2sagaco48 1.0.0

package/src/lib/flaws/builtins.ts

@@ -0,0 +1,63 @@
+/**
+ * Built-in detector pack — Universal, domain-agnostic failure modes.
+ * V15.1 — deduplicated (removed duplicate epistemic.refusal-mimicry).
+ */
+import {
+  type FlawDetector, type FlawIssue,
+  isNumericPrompt, hasUnits, numberAppearsIn, isFactualPrompt,
+} from "../flaw-registry";
+
+const mk = (severity: FlawIssue["severity"], code: string, message: string, autoFixable = false, remediation?: string): FlawIssue =>
+  ({ severity, code, message, autoFixable, remediation });
+
+function numericLeaves(v: any, p = "", d = 0, out: { key: string; val: number }[] = []): { key: string; val: number }[] {
+  if (d > 6 || v == null) return out;
+  if (typeof v === "number") { if (Number.isFinite(v)) out.push({ key: p || "value", val: v }); return out; }
+  if (Array.isArray(v)) { v.forEach((x, i) => numericLeaves(x, `${p}[${i}]`, d + 1, out)); return out; }
+  if (typeof v === "object") for (const [k, x] of Object.entries(v)) numericLeaves(x, p ? `${p}.${k}` : k, d + 1, out);
+  return out;
+}
+
+export const BUILTIN_DETECTORS: FlawDetector[] = [
+  // ── Numeric & Compute ─────────────────────────────────────────────────────
+  { id: "numeric.missing-compute", domain: "numeric", appliesTo: (c) => isNumericPrompt(c.prompt), scan: (c) => c.computeRecords.length === 0 ? [mk("warning", "MISSING_COMPUTE_RECORDS", "Numeric prompt detected but no deterministic compute records were generated.", false, "Route the numeric question through the compute sandbox or explicitly disclose the calculation was not performed.")] : [] },
+  { id: "numeric.missing-units", domain: "numeric", appliesTo: (c) => isNumericPrompt(c.prompt), scan: (c) => !hasUnits(c.answer) ? [mk("major", "MISSING_UNITS", "Numeric prompt answered without explicit units.", false, "Append the correct unit (e.g. $, %, kg, days) to every numeric value.")] : [] },
+  { id: "numeric.compute-consistency", domain: "numeric", scan: (c) => { const out: FlawIssue[] = []; for (const rec of c.computeRecords) { if (!rec.ok) out.push(mk("critical", "COMPUTE_FAILED", `Deterministic calculation failed for ${rec.label}.`, false, `State that the ${rec.label} calculation failed rather than substituting a guessed value.`)); else if (rec.result) for (const { key, val } of numericLeaves(rec.result)) if (!numberAppearsIn(val, c.answer)) out.push(mk("major", "COMPUTE_VALUE_MISSING", `Computed value ${val} for ${key} (${rec.label}) is missing.`, false, `Insert the exact computed value ${val} for ${key} into the relevant sentence.`)); } return out; } },
+  { id: "numeric.serialization-leak", domain: "numeric", scan: (c) => /\bNaN\b|\bInfinity\b|\[object Object\]/i.test(c.answer) ? [mk("major", "SERIALIZATION_LEAK", "Answer contains NaN/Infinity/[object Object] — stringified computation error leaked.", false, "Replace the leaked artifact with a valid computed value, or state the calculation failed.")] : [] },
+
+  // ── Constraint compliance ─────────────────────────────────────────────────
+  { id: "constraint.time-horizon", domain: "temporal", appliesTo: (c) => !!c.constraints.timeHorizon, scan: (c) => { const ok = /\b(window|horizon|days?|weeks?|months?|years?|quarter|q[1-4]\b|by \w+ \d{4}|\d{4}-\d{2}-\d{2}|jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec)\b/i.test(c.answer); return ok ? [] : [mk("major", "CONSTRAINT_TIME_IGNORED", `User specified a time horizon of ${c.constraints.timeHorizon?.days} days, but the answer does not acknowledge this temporal boundary.`, false, "Explicitly state the time window and evaluate recommendations within it.")]; } },
+  { id: "constraint.entity-missing", domain: "structural", scan: (c) => c.constraints.explicitComparisonTargets.filter((e) => e && !c.answer.includes(e)).map((e) => mk("critical", "CONSTRAINT_ENTITY_MISSING", `User explicitly requested comparison target '${e}', but it is missing from the answer.`, false, `Add a dedicated section addressing '${e}'.`)) },
+  { id: "constraint.exclusion-violated", domain: "structural", scan: (c) => c.constraints.exclusions.filter((ex) => ex && new RegExp(`\\b${ex.replace(/[.*+?^${}()|[\\]\\]/g, "\\$&")}\\b`, "i").test(c.answer)).map((ex) => mk("critical", "CONSTRAINT_EXCLUSION_VIOLATED", `User explicitly excluded '${ex}', but it appears in the answer.`, false, `Remove every reference to '${ex}'.`)) },
+
+  // ── Epistemic ─────────────────────────────────────────────────────────────
+  { id: "epistemic.overconfident", domain: "epistemic", scan: (c) => { const a = /\b(exactly|precisely|guaranteed|100% accurate|always|never|definitively|categorically|without question|undoubtedly|indisputably|unquestionably|proven fact)\b/i.test(c.answer); const h = /\b(assum|default|input|estimate|range|uncertain|requires|approximately|likely|roughly|confidence|caveat|depends)\b/i.test(c.answer); return a && !h ? [mk("warning", "OVERCONFIDENT_CERTAINTY", "Absolute certainty expressed without declared assumptions or confidence intervals.", false, "Replace absolute language with hedged phrasing and state key assumptions.")] : []; } },
