@am_shork/attest 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -15,6 +15,170 @@ not API.
 
 ## [Unreleased]
 
+## [0.2.2] - 2026-07-26
+
+A wall of identical diagnostics now says once that it is one cause, and the
+per-issue lines it summarises are unchanged.
+
+### Added
+
+- **A report of N issues sharing one `code` now says so once.** The 0.1.1 → 0.2.0
+  upgrade printed six `registry-not-static` ERRORs in a row — one per registry
+  file, every one caused by the same prose written as `'…' + '…'` — and left the
+  reader to work out that they were one cause and one mechanical fix. Every
+  command that prints issues (`check`, `verify`, `cover`, `render`, `archive`)
+  now adds one line above the counts when a code repeats:
+
+  ```
+  Repeated: 6 × ERROR registry-not-static, 4 × WARNING rationale-placeholder
+  ```
+
+  The per-issue lines are untouched — they are what makes a diagnostic
+  clickable — and this is the last entry from the skills-manager adoption report
+  (0.2.0, 41 requirements / 106 scenarios, plain-TS), so the
+  `Under consideration` section is now empty and gone. Five decisions, with the
+  reasoning, because each of them could plausibly have gone the other way:
+
+  **The `code` names the shared cause, and there is no table.** The obvious
+  reading of "name the cause" is a `code` → prose map: `registry-not-static` →
+  "a registry was built by concatenation". That map would have to be extended
+  with every new code, and the failure mode of forgetting is silent — the line
+  keeps printing, just vaguer. So the summary states structure only, how many
+  issues carry the same code, and leaves the explaining to the per-issue
+  `message`s directly above it. A `code` already *is* the stable name of the
+  shared rule; `message` is prose and not API, which is exactly why the summary
+  quotes neither.
+
+  **Three, not two.** Two adjacent lines with the same code are not a wall — the
+  repetition is visible at a glance, and summarising it would charge every
+  ordinary double error a line to state what the reader can already see.
+
+  **Below the issues, beside the counts, not merged into them.** The clickable
+  lines land first and the aggregate reads as a conclusion about them rather than
+  a preamble to issues not yet seen. It stays a separate line because
+  `— N error, M warning, K info` is a fixed shape and the only stable thing to
+  `grep` at the end of a report; a conditional clause inside it would make it
+  variable-length.
+
+  **Every level, grouped by level *and* code.** A pile of `rationale-placeholder`
+  WARNINGs is the same reading problem as a pile of ERRORs. The grouping key is
+  the pair because a count that silently spanned two levels would give one number
+  for two different dispositions — in practice every issue site writes a literal
+  level, and the composite key is what makes that not need to be true.
+
+  **Presentation, not a report change.** `SCHEMA_VERSION` is untouched and
+  `--json` is byte-identical: the summary is not an `Issue`, so it carries no
+  `code` into `issues[]`, adds nothing to `summary`, and cannot move `ok`. Split
+  across two self-requirements (ATX-23, ATX-24) rather than one, because the
+  cheapest implementation — push one more `Issue` — satisfies the human half
+  completely while breaking the contract half, and at ERROR level would flip the
+  verdict of a report that found nothing new. That needs a scenario that fails,
+  not a clause in a sentence. `docs/en/attest-design.md` §5.3 is deliberately
+  unchanged: it specifies the `Issue` contract and the grading, and documenting a
+  terminal nicety there would imply this is part of it.
+
+## [0.2.1] - 2026-07-26
+
+The type layer stopped charging for the one behaviour the tool rewards, and
+three limits an adoption had to find on its own are now written down.
+
+### Added
+
+- **Reading a param cost a cast, and the cast was charged on the one behaviour
+  the tool rewards.** `defineRequirements` returned `Registry`, so every param
+  was the full `string | number | boolean | Array<…>` union and
+  `reqs[id].params.x` had to be converged at each read site — the reporting
+  adopter wrote `str()` / `strList()` helpers to do it. `possible-drift` goes
+  quiet precisely when a scenario reads `.params`, so the type layer was taxing
+  the behaviour the anti-drift heuristic exists to reward. It is now generic
+  over its argument with a `const` type parameter: `params.idleTimeoutMin` is
+  `30`, `params.vendorDirs` is an array of the strings written there, and a
+  declared ID is known to exist, so `reqs['AUTH-3']` needs no `!` under
+  `noUncheckedIndexedAccess`. Removing the casts from Attest's own `self/`
+  specs closed 21 latent type errors there. No runtime behaviour and no `--json`
+  change: since 0.2.0 the analysing commands read the registry from the AST, so
+  this type has no bearing on anything the engine sees.
