# Artifact Admission v0.1.1

Artifact Admission v0.1.1 is the correctly licensed first public release of KaldenFrame's dependency-free local policy gate for hash-bound implementation artifacts and verification receipts.

This patch replaces the briefly published v0.1.0 package, which did not include an affirmative software license. Version 0.1.1 adds the MIT License and updates package and CLI version metadata. The admission policy, receipt, and decision contracts are unchanged.

It provides:

- strict policy, receipt, and decision contracts with Draft 2020-12 schemas;
- contained portable paths and exact subject/evidence SHA-256 checks;
- bounded, duplicate-key-rejecting JSON inputs;
- exactly-one lifecycle receipt selection;
- allowed verifier name, version, and source-digest matching;
- stale, future, ambiguous, malformed, terminal-marker, and evidence-drift denial;
- receipt-byte provenance in a structured decision record;
- sanitized filesystem failures that do not disclose local absolute paths;
- create-only decision output that cannot overwrite evaluated inputs, receipts, or an existing result; and
- a Node.js library plus `artifact-admission` CLI with no runtime dependencies or network requests.

Install the first-party package directly from KaldenFrame Labs:

```sh
npm install https://kaldenframelabs.com/downloads/kaldenframe-labs-artifact-admission-0.1.1.tgz
```

Package SHA-256: `FCC76ED7E897DAFD17FEA19AB81FFDE60D7C017DE976A68CD9FD0C6EB2E7FD1D`

Source commit: `0a17c06b909e30daa8d49060695fec5754be0642`

License: MIT

Boundary: Artifact Admission checks local consistency and policy admission. It is not a signature, provenance attestation, security audit, or guarantee that an artifact is safe or fit for use. It complements artifact attestations and policy engines; it does not replace them.

This direct package path does not claim npm-registry availability. GitHub may be added as a source and release mirror.