+  { id: "epistemic.refusal-mimicry", domain: "epistemic", appliesTo: (c) => (c.sources?.length ?? 0) >= 8, scan: (c) => /\b(provided data|retrieved sources|source context|available evidence)\b[\s\S]{0,160}\b(does not contain|do not contain|lacks?|insufficient|no direct mention|no information regarding|cannot propose|unable to propose)\b/i.test(c.answer) ? [mk("major", "REFUSAL_MIMICRY", "Source-rich retrieval but answer claims insufficient evidence.", false, "Use the retrieved sources to produce a concrete evidence-bounded synthesis; only name narrow fields that are genuinely missing.")] : [] },
+  { id: "epistemic.base-rate-neglect", domain: "epistemic", appliesTo: (c) => isFactualPrompt(c.prompt), scan: (c) => /\b(100%|always|never|guaranteed|everyone|no one)\b[\s\S]{0,90}\b(success|failure|works|fails|wins|loses|survives|dies)/i.test(c.answer) && !/\b(base.?rate|prior|prevalence|background|reference class)\b/i.test(c.answer) ? [mk("major", "BASE_RATE_NEGLECT", "Base-rate neglect: absolute claim without reference to prevalence or prior probability.", false, "Explicitly state base rate or reference class used.")] : [] },
+  { id: "epistemic.sycophancy-output", domain: "epistemic", appliesTo: (c) => isFactualPrompt(c.prompt), scan: (c) => /^(great|excellent|fantastic|outstanding|brilliant) (question|prompt|ask|inquiry)/i.test(c.answer.trim()) ? [mk("warning", "SYCOPHANCY_OUTPUT", "Sycophantic opener leaked into final answer.", true, "Remove the opener; begin with substantive verdict.")] : [] },
+  { id: "scientific.p-hacking-lang", domain: "domain", appliesTo: (c) => /scientific|nih|study|p.?value|hypothesis|statistical/i.test(c.prompt), scan: (c) => /\b(p.?value|statistical significance|significant(ly)?)\b[\s\S]{0,120}\b(exploratory|post.?hoc|we tried|multiple comparisons|cherry.?picked|selected|best.?performing)/i.test(c.answer) ? [mk("major", "P_HACKING_LANG", "Language suggestive of p-hacking or post-hoc specification without correction.", false, "Declare comparisons planned a-priori or apply multiplicity correction.")] : [] },
+
+  // ── Citation ──────────────────────────────────────────────────────────────
+  { id: "citation.index-out-of-range", domain: "citation", appliesTo: (c) => Array.isArray(c.sources) && c.sources.length > 0, scan: (c) => { const n = c.sources!.length; const out: FlawIssue[] = []; const seen = new Set<number>(); for (const m of c.answer.matchAll(/\[(?:S|Source\s*)(\d+)\]/gi)) { const idx = parseInt(m[1], 10); if (idx > n && !seen.has(idx)) { seen.add(idx); out.push(mk("critical", "CITATION_INDEX_OOR", `Answer cites [S${idx}] but only ${n} source(s) exist.`, false, `Remove or replace [S${idx}] with a citation to a real source (S1–S${n}).`)); } } return out; } },
+  { id: "citation.cites-with-no-sources", domain: "citation", appliesTo: (c) => !Array.isArray(c.sources) || c.sources.length === 0, scan: (c) => { const refs = [...c.answer.matchAll(/\[(?:S|Source\s*)(\d+)\]/gi)].map(m => m[0]); return refs.length > 0 ? [mk("critical", "CITES_WITH_NO_SOURCES", `Answer cites ${refs.slice(0, 3).join(", ")} but no source list was provided.`, false, "Remove source markers or rerun with retrieved sources available.")] : []; } },
+
+  // ── Format leaks (most auto-fixable) ──────────────────────────────────────
+  { id: "format.critique-json-leak", domain: "format", scan: (c) => /\{\s*"(?:clear|errors|corrections|combinedScore|topicMatch|numbersMatchOverlay)"\s*:/i.test(c.answer) ? [mk("major", "CRITIQUE_JSON_LEAK", "Internal critique/judge JSON leaked into reader-facing output.", true, "Remove the JSON block; it is internal scaffolding.")] : [] },
+  { id: "format.system-marker-leak", domain: "format", scan: (c) => /(^|\n)\s*(REFERENCE OVERLAY|ISSUES DETECTED|CRITIQUE:|DRAFT:|MANDATORY VERIFICATION PROTOCOL|Deterministic Audit Overlay)\b/i.test(c.answer) ? [mk("major", "SYSTEM_MARKER_LEAK", "System/overlay scaffolding markers leaked into output.", true, "Delete every scaffolding marker line.")] : [] },
+  { id: "format.scratchpad-leak", domain: "format", scan: (c) => /(^|\n)\s*(Self-correction:|Let me think|As an AI[,.]|Scratchpad:|Thinking:|Step \d+ \()/i.test(c.answer) ? [mk("warning", "SCRATCHPAD_LEAK", "Chain-of-thought / scratchpad text leaked into output.", true, "Remove scratchpad lines; emit only the final polished answer.")] : [] },
+  { id: "format.xml-tag-leak", domain: "format", scan: (c) => /<\/?(final_answer|paragraph|section|div|p|answer)>/i.test(c.answer) ? [mk("warning", "XML_TAG_LEAK", "Raw XML/HTML scaffolding tags present; use clean Markdown.", true, "Strip scaffolding tags; preserve content as clean Markdown.")] : [] },
+  { id: "format.placeholder-leak", domain: "format", scan: (c) => /\[(?:list of|description of|insert|tbd|placeholder|fill in|todo)\b[^\]]*\]/i.test(c.answer) ? [mk("major", "PLACEHOLDER_LEAK", "Unfilled bracketed placeholder remains in the answer.", false, "Replace every bracketed placeholder with specific content or remove the slot.")] : [] },