+  **A widening, deliberately.** A `const` type parameter would infer array
+  literals as tuples — `readonly` ones under a constraint that admits them —
+  and neither is assignable to the mutable `Array<number | string | boolean>`
+  the schema parses to, which would have broken `const reqs: Registry =
+  defineRequirements({…})` and every `const xs: string[] = req.params.foo`; the
+  mapped type collapses them back to `E[]`. The result is still intersected with
+  `Registry`, so its index signature survives and `reqs[id]` with an `id: string`
+  — a shared test helper — still resolves, as does a param the registry does not
+  declare. **What that costs**, against the intent recorded when this was queued:
+  a mistyped literal `reqs['TYPO-9']` is *not* rejected outright. Rejecting an
+  unknown key and accepting a `string` one are the same question asked of one
+  index signature, and it cannot answer both ways; the fallback is what keeps
+  this non-breaking, so it wins. The weaker half is real — an unknown ID misses
+  the declared keys and resolves through the index signature, so under
+  `noUncheckedIndexedAccess` reading through it is an error where `reqs['AUTH-3']`
+  no longer is — and a wrong ID is an `unknown-req-id` ERROR from `check`
+  regardless, which reads registry and specs together. The type layer is the
+  second reader here, not the only one.
+- **Three things an adoption had to discover for itself.** Documentation only —
+  no behaviour changed, and each is a property the design deliberately has.
+  **`check` has no detection power over a params change**: editing a value
+  (`'main'` → `'trunk'`, an entry dropped from a nine-element list) leaves it at
+  `✓ No issues`, because `check` executes nothing and nothing became unbound or
+  uncovered. The single source makes the value impossible to *diverge*, which is
+  a different and stronger claim than announcing that it *moved* — but "params
+  are the single source for values that change" reads easily as "`check` guards
+  them", and what actually guards them is a scenario asserting on the value it
+  read. Now stated where params are introduced (README, design §2, the prompt
+  guide) and recorded as a limit in design §11, next to the others.
+  **`verify` does not read your `vitest.config.ts`**: the child run starts
+  isolated, so a verdict never depends on ambient configuration — which also
+  means framework code gets no transforms, no DOM and no aliases until
+  `--vitest-config` points it at one. The flag was documented in the README; the
+  trade-off behind it now sits in design §5.4, where the run scope is described,
+  because that is where a reader meets the isolation.
+  **A template literal keeps its whitespace**: one with no substitution reads
+  statically and is accepted, but preserves every newline and space of
+  indentation, and `render` copies the statement into the Markdown as written —
+  so editor-friendly wrapping lands in the generated document. This is the
+  reason registry prose is written as one long single-line string, which was
+  folklore until now.
+- **A codemod for the 0.2.0 `registry-not-static` migration.** Collapsing
+  multi-line `'…' + '…'` prose into one literal is mechanical and was done by
+  hand across 21 requirements in the first reported adoption. The 0.2.0 entry
+  now carries a compiler-API script that does it, tested on the shapes that make
+  it awkward: mixed quote styles, an apostrophe inside the prose, a template
+  literal in the chain, and a numeric `1 + 2` it must leave alone.
+- **Type tests, and a suite that runs them.** The repo had none, and this change
+  is entirely type-level: no runtime test and no `verify self` run could observe
+  a regression in it. `tests/registry-types.spec-d.ts` pins the narrowing, both
+  compatibility promises and the trade-off above; `vitest run` now typechecks in
+  the same pass (`tsconfig.typecheck.json`, which unlike the build project covers
+  `tests/` and `self/` — neither had ever been through a compiler). `DefinedRegistry`
+  is exported for consumers that need to name the type.
+
+- **A `{placeholder}` in a `rationale` reached the document unread.** `render`
+  interpolates `statement` and nothing else, and `unbound-param` only scans
+  statements, so braces written into a rationale passed through every check and
+  landed verbatim in the generated Markdown. The mistyped placeholder is the
+  obvious case; the one that misleads is the **correctly spelled** one, where
+  the author declared the param and simply picked the wrong field — nothing was
+  unbound, so nothing fired, and the document reviewers and audit read showed a
+  placeholder where a value was meant. A new `rationale-placeholder` WARNING now
+  reports any `{name}` in a rationale, bound or not.
+  Deliberately not the two alternatives. Extending `unbound-param` to rationales
+  would cover only the undeclared half — the half that misleads least. And
+  making `render` interpolate rationales would change the bytes of every
+  committed rendering, turning `render --check` red on an upgrade where the user
+  moved no intent, which this file already treats as breaking for that surface.
+  **A placeholder inside a Markdown code span is not reported.** That exclusion
+  came from dogfooding: the first run against Attest's own registry flagged
+  ATX-14, whose rationale explains that `` `{toString}` `` *looks* bound — prose
+  about a placeholder, not a misfiled one, and the only way to write a
+  requirement whose subject is the syntax itself. A rationale is Markdown and
+  `render` leaves a code span exactly as written, so a backticked token is
+  already marked as quoted.
+  WARNING sits below the `hasError` predicate that `ok`, `--json` and the exit
+  code all read from, so an existing green registry with braces in a rationale
+  gains a line of output and keeps its verdict. A new `code` on the existing
+  `Issue` shape is additive: `schemaVersion` stays `1`.
