{
  "format": "agent-article-v0",
  "article_id": "EA-267",
  "canonical_url": "/tools/ea-267-reproducible-runtime-dependency-lock-for-agent",
  "page_type": "reference",
  "claim_ids": [],
  "evidence_ids": [
    "EA-267-CURRENT-APPROVAL",
    "EA-267-CURRENT-BODY-READBACK",
    "EVD-EA-267-URL-986F2E70BAD8",
    "EVD-EA-267-URL-FC756CED2C74",
    "EVD-EA-267-URL-908A82FEAE87",
    "EVD-EA-267-URL-EA111B13134F",
    "EVD-EA-267-URL-2B85D9940787",
    "EVD-EA-267-URL-487CC5F0FDEA",
    "EVD-EA-267-URL-BFAC836A083D",
    "EVD-EA-267-URL-805347F28035"
  ],
  "unknown_ids": [
    "EA-267-UNKNOWN-01"
  ],
  "operational_object_ids": [],
  "provider": [],
  "models": [],
  "plans": [],
  "surfaces": [],
  "regions": [],
  "current_status": "CURRENT",
  "observation_status": "SPEC_ONLY",
  "freshness": "CURRENT",
  "last_verified": "2026-10-06",
  "supersedes": [],
  "superseded_by": [],
  "provenance": [
    "V23-CANDIDATE-EA267-FIRST-20261015-C3",
    "BODY-SHA256:5614286e48a19b1e97caead315314cb34a4d7a0c5e7b045dd748a670d6447c6f",
    "SRC-EA-267-URL-986F2E70BAD8",
    "SRC-EA-267-URL-FC756CED2C74",
    "SRC-EA-267-URL-908A82FEAE87",
    "SRC-EA-267-URL-EA111B13134F",
    "SRC-EA-267-URL-2B85D9940787",
    "SRC-EA-267-URL-487CC5F0FDEA",
    "SRC-EA-267-URL-BFAC836A083D",
    "SRC-EA-267-URL-805347F28035"
  ],
  "article_sources": [
    {
      "id": "EA-267-CURRENT-APPROVAL",
      "evidence_class": "RESEARCH",
      "title": "現行本文の監査・revision対応",
      "supports": [
        "現行台帳のAUDIT_PASSと候補・revision・本文ハッシュの対応を確認しています。"
      ],
      "limit": "監査状態と来歴の記録です。外部根拠の最新性や本文の全主張を追加保証しません。",
      "origin_class": "AUDITED_CANONICAL_RESEARCH_PACKET",
      "source_or_experiment_ids": [
        "V23-CANDIDATE-EA267-FIRST-20261015-C3"
      ],
      "supporting_locators": [
        "1KqhJtiSb2S84rWmeYVwKcT_76dBwZ_B0ZZuAWQqH0rQ/EA_REVISION_LEDGER!A64:U64",
        "EA_REVISION_LEDGER!A64:U64",
        "EA-267-FIRST-20261006"
      ],
      "provenance_status": "CURRENT_CANONICAL_APPROVAL_READBACK"
    },
    {
      "id": "EA-267-CURRENT-BODY-READBACK",
      "evidence_class": "IMPL",
      "title": "現行本文の収録照合",
      "supports": [
        "公開生成入力の本文SHA-256が、監査済み候補に結び付いたハッシュと一致しています。"
      ],
      "limit": "本文の同一性の検査です。外部システムの挙動や全主張の真偽を実証したものではありません。",
      "checked_at": "2026-10-18",
      "origin_class": "IMPLEMENTATION_READBACK",
      "source_or_experiment_ids": [
        "BODY-SHA256:5614286e48a19b1e97caead315314cb34a4d7a0c5e7b045dd748a670d6447c6f"
      ],
      "supporting_locators": [
        "content/staging/EA-267.md",
        "5614286e48a19b1e97caead315314cb34a4d7a0c5e7b045dd748a670d6447c6f",
        "EA-267-FIRST-20261006"
      ],
      "provenance_status": "CURRENT_APPROVED_BODY_HASH_MATCH"
    },
    {
      "id": "EVD-EA-267-URL-986F2E70BAD8",
      "evidence_class": "RESEARCH",
      "title": "E1 Reproducible Builds Definitions",
      "href": "https://reproducible-builds.org/docs/definition/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-986F2E70BAD8"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E1 Reproducible Builds Definitions https://reproducible-builds.org/docs/definition/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-FC756CED2C74",
      "evidence_class": "RESEARCH",
      "title": "E2 Build path",
      "href": "https://reproducible-builds.org/docs/build-path/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-FC756CED2C74"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E2 Build path https://reproducible-builds.org/docs/build-path/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-908A82FEAE87",