+  { id: "format.persona-leak", domain: "format", scan: (c) => /\b(as an? AI(?:\s+language\s+model|\s+assistant)?[,.]|I am an? AI(?:\s+language\s+model)?\b|I(?:'m| am)\s+(?:just\s+)?an?\s+AI\b|my training data|my knowledge cutoff)\b/i.test(c.answer) ? [mk("warning", "PERSONA_LEAKAGE", "AI/system persona meta-discourse leaked into the answer.", true, "Remove every AI self-referential statement.")] : [] },
+  { id: "format.verification-plan-leak", domain: "format", scan: (c) => /\bVERIFICATION PLAN MODE\b|\bHypotheses:\s*\n|\bSearch Queries:\s*\n|I am now proceeding to verify/i.test(c.answer) ? [mk("critical", "VERIFICATION_PLAN_LEAKAGE", "Internal verification-plan / workflow text leaked into the final answer.", false, "Delete verification-plan scaffolding; ship only the finished answer.")] : [] },
+  { id: "format.lazy-truncation", domain: "format", scan: (c) => /\b(rest of the code|omitted for brevity|snipped|left as an exercise|fill in the rest|continued in next|to be continued)\b/i.test(c.answer) ? [mk("critical", "LAZY_TRUNCATION", "Output indicates lazy truncation or omitted required content.", false, "Expand every omitted section with complete content.")] : [] },
+  { id: "format.truncation", domain: "format", appliesTo: (c) => c.answer.trim().length > 200, scan: (c) => { const trimmed = c.answer.trim(); const lastLine = trimmed.slice(trimmed.lastIndexOf("\n") + 1).trim(); if (/^([*\-+]\s|\d+[.)]\s|#{1,6}\s|>|\||```|\$\$)/.test(lastLine)) return []; if (/\|\s*$/.test(lastLine) || /```/.test(lastLine)) return []; const dangling = /[,;:]\s*$|\b(and|or|but|the|a|an|to|of|with|for|in|on|as|by|that|which|because|however|therefore|thus|since|while|where|when)\s*$/i.test(lastLine); const noTerminal = !/[.!?)"'»"\]\}]\s*$/.test(lastLine); return (dangling || (noTerminal && /\w$/.test(lastLine))) ? [mk("major", "TRUNCATED_OUTPUT", "Answer appears truncated mid-sentence.", false, "Complete the unfinished sentence with terminal punctuation.")] : []; } },
+
+  // ── Markup integrity ──────────────────────────────────────────────────────
+  { id: "markup.code-fence-unclosed", domain: "format", appliesTo: c => c.answer.includes("```"), scan: c => (c.answer.match(/```/g) ?? []).length % 2 !== 0 ? [mk("major", "CODE_FENCE_UNCLOSED", "Odd number of code fences; block is unclosed.", false, "Add the closing ```.")] : [] },
+  { id: "markup.math-fence-unclosed", domain: "format", appliesTo: c => c.answer.includes("$$"), scan: c => (c.answer.match(/\$\$/g) ?? []).length % 2 !== 0 ? [mk("major", "MATH_FENCE_UNCLOSED", "Odd number of $$ math delimiters; block is unclosed.", false, "Add the missing closing $$.")] : [] },
+  { id: "markup.empty-link", domain: "format", scan: c => /\[[^\]\n]+\]\(\s*\)/i.test(c.answer) ? [mk("warning", "MARKDOWN_LINK_EMPTY", "Markdown link with empty href detected.", false, "Provide a valid URL or remove the link syntax.")] : [] },
+
+  // ── Structural ────────────────────────────────────────────────────────────
+  { id: "structural.table-column-mismatch", domain: "structural", appliesTo: c => /\|[-:\s|]+\|/.test(c.answer) && (c.answer.match(/^\s*\|.+\|\s*$/gm) ?? []).length >= 3, scan: c => { const rows = c.answer.split("\n").filter(l => /^\s*\|.+\|\s*$/.test(l)); if (rows.length < 3) return []; const exp = (rows[0].match(/\|/g) ?? []).length; let errs = 0; for (const r of rows) if ((r.match(/\|/g) ?? []).length !== exp) errs++; return errs > 0 ? [mk("warning", "TABLE_COL_MISMATCH", `Markdown table has ${errs} row(s) with inconsistent column count.`, false, "Ensure every table row has the same number of | delimiters as the header.")] : []; } },
+  { id: "logical.negation-contradiction-lite", domain: "logical", appliesTo: c => c.answer.length > 150, scan: c => { const positives = [...c.answer.matchAll(/\b([A-Z][a-z]{3,30}(?:\s+[a-z]+){0,2})\s+(?:is|are)\s+([a-z]{4,30})\b/g)]; const seen = new Map<string, string>(); for (const m of positives) seen.set(`${m[1].toLowerCase()}|${m[2].toLowerCase()}`, m[0]); for (const m of c.answer.matchAll(/\b([A-Z][a-z]{3,30}(?:\s+[a-z]+){0,2})\s+(?:is|are)\s+not\s+([a-z]{4,30})\b/g)) { const key = `${m[1].toLowerCase()}|${m[2].toLowerCase()}`; if (seen.has(key)) return [mk("major", "INTERNAL_NEGATION_CONTRADICTION", `Contradicting assertions for "${m[1]}": both affirming and negating "${m[2]}".`, false, "Reconcile the contradiction; pick one position.")]; } return []; } },
+];

package/src/lib/flaws/finance.ts

@@ -0,0 +1,169 @@
+/**
+ * Finance Domain Pack v1
+ *
+ * Targets text-detectable failure modes in financial/investment content:
+ *   - Unsolicited investment advice without registration/suitability caveat
+ *   - "Guaranteed returns" / "no risk"
+ *   - Past-performance-as-future-results
+ *   - Crypto/security misclassification under Howey
+ *   - Tax advice without CPA/EA caveat
