rail_verdict 1.0.0

data/schemas/result-v1.schema.json

@@ -0,0 +1,378 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://railverdict.dev/schemas/result/v1.schema.json",
+  "title": "RailVerdict Verification Result v1 (Draft / Unimplemented)",
+  "description": "Draft versioned machine envelope for analyzer execution, deterministic policy, findings, and incomplete evidence.",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "completion_status",
+    "gate",
+    "policy_status",
+    "findings",
+    "analyzer_results",
+    "operational_failures",
+    "decision_reasons"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "1.0"
+    },
+    "completion_status": {
+      "enum": [
+        "complete",
+        "incomplete",
+        "interrupted"
+      ]
+    },
+    "gate": {
+      "enum": [
+        "PASS",
+        "WARN",
+        "FAIL",
+        "INCOMPLETE"
+      ]
+    },
+    "policy_status": {
+      "enum": [
+        "pass",
+        "warn",
+        "fail",
+        "not_evaluated"
+      ]
+    },
+    "findings": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/finding_summary"
+      }
+    },
+    "analyzer_results": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/analyzer_result"
+      }
+    },
+    "operational_failures": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/operational_failure"
+      }
+    },
+    "decision_reasons": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/decision_reason"
+      }
+    },
+    "baseline": {
+      "type": "object",
+      "additionalProperties": true,
+      "unevaluatedProperties": true
+    },
+    "comparison": {
+      "type": "object",
+      "additionalProperties": true,
+      "unevaluatedProperties": true
+    },
+    "git": {
+      "type": "object",
+      "additionalProperties": true,
+      "unevaluatedProperties": true
+    },
+    "rails_context": {
+      "type": "object",
+      "additionalProperties": true,
+      "unevaluatedProperties": true
+    }
+  },
+  "additionalProperties": false,
+  "unevaluatedProperties": false,
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "completion_status": {
+            "const": "complete"
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "gate": {
+            "enum": ["PASS", "WARN", "FAIL"]
+          },
+          "policy_status": {
+            "enum": ["pass", "warn", "fail"]
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "completion_status": {
+            "enum": ["incomplete", "interrupted"]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "gate": {
+            "const": "INCOMPLETE"
+          },
+          "policy_status": {
+            "const": "not_evaluated"
+          },
+          "operational_failures": {
+            "minItems": 1
+          }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "finding_summary": {
+      "type": "object",
+      "required": [
+        "id",
+        "fingerprint",
+        "severity",
+        "state",
+        "blocking"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "fingerprint": {
+          "type": "string",
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "severity": {
+          "enum": ["info", "low", "medium", "high", "critical"]
+        },
+        "state": {
+          "enum": [
+            "observed",
+            "introduced",
+            "existing",
+            "resolved",
+            "changed",
+            "moved",
+            "suppressed",
+            "waived"
+          ]
+        },
+        "blocking": {
+          "type": "boolean"
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    },
+    "analyzer_result": {
+      "type": "object",
+      "required": [
+        "analyzer",
+        "invocation",
+        "execution_status",
+        "evidence_status",
+        "finding_ids"
+      ],
+      "properties": {
+        "analyzer": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "tool_version": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "invocation": {
+          "$ref": "#/$defs/invocation"
+        },
+        "execution_status": {
+          "enum": [
+            "succeeded",
+            "unavailable",
+            "unsupported",
+            "timed_out",
+            "signaled",
+            "failed",
+            "parse_failed",
+            "truncated",
+            "malformed"
+          ]
+        },
+        "evidence_status": {
+          "enum": ["complete", "incomplete"]
+        },
+        "finding_ids": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          }
+        },
+        "failure": {
+          "$ref": "#/$defs/failure"
+        },
+        "evidence_summary": {
+          "type": "object",
+          "additionalProperties": true,
+          "unevaluatedProperties": true
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false,
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "execution_status": {
+                "const": "succeeded"
+              }
+            }
+          },
+          "then": {
+            "properties": {
+              "evidence_status": {
+                "const": "complete"
+              }
+            },
+            "not": {
+              "required": ["failure"]
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": {
+              "execution_status": {
+                "enum": [
+                  "unavailable",
+                  "unsupported",
+                  "timed_out",
+                  "signaled",
+                  "failed",
+                  "parse_failed",
+                  "truncated",
+                  "malformed"
+                ]
+              }
+            }
+          },
+          "then": {
+            "required": ["failure"],
+            "properties": {
+              "evidence_status": {
+                "const": "incomplete"
+              }
+            }
+          }
+        }
+      ]
+    },
+    "invocation": {
+      "type": "object",
+      "required": ["executable", "argv"],
+      "properties": {
+        "executable": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1024
+        },
+        "argv": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "maxLength": 4096
+          }
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    },
+    "failure": {
+      "type": "object",
+      "required": ["code", "message"],
+      "properties": {
+        "code": {
+          "enum": [
+            "unavailable",
+            "unsupported",
+            "timed_out",
+            "signaled",
+            "failed",
+            "parse_failed",
+            "truncated",
+            "malformed"
+          ]
+        },
+        "message": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 4096
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    },
+    "operational_failure": {
+      "type": "object",
+      "required": ["code", "message"],
+      "properties": {
+        "code": {
+          "enum": [
+            "unavailable",
+            "unsupported",
+            "timed_out",
+            "signaled",
+            "failed",
+            "parse_failed",
+            "truncated",
+            "malformed",
+            "configuration",
+            "interrupted",
+            "incomplete_evidence"
+          ]
+        },
+        "analyzer": {
+          "type": "string",
+          "maxLength": 256
+        },
+        "message": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 4096
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    },
+    "decision_reason": {
+      "type": "object",
+      "required": ["code", "message"],
+      "properties": {
+        "code": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "message": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 4096
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    }
+  }
+}

