Execution Runtime

Runtime enforcement layer for authority verification.

@parmanasystems/execution-runtime

The Execution Runtime package orchestrates policy loading, deterministic execution, replay protection, signing, runtime provenance, and attestation generation.

It is the runtime responsible for producing verifiable authority verification outcomes.

Installation

npm install @parmanasystems/execution-runtime

Responsibilities

The runtime provides:

• Policy loading
• Signal validation
• Deterministic execution orchestration
• Replay protection enforcement
• Attestation generation
• Runtime provenance
• Execution state management

Why it exists

The execution engine determines the outcome.

The runtime manages the environment in which execution occurs.

This separation allows:

• deterministic verification
• independent validation
• runtime upgrades
• portable trust

Runtime flow

Request
   ↓
Schema Validation
   ↓
Policy Loading
   ↓
Deterministic Execution
   ↓
Replay Reservation
   ↓
Attestation Signing
   ↓
Audit Recording

Core capabilities

Policy Loading

The runtime loads the exact policy version referenced by the request.

policyId
policyVersion

Both are bound into the resulting attestation.

Replay Enforcement

Replay protection occurs before execution completes.

Duplicate fingerprints are rejected.

INV-013
Replay Detected

Attestation Generation

Successful execution produces a signed:

ExecutionAttestation

containing:

• execution identifier
• policy identifier
• policy version
• authority verification outcome
• runtime provenance
• signature

Runtime Provenance

Each attestation contains a runtime identity.

This enables:

• independent verification
• runtime integrity validation
• historical reproducibility
• trust portability

Relationship to other packages

Package	Responsibility
@parmanasystems/execution-runtime	Runtime orchestration
@parmanasystems/execution	Deterministic evaluation
@parmanasystems/signing	Cryptographic signing
@parmanasystems/verifier	Verification
@parmanasystems/audit-db	Persistence

Authority Verification

The runtime does not decide authority.

Humans define authority through policy.

The runtime enforces the evaluation process and produces evidence showing that authority was verified before execution.

Design principles

Fail Closed

Verification failures block execution.

Deterministic

Execution outcomes are reproducible.

Verifiable

Every attestation can be independently checked.

Portable

Trust does not depend on a specific deployment.

Runtime outputs

The primary output is:

ExecutionAttestation

which provides:

• authority verification evidence
• replay evidence
• runtime evidence
• signature evidence

See also

• /packages/execution
• /packages/signing
• /packages/verifier
• /architecture/runtime-provenance
• /concepts/execution-authority-verification