+ *   - GAAP/IFRS conflation
+ *   - Backtest without out-of-sample
+ *   - Sharpe ratio / VaR misuse
+ *   - "Risk-free" attached to non-Treasury instruments
+ *   - Insider information indicators
+ *   - SEC Rule 10b-5 risk language
+ */
+import { type FlawDetector, type FlawIssue, type ScanContext } from "../flaw-registry";
+
+const mk = (
+  severity: FlawIssue["severity"],
+  code: string,
+  message: string,
+  remediation: string,
+): FlawIssue => ({ severity, code, message, remediation });
+
+function T(c: ScanContext): string { return `${c.prompt}\n${c.answer}`; }
+function isFinance(c: ScanContext): boolean {
+  return /\b(stock|bond|equity|portfolio|invest|investment|trading|trader|broker|asset|securit|fund|ETF|mutual fund|hedge fund|options|futures|derivat|crypto|bitcoin|ethereum|token|ICO|IPO|SEC|FINRA|GAAP|IFRS|EBITDA|P\/E|ROI|NPV|IRR|Sharpe|alpha|beta|volatility|drawdown|VaR|capital|dividend|yield|interest rate|fed|treasury|tax|IRS|401k|IRA|Roth|capital gain|short sale|margin)\b/i.test(T(c));
+}
+function isAdvisoryFinance(c: ScanContext): boolean {
+  return isFinance(c) && /\b(you should|recommend|buy|sell|invest in|allocate|put your money|portfolio.*allocation|best stock|best investment)\b/i.test(c.answer);
+}
+
+export const FINANCE_FLAWS: FlawDetector[] = [
+  // ── Investment-adviser registration / suitability ─────────────────────────
+  {
+    id: "fin.no-adviser-disclaimer",
+    domain: "domain",
+    description: "Direct investment advice without RIA / fiduciary / suitability caveat.",
+    appliesTo: isAdvisoryFinance,
+    scan: c => /\b(you should buy|you should sell|you should invest|recommend buying|recommend selling|put your money in|buy [A-Z]{1,5} now)\b/i.test(c.answer)
+      && !/\b(not\s+(?:financial|investment)\s+advice|consult\s+(?:a\s+)?(?:licensed|registered|financial)\s+(?:adviser|advisor|RIA|CFP)|registered\s+investment\s+adviser|fiduciary|suitabili|for\s+informational\s+purposes|do\s+your\s+own\s+research)\b/i.test(c.answer)
+      ? [mk("major", "FIN_NO_ADVISER_DISCLAIMER", "Direct investment advice without 'not financial advice / consult registered adviser' caveat.", "Add: 'This is for informational purposes only and not financial advice. Consult a licensed/registered investment adviser (RIA, CFP) about your specific situation before making investment decisions.' Required by SEC/FINRA rules and to limit liability.")]
+      : [],
+  },
+
+  // ── Guaranteed-returns / risk-free fallacies ──────────────────────────────
+  {
+    id: "fin.guaranteed-returns",
+    domain: "domain",
+    description: "'Guaranteed returns' or 'no risk' language outside Treasury/FDIC context.",
+    appliesTo: isFinance,
+    scan: c => /\b(guaranteed\s+(?:returns?|profits?|gains?)|risk[-\s]free\s+(?:returns?|profits?|gains?)|zero\s+risk|no\s+risk\s+of\s+loss|can[']?t\s+lose|cannot\s+lose)\b/i.test(c.answer)
+      && !/\b(U\.S\.\s+Treasur|T-?bill|FDIC[-\s]?insured|government[-\s]?backed)\b/i.test(c.answer)
+      ? [mk("critical", "FIN_GUARANTEED_RETURNS", "'Guaranteed returns' / 'no risk' / 'risk-free' language used outside Treasury/FDIC context — Rule 10b-5 / FTC misrepresentation risk.", "No equity, crypto, hedge-fund, or private-investment product is 'risk-free' or 'guaranteed'. SEC Rule 10b-5 prohibits material misrepresentation. Reserve 'risk-free' for U.S. Treasuries and FDIC-insured deposits up to limit.")]
+      : [],
+  },
+  {
+    id: "fin.risk-free-misuse",
+    domain: "domain",
+    description: "'Risk-free rate' applied to non-Treasury / non-sovereign instrument.",
+    appliesTo: isFinance,
+    scan: c => /\brisk[-\s]?free\s+rate\b/i.test(c.answer)
+      && /\b(corporate bond|junk bond|high[-\s]yield|stock|equity|crypto|emerging market)\b/i.test(c.answer)
+      && !/\b(spread\s+over|excess\s+(?:return|yield)|treasury\s+yield)\b/i.test(c.answer)
+      ? [mk("major", "FIN_RISK_FREE_MISUSE", "'Risk-free rate' applied to risk-bearing instrument.", "Risk-free rate refers to U.S. Treasury (or equivalent sovereign) yield only. Other instruments have credit/default risk and are priced as spread over the risk-free rate.")]
+      : [],
+  },
+
+  // ── Past performance / regulatory boilerplate ─────────────────────────────
+  {
+    id: "fin.past-performance",
+    domain: "domain",
+    description: "Citing past returns as predictive of future without disclaimer.",
+    appliesTo: isFinance,
+    scan: c => /\b(returned|gained|posted|achieved)\s+\d+\s*%(?:\s+(?:over|in)\s+the\s+(?:past|last)\s+\d+\s+years?)?[\s\S]{0,80}\b(will|expect|likely)\s+(?:to\s+)?(?:gain|return|earn|continue)/i.test(c.answer)
+      && !/\b(past\s+performance\s+(?:is\s+not|does\s+not\s+guarantee))/i.test(c.answer)
+      ? [mk("major", "FIN_PAST_PERFORMANCE", "Past returns presented as predictive of future returns without disclaimer.", "Per SEC and FINRA: past performance is not indicative of future results. Add disclaimer or reframe historical data as illustrative only.")]