data/schemas/waiver-v1.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://railverdict.dev/schemas/waiver/v1.schema.json",
+  "title": "RailVerdict Waiver v1",
+  "description": "Exact-fingerprint waiver requiring reason, owner, UTC creation and expiry, optional issue reference.",
+  "type": "object",
+  "required": [
+    "fingerprint",
+    "reason",
+    "owner",
+    "created_at",
+    "expires_at"
+  ],
+  "properties": {
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "reason": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024
+    },
+    "owner": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "created_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "expires_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "issue_ref": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512
+    }
+  },
+  "additionalProperties": false,
+  "unevaluatedProperties": false
+}

data/schemas/waivers-v1.schema.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://railverdict.dev/schemas/waivers/v1.schema.json",
+  "title": "RailVerdict Waivers v1",
+  "description": "Collection of exact-fingerprint waivers.",
+  "type": "object",
+  "required": [
+    "schema_version",
+    "waivers"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "1.0"
+    },
+    "waivers": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/waiver"
+      }
+    }
+  },
+  "$defs": {
+    "waiver": {
+      "type": "object",
+      "required": [
+        "fingerprint",
+        "reason",
+        "owner",
+        "created_at",
+        "expires_at"
+      ],
+      "properties": {
+        "fingerprint": {
+          "type": "string",
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "reason": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 1024
+        },
+        "owner": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "created_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "expires_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "issue_ref": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512
+        }
+      },
+      "additionalProperties": false,
+      "unevaluatedProperties": false
+    }
+  },
+  "additionalProperties": false,
+  "unevaluatedProperties": false
+}

