator, risky-regex, and cancellation paths fail closed; redaction rebuilds content instead of overlaying it.
PASSDeterminism and declared loss
Two clean processes emitted byte-identical 25-page sanitized PDFs with SHA-256 9af062f7484976200680f57c7bc9690765b1e3631b0556b108d130b14c50839e. Preservation limits are returned as stable PDF_* losses.
PASSReference application validation
qpdf 12.3.2 found no syntax/stream errors; Poppler 25.06.0 parsed, extracted, and rasterized the 25-page artifact; byte, pdftotext, and Tesseract 5.5.2 OCR residual scans found no forbidden token. Acrobat 25.001.20432 is installed but recorded only as advisory availability because no automated repair verdict was obtained.
PASSTyped invocation
One operation contract across API, SDK and MCP.
Every registered operation is reachable at the same URL shape, with the same envelope: the value, the loss ledger, the diagnostics and the provenance receipt.
curl https://runstamp.com/v1/{domain}/{verb} \
-H "Authorization: Bearer $RUNSTAMP_API_KEY" \
-H "Content-Type: application/json" \
-d '{ "input": ..., "options": { "lossPolicy": "collect" } }'
# GET https://runstamp.com/v1 lists every operation and its schema.Related capabilities
Compose the next part of the workflow.
A01DOCX controlled-document
Available
Inspect capabilityA02XLSX structured-workflow
Available
Inspect capabilityA04PPTX template round-trip
Available
Inspect capability