+      : [],
+  },
+
+  // ── Tax / accounting precision ────────────────────────────────────────────
+  {
+    id: "fin.tax-no-jurisdiction",
+    domain: "domain",
+    description: "Tax statements without jurisdiction (federal vs state, U.S. vs foreign).",
+    appliesTo: c => /\b(tax|IRS|capital gain|deduction|withholding|1099|W-2|filing|return)\b/i.test(T(c)),
+    scan: c => /\b(tax\s+rate\s+is|you\s+(?:owe|pay)|deduct(?:ible)?|tax[-\s]?free|exempt|capital\s+gains\s+tax)\b/i.test(c.answer)
+      && /\b(is|are|equals?|\d+\s*%)\b/i.test(c.answer)
+      && !/\b(U\.S\.\s+federal|federal\s+income|state\s+tax|California|New York|Texas|varies\s+by\s+state|foreign|jurisdiction|consult\s+a\s+(?:CPA|tax\s+(?:adviser|professional))|Enrolled\s+Agent)\b/i.test(c.answer)
+      ? [mk("major", "FIN_TAX_NO_JURISDICTION", "Tax rate / treatment stated without jurisdiction or 'consult a CPA' caveat.", "U.S. federal vs state vs foreign tax treatment varies materially. Specify jurisdiction and add: 'Consult a CPA or Enrolled Agent for your specific situation.'")]
+      : [],
+  },
+  {
+    id: "fin.gaap-ifrs-conflation",
+    domain: "domain",
+    description: "GAAP and IFRS conflated as equivalent.",
+    appliesTo: c => /\b(GAAP|IFRS|accounting standards?|financial statements?)\b/i.test(T(c)),
+    scan: c => /\b(GAAP\s+and\s+IFRS\s+(?:are|both)\s+(?:the\s+same|equivalent|interchangeable)|GAAP\s+is\s+(?:basically\s+)?IFRS)\b/i.test(c.answer)
+      ? [mk("major", "FIN_GAAP_IFRS_CONFLATION", "GAAP and IFRS conflated as equivalent — they differ materially in inventory, R&D, lease accounting, etc.", "Differentiate: U.S. GAAP (FASB, rules-based) vs IFRS (IASB, principles-based). Key differences: LIFO permitted under GAAP but not IFRS; R&D capitalization rules differ; lease accounting (ASC 842 vs IFRS 16) differs.")]
+      : [],
+  },
+
+  // ── Quantitative finance hygiene ──────────────────────────────────────────
+  {
+    id: "fin.backtest-no-oos",
+    domain: "domain",
+    description: "Backtest result cited without out-of-sample / look-ahead disclosure.",
+    appliesTo: c => /\b(backtest|backtesting|strategy returned|simulated returns)\b/i.test(T(c)),
+    scan: c => /\bbacktest(?:ed|ing)?\b[\s\S]{0,80}\b(?:returned|achieved|earned|gained)\s+\d+\s*%/i.test(c.answer)
+      && !/\b(out[-\s]?of[-\s]?sample|walk[-\s]?forward|look[-\s]?ahead|survivorship|overfit|in[-\s]?sample\s+only)\b/i.test(c.answer)
+      ? [mk("major", "FIN_BACKTEST_NO_OOS", "Backtest performance cited without out-of-sample / look-ahead / survivorship-bias disclosure.", "Always disclose: in-sample vs out-of-sample period, walk-forward validation, look-ahead-bias controls, survivorship-bias correction (delisted tickers included), and transaction cost / slippage assumptions.")]
+      : [],
+  },
+  {
+    id: "fin.sharpe-no-period",
+    domain: "domain",
+    description: "Sharpe ratio cited without time period / risk-free benchmark.",
+    appliesTo: c => /\bSharpe\b/i.test(T(c)),
+    scan: c => /\bSharpe\s+(?:ratio\s+)?(?:of|=)\s*\d+(?:\.\d+)?\b/i.test(c.answer)
+      && !/\b(annuali[sz]ed|period|risk[-\s]?free|monthly|daily|over\s+\d+\s+(?:year|month))/i.test(c.answer)
+      ? [mk("warning", "FIN_SHARPE_NO_PERIOD", "Sharpe ratio cited without specifying annualization / period / risk-free benchmark.", "Sharpe = (R_p - R_f) / σ_p. Always state: time period, annualization basis (e.g. √252 for daily, √12 for monthly), and risk-free rate used.")]
+      : [],
+  },
+  {
+    id: "fin.var-no-confidence",
+    domain: "domain",
+    description: "Value-at-Risk cited without confidence level / horizon.",
+    appliesTo: c => /\bVaR\b/i.test(T(c)),
+    scan: c => /\bVaR\s+(?:of|=|is)\s*\$?\d/i.test(c.answer)
+      && !/\b(\d{2}\s*%\s+confidence|95\s*%|99\s*%|1[-\s]?day|10[-\s]?day|horizon)\b/i.test(c.answer)
+      ? [mk("warning", "FIN_VAR_NO_CONFIDENCE", "Value-at-Risk cited without confidence level or time horizon.", "VaR is always conditioned on confidence (e.g. 95% or 99%) AND horizon (e.g. 1-day, 10-day). Specify both. Also note VaR's known limitations (does not bound tail loss; consider CVaR/Expected Shortfall).")]
+      : [],
+  },
+
+  // ── Securities law triggers ───────────────────────────────────────────────
+  {
+    id: "fin.crypto-howey",
+    domain: "domain",
+    description: "Crypto token classified as 'not a security' without Howey test discussion.",
+    appliesTo: c => /\b(crypto|token|ICO|altcoin|bitcoin|ethereum|coin)\b/i.test(T(c)),
+    scan: c => /\b(?:is\s+not\s+a\s+security|won[']?t\s+be\s+regulated\s+by\s+SEC|outside\s+SEC\s+jurisdiction)\b/i.test(c.answer)
+      && !/\b(Howey\s+test|investment\s+contract|expectation\s+of\s+profits|common\s+enterprise)\b/i.test(c.answer)
+      ? [mk("major", "FIN_CRYPTO_HOWEY", "Crypto token classified as 'not a security' without Howey test analysis.", "U.S. SEC applies the Howey test (1946): an investment of money in a common enterprise with expectation of profits from the efforts of others = security. Discuss the four prongs explicitly before claiming non-security status.")]