+
 ## [0.2.0] - 2026-07-26
 
 Three things that could each end a run with the wrong verdict: a registry read
@@ -63,6 +227,47 @@ never pointed at.
   A registry file may still be written as `const reqs = defineRequirements({…});
   export default reqs;`, and may import `defineRequirements` under any alias or
   through a namespace.
+  **Migrating concatenated prose.** The common shape is a statement or rationale
+  wrapped across lines as `'…' + '…'`, which is a computation and so no longer
+  reads. Collapsing it is purely mechanical — 21 requirements by hand in the
+  first reported adoption — so it is worth a codemod. Save this at the project
+  root and run it over the registry files; it rewrites only concatenations whose
+  every operand is a string (or substitution-free template) literal, leaving
+  `1 + 2` and anything with an identifier in it alone:
+
+  ```js
+  // flatten-reqs.mjs — node flatten-reqs.mjs requirements/*.reqs.ts
+  import ts from 'typescript';
+  import { readFileSync, writeFileSync } from 'node:fs';
+
+  const flat = (n) =>
+    ts.isBinaryExpression(n) && n.operatorToken.kind === ts.SyntaxKind.PlusToken
+      ? [flat(n.left), flat(n.right)].every(Boolean) && flat(n.left) + flat(n.right)
+      : (ts.isStringLiteral(n) || ts.isNoSubstitutionTemplateLiteral(n)) && n.text;
+
+  for (const file of process.argv.slice(2)) {
+    const src = readFileSync(file, 'utf8');
+    const sf = ts.createSourceFile(file, src, ts.ScriptTarget.Latest, true);
+    const edits = [];
+    const visit = (n) => {
+      const text = flat(n);
+      // the whole chain is one edit, so do not descend into it
+      if (text !== false && ts.isBinaryExpression(n)) return void edits.push([n.getStart(sf), n.getEnd(), text]);
+      n.forEachChild(visit);
+    };
+    visit(sf);
+    let out = src;
+    for (const [start, end, text] of edits.reverse())
+      out = `${out.slice(0, start)}${JSON.stringify(text)}${out.slice(end)}`;
+    if (edits.length) writeFileSync(file, out), console.log(`${file}: ${edits.length} collapsed`);
+  }
+  ```
+
+  It emits double-quoted strings (`JSON.stringify` does the escaping, so prose
+  containing an apostrophe survives); run the formatter afterwards. Write the
+  result as one long line rather than re-wrapping it — a template literal reads
+  statically but keeps its newlines and indentation, and `render` copies the
+  statement into the Markdown exactly as written.
   The `--json` envelope is unchanged: `registry-not-static` is a new `code` on
   the existing `Issue` shape, which is additive, so `schemaVersion` stays `1`.
   `vite` remains a peer dependency — `verify` and `archive` run the suite through
@@ -174,12 +379,13 @@ not move when one is cut.
   when a requirement is added without a hand-labelled obligation count, because
   the reach figure once quoted here went stale exactly that way.
   *`compound-requirement` (WARNING) — rejected.* More than one RFC-2119 keyword
-  in one `statement` is objectively more than one obligation. Measured: of the 6
-  requirements in the corpus carrying more than one, it flags 1 (`ATX-10`) and
-  misses `ATX-5`, `ATX-9`, `ATX-13`, `ATX-14`, `ATX-17` — every one that packs
-  clauses under a single keyword, which is the form the coverage incentive
-  actually rewards. A wider variant (keyword plus a coordinating `and`/`while`/
-  `;`) reaches 5 of 6 with one wrong hit, so reach is not the deciding argument.
+  in one `statement` is objectively more than one obligation. Measured: of the 7
+  requirements in the corpus carrying more than one, it flags 2 (`ATX-10`,
+  `ATX-21`) and misses `ATX-5`, `ATX-9`, `ATX-13`, `ATX-14`, `ATX-17` — every
+  one that packs clauses under a single keyword, which is the form the coverage
+  incentive actually rewards. A wider variant (keyword plus a coordinating
+  `and`/`while`/`;`) reaches 6 of 7 with one wrong hit, so reach is not the
+  deciding argument.
   This is: both variants are silenced by deleting the word that triggered them,
   and neither can tell that deletion from a real split. `SHALL do A and MUST do
   B` clears the warning as `SHALL do A and do B` — same two obligations, one
@@ -189,12 +395,13 @@ not move when one is cut.
