tesserakit-workflow

Validate Workflow Pack profile definitions: the governance schema that sits on top of the Tessera JobPack contract.

A Workflow Pack defines a governed multi-step workflow as a YAML file. This pack validates it:

• all steps have declared outputs (traceable)
• review gates reference real steps
• a recursion fence is declared
• evidence policy has hash-invariant steps (TOCTOU guard)
• no step references an undeclared adapter

Quickstart

tessera workflow validate --input examples/workflow/valid_codeops.workflow.yaml --output out/
open out/governance_report.md

What it checks

Workflow Pack schema

name: my.workflow
version: "0.1"
steps:
  - name: step_one
    adapter: tessera_repo
    outputs: [repo_map.jsonl]
  - name: step_two
    adapter: codegen
    inputs: [repo_map.jsonl]
    outputs: [patch.diff, patch_hash.txt]

required_adapters: [tessera_repo, codegen]
review_gates:
  - after_step: step_two
    label: human_review
evidence_policy:
  hash_invariant_steps: [step_two]
recursion_fence:
  protected_paths: [kernel/]
promotion_rule: after_review