+      : [],
+  },
+  {
+    id: "fin.insider-trading-marker",
+    domain: "domain",
+    description: "Language consistent with material non-public information trading advice.",
+    appliesTo: isFinance,
+    scan: c => /\b(insider\s+(?:info|information|knowledge|tip)|material\s+non[-\s]?public|MNPI|before\s+the\s+announcement|before\s+earnings\s+(?:are\s+)?released|got\s+a\s+tip\s+from)\b/i.test(c.answer)
+      && /\b(buy|sell|trade|short|long|position)\b/i.test(c.answer)
+      ? [mk("critical", "FIN_INSIDER_TRADING_MARKER", "Content implies trading on material non-public information (MNPI) — securities-fraud / SEC Rule 10b-5 / insider-trading exposure.", "Refuse to advise on trading based on MNPI. Direct the user to disclosure obligations and counsel. Insider trading is a federal crime under SEC Rule 10b-5 and the Securities Exchange Act of 1934.")]
+      : [],
+  },
+
+  // ── Crypto / DeFi safety ──────────────────────────────────────────────────
+  {
+    id: "fin.defi-no-impermanent-loss",
+    domain: "domain",
+    description: "DeFi liquidity-pool returns cited without impermanent-loss disclosure.",
+    appliesTo: c => /\b(DeFi|liquidity\s+pool|LP\s+token|AMM|Uniswap|Curve|Balancer|yield\s+farm)\b/i.test(T(c)),
+    scan: c => /\b(?:APY|APR|yield)\s+of\s+\d+\s*%/i.test(c.answer)
+      && !/\b(impermanent\s+loss|IL|divergence\s+loss|smart\s+contract\s+risk|rug\s+pull)\b/i.test(c.answer)
+      ? [mk("major", "FIN_DEFI_NO_IL", "DeFi LP / yield-farm APY cited without impermanent-loss and smart-contract-risk disclosure.", "DeFi LP returns can be wiped out by impermanent loss when token prices diverge, plus smart-contract bugs, oracle manipulation, and rug-pull risk. Disclose all three explicitly.")]
+      : [],
+  },
+];

package/src/lib/flaws/fixers.ts

@@ -0,0 +1,10 @@
+/**
+ * Deterministic Auto-Fixers (CRITIQUE_FIXERS).
+ * These run on the raw model output before it reaches the user.
+ */
+import type { ScanContext } from "../flaw-registry";
+
+export function CRITIQUE_FIXERS(): void {
+  // Registration is handled by the main flaw index; this file exists to satisfy the import contract.
+  // If specific fixers need to register themselves as detectors, they would do so here.
+}

package/src/lib/flaws/index.ts

@@ -0,0 +1,32 @@
+import { registerFlaws, registerFlawPack } from "../flaw-registry";
+import { BUILTIN_DETECTORS } from "./builtins";
+import { CRITIQUE_FIXERS } from "./fixers";
+import { STATISTICS_FLAWS } from "./statistics";
+import { STATISTICS_ADVANCED_FLAWS } from "./statistics-advanced";
+import { SOFTWARE_EXTENDED_FLAWS } from "./software-extended";
+import { SOFTWARE_RN_WEBGL_FLAWS } from "./software-rn-webgl";
+import { MEDICAL_FLAWS } from "./medical";
+import { LEGAL_FLAWS } from "./legal";
+import { FINANCE_FLAWS } from "./finance";
+
+let loaded = false;
+export function ensureFlawsLoaded(): void {
+  if (loaded) return;
+  loaded = true;
+
+  registerFlawPack("builtin", BUILTIN_DETECTORS);
+  CRITIQUE_FIXERS();
+  registerFlawPack("statistics", STATISTICS_FLAWS);
+  registerFlawPack("statistics-advanced", STATISTICS_ADVANCED_FLAWS);
+  registerFlawPack("software-extended", SOFTWARE_EXTENDED_FLAWS);
+  registerFlawPack("software-rn-webgl", SOFTWARE_RN_WEBGL_FLAWS);
+  registerFlawPack("medical", MEDICAL_FLAWS);
+  registerFlawPack("legal", LEGAL_FLAWS);
+  registerFlawPack("finance", FINANCE_FLAWS);
+}
+
+export {
+  registerFlaw, registerFlaws, registerFlawPack,
+  setFlawEnabled, setPackEnabled, listFlaws, listPacks,
+  loadDeclarativePack, registryHealthCheck,
+} from "../flaw-registry";

package/src/lib/flaws/legal.ts

@@ -0,0 +1,157 @@
+/**
+ * Legal Domain Pack v1
+ *
+ * Targets text-detectable failure modes in legal/regulatory content:
+ *   - "This is legal advice" without attorney-disclaimer
+ *   - Jurisdiction-agnostic statutory citation
+ *   - Citation to fabricated case law (Mata v. Avianca pattern)
+ *   - Statute citation without title/section/year
+ *   - Contract clauses without governing-law/venue/severability
+ *   - Privilege/confidentiality leakage indicators
+ *   - "Always" / "Never" legal absolutes
+ *   - GDPR/CCPA conflation
+ *   - Misstatement of statutes of limitations
+ *   - UPL (Unauthorized Practice of Law) markers
+ */
+import { type FlawDetector, type FlawIssue, type ScanContext } from "../flaw-registry";
+
+const mk = (
+  severity: FlawIssue["severity"],
+  code: string,
+  message: string,
+  remediation: string,
+): FlawIssue => ({ severity, code, message, remediation });
+
+function T(c: ScanContext): string { return `${c.prompt}\n${c.answer}`; }
+function isLegal(c: ScanContext): boolean {