   different values in two requirements sharing an id prefix. Measured: it fires
   twice on this repo and both firings are wrong — `idleTimeoutMin` (`15` in
   `ATX-3`, `30` in `ATX-10`), unrelated illustrative fixtures, and `code`
-  (`registry-not-static` in `ATX-17`, `empty-spec` in `ATX-18`), two diagnostics
-  that could not possibly agree. The second arrived on its own when `ATX-18` was
-  added, which is the more damning half: a generic param name collides more often
-  as a registry grows, so the false-positive rate rises with adoption — the
-  opposite of what a shippable rule does. Still zero true positives across 24
-  requirements. The escape hatch it was blocked on has since been designed
+  (`registry-not-static` in `ATX-17`, `empty-spec` in `ATX-18`,
+  `rationale-placeholder` in `ATX-21`), diagnostics that could not possibly
+  agree. The second arrived on its own when `ATX-18` was added and grew a third
+  member on its own again when `ATX-21` was, which is the more damning half: a
+  generic param name collides more often as a registry grows, so the
+  false-positive rate rises with adoption — the opposite of what a shippable rule
+  does. Still zero true positives across 25 requirements. The escape hatch it was blocked on has since been designed
   and does not rescue it: with no config file the only workable shape is an
   additive `independentParams?: string[]` on the requirement (a CLI flag is
   per-invocation for what is a permanent property of two requirements; changing
@@ -534,7 +741,9 @@ Initial release.
   (MIT), whose four-stage engine and diff-first change model Attest's
   architecture is adapted from (re-implemented from scratch, no source copied).
 
-[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.2.0...main
+[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.2.2...main
+[0.2.2]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.2
+[0.2.1]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.1
 [0.2.0]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.0
 [0.1.7]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.7
 [0.1.6]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.6

package/README.md

@@ -14,6 +14,13 @@ physically impossible to drift between the spec and the assertion. A param may b
 a scalar or an array of scalars, so list-shaped constants (vendor blacklists, id
 sets) get the same single source as a lone number.
 
+What that does not buy is a warning when you change the value. `check` runs
+nothing, so editing a param leaves it at `✓ No issues` — nothing became unbound,
+nothing became uncovered. The value cannot *diverge* from the assertion, which is
+the stronger property; noticing that it *moved* is `verify`'s job, and only when
+a scenario asserts on the value it read from `params`. Read the param inside the
+assertion, not beside it.
+
 See the authoritative design — [English](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/en/attest-design.md) · [中文](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/zh/attest-design.md) — and the rest of the [docs](https://gitlab.com/Pseudorca/attest/-/tree/main/docs).
 
 ## Prerequisites
@@ -57,7 +64,7 @@ import { createSession, advance, isValid } from './session.js';
 
 requirement('AUTH-3', () => {
   scenario('idle timeout invalidates the session', () => {
-    const t = reqs['AUTH-3'].params.idleTimeoutMin; // read from the single source
+    const t = reqs['AUTH-3'].params.idleTimeoutMin; // single source, typed `30` — no cast
     const s = createSession();
     advance(s, t + 1, 'minutes');
     expect(isValid(s, t)).toBe(false);
@@ -115,6 +122,12 @@ behaviour instead, `--eval` restores it on all three commands:
 attest check --eval    # reads the registry by executing every *.reqs.ts
 ```
 
+One more thing to know about literals: write registry prose as **one long
+single-line string**. A template literal with no substitution reads statically and
+is accepted — but it keeps every newline and every space of indentation inside it,
+and `render` puts the statement into the Markdown exactly as written, so the
+wrapping that looked tidy in the editor lands in the generated document.
+
 ### A readable spec for humans (`attest render`)
 
 The intent layer lives in TypeScript, which means a reviewer, a QA engineer, or
@@ -172,6 +185,17 @@ The gap between the two numbers is worth watching: a spec file whose
 `requirement()` call Attest cannot see statically is skipped rather than failed,
 and that is where it shows. The same four numbers are in `--json` under `counts`.
 
+When three or more issues in one report share a level and a code, one line above
+the counts says so, because a wall of identical codes is one rule and many sites:
+
+```
+Repeated: 6 × ERROR registry-not-static, 4 × WARNING rationale-placeholder
+```
+
+Every per-issue line stays exactly as it is — they are what makes a diagnostic
+clickable — and the summary is terminal output only: it is not an issue, so it
+appears nowhere in `--json`, changes no count, and never moves a verdict.
+
 A run with **no requirements** under the root is an `empty-spec` ERROR, not a
 pass. "No failing tests" is not the same claim as "the requirements hold", and
 the case that matters is not the empty directory — it is the repo whose registry
@@ -208,7 +232,7 @@ attest check --json
 {
   "tool": "attest",
   "schemaVersion": 1,
-  "version": "0.2.0",
+  "version": "0.2.2",
   "command": "check",
   "ok": false,
   "summary": { "error": 1, "warning": 0, "info": 0 },

package/dist/cli/report.d.ts

@@ -1,6 +1,23 @@
 import type { CoverageRow, VerifyCounts } from '../core/pipeline.js';
 import type { Issue } from '../core/types.js';
 export declare function formatIssues(issues: Issue[]): string;
+/**
+ * A code repeating across files is one rule and many sites, and a reader looking
+ * at the wall has to diff the lines to learn that. This says it once.
+ *
+ * There is deliberately no code → prose table naming the "cause": the `code`
+ * already *is* the name of the shared rule, and each site's `message` states the
+ * rule in full. A table would also have to be extended with every new code, and
+ * forgetting to would degrade this line in silence. So the line states structure
+ * only — how many issues carry the same code — and leaves the explaining to the
+ * per-site lines above it, which are what makes a diagnostic clickable.