metadata

@@ -0,0 +1,192 @@
+--- !ruby/object:Gem::Specification
+name: rail_verdict
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Pedro Dalben
+bindir: exe
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json_schemer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+- !ruby/object:Gem::Dependency
+  name: mcp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+description: |
+  RailVerdict collects evidence from established Ruby and Rails quality
+  tools, normalizes it into stable findings, applies project policy, and
+  returns a deterministic merge gate for humans, CI, and coding agents.
+  The core is offline, fail-closed, and independent of AI and hosted
+  services.
+executables:
+- railverdict
+- railverdict-minitest-reporter.rb
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- NOTICE
+- README.md
+- exe/railverdict
+- exe/railverdict-minitest-reporter.rb
+- lib/rail_verdict.rb
+- lib/rail_verdict/analyzers/_shared.rb
+- lib/rail_verdict/analyzers/bundler_audit.rb
+- lib/rail_verdict/analyzers/minitest.rb
+- lib/rail_verdict/analyzers/rspec.rb
+- lib/rail_verdict/analyzers/rubocop.rb
+- lib/rail_verdict/analyzers/simplecov.rb
+- lib/rail_verdict/baseline.rb
+- lib/rail_verdict/check.rb
+- lib/rail_verdict/cli.rb
+- lib/rail_verdict/comparison.rb
+- lib/rail_verdict/configuration.rb
+- lib/rail_verdict/contracts/analyzer_result.rb
+- lib/rail_verdict/contracts/finding.rb
+- lib/rail_verdict/contracts/gate_result.rb
+- lib/rail_verdict/coverage/changed_line_evaluator.rb
+- lib/rail_verdict/doctor.rb
+- lib/rail_verdict/errors.rb
+- lib/rail_verdict/findings_command.rb
+- lib/rail_verdict/fingerprint.rb
+- lib/rail_verdict/git/command.rb
+- lib/rail_verdict/git/context.rb
+- lib/rail_verdict/git/diff_parser.rb
+- lib/rail_verdict/git/errors.rb
+- lib/rail_verdict/init.rb
+- lib/rail_verdict/intelligence.rb
+- lib/rail_verdict/intelligence/ai_analysis.rb
+- lib/rail_verdict/intelligence/ai_failure.rb
+- lib/rail_verdict/intelligence/budget.rb
+- lib/rail_verdict/intelligence/cache.rb
+- lib/rail_verdict/intelligence/context_builder.rb
+- lib/rail_verdict/intelligence/manifest.rb
+- lib/rail_verdict/intelligence/orchestrator.rb
+- lib/rail_verdict/intelligence/prompt.rb
+- lib/rail_verdict/intelligence/provider.rb
+- lib/rail_verdict/intelligence/providers/fake_provider.rb
+- lib/rail_verdict/intelligence/providers/openai_compat.rb
+- lib/rail_verdict/intelligence/redactor.rb
+- lib/rail_verdict/intelligence/secret_detector.rb
+- lib/rail_verdict/intelligence/source_reader.rb
+- lib/rail_verdict/mcp.rb
+- lib/rail_verdict/mcp/cache.rb
+- lib/rail_verdict/mcp/repository_root.rb
+- lib/rail_verdict/mcp/serializers.rb
+- lib/rail_verdict/mcp/server.rb
+- lib/rail_verdict/mcp/tools/build_repair_packet.rb
+- lib/rail_verdict/mcp/tools/explain.rb
+- lib/rail_verdict/mcp/tools/get_finding.rb
+- lib/rail_verdict/mcp/tools/investigate.rb
+- lib/rail_verdict/mcp/tools/list_findings.rb
+- lib/rail_verdict/mcp/tools/verify.rb
+- lib/rail_verdict/mcp/tools/verify_repair.rb
+- lib/rail_verdict/mcp/validators.rb
+- lib/rail_verdict/process_runner.rb
+- lib/rail_verdict/rails_context.rb
+- lib/rail_verdict/rails_context/classifier.rb
+- lib/rail_verdict/rails_context/confidence.rb
+- lib/rail_verdict/rails_context/constant_inferencer.rb
+- lib/rail_verdict/rails_context/context.rb
+- lib/rail_verdict/rails_context/detector.rb
+- lib/rail_verdict/rails_context/limits.rb
+- lib/rail_verdict/rails_context/resolvers/association_extractor.rb
+- lib/rail_verdict/rails_context/resolvers/policy_resolver.rb
+- lib/rail_verdict/rails_context/resolvers/route_resolver.rb
+- lib/rail_verdict/rails_context/resolvers/route_scanner.rb
+- lib/rail_verdict/rails_context/resolvers/schema_resolver.rb
+- lib/rail_verdict/rails_context/resolvers/test_candidates.rb
+- lib/rail_verdict/rails_context/resolvers/view_resolver.rb
+- lib/rail_verdict/rails_context/schema_parser.rb
+- lib/rail_verdict/repair/boundary.rb
+- lib/rail_verdict/repair/command.rb
+- lib/rail_verdict/repair/constraints.rb
+- lib/rail_verdict/repair/context_assembler.rb
+- lib/rail_verdict/repair/diff_context.rb
+- lib/rail_verdict/repair/packet.rb
+- lib/rail_verdict/repair/prompt_renderer.rb
+- lib/rail_verdict/repair/verification_plan.rb
+- lib/rail_verdict/repair/verifier.rb
+- lib/rail_verdict/reporters/console.rb
+- lib/rail_verdict/reporters/github_annotations.rb
+- lib/rail_verdict/reporters/json_reporter.rb
+- lib/rail_verdict/reporters/sarif.rb
+- lib/rail_verdict/run_context.rb
+- lib/rail_verdict/schema_validator.rb
+- lib/rail_verdict/strict_yaml.rb
+- lib/rail_verdict/verification/policy.rb
+- lib/rail_verdict/version.rb
+- lib/rail_verdict/waiver.rb
+- lib/rail_verdict/waiver_store.rb
+- schemas/ai-analysis-v1.schema.json
+- schemas/baseline-v1.schema.json
+- schemas/configuration-v1.1.schema.json
+- schemas/configuration-v1.2.schema.json
+- schemas/configuration-v1.3.schema.json
+- schemas/configuration-v1.4.schema.json
+- schemas/configuration-v1.schema.json
+- schemas/coverage-v1.schema.json
+- schemas/finding-v1.schema.json
+- schemas/minitest-reporter-v1.schema.json
+- schemas/repair-packet-v1.schema.json
+- schemas/result-v1.schema.json
+- schemas/waiver-v1.schema.json
+- schemas/waivers-v1.schema.json
+homepage: https://railverdict.dev
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://railverdict.dev
+  source_code_uri: https://github.com/pedro-dalben/RailVerdict
+  changelog_uri: https://github.com/pedro-dalben/RailVerdict/blob/master/CHANGELOG.md
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.3'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: Deterministic, offline, fail-closed merge verification for Ruby on Rails
+  projects
+test_files: []