@agenticprimitives/provenance-node

Part of Agentic Primitives — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. Developer kit · All packages

The Node-side reference bindings of the provenance ports, and the conformance suite that proves a store binding keeps a run's record intact.

A run's provenance is a W3C PROV-O / P-Plan / EP-Plan graph in JSON-LD; its measurements are W3C DQV. Where those records are KEPT — an agent's vault, a directory of files, a Solid pod, a Graph Store — is a binding of one port. ap conform provenance runs any binding through six checks and prints what it broke:

| | Check | | --- | --- | | C1 | a record put and got back has the same RDFC-1.0 digest (the graph, not the bytes) | | C2 | every predicate and class IRI in it is declared in the published ontology; Turtle is served from it | | C3 | it conforms to the published SHACL shapes as returned, and a twin still fails | | C4 | it carries no words (no address, no body; a measurement is a number) | | C5 | an absent record is absent; a reader without standing is refused — never served empty | | C6 | a rollup wiped and rebuilt from the records gives the same numbers |

ap conform provenance file:./eval-store     # a directory of .jsonld files
ap conform provenance memory:               # the in-memory reference

In code: runProvenanceConformance(store, { stranger, rollup }) for any ProvenanceStorePort — the vault binding in apps/demo-a2a is run through the same suite in its tests.

Also exported: rdfcCanonicalizer (for recordDigest), validateQuads (SHACL over the published shapes with the subclass closure materialized), toTurtle, and fileProvenanceStore.

Node only. A Worker bundles the zero-dependency @agenticprimitives/provenance and never this package.