+ *
+ * Grouped by level *and* code, not code alone: a count that silently spanned two
+ * levels would name one number for two different dispositions. Every issue site
+ * writes a literal level, so in practice the two groupings agree — the composite
+ * key is what makes that not need to be true.
+ */
+export declare function formatRepeats(issues: Issue[]): string;
 export declare function summarize(issues: Issue[], scope?: VerifyCounts): string;
 /**
  * The pre-run line for `verify`: how many spec files were located, and how many

package/dist/cli/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,KAAK,EAAS,MAAM,kBAAkB,CAAC;AAUrD,wBAAgB,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAWpD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,MAAM,CASvE;AAID;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAIvD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAW1D"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,KAAK,EAAS,MAAM,kBAAkB,CAAC;AAUrD,wBAAgB,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAYpD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAkBrD;AAUD,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,MAAM,CASvE;AAID;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAIvD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAW1D"}

package/dist/cli/report.js

@@ -1,6 +1,7 @@
 // Terminal rendering of graded issues (design §5.3 levels). Pure formatting —
 // no process side effects — so it stays testable and the CLI stays thin.
 import chalk from 'chalk';
+import { byCodeUnit } from '../core/order.js';
 const LEVEL_TAG = {
     ERROR: (s) => chalk.red.bold(s),
     WARNING: (s) => chalk.yellow.bold(s),
@@ -18,8 +19,54 @@ export function formatIssues(issues) {
             lines.push(`${LEVEL_TAG[level](level.padEnd(7))} ${chalk.cyan(i.code)}${loc}\n    ${i.message}`);
         }
     }
-    return lines.join('\n');
+    const repeats = formatRepeats(issues);
+    return repeats ? `${lines.join('\n')}\n${repeats}` : lines.join('\n');
 }
+/**
+ * A code repeating across files is one rule and many sites, and a reader looking
+ * at the wall has to diff the lines to learn that. This says it once.
+ *
+ * There is deliberately no code → prose table naming the "cause": the `code`
+ * already *is* the name of the shared rule, and each site's `message` states the
+ * rule in full. A table would also have to be extended with every new code, and
+ * forgetting to would degrade this line in silence. So the line states structure
+ * only — how many issues carry the same code — and leaves the explaining to the
+ * per-site lines above it, which are what makes a diagnostic clickable.
+ *
+ * Grouped by level *and* code, not code alone: a count that silently spanned two
+ * levels would name one number for two different dispositions. Every issue site
+ * writes a literal level, so in practice the two groupings agree — the composite
+ * key is what makes that not need to be true.
+ */
+export function formatRepeats(issues) {
+    /** `${level} ${code}` -> how many issues carry that pair, and its parts. */
+    const groups = new Map();
+    for (const i of issues) {
+        const key = `${i.level} ${i.code}`;
+        const seen = groups.get(key);
+        if (seen)
+            seen.count++;
+        else
+            groups.set(key, { level: i.level, code: i.code, count: 1 });
+    }
+    const repeated = [...groups]
+        .filter(([, g]) => g.count >= REPEAT_THRESHOLD)
+        // Count first, then the key — by code unit, so the line a reader compares
+        // between two runs does not depend on the machine's collation.
+        .sort(([aKey, a], [bKey, b]) => b.count - a.count || byCodeUnit(aKey, bKey))
+        .map(([, g]) => `${g.count} × ${g.level} ${g.code}`);
+    if (repeated.length === 0)
+        return '';
+    // One line however many codes repeat: the point is to shorten the report.
+    return chalk.dim(`Repeated: ${repeated.join(', ')}`);
+}
+/**
+ * Two adjacent lines with the same code are not a wall — the repetition is
+ * visible at a glance, and summarising it would charge every ordinary double
+ * error an extra line to say what the reader already knows. Three is where the
+ * repetition stops being obvious.
+ */
+const REPEAT_THRESHOLD = 3;
 export function summarize(issues, scope) {
     const counts = { ERROR: 0, WARNING: 0, INFO: 0 };
     for (const i of issues)

package/dist/cli/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AAEzE,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,SAAS,GAAyC;IACtD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,KAAK,GAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAEpD,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAe,EAAE,KAAoB;IAC7D,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAA2B,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtH,OAAO,KAAK,CAAC,GAAG,CACd,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,IAAI,OAAO,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAExF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,oCAAoC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACnF,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO;YACtB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,YAAY,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7E,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;IACvD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AAEzE,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,MAAM,SAAS,GAAyC;IACtD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,KAAK,GAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAEpD,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,4EAA4E;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyD,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YAClB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,gBAAgB,CAAC;QAC/C,0EAA0E;QAC1E,+DAA+D;SAC9D,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,0EAA0E;IAC1E,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,SAAS,CAAC,MAAe,EAAE,KAAoB;IAC7D,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAA2B,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtH,OAAO,KAAK,CAAC,GAAG,CACd,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,IAAI,OAAO,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAExF;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,oCAAoC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACnF,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO;YACtB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,YAAY,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7E,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;IACvD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/core/gate.d.ts

@@ -7,6 +7,15 @@ export interface GateInputs {
     /** Executable verification result (design §5.4). */
     run: RunResult;
 }
+/**
+ * Declared-not-run: a scenario the static plan claims attests a requirement,
+ * which the runtime never executed (skipped, or excluded by an `.only`).