      "evidence_class": "RESEARCH",
      "title": "E3 SOURCE_DATE_EPOCH",
      "href": "https://reproducible-builds.org/docs/source-date-epoch/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-908A82FEAE87"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E3 SOURCE_DATE_EPOCH https://reproducible-builds.org/docs/source-date-epoch/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-EA111B13134F",
      "evidence_class": "RESEARCH",
      "title": "E4 npm ci",
      "href": "https://docs.npmjs.com/cli/commands/npm-ci/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-EA111B13134F"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E4 npm ci https://docs.npmjs.com/cli/commands/npm-ci/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-2B85D9940787",
      "evidence_class": "RESEARCH",
      "title": "E5 npm package locks",
      "href": "https://docs.npmjs.com/cli/v6/configuring-npm/package-locks/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-2B85D9940787"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E5 npm package locks https://docs.npmjs.com/cli/v6/configuring-npm/package-locks/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-487CC5F0FDEA",
      "evidence_class": "RESEARCH",
      "title": "E6 uv resolution",
      "href": "https://docs.astral.sh/uv/concepts/resolution/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-487CC5F0FDEA"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E6 uv resolution https://docs.astral.sh/uv/concepts/resolution/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-BFAC836A083D",
      "evidence_class": "RESEARCH",
      "title": "E7 SLSA current specification/FAQ",
      "href": "https://slsa.dev/spec/v1.2/",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-BFAC836A083D"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E7 SLSA current specification/FAQ https://slsa.dev/spec/v1.2/"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-EA-267-URL-805347F28035",
      "evidence_class": "RESEARCH",
      "title": "E7 SLSA current specification/FAQ https://slsa.dev/spec/v1.2/ ;",
      "href": "https://slsa.dev/spec/v1.1/faq",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "SOURCE_PACKET_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-EA-267-URL-805347F28035"
      ],
      "supporting_locators": [
        "EVIDENCE",
        "E7 SLSA current specification/FAQ https://slsa.dev/spec/v1.2/ ; https://slsa.dev/spec/v1.1/faq"
      ],
      "scope": "EVIDENCE",
      "provenance_status": "SOURCE_PACKET_REFERENCE_PROJECTED"
    }
  ],
  "research_sections": [
    {
      "heading": "PUBLIC_CLAIM",
      "text": "Agent runtimeの再現性では、source revisionとdependency lockだけでなく、runtime/container digest、OS/architecture、toolchain、build instructions、再現性に影響するenvironment、model/API/tool/prompt設定のversion/digestを固定します。\n\n\nlockfileによるclean installを、bit-for-bit reproducible buildやAgentのbehavioral determinismと同一視しません。"
    },
    {
      "heading": "REPRODUCIBILITY_CONTRACT",
      "text": "「再現可能」の対象を先に固定します。\n- dependency resolution\n- installed filesystem/runtime\n- build artifact bytes\n- container/image\n- deployment configuration\n- Agent behavioral output\nこれらは別の保証です。強い意味のreproducible buildは、同じsource、build environment、build instructionsから指定artifactがbit-for-bit一致することを要求します。"