+  return /\b(law|legal|statute|regulation|attorney|lawyer|counsel|court|judge|plaintiff|defendant|contract|clause|agreement|liability|damages|tort|criminal|civil|jurisdiction|appellate|supreme court|circuit|district|prosecut|sue|lawsuit|judgment|sentenc|verdict|breach|negligen|due process|GDPR|CCPA|HIPAA|SEC|FTC|DOJ|EEOC|OSHA|U\.S\.C\.|C\.F\.R\.|§)\b/i.test(T(c));
+}
+function isAdvisoryLegal(c: ScanContext): boolean {
+  return isLegal(c) && /\b(you should|you can|you must|your rights|you are entitled|file a|sue for|recover|claim|enforce)\b/i.test(c.answer);
+}
+
+export const LEGAL_FLAWS: FlawDetector[] = [
+  // ── UPL / disclaimer ──────────────────────────────────────────────────────
+  {
+    id: "legal.no-attorney-disclaimer",
+    domain: "domain",
+    description: "Direct legal advisory content without 'not legal advice / consult attorney' disclaimer.",
+    appliesTo: isAdvisoryLegal,
+    scan: c => /\b(you should|you can|you must|you are entitled|file a|sue for|recover damages)\b/i.test(c.answer)
+      && !/\b(not\s+legal\s+advice|consult\s+(?:an?\s+)?(?:attorney|lawyer)|seek\s+legal\s+counsel|licensed\s+attorney|jurisdiction[-\s]?specific|this\s+is\s+general\s+information)\b/i.test(c.answer)
+      ? [mk("major", "LEGAL_NO_ATTORNEY_DISCLAIMER", "Direct legal advisory content without 'not legal advice / consult licensed attorney' disclaimer.", "Add: 'This is general information and not legal advice. Consult a licensed attorney in your jurisdiction for advice on your specific situation.' Failing to do so risks Unauthorized Practice of Law (UPL) exposure.")]
+      : [],
+  },
+
+  // ── Jurisdiction precision ────────────────────────────────────────────────
+  {
+    id: "legal.jurisdiction-agnostic",
+    domain: "domain",
+    description: "Statute/rule cited without jurisdiction (federal vs state, which state, which country).",
+    appliesTo: isLegal,
+    scan: c => /\b(statute of limitations|filing deadline|burden of proof|sentencing|damages cap|minimum wage|right to)\b/i.test(c.answer)
+      && /\b(is|are|requires|allows|prohibits)\b\s+\d/i.test(c.answer)
+      && !/\b(federal|state\s+of|under\s+(?:U\.S\.\s+law|California|New York|Texas|EU\s+law|GDPR|UK\s+law|Canadian|Australian)|in\s+(?:most|all|some)\s+(?:states|jurisdictions)|varies\s+by\s+(?:state|jurisdiction))\b/i.test(c.answer)
+      ? [mk("major", "LEGAL_JURISDICTION_AGNOSTIC", "Statute / legal rule cited as universal without naming a jurisdiction.", "Specify jurisdiction (federal U.S., specific state, EU GDPR, UK, etc.). Statutes of limitations, damages caps, and procedural rules vary materially across jurisdictions.")]
+      : [],
+  },
+
+  // ── Case citation integrity ───────────────────────────────────────────────
+  {
+    id: "legal.citation-no-reporter",
+    domain: "domain",
+    description: "Case cited without reporter / year — likely hallucinated (Mata v. Avianca pattern).",
+    appliesTo: isLegal,
+    scan: c => {
+      // Case name followed by v., but NO reporter cite within 80 chars
+      const cases = [...c.answer.matchAll(/\b([A-Z][a-zA-Z]+(?:\s+[A-Z][a-zA-Z]+)*)\s+v\.\s+([A-Z][a-zA-Z]+(?:\s+[A-Z][a-zA-Z]+)*)/g)];
+      for (const m of cases) {
+        const tail = c.answer.slice(m.index! + m[0].length, m.index! + m[0].length + 120);
+        const hasReporter = /\b\d+\s+(?:U\.S\.|F\.\s?\d?d?|F\.\s?Supp\.?\s?\d?d?|S\.\s?Ct\.|L\.\s?Ed\.\s?\d?d?|Cal\.|N\.Y\.|N\.E\.\s?\d?d?|S\.W\.\s?\d?d?|P\.\s?\d?d?|A\.\s?\d?d?|So\.\s?\d?d?)\s+\d/i.test(tail);
+        const hasYear = /\(\s*(?:1[89]\d{2}|20\d{2})\s*\)/.test(tail);
+        if (!hasReporter && !hasYear) {
+          return [mk("critical", "LEGAL_CITATION_NO_REPORTER", `Case citation "${m[0]}" lacks reporter and year — likely hallucinated (Mata v. Avianca pattern).`, "Provide full Bluebook citation: case name, reporter volume, reporter abbreviation, page, court, year. Verify the case exists in Westlaw/LexisNexis before citing.")];
+        }
+      }
+      return [];
+    },
+  },
+  {
+    id: "legal.statute-no-section",
+    domain: "domain",
+    description: "Statute referenced (e.g. U.S.C., C.F.R.) without title and section.",
+    appliesTo: isLegal,
+    scan: c => /\b(?:U\.S\.\s+Code|United\s+States\s+Code|Code\s+of\s+Federal\s+Regulations|federal\s+statute|federal\s+regulation)\b/i.test(c.answer)
+      && !/\b\d{1,2}\s+(?:U\.S\.C\.|C\.F\.R\.)\s+§?\s*\d+/i.test(c.answer)
+      ? [mk("major", "LEGAL_STATUTE_NO_SECTION", "Statute referenced without Title and §section — citation is unverifiable.", "Use Bluebook format: `<title> U.S.C. § <section>` (e.g. `42 U.S.C. § 1983`). For regulations: `<title> C.F.R. § <section>`.")]