+ *
+ * Exported because `verify` and `archive` both make this call. While each owned
+ * a copy, the two verdicts agreed only by transcription — and the whole point of
+ * this framework is that agreement should be structural, not clerical.
+ */
+export declare function declaredNotRunIssues(plan: AttestPlan, run: RunResult): Issue[];
 /**
  * Decide whether a change may be archived. Returns the blocking issues; an
  * empty array means the gate passes (design §8). Checks, in order:
@@ -18,14 +27,5 @@ export interface GateInputs {
  *   3. Static coverage vs runtime coverage: every declared scenario actually
  *      ran (catches skip/only false coverage).
  */
-/**
- * Declared-not-run: a scenario the static plan claims attests a requirement,
- * which the runtime never executed (skipped, or excluded by an `.only`).
- *
- * Exported because `verify` and `archive` both make this call. While each owned
- * a copy, the two verdicts agreed only by transcription — and the whole point of
- * this framework is that agreement should be structural, not clerical.
- */
-export declare function declaredNotRunIssues(plan: AttestPlan, run: RunResult): Issue[];
 export declare function evaluateGate({ registry, plan, run }: GateInputs): Issue[];
 //# sourceMappingURL=gate.d.ts.map

package/dist/core/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,QAAQ,EAAE,QAAQ,CAAC;IACnB,8CAA8C;IAC9C,IAAI,EAAE,UAAU,CAAC;IACjB,oDAAoD;IACpD,GAAG,EAAE,SAAS,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,GAAG,KAAK,EAAE,CAe9E;AAED,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,GAAG,KAAK,EAAE,CAqBzE"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,QAAQ,EAAE,QAAQ,CAAC;IACnB,8CAA8C;IAC9C,IAAI,EAAE,UAAU,CAAC;IACjB,oDAAoD;IACpD,GAAG,EAAE,SAAS,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,GAAG,KAAK,EAAE,CAe9E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,GAAG,KAAK,EAAE,CAqBzE"}

package/dist/core/gate.js

@@ -4,17 +4,6 @@
 // inputs; the file orchestration (load registry+delta, parse all specs, run)
 // is wired in the Locate layer / CLI (see pipeline.ts).
 import { validateStructure } from './validator.js';
-/**
- * Decide whether a change may be archived. Returns the blocking issues; an
- * empty array means the gate passes (design §8). Checks, in order:
- *   1. Structural ERRORs on the end-state registry (no orphan / uncovered /
- *      unbound-param). This is also the design's step-4 final re-validation:
- *      the registry+plan here are already the applied result, so one pass
- *      validates the end state.
- *   2. Executable: all tests green.
- *   3. Static coverage vs runtime coverage: every declared scenario actually
- *      ran (catches skip/only false coverage).
- */
 /**
  * Declared-not-run: a scenario the static plan claims attests a requirement,
  * which the runtime never executed (skipped, or excluded by an `.only`).
@@ -39,6 +28,17 @@ export function declaredNotRunIssues(plan, run) {
     }
     return issues;
 }
+/**
+ * Decide whether a change may be archived. Returns the blocking issues; an
+ * empty array means the gate passes (design §8). Checks, in order:
+ *   1. Structural ERRORs on the end-state registry (no orphan / uncovered /
+ *      unbound-param). This is also the design's step-4 final re-validation:
+ *      the registry+plan here are already the applied result, so one pass
+ *      validates the end state.
+ *   2. Executable: all tests green.
+ *   3. Static coverage vs runtime coverage: every declared scenario actually
+ *      ran (catches skip/only false coverage).
+ */
 export function evaluateGate({ registry, plan, run }) {
     const blocking = [];
     // 1) Structure (end-state re-validation).