    },
    {
      "heading": "PLATFORM_AND_RUNTIME",
      "text": "同じlockfileでもOS、architecture、Python/Node等のruntime、native library、wheel/binary selectionが異なれば同じruntime bytesになるとは限りません。\nOS/architecture、runtime/toolchain version、native dependency、GPU/CUDA stackを必要範囲で固定します。\ncontainer/base imageはmutable tagではなくdigestを保存します。"
    },
    {
      "heading": "BUILD_ENVIRONMENT",
      "text": "build path、timestamp、locale、timezone、toolchain等、artifact bytesへ影響するenvironmentを特定します。\n対応toolchainではSOURCE_DATE_EPOCH等の標準的な正規化手段を利用できますが、設定しただけで全toolの再現性を保証しません。\nrelevant environmentを減らし、manifest化します。"
    },
    {
      "heading": "EXTERNAL_AGENT_DEPENDENCIES",
      "text": "Agentではpackage dependency以外もruntime dependencyとして扱います。\n- model ID / snapshot / API revision\n- tool/MCP server schema and version\n- prompt/system instruction digest\n- agent graph/state-machine definition\n- retrieval/index revision\n- browser/runtime image\n- policy/guardrail configuration\nprovider-managed hidden backendなど固定不能な要素はUNKNOWNまたはvolatile dependencyとして明示します。"
    },
    {
      "heading": "VERIFICATION",
      "text": "release候補では少なくともsource revision、lockfile hash、package manager/runtime version、OS/architecture、container/base image digest、build instructions/config、relevant environment normalization、external Agent dependency versions/digests、output artifact hashをreadbackします。\n可能な範囲でclean rebuild/reinstallを複数回行い、specified artifact hashとresolved runtime manifestを比較します。"
    },
    {
      "heading": "BEHAVIORAL_BOUNDARY",
      "text": "artifact bytesが一致しても、hosted LLM、external API、tool、time-dependent data、nondeterministic samplingによりAgent出力は一致しない場合があります。\nartifact reproducibilityとbehavioral reproducibilityを別のacceptance gateにします。"
    },
    {
      "heading": "FAILURE_ENVELOPE",
      "text": "mutable image tag、unpinned transitive dependency、lock/package mismatch、install flag mismatch、native/platform drift、runtime/toolchain drift、build path/timestamp/locale差、postinstall network fetch、external binary差替え、model alias/API/tool drift、prompt/config未manifest化、hidden provider update、cache contamination、shared compromised builderを想定します。"
    },
    {
      "heading": "IMPLEMENTATION_STATE",
      "text": "本項は2026-10-06時点のReproducible Builds、npm、uv、SLSA公開資料に基づきます。organization Agent runtime/container registry/build farmへのlive rebuild/mutationは未実施です。"
    },
    {
      "heading": "SAFE_WORDING",
      "text": "Agent runtimeの再現性では、source revisionとdependency lockだけでなく、runtime/container digest、OS/architecture、toolchain、build instructions、再現性に影響するenvironment、model/API/tool/prompt設定のversion/digestを固定します。lockfileによるclean installをbit-for-bit reproducible buildやAgentのbehavioral determinismと同一視せず、clean rebuild後のartifact hashとresolved runtime manifestをreadbackします。"
    },
    {
      "heading": "OPEN_UNKNOWN",
      "text": "organization package managers、runtime/container strategy、native/GPU dependencies、browser/tool images、model/API snapshot guarantees、MCP/tool pinning、prompt/config packaging、secrets/config revisioning、offline mirror、independent builder、accepted reproducibility scope、rebuild cadence/cost、tenant realized stateは未確認です。"
    }
  ],
  "human_url": "/tools/ea-267-reproducible-runtime-dependency-lock-for-agent",
  "markdown_url": "/agent/article.md?path=%2Ftools%2Fea-267-reproducible-runtime-dependency-lock-for-agent",
  "json_url": "/agent/article.json?path=%2Ftools%2Fea-267-reproducible-runtime-dependency-lock-for-agent"
}