+      : [],
+  },
+
+  // ── Contract drafting completeness ────────────────────────────────────────
+  {
+    id: "legal.contract-no-governing-law",
+    domain: "domain",
+    description: "Drafted contract / clause without governing-law clause.",
+    appliesTo: c => /\b(contract|agreement|MOU|terms of service|TOS|EULA|NDA|MSA)\b/i.test(T(c)) && /\b(draft|write|generate|create|sample)\b/i.test(c.prompt),
+    scan: c => /\b(this\s+agreement|the\s+parties|whereas|hereby\s+agree)\b/i.test(c.answer)
+      && !/\b(governing\s+law|governed\s+by\s+the\s+laws?\s+of|venue|choice\s+of\s+law|jurisdiction)\b/i.test(c.answer)
+      ? [mk("major", "LEGAL_CONTRACT_NO_GOVERNING_LAW", "Drafted contract lacks a governing-law / venue clause.", "Always include a governing-law clause (e.g. 'This Agreement shall be governed by the laws of [State], without regard to its conflict-of-laws principles.') and a forum-selection / venue clause.")]
+      : [],
+  },
+  {
+    id: "legal.contract-no-severability",
+    domain: "domain",
+    description: "Drafted contract without severability clause.",
+    appliesTo: c => /\b(contract|agreement|MOU|terms|EULA|NDA|MSA)\b/i.test(T(c)) && /\b(draft|write|generate|create|sample)\b/i.test(c.prompt),
+    scan: c => /\b(this\s+agreement|the\s+parties|whereas|hereby\s+agree)\b/i.test(c.answer)
+      && !/\b(severability|severable|unenforceable[\s\S]{0,80}remaining\s+provisions)\b/i.test(c.answer)
+      ? [mk("warning", "LEGAL_CONTRACT_NO_SEVERABILITY", "Drafted contract lacks a severability clause.", "Add a severability provision so that invalidation of one clause does not invalidate the entire agreement.")]
+      : [],
+  },
+
+  // ── Privacy law confusion ─────────────────────────────────────────────────
+  {
+    id: "legal.gdpr-ccpa-conflation",
+    domain: "domain",
+    description: "GDPR and CCPA conflated as equivalent (they are not).",
+    appliesTo: c => /\b(GDPR|CCPA|CPRA|privacy\s+law|data\s+protection)\b/i.test(T(c)),
+    scan: c => /\b(GDPR\s+and\s+CCPA\s+(?:are|both)\s+(?:the\s+same|equivalent|similar)|like\s+GDPR,\s+CCPA|CCPA\s+is\s+the\s+(?:US|American)\s+GDPR)\b/i.test(c.answer)
+      ? [mk("major", "LEGAL_GDPR_CCPA_CONFLATION", "GDPR and CCPA conflated as equivalent — they differ materially in scope, basis, and remedies.", "GDPR uses lawful-basis framework with broad data-subject rights; CCPA/CPRA is consumer-rights opt-out model with narrow scope. Differentiate explicitly: definitions of 'personal data', territorial scope, consent vs opt-out, fines, private rights of action.")]
+      : [],
+  },
+  {
+    id: "legal.privacy-no-dpia",
+    domain: "domain",
+    description: "GDPR high-risk processing without DPIA mention.",
+    appliesTo: c => /\b(GDPR)\b/i.test(T(c)),
+    scan: c => /\b(profil|automated decision|large[-\s]scale|systematic monitoring|special category|biometric|health data)\b/i.test(c.answer)
+      && /\b(GDPR)\b/i.test(c.answer)
+      && !/\b(DPIA|Data\s+Protection\s+Impact\s+Assessment|Article\s+35)\b/i.test(c.answer)
+      ? [mk("warning", "LEGAL_GDPR_NO_DPIA", "GDPR high-risk processing discussed without Data Protection Impact Assessment (Article 35) requirement.", "Article 35 GDPR requires a DPIA for processing likely to result in a high risk (profiling, large-scale special-category data, systematic monitoring). Disclose this obligation.")]
+      : [],
+  },
+
+  // ── Absolutes / overstatement ─────────────────────────────────────────────
+  {
+    id: "legal.absolute-rules",
+    domain: "domain",
+    description: "Absolute legal statements ('always', 'never') without exceptions.",
+    appliesTo: isLegal,
+    scan: c => /\b(always|never|in all cases|in every state|without exception)\b[\s\S]{0,80}\b(is\s+illegal|is\s+legal|is\s+required|is\s+prohibited|wins|loses)\b/i.test(c.answer)
+      && !/\b(generally|typically|usually|in most|exception|except\s+for|caveat|varies)\b/i.test(c.answer)
+      ? [mk("warning", "LEGAL_ABSOLUTE_RULES", "Absolute legal statement without acknowledging jurisdictional or factual exceptions.", "Hedge with 'generally', 'typically', or 'in most jurisdictions'. Legal rules almost always have exceptions, defenses, or jurisdictional carve-outs.")]
+      : [],
+  },
+
+  // ── Statute of limitations precision ──────────────────────────────────────
+  {
+    id: "legal.sol-no-jurisdiction",
+    domain: "domain",
+    description: "Statute of limitations stated without naming jurisdiction.",
+    appliesTo: c => /\b(statute of limitations|SOL|time[-\s]?bar|filing deadline)\b/i.test(T(c)),
+    scan: c => /\bstatute\s+of\s+limitations\s+(?:is|of)\s+\d+\s+(?:year|month|day)\b/i.test(c.answer)
+      && !/\b(under\s+(?:U\.S\.|federal|California|New York|Texas|Florida)\s+law|federal\s+statute|state\s+law|jurisdiction[-\s]?specific|varies\s+by)/i.test(c.answer)
+      ? [mk("major", "LEGAL_SOL_NO_JURISDICTION", "Statute of limitations stated without naming the jurisdiction and cause of action.", "SOL varies by cause of action (personal injury, contract, fraud, etc.) AND by jurisdiction. Always specify both.")]
+      : [],
+  },
+];