package/dist/core/gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYnD;;;;;;;;;;GAUG;AACH;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAgB,EAAE,GAAc;IACnE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,KAAK,2DAA2D;aACnI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAc;IAC9D,MAAM,QAAQ,GAAY,EAAE,CAAC;IAE7B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CACxE,CAAC;IAEF,4BAA4B;IAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAElD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYnD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAgB,EAAE,GAAc;IACnE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,KAAK,2DAA2D;aACnI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAc;IAC9D,MAAM,QAAQ,GAAY,EAAE,CAAC;IAE7B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CACxE,CAAC;IAEF,4BAA4B;IAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAElD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/registry.d.ts

@@ -1,18 +1,66 @@
 import { z } from 'zod';
 import { type RegistryInput, type RequirementInput } from './schema.js';
-import type { Registry } from './types.js';
+import type { Registry, Requirement } from './types.js';
 /** Thrown when a registry fails structural validation (design §5.1). */
 export declare class RegistryValidationError extends Error {
     readonly issues: z.ZodIssue[];
     constructor(issues: z.ZodIssue[]);
 }
+/**
+ * A `const` type parameter infers an array literal as a tuple, and would infer
+ * it as a `readonly` tuple under a constraint that admits one. Neither is what
+ * the registry parses to: the schema's array params are plain mutable
+ * `Array<scalar>`, and `const xs: string[] = req.params.dirs` has to keep
+ * compiling. Collapsing to `E[]` keeps the element types the author wrote —
+ * the point of the exercise — without claiming a length or a mutability the
+ * parsed value does not have.
+ */
+type AsArray<V> = V extends readonly (infer E)[] ? E[] : V;
+/**
+ * The params of one requirement as written, over the schema's wider record.
+ * The intersection is what keeps this a widening: `params.retries` narrows to
+ * the literal `3`, while `params.somethingElse` still resolves through the
+ * record, so no read that compiled before stops compiling.
+ */
+type DefinedParams<R> = R extends {
+    params: infer P;
+} ? {
+    -readonly [K in keyof P]: AsArray<P[K]>;
+} & Requirement['params'] : Requirement['params'];
+/**
+ * What `defineRequirements` returns for a literal registry: each declared ID
+ * keeps the param types its author wrote, so a scenario reads a value without
+ * converging the `string | number | boolean | Array<…>` union at the read site
+ * (design §6, mechanism 3 — a scenario reading `.params` is what quiets the
+ * anti-drift heuristic, so the type layer must not tax the one behaviour the
+ * rest of the tool exists to reward).
+ *
+ * The intersection with {@link Registry} is deliberate and load-bearing: it
+ * keeps the index signature, so `reqs[id]` with an `id: string` — a shared test
+ * helper — still compiles, and the result is still assignable to `Registry`.
+ * The cost is that an index signature admits *every* string, so a mistyped
+ * literal `reqs['TYPO-9']` falls through to it instead of being rejected
+ * outright: rejecting an unknown key and accepting a `string` one are the same
+ * question asked of one index signature, and it cannot answer both ways. What
+ * survives is the weaker form — an unknown ID misses the declared keys, so
+ * under `noUncheckedIndexedAccess` reading through it is an error where a
+ * declared ID is not. Compatibility takes the tie because a wrong ID is
+ * already an `unknown-req-id` ERROR from `check`, which reads the registry and
+ * the specs together; the type layer is the second reader here, not the only
+ * one.
+ */
+export type DefinedRegistry<T extends RegistryInput> = {
+    [K in keyof T]: Omit<Requirement, 'params'> & {
+        params: DefinedParams<T[K]>;
+    };
+} & Registry;
 /**
  * Declare a requirement registry. Validates structure against RegistrySchema
  * (SHALL/MUST keyword, non-empty rationale, well-formed IDs, scalar params) and
  * returns the parsed registry with defaults applied (design §2, §5.1).
  * Throws {@link RegistryValidationError} on invalid input.
  */
-export declare function defineRequirements(input: RegistryInput): Registry;
+export declare function defineRequirements<const T extends RegistryInput>(input: T): DefinedRegistry<T>;
 /**
  * Shape of a change delta over the registry (design §7). Authoring (input)
  * shapes are used so added / modified entries may omit defaulted fields.
@@ -32,4 +80,5 @@ export interface RegistryDelta {
  * (RENAMED -> REMOVED -> MODIFIED -> ADDED) lives in applyDelta (design §7).
  */
 export declare function delta(d: RegistryDelta): RegistryDelta;
+export {};
 //# sourceMappingURL=registry.d.ts.map

package/dist/core/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBAApB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAIjD;AAQD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAMjE;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAErD"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAExD,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBAApB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAIjD;AAQD;;;;;;;;GAQG;AACH,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACjD;IAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,GACnE,WAAW,CAAC,QAAQ,CAAC,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,aAAa,IAAI;KACpD,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE;CAC9E,GAAG,QAAQ,CAAC;AAEb;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAS9F;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAErD"}

package/dist/core/registry.js

@@ -28,6 +28,9 @@ export function defineRequirements(input) {
     if (!result.success) {
         throw new RegistryValidationError(result.error.issues);
     }
+    // Zod validates the shape but its output type is the schema's, which has
+    // already forgotten the literals `const T` captured. Same object, narrower
+    // description of it — the assertion carries the literals across.
     return result.data;
 }
 /**

package/dist/core/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,4EAA4E;AAC5E,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAGrB,wEAAwE;AACxE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,MAAoB;QAC9C,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QADtC,WAAM,GAAN,MAAM,CAAc;QAE9C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAgB;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,4EAA4E;AAC5E,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAGrB,wEAAwE;AACxE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,MAAoB;QAC9C,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QADtC,WAAM,GAAN,MAAM,CAAc;QAE9C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAiDD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAgC,KAAQ;IACxE,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,iEAAiE;IACjE,OAAO,MAAM,CAAC,IAA0B,CAAC;AAC3C,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAgB;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/validator.d.ts

@@ -4,6 +4,9 @@ import type { AttestPlan, Issue, ParamRef, Registry } from './types.js';
  * - orphan-test: a scenario covers an unknown requirement id
  * - uncovered-requirement: a requirement has no scenario
  * - unbound-param: a statement placeholder has no matching param
+ *
+ * and one WARNING:
+ * - rationale-placeholder: a `{name}` in a rationale, which is never interpolated
  */
 export declare function validateStructure(registry: Registry, plan: AttestPlan): Issue[];
 /**

package/dist/core/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAkB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,CAkD/E;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EAAE,GACf,KAAK,EAAE,CA+BT"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAkB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,CA0E/E;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EAAE,GACf,KAAK,EAAE,CA+BT"}

package/dist/core/validator.js

@@ -5,6 +5,9 @@
  * - orphan-test: a scenario covers an unknown requirement id
  * - uncovered-requirement: a requirement has no scenario
  * - unbound-param: a statement placeholder has no matching param
+ *
+ * and one WARNING:
+ * - rationale-placeholder: a `{name}` in a rationale, which is never interpolated
  */
 export function validateStructure(registry, plan) {
     const issues = [];
@@ -51,6 +54,29 @@ export function validateStructure(registry, plan) {
             }
         }
     }
+    // rationale-placeholder: `{name}` written in a rationale, which render does
+    // not interpolate (it substitutes into the statement and nothing else). Both
+    // spellings are reported, and the declared one is the reason this is not an
+    // extension of unbound-param: an author who declares `maxAttempts` and then
+    // writes it into the rationale has made no binding mistake at all, yet the
+    // braces still reach the document reviewers and audit read. Fixing render to
+    // interpolate here would change the bytes of every existing rendering, so
+    // this reports instead. WARNING, deliberately below `hasError`: an existing
+    // green registry gains a line of output and keeps its exit code.
+    for (const [id, req] of Object.entries(registry)) {
+        // Code spans are dropped first: a rationale is rendered as Markdown, so a
+        // backticked `{toString}` is a quoted token, not a placeholder its author
+        // misfiled — and render leaves a code span exactly as written. Attest's own
+        // ATX-14 is that case, which is how this exclusion was found.
+        for (const m of req.rationale.replace(/`[^`]*`/g, ' ').matchAll(/\{(\w+)\}/g)) {
+            issues.push({
+                level: 'WARNING',
+                code: 'rationale-placeholder',
+                reqId: id,
+                message: `Requirement "${id}" writes {${m[1]}} in its rationale, but only the statement is interpolated — the braces reach the rendering verbatim. Move the placeholder into the statement, or write the value out as prose.`,
+            });
+        }
+    }
     return issues;
 }
 /**

package/dist/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8EAA8E;AAI9E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,IAAgB;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/D,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,KAAK,2CAA2C;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,sEAAsE;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,gBAAgB,EAAE,WAAW,IAAI,oDAAoD;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAkB,EAClB,IAAgB,EAChB,IAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAElC,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,OAAO,EAAE,GAAG,EAAE,iGAAiG;SAChH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8EAA8E;AAI9E;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,IAAgB;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/D,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,KAAK,2CAA2C;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,sEAAsE;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,gBAAgB,EAAE,WAAW,IAAI,oDAAoD;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,8DAA8D;QAC9D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAE,iLAAiL;aAC/N,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAkB,EAClB,IAAgB,EAChB,IAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAElC,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,OAAO,EAAE,GAAG,EAAE,iGAAiG;SAChH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { requirement, scenario } from './runtime.js';
 export { defineRequirements, delta } from './core/registry.js';
-export type { RegistryDelta } from './core/registry.js';
+export type { RegistryDelta, DefinedRegistry } from './core/registry.js';
 export type { Requirement, Registry, ParsedScenario, AttestPlan, Level, Issue, } from './core/types.js';
 export type { JsonReport, JsonSummary, JsonCommand } from './cli/json.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EACV,WAAW,EACX,QAAQ,EACR,cAAc,EACd,UAAU,EACV,KAAK,EACL,KAAK,GACN,MAAM,iBAAiB,CAAC;AAIzB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,YAAY,EACV,WAAW,EACX,QAAQ,EACR,cAAc,EACd,UAAU,EACV,KAAK,EACL,KAAK,GACN,MAAM,iBAAiB,CAAC;AAIzB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@am_shork/attest",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "TDD-native spec framework: tests are the source of truth for verification, ID-bound requirements the source of truth for intent.",
   "type": "module",
   "engines": {
@@ -64,6 +64,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:all": "tsc -p tsconfig.typecheck.json",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:consumer": "pnpm run build && vitest run --config vitest.consumer.config.ts",